last executing test programs: 22m7.024276441s ago: executing program 4 (id=129): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0xe) write$cgroup_devices(r4, 0x0, 0x9) write(r2, 0x0, 0x0) 22m5.590863978s ago: executing program 4 (id=135): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000180)='./file0\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22m4.518063525s ago: executing program 4 (id=137): socket$igmp6(0xa, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) setns(0xc9, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x62) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 22m3.005763301s ago: executing program 4 (id=142): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 21m58.393914999s ago: executing program 4 (id=152): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 21m57.811975854s ago: executing program 4 (id=154): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d400)=[{0x0}, {0x0}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x408b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) 21m56.480428625s ago: executing program 32 (id=154): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d400)=[{0x0}, {0x0}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x408b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) 21m25.749451532s ago: executing program 0 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) waitid$P_PIDFD(0x3, r3, 0x0, 0x40000004, 0x0) 21m24.637249069s ago: executing program 0 (id=240): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=cp949,utf8=1,nonumtail=0,dos1xfloppy,shortname=mixed,iocharset=cp437,uni_xlate=0,utf8=0,,codepage=932,utf8=0,rodir,utf8=1,rodir,utf8=0,rodir,\x00'], 0x1, 0x2a6, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x20000000000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) 21m23.580300232s ago: executing program 0 (id=242): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) creat(0x0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 21m21.567424223s ago: executing program 0 (id=248): timer_create(0x2, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) 21m20.589373196s ago: executing program 0 (id=252): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002080)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x6, 0x0, [{0x1, 0x10001, 0x8, 0x2, 0x3}, {0x40000000, 0x400, 0x25, 0x5, 0x10}, {0xc0000000, 0x9, 0x3a10, 0x6, 0x564}, {0xc0000000, 0xfffff800, 0x8cbb, 0x1}, {0x1, 0xf, 0x9, 0x3, 0xc81}, {0x80000001, 0x40, 0x5, 0x4, 0x7ea1}]}) 21m19.755872254s ago: executing program 0 (id=253): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'sit0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x6}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0xfd, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0xfe62, &(0x7f0000000280)=[{&(0x7f0000004d00)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004054}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6011, r1, 0x0) 21m19.281643702s ago: executing program 33 (id=253): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'sit0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x6}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0xfd, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0xfe62, &(0x7f0000000280)=[{&(0x7f0000004d00)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004054}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6011, r1, 0x0) 21.216071086s ago: executing program 2 (id=3769): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 19.873499887s ago: executing program 2 (id=3771): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0xfff2, 0xffe0}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c011}, 0x20004015) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="7c0000001800051105000000000000000a430000fe040001000000001400ffff00000db800d000000000000000e0ff001c00080008000200dc05000008001c00e8030000080004000a00000008000400010004000600150003000000207b080dd3d0464d2934567890abcdef050ec7000100009f0005000700026761", 0x7c) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 19.807527016s ago: executing program 3 (id=3772): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 18.065857594s ago: executing program 3 (id=3787): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x9, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000040)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0xeb9, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 15.728223625s ago: executing program 3 (id=3781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, 0x0, 0x4010850) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='add sy', 0x6) 15.000853537s ago: executing program 3 (id=3783): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 13.829908749s ago: executing program 2 (id=3785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x11, 0xfffffffffffffffa) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xffffffffffffffc0, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0x7, 0x0, 0x3800000, 0xffffffff, 'syz0\x00', 0x4f}, 0x4, 0x4, 0x1, r2, 0x0, 0x7, 'syz0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x68}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) mount(&(0x7f0000000080)=@md0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x1010040, 0x0) 12.748138324s ago: executing program 2 (id=3789): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", r6, 0xffffffffffffffff}) ppoll(&(0x7f0000000500)=[{r7, 0x200}], 0x1, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 11.467244507s ago: executing program 5 (id=3795): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x2, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x1, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4dd, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x8000, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 10.308064535s ago: executing program 5 (id=3796): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b7030000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) 10.248918992s ago: executing program 6 (id=3797): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x58, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @TCA_RATE={0x6, 0x5, {0x3, 0xe}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 9.541068228s ago: executing program 3 (id=3798): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140"], 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x1000, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f7ffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x1, 0x147}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0xbd}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x9f3a, 0xfffffffd, 0xfffffffc}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.411462027s ago: executing program 5 (id=3800): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000180)={'fscrypt:', @auto=[0x63, 0x62, 0xb69f5ca05260f48, 0x39, 0x30, 0x64, 0x37, 0x66, 0x64, 0x31, 0x30, 0x62, 0x30, 0x64, 0x0, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445567778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x24}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x31, 0xe, 0x63, 0x38, 0x31, 0x38, 0x61, 0x64, 0x63, 0x30, 0x65, 0x30, 0x36, 0x31, 0x32, 0x36]}, &(0x7f0000000a40)={0x0, "2628ef6169ce0c23300aad3bd8276bfa5a76274e6d287faf262c30f0f01f01afdf7dd0c90abeed83d9b7ae21c1731df54db18c7f4736fb3ba12abb31f88487a5", 0x29}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677880502d2b9ddff7f00112233445566778899aabbccd3ceff001122aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x0, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x33, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000940), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x65, 0x66, 0x30, 0x30, 0x61, 0x38, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff99aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 8.560368024s ago: executing program 6 (id=3802): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x1a6, &(0x7f0000000200)="$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") clock_nanosleep(0x4, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x3) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x19) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, 0x1, 0x407fffe) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) 8.559578045s ago: executing program 5 (id=3803): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00') preadv2(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 6.168126912s ago: executing program 2 (id=3805): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c0c6, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000140)) 6.007628359s ago: executing program 6 (id=3806): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 6.007494959s ago: executing program 1 (id=3807): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x40286608, 0x0) 4.925007514s ago: executing program 1 (id=3808): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040), 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup, 0x14, 0x1, 0x9, &(0x7f0000000580)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x1ff, 0x4) 3.84349498s ago: executing program 6 (id=3809): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3.84074242s ago: executing program 1 (id=3810): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b7030000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) 3.065794816s ago: executing program 6 (id=3811): mmap$IORING_OFF_SQ_RING(0x110c230000, 0xdcab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000080)='.\x00', 0x10000, 0x5b) socket$netlink(0x10, 0x3, 0xc) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xd) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 3.064683966s ago: executing program 1 (id=3812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff0100"/31], 0x90) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) 2.111497204s ago: executing program 1 (id=3813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r4, 0x4, 0x42000) read$FUSE(r4, &(0x7f0000000d00)={0x2020}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 1.208144787s ago: executing program 1 (id=3814): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x1f5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x82) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r5) mknodat$null(0xffffffffffffff9c, 0x0, 0x40a, 0x103) 794.816648ms ago: executing program 5 (id=3815): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0xd1, 0x0, 0x0, @multicast2, @broadcast}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2a242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000240)={0x2, 0xfa}, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1', 0x1) 209.472239ms ago: executing program 2 (id=3816): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfd, 0x2b6, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 177.081188ms ago: executing program 3 (id=3817): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x3000c085) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x66) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x21, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 145.006767ms ago: executing program 5 (id=3818): socket$inet_icmp(0x2, 0x2, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 6 (id=3819): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) listen(r2, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): 1 truncate cleaned up [ 484.504048][ T9313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 484.648875][ T9331] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 484.677386][ T9331] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.096520][ T9331] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.106945][ T9331] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.119425][ T9331] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.129729][ T9331] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.140005][ T9331] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.150321][ T9331] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.160610][ T9331] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.172307][ T9331] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 485.251743][ T27] audit: type=1800 audit(1790713996.856:116): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1081" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 485.377417][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 485.386564][ T5282] EXT4-fs (loop3): unmounting filesystem. [ 485.648976][ T9342] loop2: detected capacity change from 0 to 128 [ 486.507794][ T9342] FAT-fs (loop2): Directory bread(block 32) failed [ 486.526521][ T9342] FAT-fs (loop2): Directory bread(block 33) failed [ 487.144491][ T9342] FAT-fs (loop2): Directory bread(block 34) failed [ 487.184155][ T9342] FAT-fs (loop2): Directory bread(block 35) failed [ 487.231393][ T9342] FAT-fs (loop2): Directory bread(block 36) failed [ 487.292449][ T9342] FAT-fs (loop2): Directory bread(block 37) failed [ 487.299361][ T9342] FAT-fs (loop2): Directory bread(block 38) failed [ 487.352046][ T9342] FAT-fs (loop2): Directory bread(block 39) failed [ 487.414679][ T9342] FAT-fs (loop2): Directory bread(block 40) failed [ 487.432612][ T9342] FAT-fs (loop2): Directory bread(block 41) failed [ 487.638184][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1085'. [ 487.657353][ T9355] loop6: detected capacity change from 0 to 128 [ 488.149896][ T9342] device veth0_to_bond entered promiscuous mode [ 489.486545][ T9342] syz.2.1085 (9342) used greatest stack depth: 19920 bytes left [ 489.862652][ T5223] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 492.622997][ T9391] device syzkaller0 entered promiscuous mode [ 496.995054][ T9427] loop2: detected capacity change from 0 to 128 [ 497.697694][ T9435] loop3: detected capacity change from 0 to 128 [ 499.334896][ T9463] loop6: detected capacity change from 0 to 512 [ 500.219117][ T9463] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1106: missing EA_INODE flag [ 500.265340][ T9463] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1106: error while reading EA inode 2 err=-117 [ 500.332372][ T9476] netlink: 'syz.1.1111': attribute type 4 has an invalid length. [ 500.371462][ T9463] EXT4-fs (loop6): 1 orphan inode deleted [ 500.380474][ T9463] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 501.063570][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 501.344363][ T9490] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 501.515361][ T9492] device syzkaller0 entered promiscuous mode [ 501.597757][ T9492] tc action pedit 'at' offset 5 out of bounds [ 502.551739][ T9502] loop2: detected capacity change from 0 to 128 [ 504.948172][ T9528] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 506.473986][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.480345][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.674783][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 511.883211][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1141'. [ 512.153159][ T9585] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 512.411450][ T9585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 512.480912][ T4958] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 512.521877][ T9597] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 512.601069][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 512.618446][ T9585] device bridge2 entered promiscuous mode [ 512.677445][ T4958] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 512.695394][ T9585] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 512.704167][ T4958] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 512.735741][ T4958] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 512.778110][ T4958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.832649][ T4958] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 