last executing test programs: 8m59.701767573s ago: executing program 32 (id=81): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 8m19.304201337s ago: executing program 33 (id=280): socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x80882, 0x10) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6m43.370110272s ago: executing program 3 (id=844): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 6m42.858126805s ago: executing program 3 (id=847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}}, 0x0) 6m42.139285373s ago: executing program 3 (id=851): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 6m42.006010626s ago: executing program 3 (id=852): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4c9, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000100)='?', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 6m41.226396365s ago: executing program 3 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$peekuser(0x3, r0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) syz_emit_vhci(0x0, 0x0) 6m40.589627761s ago: executing program 3 (id=863): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) setns(0xc9, 0x0) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 6m40.299930798s ago: executing program 34 (id=863): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) setns(0xc9, 0x0) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 6m7.995264111s ago: executing program 5 (id=1036): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote, @local, @local}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x1234, 0x4e20, 0x100, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x11223344}]}}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f00000002c0)={0x0, 0x0}, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x1234, 0x4e20, r2, r3, 0x0, 0x0, 0xd, 0x10, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x11223345, 0x11223344}, @mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x1122334455667788, [0x8877665544332211]}]}}}}}}}, 0x0) 6m7.603687851s ago: executing program 5 (id=1039): r0 = openat(0xffffffffffffff9c, 0x0, 0x26d01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close(0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) accept4(r3, 0x0, 0x0, 0x80000) 6m6.545624198s ago: executing program 5 (id=1048): r0 = socket$inet6_udplite(0xa, 0x2, 0x11) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r3, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0x4e, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "57a977ad5b0000000000000000005f9031d1aa0dd63c481d0cd75d4adab5da6e2561972c385375ef7a1e24886e03f4f3585367c1c0c163424290afb25287673d5d5b50c916c77630f733a0c800e34a0e77d7c25bb4181d748073"}, 0x65) tee(r4, r3, 0x9, 0x8) 6m5.042948165s ago: executing program 5 (id=1054): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4c9, &(0x7f00000017c0)="$eJzs3ctrXNcZAPBvZixZktX60VJsF2qDC+4Da/SgWGq76artwlBq6KYFV5HGiqORRmhGjiW8kJOdF1mEhARCFtnnL8gmXsUEQtbJPmQRHBJHgSQQmHDvzNjSSKMMjqyxdX8/uNa5j5nvHA/f0bln7tUNILPOJv/kIoYj4sOIONpY3XrA2caPjfs3Z5IlF/X65S9y6XHJeuvQ1uuORMR6RAxExL//HvFMbnvc6ura/HS5XFpurhdrC0vF6urahWsL03OludLi2OTFqanJ0YnxqT1r6+2Xnrt96Z1/9r/9zYv37r783rtJtYab+za3Yy81mt4XxzdtOxQRf30cwXqg0GzPYK8rwiNJPr9fRMS5NP+PRiH9NIEsqNfr9e/rhzvtXq8DB1Y+HQPn8iMR0Sjn8yMjjTH8L2MoX65Ua3+8WllZnG2MlY9FX/7qtXJptHmucCz6csn6WFp+uD7etj4RkY6BXykMpusjM5Xy7P52dUCbI235/3Whkf9ARjjlh+yS/5Bd8h+yS/5Ddj1a/q/n97wiwL7z+x+yS/5Ddsl/yC75D9kl/yG75D9k0r8uXUqWeuv+99nrqyvzlesXZkvV+ZGFlZmRmcry0shcpTKX3rOz8GPvV65Ulsb+FCs3irVStVasrq5dWaisLNaupPf1Xyn17UurgG4cP3Pn41xErP95MF0S/c19chUOtno9F72+BxnojUKvOyCgZ0z9QXY5xwfa/0Rv+7hgoNMLlx7OFwJPF/fwQXadP+X7P8gq8/+QXeb/IbuM8YEdHtG3xW7z/8DTyfw/ZNdwh+d//WzTs7tGI+LnEfFRoe9w61lfwEGQ/yzXHP+fP/rb4fa9/blv068I+iPi+Tcuv3ZjulZbHku2f/lge+315vbxTS/seMIA9EorT1t5DABk18b9mzOtZT/jfv63xkUI2+Mfas5NDqTfUQ5t5LZcq5Dbo2sX1m9FxMmd4ueazztvnMgMbRS2xT/R/JlrvEVa30Ppc9P3J/6pTfF/syn+6Z/8vwLZcCfpf0Z3yr98mtPxIP+29j/De3TtROf+L/+g/yt06P/OdBnj2Tdf+LRj/FsRp3eM34o3kMZqj5/U7XyX8e/97z+/6rSv/lbjfXaK35KUirWFpWJ1de1C+nfk5kqLY5MXp6YmRyfGp4rpHHWxNVO93V9OfnB3t/YPdYi/W/uTbb/vsv3f/fr9/57dJf7vzu38+Z/YJf5gRPyhy/hfjX/y/077kvizHdqf3yV+sm2iy/jVV/9xuMtDAYB9UF1dm58ul0vLCgq9KfTHE1GN3hVuPRnVaCv0umcCHrfqanJqniR9r2sCAAAAAAAAAAAAdGs/LifudRsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6CHwIAAP//B5fUiw==") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000100)='?', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 6m4.343007642s ago: executing program 5 (id=1058): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6m3.693459018s ago: executing program 5 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x801, 0x0) shutdown(r2, 0x2) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008854}, 0x8000) 6m3.532728202s ago: executing program 35 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x801, 0x0) shutdown(r2, 0x2) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008854}, 0x8000) 5m51.670483477s ago: executing program 0 (id=1114): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x60000000000, 0x0) 5m49.112099161s ago: executing program 0 (id=1123): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000200)=ANY=[], 0x3, 0x274, &(0x7f00000005c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x181000) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x5, 0x4800003e, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 5m48.632400603s ago: executing program 0 (id=1126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 5m47.865698752s ago: executing program 0 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 5m46.72951156s ago: executing program 0 (id=1132): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 5m43.729135455s ago: executing program 0 (id=1143): socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000), 0x800) pipe2(&(0x7f0000000240), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) pipe2$9p(&(0x7f00000000c0), 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 5m43.435993312s ago: executing program 36 (id=1143): socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000), 0x800) pipe2(&(0x7f0000000240), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) pipe2$9p(&(0x7f00000000c0), 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 5m16.58488475s ago: executing program 8 (id=1252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 5m15.405107129s ago: executing program 8 (id=1256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) write(r3, &(0x7f0000000400)="00112233445566778899aabb0800450000280001000040067cc27f0000017f000001005000500000000000000000500220005b860000", 0x36) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth0_to_bridge\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000600)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) write(r5, &(0x7f0000000700)="00112233445566778899aabb0800450000280001000040067cc27f0000017f000001005000500000000000000000500220005b860000", 0x36) 5m15.120981096s ago: executing program 8 (id=1260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) rt_sigqueueinfo(0x0, 0x21, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) io_setup(0x205, &(0x7f0000002500)=0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_getevents(r1, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}) 5m13.980305105s ago: executing program 8 (id=1264): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfb, 0x6a0, &(0x7f0000000d80)="$eJzs3c1vHGcdB/DvrDd2Ni0hSZM2oEq1GgkQEYkTKy3mQkAI5VBVVTlwthKnseKkxXGRWyHi8HrtoX9AOeSCOCFx4hKpcOBCb72Bj0hIXMqBcGHRzM7aa+96s24Tr61+PtHs8zrPPPObl32xognwuXXlbJoPUuTK2VdWy/L6/dml9fuztzr5V5tJppKsJWW2kaT4T7vd/jC5nBQbwxTb0j7vL869/vEn6//olJr1UvVvDFtvm7rf2rbqtW7ddJKJOv0Mtox39TOPV2zM/HKSM3UKY3coSXuLH/3l6Y2WHq1Bax/ekzkCT1bRed/scyw5Ul/o5eeA7jtvY29nN7qpEftt/wQBAAAAB031HbjZV72l5osP8zCrxdE9nBYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcaGubz/8v6qXRzU+n6D7/f7KuS53fX17YXfcHT2oeAAAAAAAAALCHXniYh1nN0W65XVR/83+xKpysXp/K27mThSznXFYzn5WsZDkXkhzrGWhydX5lZapbGrbmxUFrLl98xES7Q7cew04DAAAAAAAAwIHz90d1+FmubP79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9oMimegkKe71VB9Lo5nkcJLJsmIt+aibP8gejHsCAAAAsAemkodZzdFuuV3kZJJnq98ADuft3M5KFrOSpSzkWvW7QOdbf2P9/uzS+v3ZW+XSP+53/rWraVQjpvPbw+Atn656tHI9i1XNuVzNm1nKtTSqNUun6/l0R902r3vlnIpv114ebWbX6rTc8/fqtM/dXe3sTnb5Y8qxKiKHOhGZSGbquZXRON49MoOP0C6PzpYtZSEX0tiY7MltW5rcujNbY745ZGPY9o7Uabk/v9op5mPRicT/2h0Ludhz9j07PObJV//wux/O1Pn9s0ujmajTdvXa6j8nZnsi8dwokbixdPvmjet3zh60SPSZqSJxaqN8Jd/PD3I203kty1nMjzOflSxkOt+rcvP1wS96LvkdInV5S+m1R81ksj5DOwdrd3N6sVr3aBbzat7MtSzkperfxVzIy7mUS5nrOcKnhh/h6qpv9F/1lfYXBk7+zNfqTCvJr+t0fyjjerwnrptn/UwV7+NbajajdGKEKA24Nw7T/HKdKbfx80fdSPfU9khc6InEM8Mj8ZvqtnJn6fbN5Rvzb422uRPv1ZnyOvplMr1/biTl+XKiPFhVaWrL2VG2PbPRtjVeZdvJjbZGX9up/DHNZncri1nb8UqdrD/D9Y90sWp7bmDbbNV2uqdt0OctAPa9I18/Mtn6Z+uvrQ9av2jdaL1y+LtT35x6fjKH/nToW82Zia80ni9+nw/y083v/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKd35513b84vLS0sb8u02+27Hw1uGjHTfV7Np1x9e6b7VKgROmf6b0+VXQc0TaR9d4emJ5X50tPJXm1r/2b+226365pihz6//fP2QE1lTKGrn/PX3hehG1NmbLckYI+cX7n11vk777z7jcVb828svLFwe+7SpbmZuUsvzZ6/vri0MNN5HfcsgSdh801/3DMBAAAAAAAAAAAARvWY/8/A2qCmce8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLBdOZvmgxS5MHNupiyv359dKpdufrNnM0kjSfGTpPgwuZzOkmM9wxU7bef9xbnXP/5k/d/tjnq8qn9j2HqjWauXTCeZ6KT3Htd4V+t0qGLYLhQbe1gG7Ew3cDBu/w8AAP//D3MQ+Q==") openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x8c0, 0x2}, {0x0, 0x1}]}, 0x14, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 5m13.313117261s ago: executing program 8 (id=1268): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/157, 0x9d}], 0x1) 5m12.281914376s ago: executing program 8 (id=1273): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000680)={0x0, 0x1, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x87c}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x87c}, 0x8) 5m11.681093951s ago: executing program 37 (id=1273): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000680)={0x0, 0x1, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x87c}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x87c}, 0x8) 2m11.91342279s ago: executing program 4 (id=2042): semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000000)) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = semget(0x1, 0x4, 0x218) semop(r0, &(0x7f0000000080)=[{0x3, 0x5, 0x1800}, {0x3, 0xa73f, 0x800}], 0x2) pipe2$watch_queue(0x0, 0x80) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8000000000000001, 0xffffffffffffffff, 0x0, 0x8, 0xc) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f00000003c0)=""/196) r1 = semget$private(0x0, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) semop(r1, &(0x7f0000002540)=[{0x1, 0x0, 0x1000}], 0x1) semop(0x0, &(0x7f0000002740)=[{0x4, 0x8000, 0x1800}, {0x4, 0x81, 0x1000}], 0x2) 2m9.855907852s ago: executing program 4 (id=2045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xd, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf5, 0x0, 0x101, 0xffff, 0x8, 0x4}, {0x0, 0x2, 0x2, 0x5, 0x4, 0x81}, 0x6, 0x4, 0x8bd}}, @TCA_TBF_RATE64={0xc, 0x4, 0x75b76c06d7ed6074}, @TCA_TBF_PRATE64={0xc, 0x5, 0xde1561a657416314}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240408a0}, 0xc890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m7.385531963s ago: executing program 4 (id=2050): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='acl,cache_strategy=disabled,noacl,user_xattr\x00nouser_xattr,cache_strategy=readahead,\x00'], 0x5, 0x182, &(0x7f0000000380)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) unshare(0x40400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x1) fstatfs(r2, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) 2m5.387923842s ago: executing program 4 (id=2058): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x50, 0x0, &(0x7f0000001380)) 2m4.365260638s ago: executing program 4 (id=2060): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90c, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x3, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m2.529918973s ago: executing program 4 (id=2065): syz_open_procfs(0x0, 0x0) unshare(0x6a000200) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x41) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'full', 0x20, 0x17e, 0x20, 0x800000000104002}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000400000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r2}, 0xc) 1m46.808744095s ago: executing program 38 (id=2065): syz_open_procfs(0x0, 0x0) unshare(0x6a000200) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x41) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'full', 0x20, 0x17e, 0x20, 0x800000000104002}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000400000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r2}, 0xc) 9.769485588s ago: executing program 1 (id=2382): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 9.725362418s ago: executing program 9 (id=2383): socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x5c, 0x160, 0x1a0, 0x3e0, 0x290, 0x228, 0x25a, 0x290, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0xffffffff], [0xff000000], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xe8, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf9, 0x7, {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0xff, 0x7deb, 'netbios-ns\x00', {0x141a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) pipe2(&(0x7f0000000040), 0x800) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 9.714881049s ago: executing program 6 (id=2384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 9.557577442s ago: executing program 9 (id=2385): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a43b820a8e8c9881db660"], 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.207927021s ago: executing program 2 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) 9.137815883s ago: executing program 9 (id=2388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000080)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20048001}, 0xc851) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 7.588074262s ago: executing program 6 (id=2389): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000240)) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc0100"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 7.582185752s ago: executing program 2 (id=2399): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.883756644s ago: executing program 1 (id=2391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5.881610444s ago: executing program 9 (id=2402): socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 4.792076471s ago: executing program 6 (id=2394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 4.727561553s ago: executing program 1 (id=2395): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.517930228s ago: executing program 7 (id=2396): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x0, 0x1c8, 0xfeffffff, 0xf8, 0x298, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xc}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@broadcast, @private=0xa010102, 0xffffffff, 0xffffff00, 'batadv_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x67, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr, 0x0, 0x0, 'lo\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@broadcast, @loopback, 0xff000000, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48008}, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.41127875s ago: executing program 2 (id=2397): memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) clock_getres(0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.304223363s ago: executing program 1 (id=2398): io_setup(0xff, &(0x7f00000009c0)=0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xc}}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x0}) setuid(0xee00) 4.014157251s ago: executing program 2 (id=2400): r0 = io_uring_setup(0x5d2c, &(0x7f0000000340)={0x0, 0x4255, 0x40, 0x0, 0x2f}) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000440)={r0, 0x86d}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x40, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x420000, 0x66, 0x39}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0x8) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 3.702530278s ago: executing program 7 (id=2401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 3.700049708s ago: executing program 6 (id=2403): syz_io_uring_complete(0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000eb00000f1000000000000061020000000000009500050000000000929b569e5b468b4c53db3f7ac9bc09236ced48406ba73fa5a110a5121c8369c038dc56e6bc1875cceae7ccb46cba30367a0cfe1f5ab6abae43bec5ef0727bfa5532d5300"/111], &(0x7f0000000040)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x34, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x20000, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB='lastblock=00000000000000000216,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,session=18446744073709551360,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,uid=ignore,shortad,gid=ignore,dmode=00000000000017777777777,uid=ignore,fileset=00000000000000000000,shortad,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$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") unshare(0x2040500) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000780)={[{@barrier}, {@nodioread_nolock}, {@nobarrier}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001300010029bd7000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="00600000490400000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) 3.529674602s ago: executing program 1 (id=2404): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xa, 0x1, 0x17, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x0, 0xffff888101827518}, 0x80, 0x10, 0xffffffff, 0xa}}) 3.518828423s ago: executing program 9 (id=2405): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r2, 0x0, 0x20000005, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 3.420342085s ago: executing program 2 (id=2406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x2000, 0x0}, 0x10) 1.914715692s ago: executing program 2 (id=2407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0x40505331, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/100, 0x60) syz_usb_control_io$printer(r1, &(0x7f0000000440)={0x14, &(0x7f0000000080)={0x20, 0x22, 0x66, {0x66, 0x1, "897b5b9b0e94b714d1bc3c91304abc298a3435f81c994f81621423f902d7f4ff31ade773e5a7c06d6bd4490632e85be36a0ed9cf80819f98ea844388ab3af8c568301eac6fc4ad09fe8c98c1263c221250578901218384d08068bfd70b106bc1354b0ff8"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl(r2, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) ioctl(r2, 0x8914, &(0x7f0000000500)='can0\x00'/40) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) close_range(r0, r3, 0x2) 1.60310081s ago: executing program 7 (id=2408): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r5}, 0x8) 1.533742672s ago: executing program 6 (id=2409): getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x98, r2, 0x5, 0x70bd26, 0x80, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @broadcast, @device_a, @random="3a6b7c13e95a"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x8, 0x6, 0x1}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1, 0x7, 0x801, 0x6, 0x800100000000}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) setresgid(r0, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) semget$private(0x0, 0x6, 0x3b1) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/164) 1.469332314s ago: executing program 7 (id=2410): fsmount(0xffffffffffffffff, 0x0, 0xe2) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) 1.468530583s ago: executing program 9 (id=2411): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) 1.456460614s ago: executing program 1 (id=2412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) 377.82875ms ago: executing program 6 (id=2413): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x80108907, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) flistxattr(0xffffffffffffffff, 0x0, 0xffffffffffffffb1) 377.56079ms ago: executing program 7 (id=2414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 0s ago: executing program 7 (id=2415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) kernel console output (not intermixed with test programs): sr: link becomes ready [ 280.039733][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.350360][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079690000: rx timeout, send abort [ 280.362465][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079692400: abort rx timeout. Force session deactivation [ 280.402929][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 280.586795][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.596557][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.631997][ T8394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.858881][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079690000: abort rx timeout. Force session deactivation [ 281.524027][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 281.762736][ T8481] loop6: detected capacity change from 0 to 512 [ 281.841184][ T8481] EXT4-fs (loop6): 1 truncate cleaned up [ 281.872307][ T8481] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 282.285355][ T8492] EXT4-fs (loop6): shut down requested (1) [ 282.755230][ T5550] EXT4-fs (loop6): unmounting filesystem. [ 282.788879][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.817223][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.927679][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.976239][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.009729][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.041046][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.061993][ T8502] MPTCP: kernel_bind error, err=-99 [ 283.072738][ T8394] device veth0_vlan entered promiscuous mode [ 283.132646][ T8394] device veth1_vlan entered promiscuous mode [ 283.228424][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 283.243683][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 283.260240][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.290543][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.304606][ T8394] device veth0_macvtap entered promiscuous mode [ 283.325349][ T8394] device veth1_macvtap entered promiscuous mode [ 283.396165][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.426880][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.471016][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.494372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.528296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.564524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.584202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.601053][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 283.615670][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.763248][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.814523][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.845594][ T8394] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.894496][ T8394] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.912120][ T8394] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.944210][ T8394] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.150074][ T7461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.188195][ T7461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.218444][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.324600][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.340288][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.394788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.210174][ T8599] loop0: detected capacity change from 0 to 256 [ 289.570311][ T8613] loop6: detected capacity change from 0 to 128 [ 289.694065][ T8608] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 289.773355][ T8616] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 289.937385][ T8616] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.142825][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1127'. [ 290.314703][ T8633] bond3: (slave dummy0): Releasing active interface [ 290.375886][ T8633] bridge2: port 1(dummy0) entered blocking state [ 290.403702][ T8633] bridge2: port 1(dummy0) entered disabled state [ 290.444777][ T8633] device dummy0 entered promiscuous mode [ 290.601434][ T8637] netlink: 'syz.6.1127': attribute type 10 has an invalid length. [ 290.664048][ T8637] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1127'. [ 290.685644][ T8637] bridge2: port 1(dummy0) entered blocking state [ 290.692241][ T8637] bridge2: port 1(dummy0) entered forwarding state [ 290.839351][ T8637] bridge2: port 1(dummy0) entered disabled state [ 291.454178][ T5976] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 291.662348][ T5976] usb 9-1: Using ep0 maxpacket: 16 [ 291.696310][ T5976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.744462][ T8657] loop6: detected capacity change from 0 to 256 [ 291.766011][ T5976] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.038473][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.137735][ T5976] usb 9-1: Product: syz [ 292.221162][ T5976] usb 9-1: Manufacturer: syz [ 292.293451][ T5976] usb 9-1: SerialNumber: syz [ 292.364901][ T5976] usb 9-1: config 0 descriptor?? [ 292.407464][ T5976] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 292.449240][ T5976] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 293.234817][ T5976] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 293.937700][ T5976] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 293.955352][ T5976] em28xx 9-1:0.0: board has no eeprom [ 294.032961][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1138'. [ 295.003341][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.010917][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.043043][ T8643] em28xx 9-1:0.0: reading from i2c device at 0xfff8 failed (error=-5) [ 295.102235][ T5976] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 295.121758][ T5976] em28xx 9-1:0.0: dvb set to bulk mode. [ 295.143524][ T4675] em28xx 9-1:0.0: Binding DVB extension [ 295.176554][ T5976] usb 9-1: USB disconnect, device number 2 [ 295.212096][ T5976] em28xx 9-1:0.0: Disconnecting em28xx [ 295.249766][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.269064][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.282254][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.302702][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.314256][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 295.322279][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.421429][ T4675] em28xx 9-1:0.0: Registering input extension [ 295.438552][ T5976] em28xx 9-1:0.0: Closing input extension [ 295.460269][ T5976] em28xx 9-1:0.0: Freeing device [ 295.882576][ T8675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.230373][ T8675] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.239634][ T8675] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.250092][ T8675] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.259109][ T8675] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.411616][ T8675] device ip6gretap2 left promiscuous mode [ 296.425035][ T8675] device gretap1 left promiscuous mode [ 296.431456][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1142'. [ 296.455894][ T8678] device ip6erspan0 entered promiscuous mode [ 296.462784][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1142'. [ 296.482915][ T8692] netlink: 'syz.8.1148': attribute type 1 has an invalid length. [ 296.541151][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1149'. [ 296.560548][ T8695] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1149'. [ 296.591762][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1149'. [ 296.606735][ T8695] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1149'. [ 296.742515][ T8701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.854765][ T8698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.946008][ T8701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.352686][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 297.431645][ T8682] chnl_net:caif_netlink_parms(): no params data found [ 297.702763][ T8682] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.710599][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.719338][ T8682] device bridge_slave_0 entered promiscuous mode [ 297.729109][ T6214] tipc: Left network mode [ 297.735055][ T8682] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.742946][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.765586][ T8682] device bridge_slave_1 entered promiscuous mode [ 297.994276][ T6214] bond4: (slave ip6gretap1): Releasing backup interface [ 298.054700][ T8682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.093303][ T8682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.223980][ T8682] team0: Port device team_slave_0 added [ 298.304184][ T8682] team0: Port device team_slave_1 added [ 298.418106][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.468021][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.593892][ T8682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.707176][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.719876][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.818100][ T8682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.861651][ T8740] cgroup: noprefix used incorrectly [ 298.887444][ T8740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1159'. [ 299.032341][ T4292] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 299.433762][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 299.997786][ T8682] device hsr_slave_0 entered promiscuous mode [ 300.028332][ T8682] device hsr_slave_1 entered promiscuous mode [ 300.049109][ T8682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.078086][ T8682] Cannot create hsr debugfs directory [ 300.336980][ T8755] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 300.420039][ T8755] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.691135][ T8754] bond4: (slave veth7): Enslaving as an active interface with a down link [ 300.752055][ T8760] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 300.972566][ T8682] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 301.041230][ T8682] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 301.153709][ T8682] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 301.177167][ T8682] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 301.318309][ T6214] device hsr_slave_0 left promiscuous mode [ 301.512563][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 302.759061][ T6214] bond5 (unregistering): Released all slaves [ 303.005105][ T6214] bond4 (unregistering): Released all slaves [ 303.602508][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 303.888189][ T6214] bond2 (unregistering): (slave bond3): Releasing backup interface [ 303.923968][ T6214] bond3 (unregistering): Released all slaves [ 303.980677][ T6214] bond2 (unregistering): Released all slaves [ 304.120194][ T6214] bond1 (unregistering): (slave veth3): Releasing active interface [ 304.305250][ T4675] libceph: connect (1)[c::]:6789 error -101 [ 304.311346][ T4675] libceph: mon0 (1)[c::]:6789 connect error [ 304.448179][ T8832] ceph: No mds server is up or the cluster is laggy [ 304.458867][ T6214] bond1 (unregistering): Released all slaves [ 305.559224][ T8845] loop6: detected capacity change from 0 to 1024 [ 305.732972][ T27] audit: type=1800 audit(1787673531.966:76): pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1183" name="file2" dev="loop6" ino=5 res=0 errno=0 [ 306.219617][ T6214] bond0 (unregistering): Released all slaves [ 306.364878][ T8816] netlink: 'syz.7.1178': attribute type 1 has an invalid length. [ 306.516502][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 306.833185][ T8682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.910217][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.928693][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.970387][ T8682] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.017023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.074808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.091178][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.098397][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.145088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.183963][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.207041][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.250587][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.257828][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.345856][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.375156][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.411619][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.441191][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.476102][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.494279][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.526230][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.559396][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.594387][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.634256][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.674662][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.737649][ T8682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.936652][ T8881] overlayfs: failed to clone upperpath [ 308.090403][ T6214] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.037646][ T6214] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.279373][ T6214] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.464491][ T6214] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.851320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.902602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.947829][ T8682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.980913][ T6214] tipc: Left network mode [ 311.567576][ T8947] netlink: 'syz.8.1207': attribute type 1 has an invalid length. [ 312.012907][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.053126][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.226267][ T8965] netlink: 'syz.6.1211': attribute type 1 has an invalid length. [ 312.407602][ T8682] device veth0_vlan entered promiscuous mode [ 312.415529][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.464258][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.500365][ T8969] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 312.598941][ T8969] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 312.689282][ T8969] bond5: (slave vti0): making interface the new active one [ 312.747645][ T8969] bond5: (slave vti0): Enslaving as an active interface with an up link [ 312.854225][ T8972] bond5 (unregistering): (slave vti0): Releasing backup interface [ 313.272231][ T8972] bond5 (unregistering): Released all slaves [ 313.772733][ T8960] loop8: detected capacity change from 0 to 32768 [ 313.806812][ T8960] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1212 (8960) [ 313.841548][ T8960] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.852017][ T8960] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 313.861848][ T8960] BTRFS info (device loop8): force clearing of disk cache [ 313.869417][ T8960] BTRFS info (device loop8): metadata ratio 0 [ 313.875649][ T8960] BTRFS info (device loop8): enabling ssd optimizations [ 313.882773][ T8960] BTRFS info (device loop8): using spread ssd allocation scheme [ 313.890451][ T8960] BTRFS info (device loop8): using free space tree [ 313.960730][ T8682] device veth1_vlan entered promiscuous mode [ 314.022042][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.053243][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.083509][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.184079][ T8960] BTRFS info (device loop8): rebuilding free space tree [ 314.374263][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1215'. [ 314.488722][ T9006] bridge1: port 1(dummy0) entered blocking state [ 314.523485][ T5085] BTRFS info (device loop8): qgroup scan completed (inconsistency flag cleared) [ 314.537554][ T9006] bridge1: port 1(dummy0) entered disabled state [ 314.577557][ T9006] device dummy0 entered promiscuous mode [ 314.611437][ T9008] netlink: 'syz.7.1215': attribute type 10 has an invalid length. [ 314.642405][ T9008] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1215'. [ 314.696774][ T9008] bridge1: port 1(dummy0) entered blocking state [ 314.703298][ T9008] bridge1: port 1(dummy0) entered forwarding state [ 314.767190][ T9008] bridge1: port 1(dummy0) entered disabled state [ 314.796223][ T9014] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 316.089044][ T8682] device veth0_macvtap entered promiscuous mode [ 316.118104][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 316.153232][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.170057][ T8682] device veth1_macvtap entered promiscuous mode [ 316.189591][ T8394] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 316.251258][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.309533][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.370404][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.418154][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.860283][ T6214] device hsr_slave_0 left promiscuous mode [ 316.896959][ T6214] device hsr_slave_1 left promiscuous mode [ 316.920800][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.957852][ T6214] device bridge_slave_1 left promiscuous mode [ 316.982912][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.012889][ T6214] device bridge_slave_0 left promiscuous mode [ 317.030012][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.161388][ T6214] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 317.195468][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.201887][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.288978][ T9050] loop7: detected capacity change from 0 to 4096 [ 317.290731][ T6214] bond1 (unregistering): Released all slaves [ 317.296828][ T9050] EXT4-fs: inline encryption not supported [ 317.372361][ T9050] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 317.382842][ T9050] EXT4-fs (loop7): Test dummy encryption mode enabled [ 317.456767][ T9050] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 317.494948][ T9050] System zones: 0-5 [ 317.529222][ T9050] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 318.154218][ T7730] EXT4-fs (loop7): unmounting filesystem. [ 318.270360][ T27] audit: type=1326 audit(1787673544.496:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.6.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c179e0d9 code=0x7ffc0000 [ 318.450335][ T27] audit: type=1326 audit(1787673544.496:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.6.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c179e0d9 code=0x7ffc0000 [ 318.534455][ T9072] loop7: detected capacity change from 0 to 128 [ 318.577030][ T27] audit: type=1326 audit(1787673544.526:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.6.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa7c179e0d9 code=0x7ffc0000 [ 318.635011][ T27] audit: type=1326 audit(1787673544.526:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.6.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c179e0d9 code=0x7ffc0000 [ 318.688035][ T27] audit: type=1326 audit(1787673544.526:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.6.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c179e0d9 code=0x7ffc0000 [ 318.770021][ T27] audit: type=1326 audit(1787673544.556:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.6.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa7c179e0d9 code=0x7ffc0000 [ 318.811843][ T27] audit: type=1326 audit(1787673544.556:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.6.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c179e0d9 code=0x7ffc0000 [ 318.846086][ T27] audit: type=1326 audit(1787673544.556:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.6.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c179e0d9 code=0x7ffc0000 [ 318.905795][ T27] audit: type=1326 audit(1787673544.556:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.6.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa7c179e0d9 code=0x7ffc0000 [ 318.936938][ T27] audit: type=1326 audit(1787673544.556:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.6.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c179e0d9 code=0x7ffc0000 [ 319.411967][ T9083] loop7: detected capacity change from 0 to 128 [ 319.514448][ T6214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.631349][ T9090] syz.7.1236: attempt to access beyond end of device [ 319.631349][ T9090] loop7: rw=0, sector=97, nr_sectors = 128 limit=128 [ 319.650452][ T6214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.667104][ T9082] syz.7.1236: attempt to access beyond end of device [ 319.667104][ T9082] loop7: rw=2049, sector=225, nr_sectors = 136 limit=128 [ 319.833141][ T5102] kworker/u4:19: attempt to access beyond end of device [ 319.833141][ T5102] loop7: rw=1, sector=361, nr_sectors = 680 limit=128 [ 320.495160][ T9109] loop8: detected capacity change from 0 to 512 [ 320.556706][ T9109] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 320.585052][ T9109] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 320.625772][ T9109] System zones: 0-1, 15-15, 18-18, 34-34 [ 320.676249][ T9112] overlayfs: failed to clone upperpath [ 320.681565][ T9109] EXT4-fs (loop8): orphan cleanup on readonly fs [ 320.695856][ T9109] EXT4-fs warning (device loop8): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 320.723874][ T9109] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 320.731436][ T9109] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1245: bg 0: block 40: padding at end of block bitmap is not set [ 320.769059][ T9109] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 320.780587][ T9109] EXT4-fs (loop8): 1 truncate cleaned up [ 320.796219][ T9109] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 320.807738][ T6214] bond0 (unregistering): Released all slaves [ 320.873358][ T9109] EXT4-fs (loop8): shut down requested (1) [ 321.068543][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.089562][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.154557][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.189600][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.223984][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.258174][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.297506][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.347525][ T8682] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.365290][ T8682] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.388072][ T8682] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.428708][ T8682] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.456450][ T9109] EXT4-fs (loop8): unmounting filesystem. [ 321.640291][ T9123] device batadv_slave_0 entered promiscuous mode [ 321.687230][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1250'. [ 321.892517][ T5102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.910704][ T5102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.962899][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.033250][ T9122] device batadv_slave_0 left promiscuous mode [ 322.828980][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.873482][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.900770][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.059453][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1258'. [ 323.157008][ T9145] bond0: option arp_validate: invalid value (519) [ 323.318875][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 323.531916][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1144'. [ 324.293218][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1261'. [ 324.362451][ T9169] loop8: detected capacity change from 0 to 1024 [ 324.729863][ T9180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.748464][ T9169] hfsplus: catalog searching failed [ 324.816108][ T9183] device bond_slave_0 entered promiscuous mode [ 324.822712][ T9183] device bond_slave_1 entered promiscuous mode [ 324.866214][ T9183] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 324.905120][ T9183] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 324.938176][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 325.320483][ T9193] netlink: 'syz.6.1269': attribute type 1 has an invalid length. [ 325.381079][ T9193] device bond5 entered promiscuous mode [ 325.387346][ T9193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.551217][ T9193] bond5: (slave bridge3): making interface the new active one [ 325.586803][ T9193] device bridge3 entered promiscuous mode [ 325.609739][ T9193] device bridge3 left promiscuous mode [ 325.748507][ T2973] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 325.832720][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 326.248094][ T7461] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.394560][ T7461] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.519977][ T7461] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.660313][ T7461] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.664253][ T9225] IPVS: fo: FWM 3 0x00000003 - no destination available [ 327.341420][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.359763][ T9235] device syz_tun entered promiscuous mode [ 327.377135][ T9235] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 327.388716][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.400347][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.408440][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.418439][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 327.430863][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.999711][ T9238] chnl_net:caif_netlink_parms(): no params data found [ 329.289885][ T9238] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.349263][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.383151][ T9238] device bridge_slave_0 entered promiscuous mode [ 329.512374][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 329.594910][ T9238] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.612362][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.623860][ T9238] device bridge_slave_1 entered promiscuous mode [ 329.706421][ T9238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.121228][ T9238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.226954][ T7461] device hsr_slave_0 left promiscuous mode [ 330.236599][ T7461] device hsr_slave_1 left promiscuous mode [ 330.261710][ T7461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.284559][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.309695][ T7461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.332386][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.355931][ T7461] device bridge_slave_1 left promiscuous mode [ 330.369926][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.392925][ T7461] device bridge_slave_0 left promiscuous mode [ 330.403000][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.507527][ T7461] device veth1_macvtap left promiscuous mode [ 330.527538][ T7461] device veth0_macvtap left promiscuous mode [ 330.547047][ T7461] device veth1_vlan left promiscuous mode [ 330.567287][ T7461] device veth0_vlan left promiscuous mode [ 330.641954][ T9277] loop7: detected capacity change from 0 to 1024 [ 331.074675][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 331.074692][ T27] audit: type=1800 audit(1787673557.306:112): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1287" name="file2" dev="loop7" ino=5 res=0 errno=0 [ 331.592293][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 332.539113][ T7461] team0 (unregistering): Port device team_slave_1 removed [ 332.688593][ T7461] team0 (unregistering): Port device team_slave_0 removed [ 332.726085][ T27] audit: type=1326 audit(1787673558.956:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.7.1303" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f769699e0d9 code=0x0 [ 332.809348][ T7461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.882031][ T7461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.534488][ T7461] bond0 (unregistering): Released all slaves [ 333.676662][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 333.795141][ T9238] team0: Port device team_slave_0 added [ 333.812843][ T9283] device vlan2 entered promiscuous mode [ 333.843772][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'. [ 333.930551][ T9238] team0: Port device team_slave_1 added [ 334.037483][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.090082][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.212304][ T9238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.257489][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.282960][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.339971][ T9238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.481293][ T9238] device hsr_slave_0 entered promiscuous mode [ 334.522970][ T9238] device hsr_slave_1 entered promiscuous mode [ 334.797423][ T9352] loop9: detected capacity change from 0 to 1024 [ 335.244169][ T27] audit: type=1800 audit(1787673561.476:114): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1307" name="file2" dev="loop9" ino=5 res=0 errno=0 [ 