last executing test programs: 29m7.260978093s ago: executing program 32 (id=191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_io_uring_setup(0x2afd, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x1, 0x800000}, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 28m37.309660333s ago: executing program 33 (id=267): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @local, 0x0, 0x0, 0x5a, 0xfffffffffffffff9}) 27m34.97995696s ago: executing program 34 (id=695): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[], 0x0) 26m9.121120742s ago: executing program 35 (id=1184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="3e460f01c5c744240000200000c74424020d000000c7442406000000000f011c24f2400f22db666566460f71e51c0f01df0f01d18f497c80ea400f01c92e6526460f07660fd89e0b000000", 0x4b}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xeeee0000, {}, 0x0, 0xc}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25m38.257527871s ago: executing program 36 (id=1327): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1'}, 0xb) write$binfmt_misc(r1, &(0x7f0000000040)='\t', 0x27) 24m43.084464919s ago: executing program 37 (id=1576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000280)=0x4, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800000000f4fffffe00000000", @ANYRES32=0x0, @ANYBLOB="312000000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="ef", 0x1}], 0x1}}], 0x1, 0x4004041) 24m30.902724419s ago: executing program 38 (id=1629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 23m42.152968741s ago: executing program 39 (id=1919): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) 23m0.356962011s ago: executing program 40 (id=2174): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc408, 0x103) 22m3.652056898s ago: executing program 41 (id=2481): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 20m12.17838711s ago: executing program 42 (id=3132): prlimit64(0x0, 0xe, &(0x7f0000002d80)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r1) 19m22.417899375s ago: executing program 5 (id=3459): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 19m19.107182571s ago: executing program 5 (id=3474): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x40, 0x7fff0000}]}) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xfffffffffffffde9, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff3}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m18.768188562s ago: executing program 5 (id=3476): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00000000ffff"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) 19m17.660019557s ago: executing program 5 (id=3484): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x1, 0x5547, &(0x7f0000006040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 19m15.847982146s ago: executing program 5 (id=3487): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 19m13.559672719s ago: executing program 5 (id=3497): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) connect$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x3c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x6104c3, 0x4) openat$cgroup_ro(r2, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 19m12.8869052s ago: executing program 43 (id=3497): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) connect$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x3c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x6104c3, 0x4) openat$cgroup_ro(r2, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 11m29.692160234s ago: executing program 4 (id=5135): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x10, 0x10001, @l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x404c000) 11m27.381765235s ago: executing program 4 (id=5143): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) eventfd(0x4) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fanotify_init(0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 11m26.861062501s ago: executing program 4 (id=5147): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c) 11m23.337843649s ago: executing program 4 (id=5155): syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040) r3 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) 11m20.090328048s ago: executing program 4 (id=5163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x4}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 11m15.144169611s ago: executing program 4 (id=5179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000001) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x7, 0x41217df2c9ce37e8}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 11m12.658799467s ago: executing program 44 (id=5179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000001) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x7, 0x41217df2c9ce37e8}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 10m8.425862109s ago: executing program 9 (id=5336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x40011, 0x0, 0xfb, 0x0, 0x0, 0x0) r4 = gettid() kcmp(r4, r3, 0xb44c031f136537ae, 0xffffffffffffffff, 0xffffffffffffffff) 10m5.007907094s ago: executing program 9 (id=5341): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000003c0)={0x0, 0x4000, 0x800, 0x5, 0x3}, 0x20) 10m1.999377197s ago: executing program 9 (id=5351): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1734b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfbb}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x240}, {r2, 0x4004}, {r3, 0x10}, {r2, 0x4000}, {r2, 0x4100}, {r3}], 0x6, 0x0, 0x0, 0x0) 9m59.972691219s ago: executing program 9 (id=5353): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 9m57.448893876s ago: executing program 9 (id=5358): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) iopl(0x3) keyctl$setperm(0x5, 0x0, 0xb8e89b3b78e5d4f1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4, 0x2, 0x4, 0x8000446, {}, {0x7, 0x0, 0x0, 0x0, 0x3}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x405}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) 9m54.494108717s ago: executing program 9 (id=5363): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 9m38.325217704s ago: executing program 45 (id=5363): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 9m10.366343802s ago: executing program 7 (id=5429): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_usb_connect(0x3, 0x24, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x5b) keyctl$revoke(0x3, r1) 9m7.154651201s ago: executing program 7 (id=5435): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 9m5.380422525s ago: executing program 7 (id=5439): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000d8a000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000446000/0x3000)=nil, 0x3000) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 9m3.675395557s ago: executing program 7 (id=5444): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x34}}, 0x0) 8m59.216865124s ago: executing program 7 (id=5450): syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @broadcast, @void, {@can={0xc, {{0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "042817c644f84e53"}}}}, 0x0) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x1, 0x213) msgget(0x1, 0x501) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 8m57.881933245s ago: executing program 7 (id=5453): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b5c000/0x400000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) 8m41.526866927s ago: executing program 46 (id=5453): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b5c000/0x400000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) 6m39.889772182s ago: executing program 0 (id=5656): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x1e, 0x80}, 0x2c) r4 = socket(0x2, 0x80805, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 6m38.730342547s ago: executing program 0 (id=5658): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845) 6m37.449667377s ago: executing program 0 (id=5662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 6m35.559510675s ago: executing program 0 (id=5664): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) r1 = getpgid(0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f00000003c0)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xcc\xf6\xc0H\xa2\x83?