512.862923][ T4958] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 515.453734][ T4315] usb 3-1: USB disconnect, device number 7 [ 515.477123][ T4315] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 515.496431][ T4315] spcp8x5 3-1:1.0: device disconnected [ 515.573720][ T9608] kvm [9607]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 515.605457][ T9608] kvm [9607]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 515.643285][ T9623] loop6: detected capacity change from 0 to 128 [ 519.023157][ T9647] loop3: detected capacity change from 0 to 8 [ 519.943625][ T4272] Bluetooth: hci2: hcon ffff888073cd0000 sent 1 < count 1025 [ 520.873362][ T9662] loop2: detected capacity change from 0 to 128 [ 521.494117][ T7153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.803378][ T9665] loop3: detected capacity change from 0 to 128 [ 523.530898][ T9679] device syzkaller0 entered promiscuous mode [ 524.889114][ T9712] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 525.060014][ T7170] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 526.302510][ T9728] loop3: detected capacity change from 0 to 128 [ 527.543532][ T27] audit: type=1804 audit(1790714039.167:117): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1164" name="bus" dev="ramfs" ino=49805 res=1 errno=0 [ 527.640201][ T27] audit: type=1804 audit(1790714039.197:118): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1164" name="bus" dev="ramfs" ino=49805 res=1 errno=0 [ 527.741730][ T9746] loop3: detected capacity change from 0 to 128 [ 529.266196][ T9785] loop3: detected capacity change from 0 to 128 [ 529.386725][ T9785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 529.495434][ T9785] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 530.065458][ T9799] loop2: detected capacity change from 0 to 128 [ 530.311282][ T5282] EXT4-fs (loop3): unmounting filesystem. [ 530.870565][ T4272] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 530.880859][ T4272] Bluetooth: hci4: Injecting HCI hardware error event [ 530.891041][ T4272] Bluetooth: hci4: hardware error 0x00 [ 531.751470][ T9818] loop2: detected capacity change from 0 to 128 [ 532.939958][ T4272] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 533.101968][ T9841] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 533.204775][ T9842] loop3: detected capacity change from 0 to 8 [ 534.005083][ T9842] SQUASHFS error: zlib decompression failed, data probably corrupt [ 534.013876][ T9842] SQUASHFS error: Failed to read block 0x9b: -5 [ 534.020182][ T9842] SQUASHFS error: Unable to read metadata cache entry [99] [ 534.027386][ T9842] SQUASHFS error: Unable to read inode 0x127 [ 534.733542][ T9852] 0x000000000000-0x000000020000 : "" [ 534.842501][ T9852] ftl_cs: FTL header not found. [ 535.719160][ T9868] loop3: detected capacity change from 0 to 128 [ 536.941365][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 537.616550][ T9888] loop3: detected capacity change from 0 to 512 [ 537.695761][ T9891] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 537.854906][ T9888] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.1212: missing EA_INODE flag [ 538.054994][ T9888] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1212: error while reading EA inode 2 err=-117 [ 538.241178][ T9888] EXT4-fs (loop3): 1 orphan inode deleted [ 538.308443][ T9888] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 540.327720][ T5282] EXT4-fs (loop3): unmounting filesystem. [ 545.289592][ T9962] loop2: detected capacity change from 0 to 8 [ 546.404801][ T27] audit: type=1804 audit(1790714058.028:119): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1234" name="bus" dev="ramfs" ino=50943 res=1 errno=0 [ 546.470204][ T27] audit: type=1804 audit(1790714058.058:120): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1234" name="bus" dev="ramfs" ino=50943 res=1 errno=0 [ 547.746660][ T9980] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1228'. [ 547.886697][ T9989] device dummy0 entered promiscuous mode [ 547.893631][ T9989] device vlan4 entered promiscuous mode [ 547.999481][ T9992] loop3: detected capacity change from 0 to 128 [ 548.024222][ T9993] loop6: detected capacity change from 0 to 128 [ 550.874413][T10027] netlink: 'syz.3.1254': attribute type 1 has an invalid length. [ 551.033979][T10029] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.114703][T10029] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.158767][T10029] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.167600][T10029] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.210253][T10029] bond4: (slave geneve2): making interface the new active one [ 551.217374][T10032] loop6: detected capacity change from 0 to 128 [ 551.345412][T10029] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 551.410537][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1254'. [ 551.586990][T10036] loop6: detected capacity change from 0 to 32768 [ 551.597355][T10027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.705809][T10037] capability: warning: `syz.6.1256' uses deprecated v2 capabilities in a way that may be insecure [ 552.537959][T10042] loop2: detected capacity change from 0 to 128 [ 553.317958][T10043] syz.3.1258 (10043) used greatest stack depth: 17264 bytes left [ 553.380474][ T27] audit: type=1804 audit(1790714065.009:121): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1259" name="bus" dev="ramfs" ino=51059 res=1 errno=0 [ 553.928067][ T27] audit: type=1804 audit(1790714065.009:122): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1259" name="bus" dev="ramfs" ino=51059 res=1 errno=0 [ 555.738524][ T7147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 557.669727][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 557.908517][T10058] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 558.440997][ T4272] Bluetooth: hci1: command 0x0c1a tx timeout [ 558.450067][ T7162] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 558.464014][T10072] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.476030][T10072] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.521290][T10058] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 558.595065][T10058] Bluetooth: hci1: Suspend notifier action (1) failed: -110 [ 558.697670][T10058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 558.705947][T10058] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 558.731392][T10058] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 558.745111][T10058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 558.751496][T10058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 558.765526][T10058] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 558.773008][T10058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 558.784574][T10058] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 559.483490][T10058] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 560.548255][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 560.942871][ T4272] Bluetooth: hci3: command 0x0c1a tx timeout [ 560.942935][ T9808] Bluetooth: hci2: command 0x0c1a tx timeout [ 560.955381][ T9808] Bluetooth: hci0: command 0x0c1a tx timeout [ 561.326125][T10113] device syzkaller0 entered promiscuous mode [ 561.415426][T10124] loop6: detected capacity change from 0 to 128 [ 561.651801][T10133] loop3: detected capacity change from 0 to 128 [ 565.083454][T10160] device syzkaller0 entered promiscuous mode [ 566.275554][T10178] loop2: detected capacity change from 0 to 128 [ 566.326048][T10178] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 567.910582][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.917061][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.423818][T10227] binder: BINDER_SET_CONTEXT_MGR already set [ 572.444600][T10227] binder: 10226:10227 ioctl 4018620d 200000000040 returned -16 [ 573.219132][T10234] device syzkaller0 entered promiscuous mode [ 573.358182][T10234] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1314'. [ 574.492494][T10249] affs: No valid root block on device nullb0 [ 575.514860][T10255] loop2: detected capacity change from 0 to 128 [ 577.459447][T10277] loop3: detected capacity change from 0 to 256 [ 577.566794][T10277] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 578.899572][ T27] audit: type=1800 audit(1790714090.520:123): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1324" name="file1" dev="loop3" ino=1048640 res=0 errno=0 [ 578.901075][T10298] device syzkaller0 entered promiscuous mode [ 583.153594][T10327] loop2: detected capacity change from 0 to 32768 [ 583.604597][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1338'. [ 584.519603][T10348] loop2: detected capacity change from 0 to 128 [ 584.850162][T10352] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 585.774041][T10359] loop2: detected capacity change from 0 to 128 [ 587.230706][T10369] ip_tables: iptables: counters copy to user failed while replacing table [ 589.018087][ T5223] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 590.122367][T10405] loop3: detected capacity change from 0 to 32768 [ 592.217643][ T4319] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 592.264876][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 592.297579][T10423] bond0: option resend_igmp: invalid value (18446744072707910257) [ 592.319103][T10423] bond0: option resend_igmp: allowed values 0 - 255 [ 592.389064][T10425] loop6: detected capacity change from 0 to 128 [ 592.643142][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 593.183240][T10438] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 596.038448][T10467] loop6: detected capacity change from 0 to 128 [ 597.380716][T10474] netlink: 'syz.5.1377': attribute type 1 has an invalid length. [ 598.715620][T10491] bond4: (slave bridge1): making interface the new active one [ 598.747928][T10491] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 600.174518][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 604.883988][T10544] loop3: detected capacity change from 0 to 256 [ 606.560185][ T27] audit: type=1326 audit(1790714118.192:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.2.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d3f9e159 code=0x7ffc0000 [ 607.222013][ T27] audit: type=1326 audit(1790714118.542:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.2.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d3f9e159 code=0x7ffc0000 [ 607.483755][ T27] audit: type=1326 audit(1790714118.572:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.2.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f02d3f9e159 code=0x7ffc0000 [ 607.508025][ T27] audit: type=1326 audit(1790714118.572:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.2.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d3f9e159 code=0x7ffc0000 [ 607.533591][ T27] audit: type=1326 audit(1790714118.572:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.2.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d3f9e159 code=0x7ffc0000 [ 607.557894][ T27] audit: type=1326 audit(1790714118.572:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.2.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02d3f5e98e code=0x7ffc0000 [ 607.582314][ T27] audit: type=1326 audit(1790714118.572:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.2.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d3f9e159 code=0x7ffc0000 [ 607.606909][ T27] audit: type=1326 audit(1790714118.572:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.2.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d3f9e159 code=0x7ffc0000 [ 607.640368][ T27] audit: type=1326 audit(1790714118.572:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.2.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f02d3f9e159 code=0x7ffc0000 [ 607.664913][ T27] audit: type=1326 audit(1790714118.572:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.2.1409" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d3f9e159 code=0x7ffc0000 [ 607.750597][T10575] IPVS: set_ctl: invalid protocol: 137 172.30.0.6:20001 [ 609.785219][T10595] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 9 (only 8 groups) [ 610.977726][T10604] loop2: detected capacity change from 0 to 128 [ 611.549357][T10615] input: syz1 as /devices/virtual/input/input6 [ 612.347309][T10608] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 612.423526][T10608] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 615.893583][T10643] overlayfs: failed to clone upperpath [ 618.163504][T10660] netlink: 'syz.2.1430': attribute type 1 has an invalid length. [ 620.273585][T10660] bond1: (slave bridge3): making interface the new active one [ 620.438212][T10660] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 620.879004][T10687] loop2: detected capacity change from 0 to 128 [ 620.951822][T10688] FAULT_INJECTION: forcing a failure. [ 620.951822][T10688] name failslab, interval 1, probability 0, space 0, times 0 [ 620.964510][T10688] CPU: 0 PID: 10688 Comm: syz.6.1437 Not tainted syzkaller #0 [ 620.971999][T10688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.982083][T10688] Call Trace: [ 620.985371][T10688] [ 620.988308][T10688] dump_stack_lvl+0x188/0x24e [ 620.993002][T10688] ? show_regs_print_info+0x12/0x12 [ 620.998211][T10688] ? load_image+0x410/0x410 [ 621.002733][T10688] ? __might_sleep+0xd0/0xd0 [ 621.007332][T10688] ? __lock_acquire+0x7c40/0x7c40 [ 621.012374][T10688] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 621.018371][T10688] should_fail_ex+0x390/0x4c0 [ 621.023081][T10688] should_failslab+0x5/0x20 [ 621.027601][T10688] slab_pre_alloc_hook+0x59/0x300 [ 621.032644][T10688] ? sk_prot_alloc+0xe7/0x210 [ 621.037358][T10688] __kmem_cache_alloc_node+0x4f/0x270 [ 621.042762][T10688] ? sk_prot_alloc+0xe7/0x210 [ 621.047462][T10688] __kmalloc+0xa3/0x240 [ 621.051648][T10688] sk_prot_alloc+0xe7/0x210 [ 621.056161][T10688] ? sk_alloc+0x20/0x330 [ 621.060414][T10688] sk_alloc+0x36/0x330 [ 621.064494][T10688] __netlink_create+0x6b/0x2d0 [ 621.069271][T10688] ? __lock_acquire+0x7c40/0x7c40 [ 621.074311][T10688] netlink_create+0x3a7/0x510 [ 621.079031][T10688] ? genl_rcv+0x40/0x40 [ 621.083203][T10688] __sock_create+0x49a/0x940 [ 621.087831][T10688] __sys_socket+0xc4/0x190 [ 621.092277][T10688] __x64_sys_socket+0x76/0x80 [ 621.096979][T10688] do_syscall_64+0x4c/0xa0 [ 621.101403][T10688] ? clear_bhb_loop+0x60/0xb0 [ 621.106091][T10688] ? clear_bhb_loop+0x60/0xb0 [ 621.110781][T10688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 621.116691][T10688] RIP: 0033:0x7f98ac59f9c7 [ 621.121112][T10688] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.140732][T10688] RSP: 002b:00007f98ad476f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 621.149162][T10688] RAX: ffffffffffffffda RBX: 00007f98ac826180 RCX: 00007f98ac59f9c7 [ 621.153370][ T5223] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 621.157127][T10688] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 621.157142][T10688] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 621.157152][T10688] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 621.157162][T10688] R13: 00007f98ac826218 R14: 00007f98ac826180 R15: 00007ffd2c0e4848 [ 621.157189][T10688] [ 624.613730][ T7151] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 628.360610][T10751] netlink: 'syz.3.1451': attribute type 4 has an invalid length. [ 629.769497][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.775952][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.247538][T10769] tipc: New replicast peer: 172.20.20.187 [ 630.280265][T10769] tipc: Enabled bearer , priority 10 [ 631.504239][ T4313] tipc: Node number set to 2161064531 [ 632.480303][T10786] loop3: detected capacity change from 0 to 512 [ 632.501346][T10786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 632.524455][T10786] ext4: Unknown parameter 'fsname' [ 636.157261][T10826] device dummy0 entered promiscuous mode [ 636.184037][T10826] device vlan2 entered promiscuous mode [ 636.498035][T10839] loop3: detected capacity change from 0 to 128 [ 636.513008][T10838] loop2: detected capacity change from 0 to 512 [ 636.552791][T10838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 636.560148][T10838] ext4: Unknown parameter 'fsname' [ 639.453512][T10858] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 639.956274][T10858] bond5: (slave bridge3): making interface the new active one [ 639.988357][T10858] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 640.041641][T10866] loop6: detected capacity change from 0 to 1024 [ 640.114542][T10866] EXT4-fs: Ignoring removed bh option [ 640.184604][T10866] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 640.245414][T10866] EXT4-fs (loop6): unmounting filesystem. [ 641.258292][T10882] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 642.184408][T10891] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 642.194178][T10891] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 642.203586][T10891] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 642.212402][T10891] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 642.226540][T10891] bond2: (slave geneve2): making interface the new active one [ 642.238034][T10891] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 642.344477][T10897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1492'. [ 643.311867][T10905] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 647.733161][T10946] netlink: 'syz.6.1509': attribute type 1 has an invalid length. [ 647.764247][T10946] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 647.773433][T10946] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 647.783021][T10946] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 647.792039][T10946] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 647.802315][T10946] bond1: (slave geneve2): making interface the new active one [ 647.811779][T10946] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 647.887080][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1509'. [ 648.282700][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'. [ 649.164346][T10962] netlink: 'syz.6.1516': attribute type 1 has an invalid length. [ 649.400340][T10969] bond2: (slave bridge1): making interface the new active one [ 649.466440][T10969] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 649.524760][T10968] tipc: Started in network mode [ 649.529803][T10968] tipc: Node identity ac1414aa, cluster identity 4711 [ 649.563489][T10968] tipc: New replicast peer: 172.20.20.187 [ 649.570202][T10968] tipc: Enabled bearer , priority 10 [ 650.683132][ T4260] tipc: Node number set to 2886997162 [ 651.394703][T10993] loop6: detected capacity change from 0 to 8 [ 651.908572][T10993] SQUASHFS error: zlib decompression failed, data probably corrupt [ 651.916616][T10993] SQUASHFS error: Failed to read block 0x9b: -5 [ 651.922856][T10993] SQUASHFS error: Unable to read metadata cache entry [99] [ 651.930083][T10993] SQUASHFS error: Unable to read inode 0x127 [ 653.022868][ T5223] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.945181][T11023] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 655.655022][T11023] bond5: (slave bridge1): making interface the new active one [ 655.668282][T11023] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 655.679033][T11031] loop2: detected capacity change from 0 to 128 [ 656.862791][ T7143] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 666.063142][T11090] jffs2: notice: (11090) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 667.216258][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.677621][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1552'. [ 667.719352][T11113] 9pnet_fd: Insufficient options for proto=fd [ 669.521351][T11122] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1562'. [ 671.082572][T11136] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1565'. [ 671.951548][T11141] loop6: detected capacity change from 0 to 128 [ 673.685374][T11160] 8021q: adding VLAN 0 to HW filter on device bond6 [ 674.987086][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1577'. [ 677.177407][T11206] loop2: detected capacity change from 0 to 32768 [ 677.240802][T11206] JBD2: Ignoring recovery information on journal [ 677.248579][T11206] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 677.257128][T11206] JBD2: bad block at offset 32 [ 677.284024][T11206] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 677.638643][T11219] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 677.660367][T11219] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 677.670592][T11219] OCFS2: File system is now read-only. [ 677.676146][T11219] (syz.2.1586,11219,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 677.684789][T11219] (syz.2.1586,11219,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 677.693132][T11219] (syz.2.1586,11219,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 677.701390][T11219] (syz.2.1586,11219,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 677.710156][T11219] (syz.2.1586,11219,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 677.718342][T11219] (syz.2.1586,11219,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 677.727137][T11219] (syz.2.1586,11219,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 677.736258][T11219] (syz.2.1586,11219,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 678.132567][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 678.132577][ T27] audit: type=1800 audit(1790714189.626:145): pid=11194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1581" name="file1" dev="sda1" ino=2053 res=0 errno=0 [ 678.405454][ T4281] ocfs2: Unmounting device (7,2) on (node local) [ 679.232608][T11230] loop6: detected capacity change from 0 to 64 [ 679.935125][T11236] loop2: detected capacity change from 0 to 128 [ 682.154411][T11259] loop3: detected capacity change from 0 to 128 [ 682.184522][T11259] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 682.314502][T11259] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 682.344654][T11267] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 682.539897][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1599'. [ 682.663812][T11264] loop6: detected capacity change from 0 to 256 [ 685.039765][ T5199] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 686.448095][T11310] loop6: detected capacity change from 0 to 128 [ 690.131625][ T5221] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 690.802694][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.809070][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.662023][T11431] tipc: Enabling of bearer rejected, failed to enable media [ 696.769003][T11434] loop2: detected capacity change from 0 to 8 [ 696.799090][T11434] SQUASHFS error: zlib decompression failed, data probably corrupt [ 696.807324][T11434] SQUASHFS error: Failed to read block 0x9b: -5 [ 696.813673][T11434] SQUASHFS error: Unable to read metadata cache entry [99] [ 696.821180][T11434] SQUASHFS error: Unable to read inode 0x127 [ 697.442046][T11441] sctp: [Deprecated]: syz.5.1645 (pid 11441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 697.442046][T11441] Use struct sctp_sack_info instead [ 697.981184][T11436] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 698.349580][T11454] loop2: detected capacity change from 0 to 128 [ 698.400760][T11436] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 698.421018][T11454] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 698.495619][T11454] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 698.785008][T11465] 9pnet_virtio: no channels available for device 127.0.0.1 [ 701.424425][T11486] sctp: [Deprecated]: syz.2.1656 (pid 11486) Use of int in max_burst socket option. [ 701.424425][T11486] Use struct sctp_assoc_value instead [ 704.424019][T11513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1664'. [ 707.329304][T11532] sd 0:0:1:0: PR command failed: 1026 [ 707.335134][T11532] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 707.342050][T11532] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 708.592029][T11543] loop3: detected capacity change from 0 to 512 [ 708.805344][T11543] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 711.095967][T11565] overlayfs: failed to clone lowerpath [ 712.142445][T11583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1677'. [ 717.009558][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 719.177120][T11633] loop6: detected capacity change from 0 to 32768 [ 719.440929][T11633] JBD2: Ignoring recovery information on journal [ 719.448315][T11633] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 719.456597][T11633] JBD2: bad block at offset 32 [ 719.487386][T11633] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 720.085778][T11696] loop2: detected capacity change from 0 to 128 [ 720.805466][T11696] FAT-fs (loop2): Directory bread(block 414) failed [ 720.812287][T11696] FAT-fs (loop2): Directory bread(block 415) failed [ 720.818942][T11696] FAT-fs (loop2): Directory bread(block 416) failed [ 720.825825][T11696] FAT-fs (loop2): Directory bread(block 417) failed [ 720.832516][T11696] FAT-fs (loop2): Directory bread(block 418) failed [ 720.839237][T11696] FAT-fs (loop2): Directory bread(block 419) failed [ 720.845862][T11696] FAT-fs (loop2): Directory bread(block 420) failed [ 720.852631][T11696] FAT-fs (loop2): Directory bread(block 421) failed [ 721.198669][T11700] OCFS2: ERROR (device loop6): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 721.219933][T11700] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 721.229866][T11700] OCFS2: File system is now read-only. [ 721.235337][T11700] (syz.6.1693,11700,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 721.243920][T11700] (syz.6.1693,11700,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 721.252777][T11700] (syz.6.1693,11700,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 721.261104][T11700] (syz.6.1693,11700,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 721.269830][T11700] (syz.6.1693,11700,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 721.277824][T11700] (syz.6.1693,11700,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 721.286605][T11700] (syz.6.1693,11700,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 721.295495][T11700] (syz.6.1693,11700,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 723.286192][ T5199] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 723.485913][T11717] loop2: detected capacity change from 0 to 8 [ 723.768790][T11717] SQUASHFS error: zlib decompression failed, data probably corrupt [ 723.777036][T11717] SQUASHFS error: Failed to read block 0x9b: -5 [ 723.783433][T11717] SQUASHFS error: Unable to read metadata cache entry [99] [ 723.790720][T11717] SQUASHFS error: Unable to read inode 0x127 [ 723.847315][ T4260] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 724.713895][T11723] Bluetooth: MGMT ver 1.22 [ 724.919560][ T4260] usb 4-1: not running at top speed; connect to a high speed hub [ 724.933937][T11727] loop2: detected capacity change from 0 to 512 [ 724.954111][ T4260] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 725.021888][T11731] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1704'. [ 725.126970][T11727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 725.417349][T11727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 725.544105][T11727] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.656253][ T4260] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 725.680800][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.807895][ T4260] usb 4-1: Found UVC 1.00 device (046d:0825) [ 725.833869][ T4260] usb 4-1: No streaming interface found for terminal 2. [ 726.593256][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 726.681778][ T4260] usb 4-1: USB disconnect, device number 7 [ 726.779899][ T5610] ocfs2: Unmounting device (7,6) on (node local) [ 728.357203][ T27] audit: type=1400 audit(1790714239.988:146): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=11753 comm="syz.3.1713" name=223A6F offset=66 [ 734.074270][T11810] Illegal XDP return value 4294967294 on prog (id 406) dev N/A, expect packet loss! [ 739.321477][ T27] audit: type=1800 audit(1790714250.959:147): pid=11853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1740" name="ipv4_port" dev="configfs" ino=55922 res=0 errno=0 [ 739.388465][ T27] audit: type=1800 audit(1790714251.019:148): pid=11853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1740" name="local" dev="configfs" ino=55923 res=0 errno=0 [ 742.735675][T11875] 9pnet_fd: Insufficient options for proto=fd [ 742.925275][T11887] loop6: detected capacity change from 0 to 256 [ 748.557160][T11935] loop2: detected capacity change from 0 to 32768 [ 748.801880][T11935] XFS (loop2): Mounting V5 Filesystem [ 748.862973][T11935] XFS (loop2): Ending clean mount [ 749.595744][ T4281] XFS (loop2): Unmounting Filesystem [ 749.665440][T11962] loop6: detected capacity change from 0 to 1024 [ 750.404599][T11962] EXT4-fs: Invalid want_extra_isize 7 [ 750.488247][T11965] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 752.248382][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.258868][ T5221] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 752.273010][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.780797][T12022] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 755.370479][T12023] loop6: detected capacity change from 0 to 128 [ 755.439656][T12023] FAT-fs (loop6): invalid media value (0x07) [ 755.445678][T12023] FAT-fs (loop6): Can't find a valid FAT filesystem [ 755.988159][T12026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1786'. [ 756.063990][T11690] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 759.179029][T12083] loop2: detected capacity change from 0 to 256 [ 759.314382][T12083] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 759.908516][T12086] netlink: 'syz.6.1804': attribute type 21 has an invalid length. [ 759.916653][T12086] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1804'. [ 759.926897][T12086] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1804'. [ 763.807186][T12129] tipc: Enabling of bearer rejected, failed to enable media [ 766.019666][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1821'. [ 766.100852][T12148] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 767.171231][T12160] futex_wake_op: syz.6.1825 tries to shift op by 144; fix this program [ 770.021267][T12194] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1836'. [ 772.276966][T12216] UBIFS error (pid: 12216): cannot open "ubi:0", error -19 [ 774.926985][T12251] zero sized request [ 783.359480][T12310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 784.870946][ T5228] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 787.997222][T12396] loop6: detected capacity change from 0 to 512 [ 788.030744][T12396] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 788.058031][ T7170] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 788.337083][T12396] __vm_enough_memory: pid: 12396, comm: syz.6.1884, no enough memory for the allocation [ 788.922461][T12408] loop6: detected capacity change from 0 to 512 [ 789.617648][T12408] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 792.854776][T12451] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 795.371149][T12473] loop6: detected capacity change from 0 to 256 [ 795.443307][T12473] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 799.783602][T12529] loop2: detected capacity change from 0 to 128 [ 807.091167][T12597] jffs2: notice: (12597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 