335.754393][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 336.658353][ T9382] netlink: 'syz.2.1319': attribute type 4 has an invalid length. [ 338.766571][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1322'. [ 339.480200][ T9425] tipc: Failed to remove unknown binding: 66,0,0/0:2011196868/2011196870 [ 339.515935][ T9425] tipc: Failed to remove unknown binding: 66,0,0/0:2011196868/2011196869 [ 339.539795][ T9429] tipc: Failed to remove unknown binding: 66,0,0/0:2011196868/2011196870 [ 339.550942][ T9429] tipc: Failed to remove unknown binding: 66,0,0/0:2011196868/2011196869 [ 339.696893][ T9238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 339.796668][ T9238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 339.840866][ T9238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 339.911671][ T9238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.959797][ T9238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.040933][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.054410][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.085419][ T9238] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.136961][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.164623][ T9457] loop7: detected capacity change from 0 to 512 [ 341.191775][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.217868][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.225204][ T8388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.233675][ T9457] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 341.242406][ T9457] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 341.262612][ T9457] System zones: 0-1, 15-15, 18-18, 34-34 [ 341.290739][ T9457] EXT4-fs (loop7): orphan cleanup on readonly fs [ 341.373539][ T9457] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 341.403595][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.424661][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.446407][ T9457] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 341.471164][ T9457] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 341.479328][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.488555][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.495730][ T8388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.504956][ T9457] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1337: bg 0: block 40: padding at end of block bitmap is not set [ 341.519897][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.529685][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.537877][ T9457] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 341.549533][ T9457] EXT4-fs (loop7): 1 truncate cleaned up [ 341.566894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.594291][ T9457] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 341.597151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.643473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.662764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.695233][ T9457] EXT4-fs (loop7): shut down requested (1) [ 341.708929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.786811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.806090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.854939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.886719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.952563][ T9238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.041247][ T9479] loop9: detected capacity change from 0 to 512 [ 342.161723][ T9479] EXT4-fs (loop9): 1 truncate cleaned up [ 342.197915][ T9479] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 342.356625][ T9457] EXT4-fs (loop7): unmounting filesystem. [ 342.570033][ T9491] EXT4-fs (loop9): shut down requested (1) [ 342.709212][ T9492] EXT4-fs (loop9): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 343.031684][ T8682] EXT4-fs (loop9): unmounting filesystem. [ 343.052878][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.079208][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.190843][ T9238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.686106][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.758413][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.876535][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.920999][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.963303][ T9238] device veth0_vlan entered promiscuous mode [ 345.972548][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.028520][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.076372][ T9238] device veth1_vlan entered promiscuous mode [ 346.159460][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.189415][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 346.209276][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.244415][ T9546] tipc: Failed to remove unknown binding: 66,0,0/0:468908011/468908013 [ 346.246987][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.275887][ T9238] device veth0_macvtap entered promiscuous mode [ 346.298499][ T9238] device veth1_macvtap entered promiscuous mode [ 346.306736][ T9546] tipc: Failed to remove unknown binding: 66,0,0/0:468908011/468908012 [ 346.344651][ T9546] tipc: Failed to remove unknown binding: 66,0,0/0:468908011/468908013 [ 346.381917][ T9238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.382270][ T9546] tipc: Failed to remove unknown binding: 66,0,0/0:468908011/468908012 [ 346.428463][ T9238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.494455][ T9238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.521101][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.541484][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.571880][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.598385][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.663154][ T9238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.693572][ T9238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.727941][ T9238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.790724][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.807592][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.870905][ T9559] netlink: 'syz.2.1355': attribute type 1 has an invalid length. [ 346.977693][ T9559] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.029926][ T9238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.041886][ T9238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.050967][ T9238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.064431][ T9238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.121023][ T9566] bond5: (slave ip6gretap3): making interface the new active one [ 347.173561][ T9566] bond5: (slave ip6gretap3): Enslaving as an active interface with an up link [ 347.347972][ T5122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.396610][ T5122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.456004][ T7460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.477125][ T5116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.499606][ T5116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.555293][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.781011][ T9580] futex_wake_op: syz.9.1358 tries to shift op by 144; fix this program [ 347.846635][ T9582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.835282][ T9611] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.1367'. [ 348.885324][ T9611] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.1367'. [ 349.298791][ T9624] loop4: detected capacity change from 0 to 1024 [ 349.725251][ T27] audit: type=1800 audit(1787673575.916:115): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1365" name="file2" dev="loop4" ino=5 res=0 errno=0 [ 351.334555][ T9651] loop7: detected capacity change from 0 to 256 [ 351.370356][ T4292] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff [ 351.602427][ T9651] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.632568][ T9651] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 351.757674][ T9651] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 351.809554][ T9651] exFAT-fs (loop7): failed to load alloc-bitmap [ 351.831792][ T9651] exFAT-fs (loop7): failed to recognize exfat type [ 352.340873][ T9665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1382'. [ 353.189194][ T9680] device syzkaller0 entered promiscuous mode [ 353.457204][ T9687] netlink: 'syz.6.1389': attribute type 4 has an invalid length. [ 353.508291][ T9687] netlink: 'syz.6.1389': attribute type 4 has an invalid length. [ 354.381793][ T9703] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1391'. [ 354.438925][ T9703] loop7: detected capacity change from 0 to 1764 [ 356.485607][ T9723] overlayfs: failed to clone upperpath [ 356.589316][ T9726] overlayfs: failed to clone upperpath [ 356.875350][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1402'. [ 357.070593][ T9734] netlink: 'syz.6.1402': attribute type 5 has an invalid length. [ 357.112322][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1402'. [ 358.262733][ T9757] netlink: 'syz.2.1407': attribute type 1 has an invalid length. [ 358.446142][ T9759] bond4: (slave veth0_to_bond): Releasing active interface [ 358.536726][ T9759] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 358.596588][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1407'. [ 358.686398][ T9757] 8021q: adding VLAN 0 to HW filter on device bond6 [ 359.070431][ T9773] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1408'. [ 359.626779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.775996][ T9789] loop4: detected capacity change from 0 to 128 [ 359.851586][ T9789] syz.4.1412: attempt to access beyond end of device [ 359.851586][ T9789] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 359.887219][ T9789] syz.4.1412: attempt to access beyond end of device [ 359.887219][ T9789] loop4: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 359.900791][ T9789] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 359.909406][ T9789] syz.4.1412: attempt to access beyond end of device [ 359.909406][ T9789] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 359.923045][ T9789] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 359.931600][ T9789] syz.4.1412: attempt to access beyond end of device [ 359.931600][ T9789] loop4: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 359.945883][ T9789] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 359.954762][ T9789] syz.4.1412: attempt to access beyond end of device [ 359.954762][ T9789] loop4: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 361.245604][ T9809] loop4: detected capacity change from 0 to 128 [ 361.298249][ T9809] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.345864][ T9809] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.627180][ T5122] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 365.592578][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 366.313983][ T9917] loop4: detected capacity change from 0 to 512 [ 367.267742][ T9917] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 367.293189][ T9917] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.617805][ T9917] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 367.813530][ T9238] EXT4-fs (loop4): unmounting filesystem. [ 369.404704][ T9968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 369.625534][ T9968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.929363][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1461'. [ 370.032755][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1461'. [ 370.618993][ T9992] tipc: Failed to remove unknown binding: 66,0,0/0:1883554070/1883554072 [ 370.652307][ T9992] tipc: Failed to remove unknown binding: 66,0,0/0:1883554070/1883554071 [ 370.675432][ T9993] tipc: Failed to remove unknown binding: 66,0,0/0:1883554070/1883554072 [ 370.701113][ T9993] tipc: Failed to remove unknown binding: 66,0,0/0:1883554070/1883554071 [ 370.982611][ T9998] netlink: 'syz.9.1465': attribute type 1 has an invalid length. [ 371.211742][T10006] bond2: (slave veth0_to_bond): making interface the new active one [ 371.235275][T10006] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 371.324257][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1465'. [ 371.371983][ T9998] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.631629][T10026] netlink: 'syz.9.1474': attribute type 4 has an invalid length. [ 371.756723][T10031] netlink: 'syz.9.1474': attribute type 4 has an invalid length. [ 371.792180][T10033] device gretap0 entered promiscuous mode [ 371.812836][T10033] device macvlan2 entered promiscuous mode [ 371.820774][T10033] device vlan2 entered promiscuous mode [ 371.839913][T10033] device vlan2 left promiscuous mode [ 371.854556][T10033] device gretap0 left promiscuous mode [ 372.535512][T10052] loop9: detected capacity change from 0 to 128 [ 372.651331][ T27] audit: type=1800 audit(1787673598.876:116): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1479" name="bus" dev="loop9" ino=1048638 res=0 errno=0 [ 372.757728][ T27] audit: type=1804 audit(1787673598.916:117): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1479" name="/newroot/40/file1/bus" dev="loop9" ino=1048638 res=1 errno=0 [ 372.858121][ T27] audit: type=1804 audit(1787673598.916:118): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1479" name="/newroot/40/file1/bus" dev="loop9" ino=1048638 res=1 errno=0 [ 372.925058][T10057] syz.9.1479: attempt to access beyond end of device [ 372.925058][T10057] loop9: rw=0, sector=97, nr_sectors = 128 limit=128 [ 373.423730][T10052] syz.9.1479: attempt to access beyond end of device [ 373.423730][T10052] loop9: rw=2049, sector=225, nr_sectors = 136 limit=128 [ 373.719598][ T7461] kworker/u4:39: attempt to access beyond end of device [ 373.719598][ T7461] loop9: rw=1, sector=361, nr_sectors = 680 limit=128 [ 374.719565][T10084] netlink: 'syz.9.1486': attribute type 11 has an invalid length. [ 377.681388][T10135] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1500'. [ 378.635384][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.642207][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.310365][T10178] xt_bpf: check failed: parse error [ 382.872670][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 383.361418][T10209] loop9: detected capacity change from 0 to 256 [ 383.416961][T10209] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 383.882198][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1521'. [ 384.099986][T10223] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779264) [ 384.660911][T10223] FAT-fs (loop9): Filesystem has been set read-only [ 385.078984][T10233] overlayfs: failed to clone upperpath [ 386.173350][ T27] audit: type=1800 audit(1787673612.376:119): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1519" name="file1" dev="loop9" ino=1048639 res=0 errno=0 [ 386.905130][T10258] device syzkaller0 entered promiscuous mode [ 391.710073][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1549'. [ 391.722306][T10345] device bridge_slave_1 left promiscuous mode [ 391.728652][T10345] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.884675][T10345] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.417009][T10382] capability: warning: `syz.4.1561' uses deprecated v2 capabilities in a way that may be insecure [ 394.516327][T10410] loop4: detected capacity change from 0 to 512 [ 394.573683][T10410] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 394.602278][T10410] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 394.622259][T10410] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 394.693158][T10410] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 394.701160][T10410] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 394.732081][T10417] using random self ethernet address [ 394.764081][T10410] EXT4-fs (loop4): failed to initialize system zone (-117) [ 394.791770][T10417] using random host ethernet address [ 394.811990][T10410] EXT4-fs (loop4): mount failed [ 394.890748][ T27] audit: type=1326 audit(1787673621.116:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.9.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7fc00000 [ 395.003598][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1569'. [ 395.022307][ T27] audit: type=1326 audit(1787673621.136:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.9.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0616b9e0d9 code=0x7fc00000 [ 395.104834][ T27] audit: type=1326 audit(1787673621.136:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.9.