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f\x00\x00\x00\xe2\x83\xf1\x0eg\a\xec\xac\xa5\x94~v\x80P5\xf9/$', 0x4) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r5], 0x2c}}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) 6m33.198327208s ago: executing program 0 (id=5670): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chmod(0x0, 0x100) syz_open_dev$usbfs(0x0, 0x6, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) ftruncate(0xffffffffffffffff, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(0xffffffffffffffff, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) 6m31.536173748s ago: executing program 0 (id=5672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x5, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 6m16.063047694s ago: executing program 47 (id=5672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x5, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 5m26.146433046s ago: executing program 8 (id=5763): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0xffffffffffffffce, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m25.004795791s ago: executing program 8 (id=5757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r5 = socket(0x29, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 5m23.09347542s ago: executing program 8 (id=5761): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="3c465f3b07fae25528828391200cffb6680254485fe3f65ad7951010d12743b6a4af03783b0e2b045c7ae025a31a351ef506759bb025921199b7f5932d23a66159fa477bfd9278a1d3397c", 0x4b}], 0x1}, 0x44000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", 'O\x00', "ecba26893bcdc493"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 5m21.815469229s ago: executing program 8 (id=5766): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 5m16.715230746s ago: executing program 8 (id=5770): io_setup(0x2, &(0x7f00000001c0)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 5m13.305021591s ago: executing program 8 (id=5774): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/4096, 0xc26}, 0x20ff}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r6, @broadcast, @local}, 0xc) write$FUSE_LK(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, {{0x80000000, 0xfff, 0x2}}}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 4m57.997819771s ago: executing program 48 (id=5774): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/4096, 0xc26}, 0x20ff}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r6, @broadcast, @local}, 0xc) write$FUSE_LK(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, {{0x80000000, 0xfff, 0x2}}}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 18.671426907s ago: executing program 6 (id=6198): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0xfb7, 0x840) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 17.290423209s ago: executing program 2 (id=6202): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xea, &(0x7f0000002380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0xfb, 0x20, 0x7c, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x57}, [@cluster_info_segment={0x6, 0x20, 0x7, 0x94, 0x6}, @input_terminal={0x14, 0x24, 0x2, 0x6, 0x100, 0x3, 0x1, 0x200, 0x6, 0x5, 0x81, 0x7}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x403, 0x1, 0x5, 0x0, 0x373, 0x9, 0x5, 0xffff}, @mixer_unit={0x5, 0x24, 0x5, 0x3, 0x7}, @input_terminal={0x14, 0x24, 0x2, 0x6, 0x100, 0x2, 0x2, 0x8, 0x3, 0x2, 0x6, 0x8c66}, @mixer_unit={0x6, 0x24, 0x5, 0x3, 0x0, "bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0x7, "04", 'il'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x2c, 0x3, {0xa, 0x25, 0x25, 0x4, 0xf, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x6, 0x2, '\x00', "129feb"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x40, 0xff, {0xa, 0x25, 0x25, 0xd, 0x4, 0x2}}}}}}}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x300, 0x18, 0x0, 0x6, 0x10, 0xb}, 0x5c, &(0x7f00000024c0)={0x5, 0xf, 0x5c, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0x6, 0x0, 0x800, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "b5837e6baf5fc67463ce0a584bcf461c"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "6158ced4135dfe0ca0e1b51e0cf06b55"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x6, 0xf00, 0x762, [0xffc000, 0xc0, 0xffff0f, 0xc0, 0xf, 0xff3fc0]}]}}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x124c, &(0x7f0000002700)={[{0xf6, 0x4e00, "a91bbedd2da7cfb639c218d329ceba6bbc89d4ea389eae7a063b79b4534b76bbf1ace1755cd2cdc7c6c5f9aabb9a1d3d5270a039f7769ba4eeadae780bef62f1f63d0fbb1e7abae7cc8ff1c8d8cddd8d1dde80c4caea9cc4cb33147d2a3f44076ad99c67750fa4b9c3920ae140a35a94ea99f4282545d4974accb82c04308cd62ced0fe80832a47f42060a42dcc0a414118a34b095e708fedecdbcc46be5d2ade8393e7812db788f628669bc8f4f141ff9c4dc09addff8e41eaadbff21e8885b80e35c0392ee64c6e7adc6606e14d57ae689fa2c16e77491ed500d95eb41c0c78dcee30bcaf31a4b8408561282668fb72196b94af1e1"}, {0xca, 0x4e00, "b548d8185bf0e0ee4cdd83e38f2768b9f85f6582a3c936d1b7f8ccd126e4458a84371837c3117fce615c5750751ad0f0cebf44c9337b8a5ca707837efc3aa0c96ea55796b9c02172dcb2284bec7bf63a23d73894d9950499ebedc41c45cd7068843011ad947298740ae19c3a63e396683b660185288217871bfef8e85e4200538e241e441a7dc7d8b810f17f025458e00f8a0e74e7c4cd46c9dfd4e970cccf2490956b47f753e24fae2adcc34b3f98a2cff89b2b099baf4d7b8ecf47cee704e32658416e0c4c70b08ee1"}, {0x1000, 0x4e00, "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"}, {0x5, 0x4e00, "159cfb6479"}, {}, {0x60, 0x4e00, "5e204f2d3b00b9be96179222b8afdd029e829610037d039532f66f1c125d6e283844d2859f7c2329f6f6941e586f7177c211750bd359314dc8084576a55a2411b4627b1ddb713eb6cb2a90627cec6ca1f0527a2cf45a6f2b405ebff361d4b7f8"}, {0x3, 0x4e00, "86be17"}]}) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2000, 0x123) fchownat(r5, &(0x7f00000000c0)='./file0\x00', 0xee01, 0x0, 0x800) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000140)=""/210) r6 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r7 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) 16.27577425s ago: executing program 6 (id=6204): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) pipe(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xea8, 0xa) getpid() syz_clone3(&(0x7f0000001e00)={0x200000, &(0x7f0000000cc0), &(0x7f0000000d00), 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf8, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xf8}}, 0x0) 14.511919125s ago: executing program 2 (id=6207): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0xc5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbcb}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x355bb445}, {0x6, 0x11, 0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x20040) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000003d80)={0x0, {{0x2, 0x4e24, @loopback}}}, 0x88) prctl$PR_SET_PTRACER(0x59616d61, r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=@getsa={0x34, 0x12, 0x1, 0x70bd28, 0x25dfdbfd, {@in=@remote, 0x4d6, 0x2, 