807.450869][T12597] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 810.024331][T12621] sctp: [Deprecated]: syz.1.1945 (pid 12621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 810.024331][T12621] Use struct sctp_sack_info instead [ 813.647733][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.654288][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.035608][T12679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 818.313503][T12701] loop2: detected capacity change from 0 to 128 [ 818.483277][T12701] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 818.499652][T12701] ext4 filesystem being mounted at /376/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 818.764671][T11690] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 819.581089][T12701] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 819.638444][T12701] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 819.864687][T12701] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 819.897801][T12701] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 821.256883][T12701] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 821.326981][ T7145] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 823.004512][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 824.674019][T12761] 9pnet_virtio: no channels available for device 127.0.0.1 [ 825.894645][T12766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 827.773807][T12802] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 829.004540][ T4958] kworker/dying (4958) used greatest stack depth: 16128 bytes left [ 843.423145][T12929] loop6: detected capacity change from 0 to 512 [ 843.548839][T12929] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 843.603241][T12929] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.2025: bad orphan inode 131083 [ 843.657997][T12929] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 844.887845][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 844.902142][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 844.910540][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 844.919688][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 844.927787][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 844.936120][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 844.944240][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 844.952407][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 844.960344][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 844.968446][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 844.977419][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 844.985839][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 844.994699][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 845.003095][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 845.011498][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 845.022240][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 845.035032][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 845.044204][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 845.052793][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 845.061183][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 845.075052][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 845.083894][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 845.092323][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 845.100987][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 845.110868][T12943] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 846.214837][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 854.012726][ T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 854.041847][T11697] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 862.550705][T13103] loop6: detected capacity change from 0 to 32768 [ 862.754856][T13103] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.2062 (13103) [ 863.829460][T13103] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 863.840110][T13103] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 863.849443][T13103] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 863.859280][T13103] BTRFS info (device loop6): use zstd compression, level 3 [ 863.866590][T13103] BTRFS info (device loop6): force clearing of disk cache [ 863.873735][T13103] BTRFS info (device loop6): enabling disk space caching [ 863.880834][T13103] BTRFS info (device loop6): disk space caching is enabled [ 865.634899][T13103] BTRFS error (device loop6): open_ctree failed: -12 [ 865.635944][T13074] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by udevd (13074) [ 870.329755][T13185] loop2: detected capacity change from 0 to 256 [ 871.459105][T13193] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 871.469702][T13193] FAT-fs (loop2): Filesystem has been set read-only [ 871.476491][T13193] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 871.486653][T13193] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 871.501090][T13193] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 871.559867][ T27] audit: type=1800 audit(1790714383.136:149): pid=13193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2084" name="file1" dev="loop2" ino=1048682 res=0 errno=0 [ 873.840645][T13216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2088'. [ 875.245534][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.251914][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 888.370882][ T27] audit: type=1800 audit(1790714400.017:150): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2126" name="ipv4_port" dev="configfs" ino=59242 res=0 errno=0 [ 888.628444][T13348] loop6: detected capacity change from 0 to 128 [ 888.645065][T13348] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 888.934534][ T27] audit: type=1800 audit(1790714400.577:151): pid=13341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2126" name="local" dev="configfs" ino=59877 res=0 errno=0 [ 889.821564][ T7149] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 889.889726][T11690] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 890.749608][T13376] loop6: detected capacity change from 0 to 2048 [ 890.966687][T13376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 894.474904][T13401] tipc: Started in network mode [ 894.479970][T13401] tipc: Node identity 4e4af3d1ac5f, cluster identity 4711 [ 894.487136][T13401] tipc: Enabled bearer , priority 0 [ 894.664997][T13405] 9pnet: p9_errstr2errno: server reported unknown error tun [ 895.519867][ T126] tipc: Node number set to 3793089489 [ 900.728031][T13464] __vm_enough_memory: pid: 13464, comm: syz.3.2158, no enough memory for the allocation [ 914.934918][T13577] loop6: detected capacity change from 0 to 512 [ 914.964895][T13577] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 916.299631][T13603] netlink: 'syz.2.2202': attribute type 10 has an invalid length. [ 916.352227][T13603] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.410561][T13603] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.417730][T13603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.389526][T13603] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 917.448487][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'. [ 917.581728][T13605] device bridge_slave_1 left promiscuous mode [ 917.635701][T13605] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.038788][T13605] bond0: (slave bridge0): Releasing backup interface [ 920.320063][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 920.352299][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 920.368063][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 920.376400][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 922.406424][T13696] loop2: detected capacity change from 0 to 128 [ 922.455796][T13696] FAT-fs (loop2): invalid media value (0x07) [ 922.486049][T13696] FAT-fs (loop2): Can't find a valid FAT filesystem [ 922.583017][T13697] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 923.146626][T11687] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 923.156913][T11697] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 925.160578][T13743] tipc: Enabling of bearer rejected, failed to enable media [ 925.601370][T13777] futex_wake_op: syz.1.2228 tries to shift op by 144; fix this program [ 926.480089][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2229'. [ 926.514217][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2229'. [ 927.109923][T13782] loop2: detected capacity change from 0 to 128 [ 927.278848][T13789] 9pnet_fd: Insufficient options for proto=fd [ 929.779987][T13794] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 932.864350][T13852] zero sized request [ 936.531713][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.538435][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.535652][T13902] loop2: detected capacity change from 0 to 128 [ 937.755584][T13904] ubi0: attaching mtd0 [ 937.770484][T13904] ubi0: scanning is finished [ 937.775371][T13904] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 938.272411][T13904] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 938.343084][T13902] FAT-fs (loop2): Unrecognized mount option "dmask=00000000000p00000000003" or missing value [ 938.487647][T13911] loop6: detected capacity change from 0 to 128 [ 945.431191][T13986] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2286'. [ 949.454776][T14036] Console: switching to colour VGA+ 80x25 [ 949.749991][T14036] Console: switching to colour frame buffer device 128x48 [ 951.195860][T14068] ip_tables: iptables: counters copy to user failed while replacing table [ 954.979211][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2319'. [ 955.716717][T11694] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 955.727258][T11698] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 965.232975][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'. [ 965.565439][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'. [ 967.252318][T14222] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 973.003540][T14292] loop2: detected capacity change from 0 to 1024 [ 974.079245][T14292] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 976.603663][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 978.687297][ T3933] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.704564][ T3933] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.733322][ T3933] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.818915][ T3933] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.684820][ T3933] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.693043][ T3933] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.704530][ T3933] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.712732][ T3933] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.400294][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 980.408096][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 980.415478][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 980.422762][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 980.429892][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 980.437124][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 980.444208][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 980.451530][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 980.458704][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 980.465874][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 980.473050][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 980.480432][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 980.487817][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 980.495211][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 980.502591][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 980.510039][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 980.517846][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 980.525275][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 980.532631][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 980.540053][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 980.547816][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 980.555542][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 980.563005][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 980.570659][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 980.578288][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 982.545831][T14380] ipt_REJECT: TCP_RESET invalid for non-tcp [ 984.832917][T14385] IPv6: sit1: Disabled Multicast RS [ 986.321193][T14437] __vm_enough_memory: pid: 14437, comm: syz.3.2406, no enough memory for the allocation [ 989.980547][T14485] loop6: detected capacity change from 0 to 128 [ 990.047563][T14485] FAT-fs (loop6): Unrecognized mount option "dmask=00000000000p00000000003" or missing value [ 990.091622][T14491] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2427'. [ 990.277979][ T4319] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 990.278952][T11690] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 993.049894][T14533] loop6: detected capacity change from 0 to 512 [ 993.061618][T14533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 993.070094][T14533] ext4: Unknown parameter 'fsname' [ 994.290336][T14550] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2441'. [ 994.642172][T14562] 9pnet: p9_errstr2errno: server reported unknown error tun [ 996.171534][T14548] loop6: detected capacity change from 0 to 32768 [ 997.033569][T14489] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 997.333836][T14595] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2458'. [ 997.965746][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.060262][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.013680][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 999.021341][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 999.028736][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 999.036089][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 999.043189][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 999.050308][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 999.057431][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 999.064598][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 999.071707][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 999.078840][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 999.086035][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 999.093318][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 999.100636][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 999.107945][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 999.115256][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 999.122557][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 999.130230][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 999.137530][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 999.144825][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 999.152093][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 999.159756][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 999.167205][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 999.174622][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 999.181972][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 999.189486][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 999.196988][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 999.679120][T14642] 9pnet: p9_errstr2errno: server reported unknown error tun [ 