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7fc00000 [ 395.257146][ T27] audit: type=1326 audit(1787673621.136:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.9.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7fc00000 [ 395.379127][ T27] audit: type=1326 audit(1787673621.136:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.9.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7fc00000 [ 395.495447][ T27] audit: type=1326 audit(1787673621.136:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.9.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7fc00000 [ 395.627147][ T27] audit: type=1326 audit(1787673621.136:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.9.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7fc00000 [ 395.627167][T10431] loop4: detected capacity change from 0 to 2048 [ 395.819038][T10431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.877275][ T27] audit: type=1326 audit(1787673621.136:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.9.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7fc00000 [ 396.001925][ T27] audit: type=1326 audit(1787673621.136:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.9.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7fc00000 [ 396.117003][ T27] audit: type=1326 audit(1787673621.136:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10397 comm="syz.9.1565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7fc00000 [ 396.131449][T10445] jffs2: notice: (10445) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 397.369504][T10445] overlayfs: failed to clone upperpath [ 398.047566][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1588'. [ 399.935256][T10533] netlink: 'syz.4.1597': attribute type 10 has an invalid length. [ 401.120644][T10551] bonding: bond0 is being created... [ 401.144526][T10551] bonding: bond0 already exists [ 401.458894][T10555] bond0: (slave veth0): Enslaving as an active interface with an up link [ 402.674025][T10580] futex_wake_op: syz.7.1606 tries to shift op by 144; fix this program [ 404.177444][T10621] loop7: detected capacity change from 0 to 4096 [ 404.325726][T10621] NILFS (loop7): invalid segment: Checksum error in segment payload [ 404.380381][T10621] NILFS (loop7): trying rollback from an earlier position [ 404.577103][T10621] NILFS (loop7): recovery complete [ 404.705392][T10636] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.852313][ T5980] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 406.036205][ T5980] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 406.058475][ T5980] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 406.078825][ T5980] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 406.099137][ T5980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.358975][ T5980] usb 8-1: USB disconnect, device number 2 [ 407.108562][T10696] loop7: detected capacity change from 0 to 128 [ 407.189164][T10696] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 407.195594][T10694] device gretap0 entered promiscuous mode [ 407.211137][T10696] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.320404][T10694] device macvlan2 entered promiscuous mode [ 407.337133][T10694] device vlan2 entered promiscuous mode [ 407.366858][T10694] device vlan2 left promiscuous mode [ 407.401410][T10694] device gretap0 left promiscuous mode [ 408.875692][ T7730] EXT4-fs (loop7): unmounting filesystem. [ 408.899775][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1639'. [ 408.966625][ T27] kauditd_printk_skb: 52 callbacks suppressed [ 408.966642][ T27] audit: type=1400 audit(1787673635.186:182): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=10714 comm="syz.4.1638" [ 410.374333][ T4675] libceph: connect (1)[c::]:6789 error -101 [ 410.413387][ T4675] libceph: mon0 (1)[c::]:6789 connect error [ 410.564988][ T4675] libceph: connect (1)[c::]:6789 error -101 [ 410.686477][ T4675] libceph: mon0 (1)[c::]:6789 connect error [ 410.852000][T10745] ceph: No mds server is up or the cluster is laggy [ 412.283695][T10783] device macvlan2 entered promiscuous mode [ 412.289598][T10783] device vlan3 entered promiscuous mode [ 412.357217][T10783] device gretap0 entered promiscuous mode [ 412.385239][T10783] device vlan3 left promiscuous mode [ 412.432896][T10783] device gretap0 left promiscuous mode [ 414.727006][T10818] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 415.773479][T10828] futex_wake_op: syz.6.1660 tries to shift op by 144; fix this program [ 416.387904][T10844] loop9: detected capacity change from 0 to 256 [ 416.890276][T10844] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 417.221849][T10844] FAT-fs (loop9): Filesystem has been set read-only [ 417.326643][T10857] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 418.064000][T10882] 9pnet_fd: p9_fd_create_unix (10882): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 418.641630][T10892] loop7: detected capacity change from 0 to 128 [ 419.316483][ T4292] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 420.379986][T10918] device syzkaller0 entered promiscuous mode [ 420.934608][T10927] netlink: 'syz.6.1688': attribute type 34 has an invalid length. [ 421.372586][ T5983] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 421.612265][ T5983] usb 8-1: Using ep0 maxpacket: 16 [ 421.624078][ T5983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 421.665120][ T5983] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 421.702331][ T5983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.720323][ T5983] usb 8-1: Product: syz [ 421.730223][ T5983] usb 8-1: Manufacturer: syz [ 421.750489][ T5983] usb 8-1: SerialNumber: syz [ 421.788598][ T5983] usb 8-1: config 0 descriptor?? [ 421.966747][ T5983] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 422.085072][ T5983] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 422.595154][ T5983] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 423.151192][ T5983] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 423.181883][ T5983] em28xx 8-1:0.0: board has no eeprom [ 423.562214][ T5983] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 423.573338][ T5983] em28xx 8-1:0.0: dvb set to bulk mode. [ 423.579877][ T4675] em28xx 8-1:0.0: Binding DVB extension [ 424.475766][T10912] em28xx 8-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 424.494766][ T5983] usb 8-1: USB disconnect, device number 3 [ 424.521994][ T5983] em28xx 8-1:0.0: Disconnecting em28xx [ 424.683225][ T4675] em28xx 8-1:0.0: Registering input extension [ 424.692048][ T5983] em28xx 8-1:0.0: Closing input extension [ 424.748072][ T5983] em28xx 8-1:0.0: Freeing device [ 425.058532][T10996] futex_wake_op: syz.4.1700 tries to shift op by 144; fix this program [ 425.604510][ T4280] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 425.615263][ T4280] Bluetooth: hci3: Injecting HCI hardware error event [ 425.631265][ T4280] Bluetooth: hci3: hardware error 0x00 [ 427.519728][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 427.527094][T11032] jffs2: notice: (11032) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 427.547509][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 427.732289][ T9044] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 427.853979][T11042] loop7: detected capacity change from 0 to 1024 [ 428.072491][ T4280] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 428.737020][T11042] syz.7.1717: attempt to access beyond end of device [ 428.737020][T11042] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 428.832612][ T9044] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 428.842634][ T9044] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 428.853050][T11042] Buffer I/O error on dev loop7, logical block 2889, async page read [ 428.862312][ T9044] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 428.887703][ T9044] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.935915][T11042] syz.7.1717: attempt to access beyond end of device [ 428.935915][T11042] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 428.981577][T11042] Buffer I/O error on dev loop7, logical block 2889, async page read [ 429.013513][T11040] syz.7.1717: attempt to access beyond end of device [ 429.013513][T11040] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 429.081089][T11040] Buffer I/O error on dev loop7, logical block 2889, async page read [ 429.100052][T11042] syz.7.1717: attempt to access beyond end of device [ 429.100052][T11042] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 429.171025][ T9044] usb 10-1: USB disconnect, device number 2 [ 429.177828][T11042] Buffer I/O error on dev loop7, logical block 2889, async page read [ 429.199530][T11042] syz.7.1717: attempt to access beyond end of device [ 429.199530][T11042] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 429.219776][T11042] Buffer I/O error on dev loop7, logical block 2889, async page read [ 429.230171][T11040] syz.7.1717: attempt to access beyond end of device [ 429.230171][T11040] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 429.250331][T11040] Buffer I/O error on dev loop7, logical block 2889, async page read [ 429.272551][T11042] syz.7.1717: attempt to access beyond end of device [ 429.272551][T11042] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 429.291333][T11042] Buffer I/O error on dev loop7, logical block 2889, async page read [ 429.301156][T11044] syz.7.1717: attempt to access beyond end of device [ 429.301156][T11044] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 429.320910][T11044] Buffer I/O error on dev loop7, logical block 2889, async page read [ 429.329803][T11042] syz.7.1717: attempt to access beyond end of device [ 429.329803][T11042] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 429.349601][T11042] Buffer I/O error on dev loop7, logical block 2889, async page read [ 429.361055][T11044] syz.7.1717: attempt to access beyond end of device [ 429.361055][T11044] loop7: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 429.389420][T11044] Buffer I/O error on dev loop7, logical block 2889, async page read [ 429.419284][T11065] hfsplus: request for non-existent node 1280 in B*Tree [ 429.452173][T11065] hfsplus: request for non-existent node 1280 in B*Tree [ 429.579218][T11069] loop4: detected capacity change from 0 to 1024 [ 429.610762][T11072] futex_wake_op: syz.2.1720 tries to shift op by 144; fix this program [ 430.033672][ T9] hfsplus: request for non-existent node 33554434 in B*Tree [ 430.102431][ T9] hfsplus: request for non-existent node 33554434 in B*Tree [ 430.170683][ T9] hfsplus: b-tree write err: -5, ino 3 [ 433.514071][T11135] loop4: detected capacity change from 0 to 512 [ 433.865325][T11135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.015760][T11135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 434.071590][T11135] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.489616][ T9238] EXT4-fs (loop4): unmounting filesystem. [ 434.536970][T11154] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1742'. [ 434.690140][T11156] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1744'. [ 435.777165][T11176] netlink: 'syz.9.1746': attribute type 1 has an invalid length. [ 437.950763][T11223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.268131][T11235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.283254][T11231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1761'. [ 439.280538][T11246] Set syz1 is full, maxelem 1021 reached [ 439.560738][T11258] loop9: detected capacity change from 0 to 512 [ 439.608756][T11258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 439.691345][T11254] null_blk: disk nullb1 created [ 439.745847][T11258] EXT4-fs error (device loop9): ext4_quota_enable:7049: comm syz.9.1768: inode #1073741824: comm syz.9.1768: iget: illegal inode # [ 439.795168][T11258] EXT4-fs (loop9): Remounting filesystem read-only [ 439.801774][T11258] EXT4-fs error (device loop9): ext4_quota_enable:7052: comm syz.9.1768: Bad quota inode: 1073741824, type: 2 [ 439.855094][T11258] EXT4-fs (loop9): Remounting filesystem read-only [ 439.864194][T11258] EXT4-fs warning (device loop9): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=1073741824). Please run e2fsck to fix. [ 439.901391][T11258] EXT4-fs (loop9): mount failed [ 440.076138][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.083397][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.105047][T11278] netlink: 'syz.7.1774': attribute type 1 has an invalid length. [ 440.142412][T11278] netlink: 'syz.7.1774': attribute type 4 has an invalid length. [ 440.174707][T11278] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1774'. [ 440.212863][T11282] netlink: 'syz.7.1774': attribute type 1 has an invalid length. [ 440.239798][T11282] netlink: 'syz.7.1774': attribute type 4 has an invalid length. [ 440.304758][T11282] netlink: 9491 bytes leftover after parsing attributes in process `syz.7.1774'. [ 440.780262][T11292] device syzkaller0 entered promiscuous mode [ 441.392887][T11306] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[9238] was attempted by ""[11306] [ 441.833090][T11311] fuse: Bad value for 'fd' [ 442.651684][T11343] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1786'. [ 444.500707][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 444.510010][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 444.520396][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 444.532970][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 444.541950][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 444.551229][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 444.552780][T11364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.561075][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 444.572263][T11364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.671503][T11364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.702073][T11364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.737559][T11364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.762970][T11364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.817583][T11364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.834279][T11364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.849720][T11364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 444.875380][T11364] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 445.584633][T11389] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.1799'. [ 445.928165][T11402] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 448.612357][T11446] overlayfs: failed to clone upperpath [ 448.752604][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 448.948808][T11459] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1816'. [ 450.131024][T11483] loop4: detected capacity change from 0 to 8192 [ 451.062358][ T9044] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 451.866600][ T9044] usb 10-1: Using ep0 maxpacket: 32 [ 451.886456][ T9044] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 451.907098][ T9044] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 452.643822][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 452.683275][ T9044] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.692496][ T9044] usb 10-1: Product: syz [ 452.700929][ T9044] usb 10-1: Manufacturer: syz [ 452.712413][ T9044] usb 10-1: SerialNumber: syz [ 452.727679][ T9044] usb 10-1: config 0 descriptor?? [ 452.742410][T11500] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 452.756958][ T9044] hub 10-1:0.0: bad descriptor, ignoring hub [ 452.763380][ T9044] hub: probe of 10-1:0.0 failed with error -5 [ 452.781950][ T9044] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input7 [ 453.003484][ T9044] usb 10-1: USB disconnect, device number 3 [ 453.009467][ C1] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 453.371484][T11538] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1837'. [ 453.922535][T11544] Cannot find add_set index 0 as target [ 456.998803][T11571] loop4: detected capacity change from 0 to 512 [ 457.163415][T11571] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1848: iget: bad i_size value: 38620345925642 [ 457.242473][T11571] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1848: couldn't read orphan inode 15 (err -117) [ 457.311252][T11571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 457.337717][T11580] netlink: 'syz.9.1850': attribute type 39 has an invalid length. [ 