0xff}, [@mark={0xc, 0x15, {0x35075c, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44901}, 0x20048080) 14.132579976s ago: executing program 6 (id=6209): socket$kcm(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5d6, &(0x7f0000001e00)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xe3) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./bus\x00', 0x13d9c9a, 0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) socket$kcm(0x29, 0x7, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48810) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 11.612043174s ago: executing program 6 (id=6212): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f00000008c0)) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x800, &(0x7f00000001c0)={0x11, 0xf6, r4, 0x1, 0x28, 0x6, @remote}, 0x14) socket(0x40000000015, 0x5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(r6) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.015902493s ago: executing program 6 (id=6213): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000020008000840"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 10.015273173s ago: executing program 1 (id=6214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r5, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 8.933552946s ago: executing program 1 (id=6217): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001032dbd7000fc"], 0x1c}}, 0x200000c0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0x3000, {}, 0x1, 0x8000000000000000}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c9306298000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054bf000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012bdd2f2481bdc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.391847232s ago: executing program 3 (id=6218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x7, &(0x7f0000000680)=[0xee00, 0xee01, 0xee01, 0x0, 0xee01, 0xffffffffffffffff, 0x0]) waitid(0x1, r0, &(0x7f0000000300), 0x80000000, &(0x7f0000000540)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r0, 0xee01}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000fc0)=[@dead_binder_done], 0x0, 0x0, 0x0}) 8.352349404s ago: executing program 2 (id=6219): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp850,shname=win95,shortname=win95,shortname=lower,shortname=win95,shortname=winnt,uni_xlate=0,utf8=1,utf8=1,tz=UTC,shortname=lower,iocharset=cp775,shortname=winnt,check=strict,nnonumtail=1,\x00\x00\x00\x00'], 0x1, 0x289, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24801}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000004) fcntl$setlease(r4, 0x400, 0x0) unlink(&(0x7f0000000140)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 7.136283711s ago: executing program 2 (id=6220): syz_socket_connect_nvme_tcp() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) 7.032006684s ago: executing program 1 (id=6221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, 0x0, 0x40004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r2, 0x0, 0x21, 0x0, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 6.782276522s ago: executing program 3 (id=6222): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) shutdown(r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 6.101944903s ago: executing program 2 (id=6223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x35de9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0xf00, 0x1000) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=@deltfilter={0x2164, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x105c, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_POLICE={0x1048, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb4, 0x9a, 0xa7, 0x2afa, 0x3, 0x8, 0x7, 0xf13, 0x2e, 0x9, 0x1, 0xffffff99, 0x5, 0x8001, 0x6, 0x40, 0x5, 0xfff, 0x8, 0x7, 0x3, 0x19, 0x56, 0xd, 0x1, 0x5, 0xe4, 0xce, 0xffff5eb0, 0x80000000, 0x6, 0x1, 0x8, 0x7, 0x1, 0xb4200000, 0x1000, 0x5, 0x2, 0xb, 0x6, 0x2, 0x8, 0x200, 0x0, 0x3, 0x5, 0x2, 0x1, 0x0, 0x3, 0x1, 0x6ec0, 0xffff, 0x5, 0xffa6, 0xb, 0xdf, 0x2, 0x6, 0x3, 0x4, 0x8, 0x9dd, 0x7, 0x5, 0x6, 0x4, 0x2, 0x8, 0x10000, 0x7, 0xc, 0x3ff, 0x50e, 0x101, 0x9d89, 0x6, 0x7, 0x7, 0x7d05, 0x6, 0x10, 0x8, 0x9, 0x2, 0x3, 0x4, 0x6, 0x7fff, 0x3, 0x4, 0x7, 0x2, 0x5, 0x4, 0xa0, 0x8c, 0x94c, 0x5, 0x200, 0x9b64, 0x7fffffff, 0x1f4019dd, 0x2f86c00, 0xff, 0xa6c, 0x101, 0x8, 0x1, 0x4, 0x9, 0x17b0, 0x8f, 0x8001, 0x9, 0x7f, 0x9, 0x123f, 0x1, 0x5, 0x7, 0xded1, 0x86, 0x5, 0x8001, 0x2, 0x3, 0xcc, 0x5e1, 0xafd8, 0x7, 0x7ff, 0xc, 0x1, 0x6, 0x3, 0x9, 0x3, 0x40, 0x7, 0x7f, 0xc8, 0x1, 0x23, 0x80000001, 0x8, 0x0, 0x9, 0x6d9, 0x3, 0x2, 0x5aaf06d, 0xfffffc8b, 0xfffffffd, 0x5, 0x5, 0x6, 0x35f, 0x200000, 0x3, 0x2, 0x1, 0x1, 0x1, 0x4, 0x6, 0x2ec7, 0xd, 0xffffffff, 0x8, 0x5, 0x3b3, 0x6, 0x18b, 0x7, 0x0, 0x80000001, 0x2, 0xfffff4c1, 0x3, 0x3, 0xf0c, 0x125d, 0x7, 0x1, 0x1, 0x2, 0xb42, 0x10, 0x0, 0x7, 0x1, 0xfff, 0x4, 0x9, 0x5, 0x3, 0x2, 0x6, 0x3, 0x18, 0x9, 0x8, 0x654b, 0x10, 0x9, 0x4, 0x1, 0x33, 0x0, 0xc, 0x45f1, 0x5, 0xe350, 0x6, 0x5, 0xb, 0x2, 0x8, 0x7, 0x400, 0x10000, 0x635635d9, 0xfffffc01, 0xffffffff, 0x2f4f, 0x8, 0x80, 0x38, 0x9, 0x4, 0x6, 0x4, 0x8, 0x2, 0x5, 0x15, 0x7, 0x4, 0x8, 0xa, 0x4, 0x7, 0xffff8001, 0x7, 0x4, 0x1ff, 0x101, 0xf, 0x10, 0xffffddd3, 0x3, 0x4, 0x1, 0x800000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x21, 0x6, 0x7, 0x400, 0x0, 0x7, 0x3, 0x4, 0x9, 0xd9, 0x6, 0x10000, 0x4, 0xfffffff9, 0x249, 0x3, 0x4, 0x9, 0x80000001, 0xfff, 0xf, 0x9000000, 0x0, 0x9, 0xf, 0x8, 0x8, 0x3901b161, 0x800, 0x9, 0x5, 0x6, 0x80000001, 0x506f, 0x550053a5, 0x5, 0x2, 0x7, 0x281, 0xfffffff7, 0x5, 0x623, 0x7c59, 0x1ff, 0x7fff, 0x1ff, 0x4, 0x1, 0x1, 0x80000000, 0x8, 0x6ff0f0f8, 0x9, 0xc, 0x6, 0x1000, 0x7, 0x465, 0x8, 0xf, 0x7ff, 0x6, 0x4, 0xfffffff9, 0x1, 0x10001, 0x1, 0x9, 0x6, 0x2, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x4, 0x0, 0x9, 0x8000, 0x1, 0x7fff, 0xf4, 0x7, 0x3, 0x1000, 0x9b9, 0x2, 0xfffffff7, 0x67211bd1, 0x800, 0x2, 0x800, 0x5, 0x4, 0x81, 0xd9, 0x7, 0x7ff, 0x4, 0x3, 0x8001, 0xfff, 0x7fffffff, 0x1, 0x200, 0x100, 0x7, 0xfffffff7, 0x7, 0x2, 0x2, 0x2, 0x7c74, 0x80, 0x0, 0x6, 0x6, 0x9, 0x9, 0x0, 0x9, 0x7fff, 0x8, 0xfffffff8, 0x8001, 0x8, 0x6, 0x5, 0x41c, 0x7ff, 0x9, 0x2, 0x3, 0xfe5a, 0x100, 0x1, 0x8, 0x800000, 0x401, 0x5, 0x1ff, 0x3f, 0x1, 0x4, 0xffff, 0x9, 0x7, 0x1, 0x88, 0x7fffffff, 0x7, 0x7, 0x7ff, 0x3, 0x2, 0x7f, 0x57c2, 0x8, 0xc34, 0x0, 0x6, 0xa3dd, 0x7, 0xfffe00, 0x512eb0b3, 0x7, 0x2, 0x4a8d, 0xc, 0x5, 0xd97, 0x3, 0x10000, 0x1ac, 0x1, 0x59, 0x3, 0x2, 0x2, 0x5, 0x80, 0xdb98, 0x3c, 0x7, 0x9, 0x3ff, 0x50, 0x4a, 0x1, 0x7, 0x9, 0x81, 0x5, 0x9, 0x0, 0x14a6, 0x0, 0x7, 0x1, 0x101, 0xde2, 0x4, 0xffff, 0x1, 0x26c, 0x0, 0x0, 0x7, 0x401, 0x9, 0x7, 0x9, 0x2, 0x2, 0x400, 0x5, 0x4, 0x3, 0x8, 0x6, 0xbe, 0x1, 0x2, 0x0, 0xfffffffe, 0x3, 0x5, 0x8, 0xd6, 0x9, 0x7, 0x2, 0x0, 0x6, 0x1, 0x3, 0xfff, 0x2, 0x3, 0x7, 0x4bf5, 0x400, 0x200, 0x7, 0x7, 0xfffffff8, 0x2, 0x0, 0x8, 0x5, 0x0, 0x8001, 0xd6, 0x3ff, 0xe, 0x10200, 0x458]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x1, 0x1, 0x99, 0x8, 0x7, 0x3, 0xd2, 0x80000000, 0x3, 0x2, 0x7000, 0x5, 0xb, 0x1, 0xfffffffd, 0x5ac, 0xffff2ffb, 0x7, 0x7fffffff, 0xff, 0x1, 0x45, 0xfffffffc, 0x8, 0x7, 0x1, 0x1, 0xbeb2c51, 0x8, 0x9, 0x9, 0xe, 0x9, 0x1, 0x0, 0x4, 0x4, 0x2, 0x5, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x80, 0x4, 0x7, 0x7, 0x7, 0x3, 0x1bbe, 0x7, 0x3, 0x1, 0x9, 0xffffffff, 0x3, 0x3, 0x5, 0xfffffffd, 0x1, 0x3, 0x5, 0x0, 0x8, 0x2, 0x7, 0x0, 0x5, 0xa, 0x3, 0x3, 0x8cc3, 0x10, 0x1, 0x81, 0x9, 0x7, 0x8, 0xfff, 0x200, 0x4, 0x1, 0xfffffff8, 0xb7, 0x0, 0x44eb, 0x1, 0xe58c, 0xd51, 0x0, 0x3, 0xfffffffb, 0xc1d, 0x10000, 0x8, 0x3ff, 0x1, 0x9, 0x7, 