1001.722157][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1001.729933][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1001.737342][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1001.744688][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1001.751815][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1001.758972][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1001.766117][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1001.773290][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1001.780427][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1001.787573][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1001.794782][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1001.802079][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1001.809414][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1001.816751][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1001.824094][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1001.831421][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1001.839134][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1001.846470][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1001.853786][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1001.861071][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1001.868763][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1001.876233][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1001.883679][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1001.891129][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1001.898636][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1001.906152][T14659] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1005.957690][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1005.966671][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1005.974124][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1005.981519][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1005.988741][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1005.995952][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1006.003159][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1006.010338][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1006.017558][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1006.024772][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1006.032099][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1006.039521][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1006.046930][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1006.054333][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1006.061701][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1006.069099][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1006.077130][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1006.084587][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1006.091993][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1006.099415][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1006.107492][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1006.114996][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1006.122442][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1006.129926][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1006.137647][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1006.145337][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1010.771985][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1010.779828][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1010.787216][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1010.794590][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1010.801692][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1010.808872][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1010.816049][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1010.823220][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1010.830343][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1010.837837][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1010.845087][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1010.852386][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1010.859924][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1010.867253][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1010.874570][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1010.881884][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1010.889567][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1010.896948][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1010.904283][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1010.911588][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1010.919384][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1010.926926][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1010.934383][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1010.941756][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1010.949308][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1010.956904][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1014.797116][T14838] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2522'. [ 1016.918166][T14873] xt_cgroup: invalid path, errno=-2 [ 1019.377969][T14907] fuse: Bad value for 'fd' [ 1020.209091][T14914] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2541'. [ 1020.535149][T14911] 9pnet_virtio: no channels available for device syz [ 1020.575594][ T27] audit: type=1326 audit(1790714532.235:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.3.2546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994db9e159 code=0x7ffc0000 [ 1020.604690][T14920] netlink: 'syz.2.2547': attribute type 2 has an invalid length. [ 1020.608781][ T27] audit: type=1326 audit(1790714532.265:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.3.2546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994db9e159 code=0x7ffc0000 [ 1020.666745][ T27] audit: type=1326 audit(1790714532.325:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.3.2546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994db9e159 code=0x7ffc0000 [ 1020.698872][ T27] audit: type=1326 audit(1790714532.325:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.3.2546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994db9e159 code=0x7ffc0000 [ 1020.737039][ T27] audit: type=1326 audit(1790714532.325:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.3.2546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f994db9e159 code=0x7ffc0000 [ 1020.802012][ T27] audit: type=1326 audit(1790714532.325:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.3.2546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994db9e159 code=0x7ffc0000 [ 1020.870386][ T27] audit: type=1326 audit(1790714532.325:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.3.2546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994db9e159 code=0x7ffc0000 [ 1020.897157][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'. [ 1020.985865][T14932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2548'. [ 1021.087331][T14937] loop6: detected capacity change from 0 to 1024 [ 1021.544753][ T27] audit: type=1326 audit(1790714532.325:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.3.2546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f994db5e98e code=0x7ffc0000 [ 1021.646018][ T27] audit: type=1326 audit(1790714532.325:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.3.2546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f994db5e98e code=0x7ffc0000 [ 1021.675287][T14932] device geneve3 entered promiscuous mode [ 1021.722167][ T27] audit: type=1326 audit(1790714532.325:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.3.2546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f994db5e98e code=0x7ffc0000 [ 1023.378259][ T4319] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1023.379100][T11690] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1023.487627][T14946] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2553'. [ 1025.726950][T14979] Option 'dnserror' to dns_resolver key: bad/missing value [ 1028.388293][T15007] cifs: Unknown parameter 'usrquota' [ 1028.555886][T15011] hub 1-0:1.0: USB hub found [ 1028.567707][T15011] hub 1-0:1.0: 1 port detected [ 1030.259270][T15013] loop6: detected capacity change from 0 to 4096 [ 1033.282515][T15090] ubi0: attaching mtd0 [ 1033.291134][T15090] ubi0: scanning is finished [ 1033.295955][T15090] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1033.829495][T15090] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1033.991366][T15099] loop6: detected capacity change from 0 to 512 [ 1034.003764][T15099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1034.071164][T15099] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1034.184559][T15099] EXT4-fs (loop6): 1 truncate cleaned up [ 1034.251051][T15099] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1034.286904][T15111] netlink: 'syz.2.2595': attribute type 10 has an invalid length. [ 1035.396426][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 1036.284348][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1036.292339][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1036.299682][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1036.307109][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1036.314338][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1036.321551][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1036.328654][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1036.335839][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1036.342998][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1036.350146][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1036.357520][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1036.364840][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1036.372180][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1036.379468][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1036.386797][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1036.394152][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1036.401913][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1036.409208][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1036.416597][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1036.423902][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1036.431742][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1036.439113][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1036.446518][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1036.453926][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1036.461748][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1036.469260][T15139] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1036.663797][T15147] 9pnet_fd: Insufficient options for proto=fd [ 1037.000997][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1037.008895][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1037.016332][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1037.023710][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1037.030822][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1037.038046][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1037.045226][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1037.052433][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1037.059583][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1037.066753][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1037.074631][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1037.082041][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1037.089386][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1037.096819][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1037.104177][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1037.111543][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1037.119274][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1037.126651][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1037.134016][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1037.141392][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1037.149175][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1037.156626][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1037.164051][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1037.171487][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1037.179190][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1037.186826][T15157] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1040.327058][T15212] 9pnet_fd: Insufficient options for proto=fd [ 1044.569050][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1044.579440][T15292] fuse: Unknown parameter 'åôK—ðX;3„®¤ uè"Í#v”~ó' [ 1045.596456][T15308] loop6: detected capacity change from 0 to 1024 [ 1045.871462][T15308] EXT4-fs: Ignoring removed bh option [ 1046.001742][T15308] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1046.272632][T15327] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1046.704322][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 1048.514145][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1048.521891][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1048.529183][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1048.536561][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1048.543716][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1048.550888][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1048.557989][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1048.565142][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1048.572305][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1048.579451][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1048.586759][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1048.594146][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1048.601516][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1048.608853][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1048.616273][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1048.623700][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1048.631499][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1048.638828][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1048.646177][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1048.653525][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1048.661252][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1048.668670][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1048.676121][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1048.683563][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1048.691216][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1048.698774][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1051.509689][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1051.517469][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1051.524842][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1051.532173][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1051.539260][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1051.546428][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1051.553600][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1051.560750][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1051.567866][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1051.575017][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1051.582242][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1051.589532][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1051.596890][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1051.604207][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1051.611693][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1051.618986][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1051.626703][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1051.634090][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1051.641446][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1051.648728][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1051.656423][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1051.663838][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1051.671259][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1051.678634][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1051.686196][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1051.693816][T15391] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1054.458085][T15444] loop6: detected capacity change from 0 to 512 [ 1054.631836][T15444] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.2683: couldn't read orphan inode 26 (err -116) [ 1055.332177][T15444] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1055.353988][T15444] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.205931][ T7147] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1056.215877][T11697] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1056.228722][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 1059.391822][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.398669][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1063.675727][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1063.683524][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1063.690905][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1063.698429][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1063.705595][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1063.712842][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1063.720013][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1063.727100][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1063.734229][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1063.741383][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1063.748540][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1063.755847][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1063.763157][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1063.770463][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1063.777786][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1063.785085][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1063.792800][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1063.800334][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1063.807619][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1063.814966][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1063.822637][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1063.830082][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1063.837438][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1063.844839][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1063.852358][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1063.859912][T15533] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1064.005375][ T126] libceph: connect (1)[c::]:6789 error -22 [ 1064.026512][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 1064.313225][ T126] libceph: connect (1)[c::]:6789 error -22 [ 1064.319201][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 1065.265670][ T126] libceph: connect (1)[c::]:6789 error -22 [ 1065.275996][T15540] ceph: No mds server is up or the cluster is laggy [ 1065.305069][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 1066.744359][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1066.851709][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1068.749764][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1068.792303][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1068.946871][T15598] loop2: detected capacity change from 0 to 512 [ 1068.987485][T15598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1068.997332][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1069.046490][T15598] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1069.076270][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1069.104984][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1069.140861][T15598] EXT4-fs (loop2): 1 truncate cleaned up [ 1069.146553][T15598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1069.169558][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1070.613660][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1071.334679][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1071.344843][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1071.370172][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1071.419619][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1071.446119][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1071.456209][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1071.480089][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1071.498946][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1071.526862][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1071.547106][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1071.574534][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1071.617165][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1071.637809][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1071.679541][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1071.703606][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1071.716248][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1071.746012][T15581] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1072.894185][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 1080.150151][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1080.158199][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1080.165558][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1080.172903][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1080.180328][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1080.187476][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1080.194650][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1080.201816][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1080.209020][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1080.216149][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1080.223399][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1080.230831][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1080.238150][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1080.245516][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1080.252915][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1080.260427][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1080.268167][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1080.275528][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1080.283117][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1080.290456][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1080.298140][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1080.305604][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1080.313086][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1080.320520][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1080.328049][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1080.335604][T15673] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1081.673874][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2755'. [ 1081.922416][T15701] loop6: detected capacity change from 0 to 32768 [ 1082.348315][T15701] XFS (loop6): Mounting V5 Filesystem [ 1082.751324][T15701] XFS (loop6): Ending clean mount [ 1083.388539][ T5610] XFS (loop6): Unmounting Filesystem [ 1085.297509][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1085.305502][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1085.312893][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1085.320250][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1085.327347][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1085.334565][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1085.341706][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1085.348848][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1085.355946][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1085.363116][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1085.370303][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1085.377572][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1085.384922][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1085.392364][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1085.399675][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1085.407501][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1085.415202][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1085.422506][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1085.429827][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1085.437086][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1085.444753][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1085.452154][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1085.459535][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1085.466881][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1085.474396][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1085.481899][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1089.299810][T15778] FAULT_INJECTION: forcing a failure. [ 1089.299810][T15778] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.313244][T15778] CPU: 0 PID: 15778 Comm: syz.2.2766 Not tainted syzkaller #0 [ 1089.320708][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1089.330751][T15778] Call Trace: [ 1089.334015][T15778] [ 1089.336927][T15778] dump_stack_lvl+0x188/0x24e [ 1089.341591][T15778] ? show_regs_print_info+0x12/0x12 [ 1089.346769][T15778] ? load_image+0x410/0x410 [ 1089.351264][T15778] ? __might_sleep+0xd0/0xd0 [ 1089.355840][T15778] ? __lock_acquire+0x7c40/0x7c40 [ 1089.360856][T15778] should_fail_ex+0x390/0x4c0 [ 1089.365535][T15778] should_failslab+0x5/0x20 [ 1089.370026][T15778] slab_pre_alloc_hook+0x59/0x300 [ 1089.375045][T15778] kmem_cache_alloc+0x56/0x2f0 [ 1089.379794][T15778] ? configfs_new_dirent+0x58/0x350 [ 1089.384989][T15778] configfs_new_dirent+0x58/0x350 [ 1089.390018][T15778] configfs_make_dirent+0x31/0x160 [ 1089.395163][T15778] configfs_create_file+0xdf/0x130 [ 1089.400266][T15778] configfs_attach_item+0x631/0x980 [ 1089.405463][T15778] configfs_attach_group+0x2a/0x360 [ 1089.410652][T15778] ? do_raw_spin_unlock+0x11d/0x230 [ 1089.415846][T15778] configfs_mkdir+0x72a/0x9e0 [ 1089.420522][T15778] vfs_mkdir+0x386/0x570 [ 1089.424761][T15778] do_mkdirat+0x1d8/0x440 [ 1089.429077][T15778] ? vfs_mkdir+0x570/0x570 [ 1089.433482][T15778] __x64_sys_mkdirat+0x85/0x90 [ 1089.438232][T15778] do_syscall_64+0x4c/0xa0 [ 1089.442640][T15778] ? clear_bhb_loop+0x60/0xb0 [ 1089.447303][T15778] ? clear_bhb_loop+0x60/0xb0 [ 1089.451965][T15778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1089.457848][T15778] RIP: 0033:0x7f02d3f9e159 [ 1089.462246][T15778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.481844][T15778] RSP: 002b:00007f02d4ea3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1089.490252][T15778] RAX: ffffffffffffffda RBX: 00007f02d4225fa0 RCX: 00007f02d3f9e159 [ 1089.498226][T15778] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 1089.506196][T15778] RBP: 00007f02d403506b R08: 0000000000000000 R09: 0000000000000000 [ 1089.514157][T15778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.522114][T15778] R13: 00007f02d4226038 R14: 00007f02d4225fa0 R15: 00007fffad39dca8 [ 1089.530093][T15778] [ 1090.582877][T11698] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1090.583028][ T7160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1091.529552][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1091.537331][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1091.544973][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1091.552372][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1091.559581][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1091.566872][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1091.574094][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1091.581332][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1091.588505][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1091.595626][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1091.602886][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1091.610261][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1091.617671][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1091.625167][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1091.632886][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1091.640395][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1091.648300][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1091.655682][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1091.663108][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1091.670540][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1091.678443][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1091.685933][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1091.693445][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1091.700943][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1091.708580][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1091.716142][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1096.271851][T15837] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1096.282950][T15837] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1096.976782][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1096.985067][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1096.992586][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1097.000072][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1097.007283][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1097.014620][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1097.021935][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1097.029199][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1097.036421][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1097.043707][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1097.051067][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1097.058653][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1097.066035][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1097.073525][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1097.081142][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1097.088598][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1097.096612][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1097.104075][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1097.111579][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1097.119069][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1097.127264][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1097.134834][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1097.142377][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1097.150155][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1097.157960][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1097.165620][T15852] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1099.246311][T15877] overlayfs: failed to clone lowerpath [ 1099.981399][T15869] loop6: detected capacity change from 0 to 512 [ 1100.109024][T15869] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 1100.133269][T15869] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2798: inode #15: comm syz.6.2798: iget: illegal inode # [ 1100.401004][T15869] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.2798: couldn't read orphan inode 15 (err -117) [ 