457.448023][T11584] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1848: bg 0: block 5: invalid block bitmap [ 457.694860][T11584] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 236 with error 28 [ 457.735224][T11580] bond0: (slave syz_tun): Releasing backup interface [ 458.627653][T11584] EXT4-fs (loop4): This should not happen!! Data will be lost [ 458.627653][T11584] [ 458.682313][T11584] EXT4-fs (loop4): Total free blocks count 0 [ 458.688476][T11584] EXT4-fs (loop4): Free/Dirty block details [ 458.764333][T11584] EXT4-fs (loop4): free_blocks=0 [ 459.616932][T11584] EXT4-fs (loop4): dirty_blocks=236 [ 459.654888][T11584] EXT4-fs (loop4): Block reservation details [ 459.682154][T11584] EXT4-fs (loop4): i_reserved_data_blocks=236 [ 460.028089][ T9238] EXT4-fs (loop4): unmounting filesystem. [ 460.437172][T11612] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1859'. [ 460.716526][T11617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1860'. [ 461.434513][T11633] netlink: 'syz.2.1866': attribute type 49 has an invalid length. [ 461.575714][T11636] loop4: detected capacity change from 0 to 4096 [ 461.646043][T11633] bond6: (slave veth0_to_bond): Releasing active interface [ 461.671169][T11636] NILFS (loop4): invalid segment: Checksum error in segment payload [ 461.732843][T11633] device veth0_to_bond entered promiscuous mode [ 461.766816][T11636] NILFS (loop4): trying rollback from an earlier position [ 461.888363][T11636] NILFS (loop4): recovery complete [ 461.917686][T11652] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 461.954363][T11653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 461.964168][T11653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.971697][T11653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 462.110288][T11653] team0: Mode changed to "loadbalance" [ 462.611529][ T4321] kernel write not supported for file /sequencer2 (pid: 4321 comm: kworker/1:5) [ 467.151790][T11706] overlayfs: failed to clone upperpath [ 469.369724][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1889'. [ 469.377244][T11736] loop4: detected capacity change from 0 to 128 [ 469.409751][T11736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 469.428875][T11736] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 469.543182][T11737] bond7 (unregistering): Released all slaves [ 471.305487][ T9238] EXT4-fs (loop4): unmounting filesystem. [ 471.355822][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1894'. [ 472.272237][T11768] netlink: 'syz.4.1896': attribute type 4 has an invalid length. [ 472.454478][T11769] netlink: 'syz.4.1896': attribute type 4 has an invalid length. [ 472.714944][T11779] futex_wake_op: syz.6.1901 tries to shift op by 144; fix this program [ 473.254730][T11797] device syzkaller0 entered promiscuous mode [ 475.129593][T11851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1915'. [ 476.395493][T11872] device bond7 entered promiscuous mode [ 477.174794][T11882] loop4: detected capacity change from 0 to 128 [ 477.313167][T11882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 477.435228][T11882] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 477.512857][T11893] loop7: detected capacity change from 0 to 520 [ 477.539330][T11895] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1926'. [ 477.611252][T11893] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 477.682837][T11893] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 477.733316][T11893] EXT4-fs error (device loop7): __ext4_fill_super:5465: inode #2: comm syz.7.1927: iget: special inode unallocated [ 477.740757][T11904] loop9: detected capacity change from 0 to 1764 [ 477.841924][T11893] EXT4-fs (loop7): get root inode failed [ 477.879508][T11893] EXT4-fs (loop7): mount failed [ 478.054361][ T9238] EXT4-fs (loop4): unmounting filesystem. [ 478.836326][T11936] device syzkaller0 entered promiscuous mode [ 478.908328][T11936] tipc: Started in network mode [ 478.937259][T11936] tipc: Node identity 26e2621b2a63, cluster identity 4711 [ 478.971946][T11936] tipc: Enabled bearer , priority 0 [ 479.044105][T11935] tipc: Resetting bearer [ 479.383924][T11935] tipc: Disabling bearer [ 480.329145][ T27] audit: type=1326 audit(1787673706.556:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.9.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 480.458843][ T27] audit: type=1326 audit(1787673706.596:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.9.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 480.525096][ T27] audit: type=1326 audit(1787673706.596:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.9.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 480.610543][ T27] audit: type=1326 audit(1787673706.596:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.9.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 481.522364][ T27] audit: type=1326 audit(1787673706.596:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.9.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 481.547210][ T27] audit: type=1326 audit(1787673706.596:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.9.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 481.615653][ T27] audit: type=1326 audit(1787673706.596:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.9.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 481.710354][ T27] audit: type=1326 audit(1787673706.596:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.9.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 481.832457][ T27] audit: type=1326 audit(1787673706.596:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.9.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 481.932308][ T27] audit: type=1326 audit(1787673706.596:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.9.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 484.234930][T12025] vivid-004: ================= START STATUS ================= [ 484.317038][T12025] vivid-004: Radio HW Seek Mode: Bounded [ 484.382414][T12025] vivid-004: Radio Programmable HW Seek: [ 484.608466][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1956'. [ 484.623647][T12030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.631456][T12030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.645118][T12030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.653182][T12030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.123973][T12025] false [ 486.311397][T12025] vivid-004: RDS Rx I/O Mode: Block I/O [ 486.501794][T12025] vivid-004: Generate RBDS Instead of RDS: false [ 486.594181][T12025] vivid-004: RDS Reception: true [ 486.616149][T12025] vivid-004: RDS Program Type: 0 inactive [ 486.660496][T12025] vivid-004: RDS PS Name: inactive [ 486.682507][T12025] vivid-004: RDS Radio Text: inactive [ 486.707039][T12025] vivid-004: RDS Traffic Announcement: false inactive [ 486.737466][T12025] vivid-004: RDS Traffic Program: false inactive [ 486.757763][T12025] vivid-004: RDS Music: false inactive [ 486.767168][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1958'. [ 486.790347][T12025] vivid-004: ================== END STATUS ================== [ 486.993860][T12049] device bond6 entered promiscuous mode [ 488.942352][ T4341] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 489.280254][ T4341] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.437905][ T4341] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.771370][ T4341] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.921295][ T4341] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 489.930848][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.939155][ T4341] usb 5-1: Product: syz [ 489.943433][ T4341] usb 5-1: Manufacturer: syz [ 489.948060][ T4341] usb 5-1: SerialNumber: syz [ 489.974283][ T4341] usb 5-1: Found UVC 1.00 device syz (046d:0821) [ 489.982383][ T4341] usb 5-1: No valid video chain found. [ 490.358990][T12121] 9pnet_fd: Insufficient options for proto=fd [ 491.652710][ T5983] usb 5-1: USB disconnect, device number 2 [ 491.921750][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 493.529077][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1990'. [ 493.689969][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 493.711613][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 493.985330][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 493.991966][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 494.455968][T12186] ceph: No mds server is up or the cluster is laggy [ 494.524772][ T4675] libceph: connect (1)[c::]:6789 error -101 [ 494.537101][ T4675] libceph: mon0 (1)[c::]:6789 connect error [ 495.431758][T12231] device team0 entered promiscuous mode [ 495.443809][T12231] device team_slave_0 entered promiscuous mode [ 495.451961][T12231] device team_slave_1 entered promiscuous mode [ 495.465437][T12231] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 495.479681][T12231] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 495.510136][T12238] bridge0: port 3(vlan3) entered blocking state [ 495.544845][T12238] bridge0: port 3(vlan3) entered disabled state [ 495.575412][T12238] device vlan3 entered promiscuous mode [ 495.588925][T12238] device bond0 entered promiscuous mode [ 495.602274][T12238] device bond_slave_0 entered promiscuous mode [ 495.617209][T12238] device bond_slave_1 entered promiscuous mode [ 495.652605][T12238] device macvlan2 entered promiscuous mode [ 495.671865][T12234] device syzkaller0 entered promiscuous mode [ 496.458644][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2003'. [ 496.579688][T12266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.623513][T12266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.672115][T12266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.751889][T12279] tipc: Started in network mode [ 497.757027][T12279] tipc: Node identity ac14140f, cluster identity 4711 [ 497.780044][T12279] tipc: New replicast peer: 255.255.255.255 [ 497.810370][T12279] tipc: Enabled bearer , priority 10 [ 497.832397][T12280] smc: net device lo applied user defined pnetid SYZ0 [ 498.070935][T12286] device syzkaller0 entered promiscuous mode [ 498.960059][ T5983] tipc: Node number set to 2886997007 [ 499.210452][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2013'. [ 501.518141][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.525262][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.433131][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'. [ 503.221311][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'. [ 503.307143][T12389] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.316824][T12389] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.325878][T12389] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.334725][T12389] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.420892][ T4398] tipc: Left network mode [ 503.429910][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'. [ 505.347962][T12424] x_tables: ip_tables: osf match: only valid for protocol 6 [ 507.392930][T12436] loop7: detected capacity change from 0 to 2048 [ 507.731333][T12445] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12445] [ 508.412966][T12447] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 509.208596][T12453] device syzkaller0 entered promiscuous mode [ 509.334474][T12453] tipc: Enabled bearer , priority 0 [ 509.491204][T12452] tipc: Resetting bearer [ 509.629152][T12452] tipc: Disabling bearer [ 511.007556][T12475] loop4: detected capacity change from 0 to 16 [ 511.094794][T12475] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x7cda66ab, 0x7bbbea8c expected [ 511.230822][ T4279] udevd[4279]: incorrect erofs checksum on /dev/loop4 [ 512.262346][ T9043] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 512.774006][ T9043] usb 10-1: unable to get BOS descriptor or descriptor too short [ 512.792206][ T9043] usb 10-1: not running at top speed; connect to a high speed hub [ 512.832524][ T9043] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 219, changing to 4 [ 513.034387][ T9043] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 513.414722][ T9043] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.528484][ T9043] usb 10-1: Product: syz [ 513.867720][ T9043] usb 10-1: Manufacturer: syz [ 513.876387][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2056'. [ 513.910582][T12495] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.919569][T12495] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.928722][T12495] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.937706][T12495] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.947035][ T9043] usb 10-1: SerialNumber: syz [ 514.095097][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2056'. [ 514.292577][ T9043] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 514.350386][ T9043] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 514.372278][ T4398] device hsr_slave_0 left promiscuous mode [ 514.389797][ T4398] device hsr_slave_1 left promiscuous mode [ 514.433870][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.471765][ T4398] device bridge_slave_1 left promiscuous mode [ 514.483928][ T9043] usb 10-1: USB disconnect, device number 4 [ 514.512601][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.567368][ T4398] device bridge_slave_0 left promiscuous mode [ 514.567513][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.580966][ T4398] bond3 (unregistering): Released all slaves [ 514.628682][ T4398] bond2 (unregistering): Released all slaves [ 514.790098][T12524] x_tables: duplicate underflow at hook 1 [ 515.497692][ T4398] bond1 (unregistering): Released all slaves [ 518.380871][ T4398] team0 (unregistering): Port device team_slave_1 removed [ 519.347218][ T4398] team0 (unregistering): Port device team_slave_0 removed [ 521.121967][T12580] SET target dimension over the limit! [ 521.732390][ T4398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.946462][ T4398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.392257][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 523.392277][ T27] audit: type=1326 audit(1787673749.606:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.9.2081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 523.496486][ T27] audit: type=1326 audit(1787673749.626:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.9.2081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 523.527311][ T27] audit: type=1326 audit(1787673749.626:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.9.2081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 523.528378][ T4398] bond0 (unregistering): Released all slaves [ 523.562355][ T27] audit: type=1326 audit(1787673749.626:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.9.2081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 523.607800][ T27] audit: type=1326 audit(1787673749.626:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.9.2081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 523.633453][ T27] audit: type=1326 audit(1787673749.626:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.9.2081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 523.658404][ T27] audit: type=1326 audit(1787673749.626:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.9.2081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 523.688860][ T27] audit: type=1326 audit(1787673749.626:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.9.2081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 523.718543][ T27] audit: type=1326 audit(1787673749.626:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.9.2081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 523.750681][ T27] audit: type=1326 audit(1787673749.626:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.9.2081" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0616b9e0d9 code=0x7ffc0000 [ 523.863990][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2056'. [ 523.880842][T12528] netlink: 'syz.2.2062': attribute type 4 has an invalid length. [ 524.195546][T12531] netlink: 'syz.2.2062': attribute type 4 has an invalid length. [ 525.102638][T12602] device syzkaller0 entered promiscuous mode [ 527.030101][T12650] loop7: detected capacity change from 0 to 128 [ 527.048748][T12650] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 527.124463][T12650] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 527.159053][T12650] ext2 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.367518][ T7730] EXT4-fs (loop7): unmounting