0x7, 0x3, 0xea, 0x10001, 0x0, 0x3, 0x56d, 0x1, 0x0, 0x397, 0xeafe, 0x1, 0x5, 0x1, 0x5758, 0x1, 0x9, 0x1430, 0x0, 0x3, 0xffff, 0x370, 0x5, 0xfffffffe, 0x7fff, 0x3, 0x5, 0x0, 0x10, 0x80, 0x259, 0x8001, 0x5, 0x8, 0x9be, 0x0, 0x2, 0x2, 0x9, 0x6, 0x401, 0x33b8a6b7, 0x8000, 0x7fffffff, 0xfffffff8, 0xfffffffb, 0x101, 0x0, 0x4, 0x8000, 0x9, 0x1, 0x5, 0x3, 0x1, 0x0, 0x9, 0xfffffff8, 0xff, 0x9, 0x9, 0x7f, 0xfe, 0x1, 0x524236cb, 0x5, 0xe, 0xe, 0xc, 0xfffff2bf, 0xff, 0x4, 0xfffffffc, 0x8, 0x1, 0x200, 0x7, 0x22, 0xfffffff8, 0xfffffff9, 0x4, 0x8, 0x7, 0x10000, 0x4, 0xfffffe00, 0x10, 0x80000000, 0x6, 0x2, 0xc, 0x0, 0x5, 0x1000, 0x7fff, 0x40, 0x7, 0x0, 0x3, 0xffff, 0x4, 0x3, 0xfbd6, 0x81, 0xffffff16, 0x40, 0xff, 0x0, 0x8, 0x2, 0xffffff00, 0x80000000, 0x4, 0x1, 0x101, 0xf127137, 0x6, 0xc, 0x2a9f, 0x0, 0x0, 0xb4, 0x100, 0x1, 0x101, 0x804c, 0xffff, 0x8, 0x4, 0x1ff, 0x8, 0x3, 0xfef, 0x3, 0x5, 0x3, 0x4, 0xfffffff9, 0x1fadf442, 0x69a8da68, 0x8, 0x80000001, 0x5, 0x5, 0xc, 0x7, 0x1, 0x6, 0x3ff, 0xc6fa, 0x8001, 0x7, 0x3, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe5d}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x79, 0xffffffff, 0x1440, 0x21, 0x1ff, 0x0, 0x6, 0x3ea8, 0x1, 0x4f0, 0x1f, 0x619, 0x8, 0x2, 0x3, 0x7c96a251, 0x6, 0x3, 0x4a, 0x1, 0x8, 0x1000, 0x2f9, 0x24, 0x4fc917c4, 0x3a9, 0x75, 0x2, 0x3, 0xc3, 0x8, 0xd1, 0x8, 0x0, 0x5, 0x3, 0x5, 0xb68, 0x83, 0xfffff552, 0x7ff, 0x6, 0x7, 0xed, 0x6, 0x1, 0x6, 0x200, 0x80, 0x9, 0x741b, 0x7, 0x1, 0xc9, 0x7, 0xfff, 0x9, 0x0, 0x1, 0xffff, 0xe, 0x0, 0x1, 0x0, 0x8, 0xfffffff9, 0x7ff, 0xdd8, 0x6, 0x7, 0x0, 0x1, 0x800, 0x8, 0x330, 0x80, 0xfffffff6, 0x0, 0x8, 0x7, 0xac, 0x6ced, 0x6, 0x6, 0x8, 0x5, 0xff, 0x4, 0x3, 0x7f, 0x3, 0x5, 0x40, 0x380, 0x0, 0x9, 0x3, 0x6, 0x4, 0x6, 0x0, 0x1, 0x4, 0x0, 0x9, 0xffffffff, 0x5, 0x9f, 0x8, 0xffff3e4a, 0x82d1, 0xff, 0x2, 0x40, 0x9, 0xb, 0xe, 0x3a2, 0x7, 0x9, 0xc, 0x3, 0x81, 0xffff0000, 0x0, 0xa00, 0x3, 0x8, 0x3a4, 0xbc, 0x3, 0x1, 0x3, 0x1, 0x12, 0x1375, 0x6, 0xa, 0x2, 0x80000001, 0x1, 0xd, 0x3, 0x6, 0x4d9, 0x8, 0x4, 0x0, 0x10001, 0x7ff, 0x2, 0x1, 0x3, 0x80000001, 0xff, 0x4, 0x5, 0x7, 0x4, 0xff, 0x401, 0xfffffff2, 0x1, 0x8, 0x5, 0x3, 0x9, 0xdad, 0x1, 0x316, 0x3, 0x211f, 0x856, 0x10001, 0x3a, 0x9, 0xb, 0x2, 0x2, 0x0, 0x298d, 0xfffffff7, 0x3, 0xfffffff8, 0x7d, 0x1000, 0x800, 0x800, 0x734c3e56, 0x5, 0xb1, 0x8, 0x9b7, 0x0, 0xd, 0xfffffff7, 0x5, 0x9, 0x3, 0x8, 0x2, 0x9, 0x8, 0x80, 0x7, 0xfffffff7, 0xfff, 0x9, 0x7, 0x4, 0x5, 0x8001, 0x8001, 0xffff, 0x7, 0x5, 0x3, 0xfffffff9, 0x0, 0xf, 0x3, 0x9, 0x4541, 0x1, 0x80, 0x6, 0x7b093cc2, 0x0, 0xfffffffe, 0x5, 0x12c0000, 0x7, 0xf7, 0x1, 0xfffffe91, 0x2, 0x200, 0x0, 0x0, 0x3, 0x9, 0x3, 0x0, 0x16a, 0x2, 0x4, 0x9, 0xfffffff7, 0x6, 0x1, 0x10000, 0x66ab, 0x10001, 0x2, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4559}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff4}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x10d0, 0x2, [@TCA_CGROUP_ACT={0x10cc, 0x1, [@m_csum={0x1dc, 0x1e, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x10000000, 0x7, 0x500}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xf79a, 0xffffffffffffffff, 0x6, 0x3}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0xd6b, 0x10000000, 0x1d0, 0xe7}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x0, 0x8, 0x360}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x3, 0x5, 0x7, 0x7}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x10000000, 0x4, 0x10001}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0xfffffff8, 0x20000000, 0x7fffffff, 0xd4b}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0xd3, 0xffffffffffffffff, 0x400, 0x3}, 0x13}}]}, {0xcd, 0x6, "f6dd9ce9423a1b441da007de45d5c247e7620975aa86d5c3c046de6677a1aa67ddcc7663b7a6bcc20b1d07d5341cd6a8d9f61f5a581677028ebb99ce0cd29de72cfd50ace619f9f52fd2485859a46d2795c4d4af6b6ede57348ceb8617c16eb1af44f4a1600689cf35589dc58c50735b142c75f509a61cbd16e997bef23f8e1e07feb225951a001f0c871c0b168f1c829e7298455825c85b6f47c71d9ed9eb9d946ed2133682d0fd5b900b1be2220bc0852c95182a6109b89f484292f6756802a87a6e2f8cfa13bc1e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10004, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe50, 0x5, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x3ab6, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x3, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x7ffffffc, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x8, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0x5, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0x2c8, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x6, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x30, 0xb, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x2164}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.795124903s ago: executing program 3 (id=6224): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1526, &(0x7f0000000780)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xf4) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 4.581060399s ago: executing program 1 (id=6225): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) pipe(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xea8, 0xa) getpid() syz_clone3(&(0x7f0000001e00)={0x200000, &(0x7f0000000cc0), &(0x7f0000000d00), 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf8, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xf8}}, 0x0) 3.482164143s ago: executing program 3 (id=6226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2}, {0x0, 0x7}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 3.407874076s ago: executing program 2 (id=6227): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) io_setup(0x7, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x2000000000000021) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r6, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 2.693265297s ago: executing program 1 (id=6228): io_uring_setup(0x650b, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x4, 0x0) 1.606634011s ago: executing program 1 (id=6229): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp850,shname=win95,shortname=win95,shortname=lower,shortname=win95,shortname=winnt,uni_xlate=0,utf8=1,utf8=1,tz=UTC,shortname=lower,iocharset=cp775,shortname=winnt,check=strict,nnonumtail=1,\x00\x00\x00\x00'], 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24801}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000004) fcntl$setlease(r4, 0x400, 0x0) unlink(&(0x7f0000000140)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 1.606346181s ago: executing program 3 (id=6230): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) gettid() r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xadd}], 0x1, 0x40002000, 0x0) 1.601426171s ago: executing program 6 (id=6237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r5, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=6231): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000600)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffdf00c}]}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, 0x0) kernel console output (not intermixed with test programs): etlink: 4 bytes leftover after parsing attributes in process `syz.4.4385'. [ 906.382165][T21967] udevd[21967]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 907.119349][T23268] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 908.901575][T23289] syzkaller0: entered promiscuous mode [ 908.916095][T23289] syzkaller0: entered allmulticast mode [ 908.950969][T23293] netlink: 'syz.1.4397': attribute type 4 has an invalid length. [ 909.053628][T10752] lo speed is unknown, defaulting to 1000 [ 909.697409][T18850] net_ratelimit: 26 