1100.836059][T15869] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1100.996747][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 1101.294743][T15902] loop6: detected capacity change from 0 to 512 [ 1101.504541][T15902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1101.582938][T15902] System zones: 1-12 [ 1101.624510][T15902] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.2805: missing EA_INODE flag [ 1101.664676][T15902] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2805: error while reading EA inode 12 err=-117 [ 1101.737781][T15902] EXT4-fs (loop6): 1 orphan inode deleted [ 1101.789111][T15902] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1104.355307][T15932] loop2: detected capacity change from 0 to 512 [ 1105.675553][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 1107.278075][T15951] Cannot find add_set index 2 as target [ 1107.407393][ T4260] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 1107.594429][T15960] trusted_key: encrypted_key: insufficient parameters specified [ 1108.182658][T15964] 9pnet_fd: Insufficient options for proto=fd [ 1109.367681][ T4260] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1109.387299][ T4260] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1109.394907][ T4260] usb 7-1: can't read configurations, error -71 [ 1109.480268][T15979] netlink: 'syz.2.2819': attribute type 1 has an invalid length. [ 1109.507489][T15979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1109.644536][T15982] device macvlan2 entered promiscuous mode [ 1109.717185][T15986] kAFS: unparsable volume name [ 1109.883556][T15982] device bond4 entered promiscuous mode [ 1109.982561][T15982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1110.260740][T15982] team0: Port device macvlan2 added [ 1110.300419][T15985] bond4: (slave ip6gretap1): making interface the new active one [ 1110.408458][T15985] device ip6gretap1 entered promiscuous mode [ 1110.450382][T15985] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1110.488538][T11690] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 1110.534447][T11690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 1111.746268][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1111.754350][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1111.761815][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1111.769256][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1111.776442][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1111.783703][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1111.791536][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1111.798818][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1111.806003][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1111.813279][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1111.820643][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1111.828017][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1111.835345][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1111.842718][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1111.850074][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1111.857464][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1111.865128][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1111.872597][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1111.879996][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1111.887410][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1111.895206][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1111.902756][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1111.910232][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1111.917710][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1111.925358][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1111.932990][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1116.312548][T16038] ip_tables: iptables: counters copy to user failed while replacing table [ 1116.619298][T16045] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2846'. [ 1121.174119][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.180494][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.673835][T16108] file system registered [ 1123.825962][T16108] unloading [ 1124.452484][T11699] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1125.798387][T16128] 9pnet_fd: Insufficient options for proto=fd [ 1128.625806][T16182] loop6: detected capacity change from 0 to 128 [ 1128.708013][T16177] 9pnet: p9_errstr2errno: server reported unknown error [ 1130.205670][T16197] loop2: detected capacity change from 0 to 512 [ 1130.218893][T16197] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1131.777374][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1131.785102][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1131.792784][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1131.800161][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1131.807379][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1131.814477][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1131.821663][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1131.828843][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1131.836018][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1131.843188][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1131.850414][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1131.857770][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1131.865054][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1131.872403][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1131.879741][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1131.887133][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1131.894930][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1131.902296][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1131.909691][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1131.917062][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1131.924782][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1131.932249][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1131.939753][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1131.947200][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1131.954783][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1131.962365][T16214] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1137.543040][T16277] binder: 16276:16277 ioctl 4018620d 0 returned -22 [ 1138.365828][T16277] binder: 16276:16277 ioctl c0306201 2000000004c0 returned -22 [ 1139.033265][T16299] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 1140.080350][T16308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2927'. [ 1153.120070][T11687] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1157.226031][T11682] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1158.535786][T16524] ip_tables: iptables: counters copy to user failed while replacing table [ 1160.446906][T16542] tc action pedit offset 8 out of bounds [ 1161.716405][T16549] overlayfs: failed to clone upperpath [ 1162.243729][T16549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2999'. [ 1168.142425][T16620] sctp: [Deprecated]: syz.1.3018 (pid 16620) Use of int in max_burst socket option. [ 1168.142425][T16620] Use struct sctp_assoc_value instead [ 1172.069233][T16653] loop2: detected capacity change from 0 to 1764 [ 1172.116000][T16653] CIFS mount error: No usable UNC path provided in device string! [ 1172.116000][T16653] [ 1172.126517][T16653] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1175.847036][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3039'. [ 1176.952666][T16705] loop2: detected capacity change from 0 to 2048 [ 1177.061247][T16705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1182.122666][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.132886][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.190545][T16747] loop6: detected capacity change from 0 to 8 [ 1184.671075][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3059'. [ 1185.873817][T11697] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1189.699240][ T7143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1201.246625][T16918] misc userio: Invalid payload size [ 1201.253984][T16918] misc userio: The device must be registered before sending interrupts [ 1202.201600][T16919] Cannot find add_set index 2 as target [ 1207.197678][T16962] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1208.434853][T16963] Cannot find add_set index 2 as target [ 1210.686352][T16984] loop2: detected capacity change from 0 to 1024 [ 1210.693683][T16984] EXT4-fs: Ignoring removed bh option [ 1210.765071][T16984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1212.335187][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 1212.426368][T17016] loop6: detected capacity change from 0 to 256 [ 1213.433696][T17016] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1217.279852][T17050] netlink: 'syz.6.3139': attribute type 10 has an invalid length. [ 1217.380695][T17050] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1219.358964][T17083] hub 8-0:1.0: USB hub found [ 1219.367604][T17083] hub 8-0:1.0: 1 port detected [ 1219.682984][T11690] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1220.133913][ T126] libceph: connect (1)[c::]:6789 error -101 [ 1220.141225][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 1220.426934][ T126] libceph: connect (1)[c::]:6789 error -101 [ 1220.439771][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 1220.778061][T17087] ceph: No mds server is up or the cluster is laggy [ 1223.533696][ T7134] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1231.592147][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1231.606038][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1231.614468][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1231.623203][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1231.631512][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1231.639837][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1231.648299][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1231.656491][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1231.664690][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1231.673158][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1231.682042][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1231.691100][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1231.700180][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1231.709038][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1231.718067][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1231.734444][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1231.749097][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1231.758462][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1231.767435][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1231.776265][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1231.788988][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1231.797985][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1231.806828][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1231.815810][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1231.826124][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1231.836442][T17233] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1232.846094][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 1232.857181][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 1233.467524][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 1233.477175][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 1233.487042][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 1233.496475][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 1233.628468][T17249] netlink: 'syz.1.3195': attribute type 10 has an invalid length. [ 1233.661184][T17249] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1237.664533][T13805] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1238.902741][T13805] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1238.919655][T13805] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x82 is Bulk; changing to Interrupt [ 1238.930143][T13805] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x3 is Bulk; changing to Interrupt [ 1238.940257][T13805] usb 7-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.953655][T13805] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1239.074879][T13805] usb 7-1: string descriptor 0 read error: -22 [ 1239.081193][T13805] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1239.101822][T13805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.127070][T17300] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1239.146397][T17300] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1239.185304][T13805] usb 7-1: bad CDC descriptors [ 1239.406158][T13805] usb 7-1: USB disconnect, device number 6 [ 1242.272040][T17360] ubi0: attaching mtd0 [ 1242.313447][T17360] ubi0: scanning is finished [ 1242.474884][T17360] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1243.242792][T17360] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1243.328102][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.334652][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.480190][T17463] ip6t_REJECT: ECHOREPLY is not supported [ 1253.549947][T11690] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1254.817166][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1255.669876][T17519] fuse: Bad value for 'fd' [ 1259.526994][T17558] CacheFiles: Failed to register: -95 [ 1260.215498][T17565] loop2: detected capacity change from 0 to 2048 [ 1260.410207][T17565] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1260.418842][T17565] ext4 filesystem being mounted at /629/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1261.244551][T17577] fs-verity: sha512 using implementation "sha512-avx2" [ 1262.329328][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 1272.469543][T17663] loop2: detected capacity change from 0 to 164 [ 1274.110626][T17685] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1274.937137][T17678] loop2: detected capacity change from 0 to 1024 [ 1275.110461][T17678] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1276.820010][T17718] loop6: detected capacity change from 0 to 164 [ 1277.933748][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 1280.433277][T17753] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1282.323485][T17770] 8021q: VLANs not supported on vxcan1 [ 1282.512068][T17771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1282.738081][T17781] IPVS: length: 103 != 8 [ 1284.337125][T17794] "syz.5.3361" (17794) uses obsolete ecb(arc4) skcipher [ 1286.782825][T11690] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1289.244210][ T5223] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1290.476904][T17848] loop2: detected capacity change from 0 to 16 [ 1290.496052][T17848] erofs: (device loop2): mounted with root inode @ nid 36. [ 1292.598838][T17861] No source specified [ 1293.189876][T17865] loop6: detected capacity change from 0 to 1024 [ 1293.422487][T17865] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1293.655198][T17881] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1294.269712][T17889] Cannot find del_set index 4 as target [ 1294.290051][ T5610] EXT4-fs (loop6): unmounting filesystem. [ 1294.358490][T17890] loop2: detected capacity change from 0 to 512 [ 1299.280689][T17938] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1300.466006][T17951] CacheFiles: Failed to register: -95 [ 1300.673321][T17954] netlink: 'syz.5.3406': attribute type 2 has an invalid length. [ 1302.832395][T17977] loop6: detected capacity change from 0 to 2048 [ 1302.947404][T17977] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 