filesystem. [ 531.248654][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2095'. [ 532.110310][T12690] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2103'. [ 532.638427][T12687] loop9: detected capacity change from 0 to 131072 [ 532.658034][T12687] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 532.666287][T12687] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 532.675950][T12687] F2FS-fs (loop9): invalid crc value [ 532.734352][T12687] F2FS-fs (loop9): Found nat_bits in checkpoint [ 532.829347][T12687] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 532.836586][T12687] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 533.510629][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 533.526344][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 533.535114][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 533.546959][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 533.555238][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 533.563857][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 533.673417][T12717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.779795][T12719] bond1: (slave ip6erspan0): making interface the new active one [ 533.821007][T12719] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 533.850258][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 534.106874][ T4397] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.136622][ T4397] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.012763][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.020197][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.169890][T12755] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.634234][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 536.092912][T12732] device dummy0 left promiscuous mode [ 536.846444][T12782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2120'. [ 537.241090][T12732] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.250323][T12732] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.259363][T12732] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.268361][T12732] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.277553][T12732] device geneve2 left promiscuous mode [ 537.297998][T12732] device bond1 left promiscuous mode [ 537.303404][T12732] device bond2 left promiscuous mode [ 537.334115][T12732] device ip6gretap1 left promiscuous mode [ 537.341772][T12732] device ip6erspan0 left promiscuous mode [ 537.351435][T12732] device bond5 left promiscuous mode [ 537.361921][T12732] device bond6 left promiscuous mode [ 537.370173][T12732] device team0 left promiscuous mode [ 537.375758][T12732] device team_slave_0 left promiscuous mode [ 537.381772][T12732] device team_slave_1 left promiscuous mode [ 537.427681][ T4397] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.439999][ T4397] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.471267][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 537.483281][T12781] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2120'. [ 537.499001][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 537.510716][T12781] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2120'. [ 537.525335][T12781] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2120'. [ 537.635115][ T4397] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.767939][ T4397] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.072563][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 538.840622][ T4397] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.862629][ T4397] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.158727][T12720] chnl_net:caif_netlink_parms(): no params data found [ 539.318841][T12800] loop7: detected capacity change from 0 to 512 [ 539.558219][T12800] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 539.644432][T12800] System zones: 0-2, 18-18, 34-35 [ 539.668014][T12800] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 539.959382][T12800] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.152225][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 540.554769][T12720] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.561978][T12720] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.583979][T12720] device bridge_slave_0 entered promiscuous mode [ 540.594357][ T7730] EXT4-fs (loop7): unmounting filesystem. [ 540.664993][T12720] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.714194][T12720] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.754938][T12720] device bridge_slave_1 entered promiscuous mode [ 540.858922][T12824] device syzkaller0 left promiscuous mode [ 540.918692][T12720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.946536][T12720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.960420][ T4397] tipc: Disabling bearer [ 540.987289][ T4397] tipc: Left network mode [ 541.072643][T12826] netlink: 'syz.9.2132': attribute type 12 has an invalid length. [ 541.140925][T12720] team0: Port device team_slave_0 added [ 542.527674][T12720] team0: Port device team_slave_1 added [ 542.535574][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 543.192705][T12852] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12854] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12852] [ 543.527520][T12720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.535127][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.566175][T12720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.579129][T12720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.602468][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.695536][T12720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.206614][T12869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.319719][T12869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.348456][T12720] device hsr_slave_0 entered promiscuous mode [ 545.284550][T12720] device hsr_slave_1 entered promiscuous mode [ 545.301448][T12720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.311555][T12720] Cannot create hsr debugfs directory [ 545.775693][T12882] loop7: detected capacity change from 0 to 512 [ 545.842255][T12882] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.2155: iget: bad i_size value: 38620345925642 [ 545.861209][T12882] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.2155: couldn't read orphan inode 15 (err -117) [ 546.032672][T12882] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 546.262219][T12890] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 546.361826][ T6214] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 464 with error 28 [ 546.408992][ T6214] EXT4-fs (loop7): This should not happen!! Data will be lost [ 546.408992][ T6214] [ 546.452875][ T6214] EXT4-fs (loop7): Total free blocks count 0 [ 546.479379][ T6214] EXT4-fs (loop7): Free/Dirty block details [ 546.502699][ T6214] EXT4-fs (loop7): free_blocks=0 [ 546.510297][T12900] netlink: 'syz.6.2149': attribute type 12 has an invalid length. [ 546.532184][ T6214] EXT4-fs (loop7): dirty_blocks=468 [ 546.537537][ T6214] EXT4-fs (loop7): Block reservation details [ 546.568245][ T6214] EXT4-fs (loop7): i_reserved_data_blocks=468 [ 546.604801][T12882] EXT4-fs (loop7): shut down requested (0) [ 547.622322][T12925] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12927] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12925] [ 549.513052][T12943] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.2158'. [ 550.153695][ T4397] device hsr_slave_0 left promiscuous mode [ 550.166964][ T4397] device hsr_slave_1 left promiscuous mode [ 550.181899][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.209670][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.264594][ T4397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.282785][ T4397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.304887][ T4397] device bridge_slave_1 left promiscuous mode [ 550.349737][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.554915][ T4397] device bridge_slave_0 left promiscuous mode [ 551.671724][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.844160][ T4397] device veth1_macvtap left promiscuous mode [ 551.870661][ T4397] device veth0_macvtap left promiscuous mode [ 551.891036][ T4397] device veth1_vlan left promiscuous mode [ 551.911202][ T4397] device veth0_vlan left promiscuous mode [ 553.788657][T13025] SET target dimension over the limit! [ 557.679196][ T4397] team0 (unregistering): Port device team_slave_1 removed [ 557.778751][T13050] sctp: [Deprecated]: syz.6.2183 (pid 13050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.778751][T13050] Use struct sctp_sack_info instead [ 557.878250][ T4397] team0 (unregistering): Port device team_slave_0 removed [ 558.073105][ T4397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.188902][ T4397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.210386][ T4397] bond0 (unregistering): (slave veth0): Releasing backup interface [ 559.428333][ T4397] bond0 (unregistering): Released all slaves [ 559.664640][T13019] device syzkaller0 entered promiscuous mode [ 559.961914][T12720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 560.018823][T12720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 560.914025][T12720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 560.964468][T12720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 561.410262][T12720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.440979][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 561.456281][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 561.499970][T12720] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.542480][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 561.581645][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 561.612558][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.619719][ T4464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.677313][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 561.928413][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 562.004310][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 562.895915][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.903155][ T4464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.960261][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.972007][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.141350][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 563.465186][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 563.476688][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 563.489993][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 563.554484][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 563.614178][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 563.779579][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 563.816062][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.008450][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.029746][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.058218][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.949118][T12720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 566.011460][T13106] sch_tbf: burst 6281 is lower than device lo mtu (9486) ! [ 566.361377][T13129] loop7: detected capacity change from 0 to 8 [ 566.400131][T13129] SQUASHFS error: Unable to read inode 0x11f [ 567.357632][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2206'. [ 567.566958][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 567.566977][ T27] audit: type=1326 audit(1787673793.796:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.7.2209" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769699e0d9 code=0x7ffc0000 [ 567.626975][ T27] audit: type=1326 audit(1787673793.796:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.7.2209" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769699e0d9 code=0x7ffc0000 [ 567.678707][ T27] audit: type=1326 audit(1787673793.796:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.7.2209" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769699e0d9 code=0x7ffc0000 [ 567.708498][ T27] audit: type=1326 audit(1787673793.796:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.7.2209" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769699e0d9 code=0x7ffc0000 [ 567.763521][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 567.771290][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 567.785343][ T27] audit: type=1326 audit(1787673793.796:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.7.2209" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f769699e0d9 code=0x7ffc0000 [ 567.828062][T12720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.854312][ T27] audit: type=1326 audit(1787673793.796:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.7.2209" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769699e0d9 code=0x7ffc0000 [ 567.922410][ T6213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 567.943573][T13166] x_tables: duplicate underflow at hook 4 [ 567.953600][ T6213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 567.963901][T13166] sctp: [Deprecated]: syz.2.2211 (pid 13166) Use of int in maxseg socket option. [ 567.963901][T13166] Use struct sctp_assoc_value instead [ 567.992357][ T27] audit: type=1326 audit(1787673793.796:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.7.2209" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769699e0d9 code=0x7ffc0000 [ 568.012881][ T6213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 568.050551][ T6213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 568.074742][ T27] audit: type=1326 audit(1787673793.796:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.7.2209" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769699e0d9 code=0x7ffc0000 [ 568.084819][T12720] device veth0_vlan entered promiscuous mode [ 568.145362][ T6213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 568.184317][ T6213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 568.232404][T13171] device syzkaller0 entered promiscuous mode [ 568.267663][ T27] audit: type=1326 audit(1787673793.796:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.7.2209" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769699e0d9 code=0x7ffc0000 [ 568.304728][T12720] device veth1_vlan entered promiscuous mode [ 569.383830][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 569.430070][ T27] audit: type=1326 audit(1787673793.796:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.7.2209" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f769699e0d9 code=0x7ffc0000 [ 569.501601][T12720] device veth0_macvtap entered promiscuous mode [ 569.515763][T12720] device veth1_macvtap entered promiscuous mode [ 569.544084][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 569.554028][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 569.607284][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 569.725102][T12720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.741117][T12720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.750304][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 569.752651][ T4280] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 569.764811][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 569.902348][ T4280] Bluetooth: hci0: Injecting HCI hardware error event [ 569.917253][ T4280] Bluetooth: hci0: hardware error 0x00 [ 570.154031][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 570.389778][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 570.450254][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.501826][T12720] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.538981][T12720] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.576118][T12720] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.627556][T12720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.982265][ T6213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.990625][ T6213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.998666][ T4280] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 572.057255][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 572.290952][T13223] overlayfs: failed to clone upperpath [ 572.306856][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.438478][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.674797][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 573.157175][T13229] device syzkaller0 left promiscuous mode [ 576.104609][T13277] loop1: detected capacity change