callbacks suppressed [ 909.697430][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 910.156646][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 910.280454][T18856] bond3: (slave wlan0): failed to get link speed/duplex [ 910.396568][T23312] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4403'. [ 910.478710][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 910.853554][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 911.455930][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 911.621029][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 912.118414][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 912.367831][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 912.489117][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 913.485961][ T27] audit: type=1326 audit(2000000293.190:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.9.4410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 913.538478][T23348] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.4411'. [ 913.653012][ T27] audit: type=1326 audit(2000000293.190:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.9.4410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 913.706379][ T27] audit: type=1326 audit(2000000293.190:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.9.4410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 913.764555][ T27] audit: type=1326 audit(2000000293.190:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.9.4410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 913.815570][ T27] audit: type=1326 audit(2000000293.190:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.9.4410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 913.890354][ T27] audit: type=1326 audit(2000000293.230:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.9.4410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 913.930931][T23353] syz_tun: left allmulticast mode [ 913.971732][ T27] audit: type=1326 audit(2000000293.230:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.9.4410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 914.041170][ T27] audit: type=1326 audit(2000000293.230:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.9.4410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 914.175535][ T27] audit: type=1326 audit(2000000293.230:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23343 comm="syz.9.4410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 914.322382][T23362] Option '2 O€ÉÇ—Wz [ 914.322382][T23362] ­ f:ó–ã5úÉùÔAŠÀ- [ 914.322382][T23362] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 915.557149][ T61] net_ratelimit: 14 callbacks suppressed [ 915.557169][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 915.705955][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 915.855519][T18856] bond3: (slave wlan0): failed to get link speed/duplex [ 916.031568][ T27] audit: type=1326 audit(2000000295.740:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23368 comm="syz.9.4417" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 916.039649][T23379] netlink: 'syz.1.4418': attribute type 4 has an invalid length. [ 916.099426][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 916.261284][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 916.321682][T23379] netlink: 'syz.1.4418': attribute type 4 has an invalid length. [ 916.350437][ T5834] lo speed is unknown, defaulting to 1000 [ 916.727961][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 916.887557][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 917.145880][T18856] bond3: (slave wlan0): failed to get link speed/duplex [ 917.427128][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 917.535759][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 917.587732][T23407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4426'. [ 917.601482][T23407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4426'. [ 920.659199][ T61] net_ratelimit: 12 callbacks suppressed [ 920.659241][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 921.090978][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 921.255983][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 921.365779][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 921.505551][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 921.662549][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 921.835647][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 922.144411][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 922.289340][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 922.530059][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 922.530077][ T27] audit: type=1326 audit(2000000302.240:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23453 comm="syz.4.4439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x50000 [ 922.642632][ T27] audit: type=1326 audit(2000000302.280:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23453 comm="syz.4.4439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x50000 [ 922.675389][ T27] audit: type=1326 audit(2000000302.280:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23453 comm="syz.4.4439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x50000 [ 922.683563][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 923.205193][ T27] audit: type=1326 audit(2000000302.280:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23453 comm="syz.4.4439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x50000 [ 923.509115][ T27] audit: type=1326 audit(2000000302.280:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23453 comm="syz.4.4439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x50000 [ 923.552448][ T27] audit: type=1326 audit(2000000302.280:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23453 comm="syz.4.4439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x50000 [ 923.655560][ T27] audit: type=1326 audit(2000000302.280:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23453 comm="syz.4.4439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x50000 [ 923.707559][T23468] overlayfs: failed to clone upperpath [ 923.743142][ T27] audit: type=1326 audit(2000000302.280:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23453 comm="syz.4.4439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x50000 [ 923.854298][ T27] audit: type=1326 audit(2000000302.280:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23453 comm="syz.4.4439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x50000 [ 923.949895][T23468] overlayfs: failed to clone upperpath [ 924.565637][ T27] audit: type=1326 audit(2000000302.280:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23453 comm="syz.4.4439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x50000 [ 925.769798][ T6084] net_ratelimit: 16 callbacks suppressed [ 925.769842][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 926.169396][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 926.306566][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 926.435330][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 926.546493][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 926.564184][T23509] loop4: detected capacity change from 0 to 1024 [ 926.662257][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 926.836686][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 927.006935][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 927.015230][T23509] input: syz1 as /devices/virtual/input/input16 [ 927.115791][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 927.236952][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 