1303.491162][T17986] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1304.049290][T17991] loop2: detected capacity change from 0 to 1024 [ 1304.089674][T17991] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 1304.368732][T17991] EXT4-fs (loop2): barriers disabled [ 1304.484736][T17991] JBD2: no valid journal superblock found [ 1304.634862][T17995] nvmet: adding nsid 1 to subsystem testsubsys [ 1304.650345][T17991] EXT4-fs (loop2): error loading journal [ 1304.700974][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.709111][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.681099][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'. [ 1310.569816][T18049] nvmet: disable ns before setting buffered_io value. [ 1312.518097][T18063] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1312.698046][T18063] netdevsim netdevsim120 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1312.755677][T18083] 9pnet_fd: Insufficient options for proto=fd [ 1313.110583][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1313.118404][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1313.125799][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1313.133209][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1313.140385][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1313.147569][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1313.154770][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1313.161980][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1313.169161][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1313.176329][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1313.183596][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1313.190960][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1313.198401][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1313.205828][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1313.213175][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1313.220503][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1313.228369][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1313.235780][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1313.243181][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1313.250500][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1313.258351][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1313.265791][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1313.273234][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1313.280657][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1313.288277][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1313.295856][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1317.190143][T18132] loop6: detected capacity change from 0 to 1024 [ 1317.264847][T18132] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 1317.419913][T18132] EXT4-fs (loop6): barriers disabled [ 1317.460625][T18132] JBD2: no valid journal superblock found [ 1317.474719][T18132] EXT4-fs (loop6): error loading journal [ 1319.242491][T18154] Cannot find del_set index 4 as target [ 1320.413873][T18168] loop6: detected capacity change from 0 to 2048 [ 1320.428741][T18168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1320.678072][T18172] loop2: detected capacity change from 0 to 4096 [ 1321.323643][T11694] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1321.328439][ T7143] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1321.413780][T18172] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1321.904885][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 1322.385766][T18190] Config c/1 of g1 needs at least one function. [ 1322.393106][T18190] udc dummy_udc.0: failed to start g1: -22 [ 1322.399582][T18190] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1322.418821][T18190] UDC core: g1: couldn't find an available UDC or it's busy [ 1322.440690][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 1322.440705][ T27] audit: type=1800 audit(2000524484.854:183): pid=18190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3472" name="id" dev="configfs" ino=75603 res=0 errno=0 [ 1325.122524][T18203] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5282] was attempted by ""[18203] [ 1325.505967][T18199] loop2: detected capacity change from 0 to 1024 [ 1325.737520][T18209] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 1328.265777][T18229] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[18231] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[18229] [ 1329.378347][T18243] xt_hashlimit: max too large, truncated to 1048576 [ 1336.234575][T18314] overlayfs: failed to clone upperpath [ 1337.201388][T18326] futex_wake_op: syz.3.3510 tries to shift op by 144; fix this program [ 1341.856534][T18353] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3523'. [ 1345.255951][T18392] xt_CT: No such helper "snmp" [ 1349.165225][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1349.173072][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 1349.180716][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1349.188060][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 1349.195228][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 1349.202422][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 1349.209631][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 1349.216911][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 1349.224046][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 1349.231236][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 1349.238437][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1349.245751][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 1349.253507][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 1349.260947][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 1349.269953][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 1349.277441][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 1349.285102][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 1349.292506][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 1349.299891][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 1349.307325][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 1349.315120][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 1349.322738][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 1349.330227][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 1349.337670][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 1349.345198][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 1349.352795][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 1352.939237][T18478] overlayfs: failed to clone upperpath [ 1353.306208][T17211] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1353.319255][T17514] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1354.905356][T18503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3556'. [ 1359.631290][T18558] kAFS: No cell specified [ 1359.728286][T18560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.735823][T18560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.744074][T18560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.751534][T18560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.822274][T18589] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3583'. [ 1366.107601][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.117125][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.278806][T18639] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3596'. [ 1369.437899][ T7147] rpcbind: server 127.0.0.1 not responding, timed out [ 1369.593589][T18653] fuse: Bad value for 'fd' [ 1372.542959][T18691] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3613'. [ 1374.007135][T18703] Cannot find add_set index 2 as target [ 1383.368856][T18801] tipc: Enabled bearer , priority 0 [ 1383.383176][T18801] tipc: Resetting bearer [ 1383.506421][T18801] tipc: Disabling bearer [ 1384.575747][T18822] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1385.356075][T11690] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1386.578734][T11687] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1387.871612][T18861] __vm_enough_memory: pid: 18861, comm: syz.3.3660, no enough memory for the allocation [ 1389.955590][T18888] ip_tables: iptables: counters copy to user failed while replacing table [ 1393.709686][T11698] rpcbind: RPC call returned error 22 [ 1397.316478][T18954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1397.325589][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1397.335240][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1397.344111][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1397.511673][T18961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3692'. [ 1397.658896][T18963] bridge0: port 3(wlan1) entered blocking state [ 1397.675700][T18963] bridge0: port 3(wlan1) entered disabled state [ 1397.738823][T18964] __vm_enough_memory: pid: 18964, comm: syz.2.3675, no enough memory for the allocation [ 1397.785411][T18963] device wlan1 entered promiscuous mode [ 1398.265282][T18961] bridge0: port 3(wlan1) entered disabled state [ 1398.501381][T18961] device wlan1 left promiscuous mode [ 1398.516817][T18961] bridge0: port 3(wlan1) entered disabled state [ 1402.320219][T11697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1411.178764][T19086] syz.3.3726 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1415.538766][T11690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1417.527859][T19176] overlayfs: missing 'lowerdir' [ 1419.847491][T11697] rpcbind: server 127.0.0.1 not responding, timed out [ 1419.986438][T19201] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1420.068858][T19201] syzkaller0: renamed from gre1 [ 1420.570869][ T7140] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1424.346406][ T7160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1426.444207][ T7160] rpcbind: RPC call returned error 22 [ 1428.078981][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.085417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.685524][T19312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1433.182189][ T5221] rpcbind: RPC call returned error 22 [ 1436.385598][T19349] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3792'. [ 1438.713159][T11682] rpcbind: RPC call returned error 22 [ 1553.346193][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1553.353191][ C0] (detected by 0, t=10502 jiffies, g=86357, q=34 ncpus=2) [ 1553.360406][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295092518-4295082016), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1553.373802][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g86357 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1553.385015][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1553.394992][ C0] rcu: RCU grace-period kthread stack dump: [ 1553.400885][ C0] task:rcu_preempt state:R running task stack:27920 pid:16 ppid:2 flags:0x00004000 [ 1553.411683][ C0] Call Trace: [ 1553.415052][ C0] [ 1553.418077][ C0] __schedule+0x107f/0x4030 [ 1553.422754][ C0] ? mark_lock+0x94/0x320 [ 1553.427285][ C0] ? release_firmware_map_entry+0x187/0x187 [ 1553.433192][ C0] ? lock_chain_count+0x20/0x20 [ 1553.438088][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 1553.443389][ C0] preempt_schedule_irq+0xbb/0x160 [ 1553.448517][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 1553.454265][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1553.460185][ C0] irqentry_exit+0x63/0x70 [ 1553.464644][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1553.470689][ C0] RIP: 0010:__free_object+0x96e/0xa60 [ 1553.476158][ C0] Code: 00 00 00 00 9c 8f 84 24 a0 00 00 00 f7 84 24 a0 00 00 00 00 02 00 00 42 c6 44 28 08 f8 75 7b f7 44 24 20 00 02 00 00 74 01 fb <48> 8b 44 24 30 48 b9 f8 f8 f8 f8 f8 f8 f8 f8 4a 89 4c 28 10 4a 89 [ 1553.495834][ C0] RSP: 0018:ffffc90000157980 EFLAGS: 00000206 [ 1553.501919][ C0] RAX: 1ffff9200002af3c RBX: ffff8880278a19a8 RCX: bac4ec53f522b800 [ 1553.509904][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 1553.517885][ C0] RBP: ffffc90000157b58 R08: ffffc90000157adf R09: ffffc90000157a60 [ 1553.525867][ C0] R10: dffffc0000000000 R11: fffff5200002af5c R12: ffff8880b8f37670 [ 1553.533850][ C0] R13: dffffc0000000000 R14: ffff8880b8f37668 R15: ffff8880278a19a0 [ 1553.541871][ C0] ? alloc_object+0x640/0x640 [ 1553.546564][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1553.552565][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1553.557609][ C0] ? lock_chain_count+0x20/0x20 [ 1553.562491][ C0] ? release_firmware_map_entry+0x187/0x187 [ 1553.568405][ C0] ? timer_delete_sync+0x20/0x20 [ 1553.573434][ C0] debug_object_free+0x2c6/0x470 [ 1553.578390][ C0] schedule_timeout+0x19d/0x2d0 [ 1553.583260][ C0] ? console_conditional_schedule+0x40/0x40 [ 1553.589171][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1553.595180][ C0] ? update_process_times+0x1b0/0x1b0 [ 1553.600575][ C0] ? prepare_to_swait_event+0x340/0x360 [ 1553.606143][ C0] rcu_gp_fqs_loop+0x303/0x1350 [ 1553.611020][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1553.615892][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1553.621889][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1553.626930][ C0] ? rcu_gp_init+0x14f0/0x14f0 [ 1553.631700][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 1553.636566][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1553.641783][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1553.646996][ C0] rcu_gp_kthread+0x99/0x3b0 [ 1553.651600][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1553.656725][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1553.662639][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1553.667687][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 1553.672735][ C0] kthread+0x29d/0x330 [ 1553.676820][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1553.681943][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1553.686546][ C0] ret_from_fork+0x1f/0x30 [ 1553.691066][ C0] [ 1553.694093][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1553.700421][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1553.707450][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1553.717682][ C0] RIP: 0010:default_idle+0xb/0x10 [ 1553.722726][ C0] Code: 48 89 df e8 37 f3 96 f7 e9 44 ff ff ff e8 7d 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 23 4a 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1553.742344][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 1553.748426][ C0] RAX: a5592ede57895d00 RBX: ffffffff8a3c8957 RCX: a5592ede57895d00 [ 1553.756436][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 1553.764423][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 1553.772404][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: 0000000000000000 [ 1553.780390][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 1553.788373][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1553.797319][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1553.803919][ C0] CR2: 0000200000000040 CR3: 000000002813a000 CR4: 00000000003506f0 [ 1553.811905][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1553.820009][ C0] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1553.828015][ C0] Call Trace: [ 1553.831302][ C0] [ 1553.834241][ C0] default_idle_call+0x84/0xc0 [ 1553.839042][ C0] do_idle+0x250/0x680 [ 1553.843217][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1553.848444][ C0] ? do_idle+0x6/0x680 [ 1553.852532][ C0] cpu_startup_entry+0x3f/0x60 [ 1553.857322][ C0] rest_init+0x2dc/0x300 [ 1553.861583][ C0] ? time_init+0x33/0x33 [ 1553.865939][ C0] arch_call_rest_init+0xa/0xa [ 1553.870786][ C0] start_kernel+0x493/0x53c [ 1553.875392][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 1553.881313][ C0]