from 0 to 128 [ 576.930275][T13300] netlink: 'syz.6.2242': attribute type 1 has an invalid length. [ 577.006796][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2242'. [ 577.126333][T13301] bond7: (slave veth5): Enslaving as an active interface with a down link [ 577.219184][T13300] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 577.315887][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2242'. [ 577.333432][T13301] 8021q: adding VLAN 0 to HW filter on device bond7 [ 577.401305][T13311] device syzkaller0 entered promiscuous mode [ 578.578909][T13331] netlink: 'syz.6.2258': attribute type 2 has an invalid length. [ 578.868772][T13331] tipc: Started in network mode [ 578.896430][T13331] tipc: Node identity c67cc9b27f4e, cluster identity 4711 [ 579.297290][T13331] tipc: Enabled bearer , priority 0 [ 579.831536][T13346] device syzkaller0 entered promiscuous mode [ 580.502819][ T4320] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 580.737796][ T4320] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.752497][ T4320] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.788684][ T4320] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 580.811041][ T4320] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.830690][ T4320] usb 10-1: config 0 descriptor?? [ 581.259557][ T4320] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 581.282235][ T4320] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 581.289094][ T4320] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 581.316824][ T4320] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 581.324649][ T4320] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 581.331976][ T4320] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 581.339368][ T4320] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 581.348058][ T4320] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0 [ 582.277010][ T4320] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 582.289366][ T4320] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 582.304592][ T4320] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -71 [ 582.315359][ T4320] usb 10-1: USB disconnect, device number 5 [ 582.447364][T13373] fido_id[13373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 583.983597][ T5982] tipc: Node number set to 3107113394 [ 583.989569][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2255'. [ 584.171349][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2257'. [ 584.198766][T13384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.248496][T13384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 584.284597][T13384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.317809][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2260'. [ 585.327799][T13400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.335575][T13400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.359329][T13400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.367330][T13400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.304150][T13430] smc: net device lo applied user defined pnetid SYZ0 [ 587.750687][T13442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2272'. [ 588.705627][T13449] device team0 entered promiscuous mode [ 588.725114][T13449] device team_slave_0 entered promiscuous mode [ 588.732707][T13449] device team_slave_1 entered promiscuous mode [ 588.754695][T13449] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 588.784215][T13449] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 590.319244][T13484] loop9: detected capacity change from 0 to 128 [ 590.378151][T13485] device team0 entered promiscuous mode [ 590.409395][T13484] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 590.441908][T13485] device team_slave_0 entered promiscuous mode [ 590.481105][T13485] device team_slave_1 entered promiscuous mode [ 590.503704][T13485] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 590.527471][T13485] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 590.606821][T13490] bridge0: port 3(vlan2) entered blocking state [ 590.629873][T13490] bridge0: port 3(vlan2) entered disabled state [ 590.640165][T13490] device vlan2 entered promiscuous mode [ 590.649512][T13490] device bond0 entered promiscuous mode [ 590.655830][T13490] device bond_slave_0 entered promiscuous mode [ 590.665028][T13490] device bond_slave_1 entered promiscuous mode [ 590.671683][T13490] device macvlan2 entered promiscuous mode [ 590.679186][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2281'. [ 594.418966][ T6213] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 596.730810][T13579] loop1: detected capacity change from 0 to 16 [ 596.809006][T13579] /dev/loop1: Can't open blockdev [ 596.838950][T13074] udevd[13074]: incorrect erofs checksum on /dev/loop1 [ 599.502298][T13596] netlink: 'syz.9.2305': attribute type 4 has an invalid length. [ 599.611677][T13598] netlink: 'syz.9.2305': attribute type 4 has an invalid length. [ 600.090815][T13607] loop9: detected capacity change from 0 to 256 [ 600.120206][T13607] exfat: Unknown parameter '' [ 600.204513][T13609] device syzkaller0 entered promiscuous mode [ 600.228629][T13609] tipc: Started in network mode [ 600.246660][T13609] tipc: Node identity 468b737c0159, cluster identity 4711 [ 600.266204][T13609] tipc: Enabled bearer , priority 0 [ 600.289673][T13604] tipc: Resetting bearer [ 601.127437][T13604] tipc: Disabling bearer [ 602.483193][T13642] 9pnet_fd: p9_fd_create_unix (13642): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 606.852951][T13668] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2323'. [ 612.743866][T13728] loop7: detected capacity change from 0 to 512 [ 612.859848][T13728] EXT4-fs (loop7): can't read group descriptor 0 [ 613.980375][T13763] loop9: detected capacity change from 0 to 512 [ 613.991335][T13764] loop7: detected capacity change from 0 to 2048 [ 614.099586][T13763] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.2343: iget: bad i_size value: 38620345925642 [ 614.176640][T13764] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 614.201473][T13763] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.2343: couldn't read orphan inode 15 (err -117) [ 614.242416][T13764] ext4 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 614.351814][T13763] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 614.378279][T13764] fs-verity: sha512 using implementation "sha512-avx2" [ 615.022199][T13766] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 615.131459][T13549] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 240 with error 28 [ 615.207633][T13549] EXT4-fs (loop9): This should not happen!! Data will be lost [ 615.207633][T13549] [ 615.221376][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2346'. [ 615.241945][T13549] EXT4-fs (loop9): Total free blocks count 0 [ 615.272134][T13549] EXT4-fs (loop9): Free/Dirty block details [ 615.278123][T13549] EXT4-fs (loop9): free_blocks=0 [ 615.444360][ T7730] EXT4-fs (loop7): unmounting filesystem. [ 615.462068][T13549] EXT4-fs (loop9): dirty_blocks=240 [ 615.467476][T13549] EXT4-fs (loop9): Block reservation details [ 615.473892][T13549] EXT4-fs (loop9): i_reserved_data_blocks=240 [ 617.754216][ T8682] EXT4-fs (loop9): unmounting filesystem. [ 617.932710][T13795] rdma_rxe: rxe_register_device failed with error -23 [ 618.074146][T13792] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 618.196351][T13792] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 620.892521][T13795] rdma_rxe: failed to add ip6gretap0 [ 623.060549][T13833] netlink: 'syz.7.2361': attribute type 49 has an invalid length. [ 624.920519][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.927094][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.404270][T13863] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2368'. [ 626.475830][T13876] loop9: detected capacity change from 0 to 2048 [ 626.513675][T13876] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 626.576952][T13876] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 626.635843][T13876] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 626.702588][T13876] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 626.730727][T13876] UDF-fs: Scanning with blocksize 512 failed [ 626.788074][T13876] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 626.845997][T13876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.206365][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 627.206381][ T27] audit: type=1800 audit(1787673853.436:300): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2373" name="file1" dev="loop9" ino=838 res=0 errno=0 [ 627.241967][T13890] netlink: 'syz.1.2376': attribute type 49 has an invalid length. [ 628.112319][T13904] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2379'. [ 632.202630][T13958] netlink: 'syz.6.2389': attribute type 49 has an invalid length. [ 632.753529][T13970] ip_tables: iptables: counters copy to user failed while replacing table [ 633.638223][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2394'. [ 633.970898][T13984] device bond2 entered promiscuous mode [ 634.539715][T13997] siw: device registration error -23 [ 634.567214][T13997] rdma_rxe: rxe_register_device failed with error -23 [ 634.592424][T13997] rdma_rxe: failed to add ip6gretap0 [ 635.053159][T14010] binder: 14008:14010 ioctl 4018620d 0 returned -22 [ 635.224372][T14010] binder: 14008:14010 ioctl c0306201 0 returned -14 [ 637.341838][T14035] misc userio: Invalid payload size [ 637.431403][T14035] misc userio: Invalid payload size [ 637.667074][T14035] atkbd serio2: Spurious ACK on . Some program might be trying to access hardware directly. [ 637.686356][ T4673] input: AT Raw Set 2 keyboard as /devices/serio2/input/input8 [ 637.916000][T14044] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2414'. [ 639.637794][T14034] [ 639.640193][T14034] ====================================================== [ 639.647242][T14034] WARNING: possible circular locking dependency detected [ 639.654347][T14034] syzkaller #0 Not tainted [ 639.658776][T14034] ------------------------------------------------------ [ 639.665967][T14034] syz.9.2411/14034 is trying to acquire lock: [ 639.672037][T14034] ffff888142e94578 (kn->active#80){++++}-{0:0}, at: __kernfs_remove+0x3f4/0x6c0 [ 639.681167][T14034] [ 639.681167][T14034] but task is already holding lock: [ 639.688617][T14034] ffffffff8d841608 (serio_mutex){+.+.}-{3:3}, at: serio_unregister_port+0x2b/0x150 [ 639.698012][T14034] [ 639.698012][T14034] which lock already depends on the new lock. [ 639.698012][T14034] [ 639.708425][T14034] [ 639.708425][T14034] the existing dependency chain (in reverse order) is: [ 639.717437][T14034] [ 639.717437][T14034] -> #1 (serio_mutex){+.+.}-{3:3}: [ 639.724767][T14034] __mutex_lock+0x12d/0xae0 [ 639.729921][T14034] drvctl_store+0x2a/0xae0 [ 639.734956][T14034] kernfs_fop_write_iter+0x3a0/0x520 [ 639.740777][T14034] vfs_write+0x482/0x9a0 [ 639.745606][T14034] ksys_write+0x14d/0x260 [ 639.750465][T14034] do_syscall_64+0x4c/0xa0 [ 639.755434][T14034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.761907][T14034] [ 639.761907][T14034] -> #0 (kn->active#80){++++}-{0:0}: [ 639.769393][T14034] __lock_acquire+0x2d18/0x7c40 [ 639.774844][T14034] lock_acquire+0x1bb/0x4a0 [ 639.779986][T14034] kernfs_drain+0x31a/0x6d0 [ 639.785059][T14034] __kernfs_remove+0x3f4/0x6c0 [ 639.790451][T14034] kernfs_remove_by_name_ns+0xd8/0x150 [ 639.796791][T14034] sysfs_remove_group+0xfd/0x290 [ 639.802261][T14034] sysfs_remove_groups+0x50/0xa0 [ 639.807729][T14034] device_remove_attrs+0x1c8/0x270 [ 639.813452][T14034] device_del+0x637/0xa80 [ 639.818317][T14034] serio_destroy_port+0x34a/0x470 [ 639.823870][T14034] serio_unregister_port+0x12c/0x150 [ 639.829687][T14034] userio_char_release+0x7f/0xb0 [ 639.835147][T14034] __fput+0x20a/0x8b0 [ 639.839754][T14034] task_work_run+0x1d0/0x260 [ 639.844939][T14034] exit_to_user_mode_loop+0xe6/0x110 [ 639.850819][T14034] exit_to_user_mode_prepare+0xee/0x180 [ 639.856898][T14034] syscall_exit_to_user_mode+0x16/0x40 [ 639.863060][T14034] do_syscall_64+0x58/0xa0 [ 639.868029][T14034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.874559][T14034] [ 639.874559][T14034] other info that might help us debug this: [ 639.874559][T14034] [ 639.884811][T14034] Possible unsafe locking scenario: [ 639.884811][T14034] [ 639.892269][T14034] CPU0 CPU1 [ 639.897633][T14034] ---- ---- [ 639.902997][T14034] lock(serio_mutex); [ 639.907110][T14034] lock(kn->active#80); [ 639.913900][T14034] lock(serio_mutex); [ 639.920526][T14034] lock(kn->active#80); [ 639.924791][T14034] [ 639.924791][T14034] *** DEADLOCK *** [ 639.924791][T14034] [ 639.933042][T14034] 1 lock held by syz.9.2411/14034: [ 639.938196][T14034] #0: ffffffff8d841608 (serio_mutex){+.+.}-{3:3}, at: serio_unregister_port+0x2b/0x150 [ 639.948143][T14034] [ 639.948143][T14034] stack backtrace: [ 639.954555][T14034] CPU: 0 PID: 14034 Comm: syz.9.2411 Not tainted syzkaller #0 [ 639.962171][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.972327][T14034] Call Trace: [ 639.975618][T14034] [ 639.978666][T14034] dump_stack_lvl+0x188/0x24e [ 639.983448][T14034] ? load_image+0x410/0x410 [ 639.988013][T14034] ? show_regs_print_info+0x12/0x12 [ 639.993250][T14034] ? print_circular_bug+0x12b/0x1a0 [ 639.998575][T14034] check_noncircular+0x296/0x330 [ 640.003538][T14034] ? add_chain_block+0x9b0/0x9b0 [ 640.008581][T14034] ? lockdep_lock+0xf1/0x1f0 [ 640.013187][T14034] ? _find_first_zero_bit+0xd2/0x100 [ 640.018636][T14034] __lock_acquire+0x2d18/0x7c40 [ 640.023505][T14034] ? stack_trace_save+0xa6/0xf0 [ 640.028368][T14034] ? verify_lock_unused+0x140/0x140 [ 640.033578][T14034] ? mark_lock+0x94/0x320 [ 640.037925][T14034] ? __lock_acquire+0x1465/0x7c40 [ 640.042969][T14034] ? kasan_save_free_info+0x27/0x40 [ 640.048213][T14034] ? slab_free_freelist_hook+0x133/0x1b0 [ 640.053855][T14034] ? kernfs_remove_by_name_ns+0xe0/0x150 [ 640.059521][T14034] ? sysfs_remove_groups+0x50/0xa0 [ 640.064645][T14034] lock_acquire+0x1bb/0x4a0 [ 640.069169][T14034] ? __kernfs_remove+0x3f4/0x6c0 [ 640.074465][T14034] ? mark_lock+0x94/0x320 [ 640.078818][T14034] ? read_lock_is_recursive+0x10/0x10 [ 640.084203][T14034] ? up_write+0x1b6/0x410 [ 640.088646][T14034] kernfs_drain+0x31a/0x6d0 [ 640.093155][T14034] ? __kernfs_remove+0x3f4/0x6c0 [ 640.098145][T14034] ? kernfs_show+0x370/0x370 [ 640.102750][T14034] __kernfs_remove+0x3f4/0x6c0 [ 640.107608][T14034] kernfs_remove_by_name_ns+0xd8/0x150 [ 640.113091][T14034] sysfs_remove_group+0xfd/0x290 [ 640.118235][T14034] sysfs_remove_groups+0x50/0xa0 [ 640.123185][T14034] device_remove_attrs+0x1c8/0x270 [ 640.128488][T14034] ? fw_devlink_unblock_consumers+0x250/0x250 [ 640.134570][T14034] ? up_write+0x1b6/0x410 [ 640.138908][T14034] ? kernfs_remove_by_name_ns+0x113/0x150 [ 640.144652][T14034] device_del+0x637/0xa80 [ 640.149093][T14034] ? kill_device+0x160/0x160 [ 640.153693][T14034] ? __fsnotify_parent+0x72a/0x820 [ 640.158957][T14034] serio_destroy_port+0x34a/0x470 [ 640.164344][T14034] serio_unregister_port+0x12c/0x150 [ 640.169730][T14034] userio_char_release+0x7f/0xb0 [ 640.174717][T14034] ? userio_char_open+0x190/0x190 [ 640.179747][T14034] __fput+0x20a/0x8b0 [ 640.183823][T14034] task_work_run+0x1d0/0x260 [ 640.188488][T14034] ? task_work_cancel+0x220/0x220 [ 640.193518][T14034] ? __close_range+0x20c/0x770 [ 640.198386][T14034] ? exit_to_user_mode_loop+0x3b/0x110 [ 640.203858][T14034] exit_to_user_mode_loop+0xe6/0x110 [ 640.209158][T14034] exit_to_user_mode_prepare+0xee/0x180 [ 640.214727][T14034] syscall_exit_to_user_mode+0x16/0x40 [ 640.220194][T14034] do_syscall_64+0x58/0xa0 [ 640.224622][T14034] ? clear_bhb_loop+0x60/0xb0 [ 640.229318][T14034] ? clear_bhb_loop+0x60/0xb0 [ 640.234008][T14034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.240260][T14034] RIP: 0033:0x7f0616b9e0d9 [ 640.244690][T14034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.264388][T14034] RSP: 002b:00007ffcbbfbb778 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 640.272835][T14034] RAX: 0000000000000000 RBX: 00007f0616e27da0 RCX: 00007f0616b9e0d9 [ 640.280827][T14034] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 640.288830][T14034] RBP: 00007f0616e27da0 R08: 0000000000000006 R09: 0000000000000000 [ 640.296819][T14034] R10: 00007f0616e27cb0 R11: 0000000000000246 R12: 000000000009bba8 [ 640.304809][T14034] R13: 00007f0616e25fac R14: 000000000009bb43 R15: 00007ffcbbfbb880 [ 640.312795][T14034]