927.406396][T18855] hfsplus: b-tree write err: -5, ino 25 [ 927.435996][T18855] hfsplus: b-tree write err: -5, ino 4 [ 927.442456][T18855] hfsplus: b-tree write err: -5, ino 2 [ 928.917954][T23526] bond14: left promiscuous mode [ 928.960614][T23526] bridge7: left promiscuous mode [ 929.018340][T23526] vlan5: left allmulticast mode [ 929.023249][T23526] bond14: left allmulticast mode [ 929.051615][T23526] bridge7: left allmulticast mode [ 929.148872][T23526] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.158472][T23526] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.167489][T23526] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.176604][T23526] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.657889][T23569] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 929.761493][T23568] macvtap0: entered promiscuous mode [ 929.784352][T23568] macvtap0: entered allmulticast mode [ 929.790489][T23568] veth1_vlan: entered allmulticast mode [ 929.847177][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4466'. [ 929.857620][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4466'. [ 929.867120][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4466'. [ 929.876466][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4466'. [ 929.885821][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4466'. [ 929.895051][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4466'. [ 929.904265][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4466'. [ 929.915787][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4466'. [ 929.924916][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4466'. [ 929.934300][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4466'. [ 930.754495][T23573] macvtap1: entered promiscuous mode [ 930.808747][T23573] macvtap1: entered allmulticast mode [ 930.915606][ T6084] net_ratelimit: 6 callbacks suppressed [ 930.915623][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 931.363926][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 931.821276][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 931.846235][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.852574][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.946872][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 932.085848][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 932.206779][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 932.375566][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 932.631024][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 932.754173][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 932.885579][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 934.583932][ T27] kauditd_printk_skb: 119 callbacks suppressed [ 934.584020][ T27] audit: type=1326 audit(2000000314.290:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 934.653427][ T27] audit: type=1326 audit(2000000314.360:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 934.700804][ T27] audit: type=1326 audit(2000000314.360:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 934.785426][ T27] audit: type=1326 audit(2000000314.360:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 934.810089][ T27] audit: type=1326 audit(2000000314.400:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 934.856309][ T27] audit: type=1326 audit(2000000314.400:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 934.925531][ T27] audit: type=1326 audit(2000000314.410:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 935.985407][ T27] audit: type=1326 audit(2000000314.410:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 936.038817][ T27] audit: type=1326 audit(2000000314.410:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 936.070860][ T3459] net_ratelimit: 18 callbacks suppressed [ 936.070876][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 936.145683][ T27] audit: type=1326 audit(2000000314.410:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.9.4481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb5a95d68e code=0x7ffc0000 [ 936.272052][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 936.466180][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 936.682536][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 936.935423][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 937.158808][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 937.246646][T23642] __nla_validate_parse: 11 callbacks suppressed [ 937.246687][T23642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4489'. [ 937.276490][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 937.303142][T23645] netlink: 'syz.1.4491': attribute type 10 has an invalid length. [ 937.366431][T23645] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 937.387101][T23645] team0: Port device netdevsim0 removed [ 937.436909][T23645] : (slave netdevsim0): Enslaving as an active interface with an up link [ 937.486128][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 937.605844][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 937.748746][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 938.804493][T23667] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4498'. [ 940.546766][T23687] overlayfs: failed to clone upperpath [ 940.577300][T23687] overlayfs: failed to clone upperpath [ 940.729993][T23689] netlink: 'syz.4.4504': attribute type 10 has an invalid length. [ 940.764114][T23689] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 940.795924][T23689] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 940.814004][T23689] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 941.202983][ T9305] net_ratelimit: 20 callbacks suppressed [ 941.203002][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 942.935702][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 943.045741][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 943.156473][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 943.266191][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 943.266207][ T27] audit: type=1326 audit(2000000322.980:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.9.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x50000 [ 943.295502][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 943.325469][ T27] audit: type=1326 audit(2000000323.010:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.9.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x50000 [ 943.407236][ T27] audit: type=1326 audit(2000000323.010:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.9.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x50000 [ 943.412335][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 943.505856][ T27] audit: type=1326 audit(2000000323.010:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.9.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x50000 [ 943.572376][ T27] audit: type=1326 audit(2000000323.010:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.9.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x50000 [ 943.615900][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 943.670450][ T27] audit: type=1326 audit(2000000323.010:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.9.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x50000 [ 943.725633][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 943.796987][ T27] audit: type=1326 audit(2000000323.010:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.9.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x50000 [ 943.856850][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 943.895169][ T27] audit: type=1326 audit(2000000323.010:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.9.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x50000 [ 943.976421][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 944.305642][ T27] audit: type=1326 audit(2000000323.010:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.9.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x50000 [ 944.628138][ T27] audit: type=1326 audit(2000000323.010:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.9.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x50000 [ 945.158692][T23705] loop4: detected capacity change from 0 to 40427 [ 945.180486][T23705] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 945.211413][T23705] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 945.229214][T23705] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 945.260970][T23705] F2FS-fs (loop4): Found nat_bits in checkpoint [ 945.436082][T23705] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 945.455517][T23705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 946.310832][T18851] net_ratelimit: 17 callbacks suppressed [ 946.310879][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 946.732383][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 946.875577][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 946.995652][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 947.108366][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 947.235494][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 947.743768][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 947.874121][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 948.163801][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 948.325594][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 948.631696][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 948.631715][ T27] audit: type=1326 audit(2000000328.340:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23763 comm="syz.8.4527" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720419ce59 code=0x7fc00000 [ 948.835036][ T27] audit: type=1326 audit(2000000328.340:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23763 comm="syz.8.4527" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f720419ce59 code=0x7fc00000 [ 951.336705][ T6084] net_ratelimit: 22 callbacks suppressed [ 951.336719][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 951.541639][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 952.034074][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 952.675709][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 952.771405][T23807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4539'. [ 952.921484][T23811] tipc: Enabling of bearer rejected, already enabled [ 952.975819][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 953.044951][T23811] tipc: Enabled bearer , priority 0 [ 953.131602][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 953.292152][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 953.473244][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 953.807678][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 953.965658][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 954.144613][T23826] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 954.255536][ T9] IPVS: starting estimator thread 0... [ 954.355439][T23829] IPVS: using max 15 ests per chain, 36000 per kthread [ 954.502448][T23834] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4550'. [ 954.634459][ T27] audit: type=1326 audit(2000000334.340:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.8.4551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720419ce59 code=0x7ffc0000 [ 954.659067][T23839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4552'. [ 954.719327][ T27] audit: type=1326 audit(2000000334.380:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.8.4551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720419ce59 code=0x7ffc0000 [ 954.786605][ T27] audit: type=1326 audit(2000000334.380:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.8.4551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720419ce59 code=0x7ffc0000 [ 954.866636][ T27] audit: type=1326 audit(2000000334.380:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.8.4551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720419ce59 code=0x7ffc0000 [ 954.954796][ T27] audit: type=1326 audit(2000000334.390:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.8.4551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f720415d68e code=0x7ffc0000 [ 955.047338][ T27] audit: type=1326 audit(2000000334.390:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.8.4551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720419ce59 code=0x7ffc0000 [ 955.212683][ T27] audit: type=1326 audit(2000000334.390:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.8.4551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720419ce59 code=0x7ffc0000 [ 955.285452][ T27] audit: type=1326 audit(2000000334.390:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.8.4551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720419ce59 code=0x7ffc0000 [ 955.800622][ T27] audit: type=1326 audit(2000000334.390:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.8.4551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f720419ce59 code=0x7ffc0000 [ 955.834213][ T27] audit: type=1326 audit(2000000334.390:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.8.4551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720419ce59 code=0x7ffc0000 [ 956.525513][ T3459] net_ratelimit: 14 callbacks suppressed [ 956.525532][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 956.695434][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 956.855913][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 956.965914][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 957.085675][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 957.228360][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 957.377143][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 957.528315][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 957.837276][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 958.072987][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 958.447933][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4564'. [ 958.582042][T23890] lo speed is unknown, defaulting to 1000 [ 958.872347][ T5833] IPVS: starting estimator thread 0... [ 958.965801][T23907] IPVS: using max 15 ests per chain, 36000 per kthread [ 960.374619][T23890] lo speed is unknown, defaulting to 1000 [ 961.738831][ T61] net_ratelimit: 15 callbacks suppressed [ 961.738850][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 961.867126][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 961.986214][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 962.142408][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 962.285413][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 962.512709][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 962.683803][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 963.685799][T23954] xt_TPROXY: Can be used only with -p tcp or -p udp [ 964.524044][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 964.774511][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 964.928311][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 966.509410][T23981] netlink: 'syz.4.4584': attribute type 11 has an invalid length. [ 967.038401][T18851] net_ratelimit: 12 callbacks suppressed [ 967.038420][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 967.100859][T23990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4591'. [ 967.955418][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 968.195459][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 968.314054][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 968.345684][T23990] bond0: entered promiscuous mode [ 968.363632][T23990] bond0: entered allmulticast mode [ 968.458114][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 968.586632][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 968.638086][T24020] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4598'. [ 968.665967][T24020] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4598'. [ 968.697558][T24020] ip6gretap0: entered promiscuous mode [ 968.715826][T24020] syz_tun: entered promiscuous mode [ 968.799509][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 968.935417][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 969.106825][T24030] xt_HMARK: spi-set and port-set can't be combined [ 969.397598][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 969.545619][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 971.328698][T24058] bond8: entered allmulticast mode [ 971.342706][T24061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4608'. [ 971.442715][T24061] bridge7: entered allmulticast mode [ 971.462670][T24061] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 971.537159][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4608'. [ 971.582327][T24058] bridge8: entered allmulticast mode [ 971.636388][T24058] bond8: (slave bridge8): Enslaving as an active interface with a down link [ 972.147244][T18851] net_ratelimit: 13 callbacks suppressed [ 972.147291][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 972.676985][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 972.797123][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 972.910572][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 973.046915][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 973.155645][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 973.224871][T24086] xt_HMARK: spi-set and port-set can't be combined [ 973.467895][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 973.590144][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 973.785645][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 973.946127][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 975.688436][T24109] vlan3: entered promiscuous mode [ 977.445575][ T6090] net_ratelimit: 11 callbacks suppressed [ 977.445611][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 977.699277][T24129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4628'. [ 977.709411][T24129] netlink: 'syz.1.4628': attribute type 3 has an invalid length. [ 977.717288][T24129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4628'. [ 977.726741][T24129] netlink: 'syz.1.4628': attribute type 3 has an invalid length. [ 977.741430][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 977.901524][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 978.183488][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 978.329149][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 978.496831][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 978.719819][T24143] batman_adv: batadv0: Adding interface: dummy0 [ 978.750858][T24143] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.842676][T24143] batman_adv: batadv0: Interface activated: dummy0 [ 978.865637][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 978.901869][T24145] batadv0: mtu less than device minimum [ 978.948036][T24145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 978.961658][T24145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 979.023257][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 979.023272][ T27] audit: type=1326 audit(2000000358.730:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24147 comm="syz.8.4633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720419ce59 code=0x7fc00000 [ 979.115724][ T27] audit: type=1326 audit(2000000358.770:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24147 comm="syz.8.4633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f720419ce59 code=0x7fc00000 [ 979.810424][T24161] xt_policy: output policy not valid in PREROUTING and INPUT [ 982.981514][ T3459] net_ratelimit: 30 callbacks suppressed [ 982.981535][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 983.157408][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 983.164581][ T27] audit: type=1326 audit(2000000362.860:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.9.4646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 983.243421][ T27] audit: type=1326 audit(2000000362.860:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.9.4646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 983.280982][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 983.346962][ T27] audit: type=1326 audit(2000000362.870:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.9.4646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 983.394064][ T27] audit: type=1326 audit(2000000362.910:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.9.4646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 983.419736][ T27] audit: type=1326 audit(2000000362.990:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.9.4646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5a99ce59 code=0x7ffc0000 [ 983.444101][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 983.466598][ T27] audit: type=1326 audit(2000000363.040:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.9.4646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb5a95d68e code=0x7ffc0000 [ 983.491549][ T27] audit: type=1326 audit(2000000363.040:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.9.4646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb5a95d68e code=0x7ffc0000 [ 983.516731][ T27] audit: type=1326 audit(2000000363.040:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24197 comm="syz.9.4646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb5a95d68e code=0x7ffc0000 [ 983.550231][T24208] vlan3: entered promiscuous mode [ 983.585543][T24208] bond0: entered promiscuous mode [ 983.726760][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 983.857038][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 984.057774][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 984.223811][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 984.364335][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 984.526598][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 985.465005][T24231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4657'. [ 988.075677][ T6090] net_ratelimit: 19 callbacks suppressed [ 988.075722][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 988.327996][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 988.475616][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 988.590555][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 988.690253][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 988.690267][ T27] audit: type=1326 audit(2000000368.390:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.4.4669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x7ffc0000 [ 988.723451][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 988.735771][T24267] syz.4.4669 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 988.796521][ T27] audit: type=1326 audit(2000000368.400:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.4.4669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x7ffc0000 [ 988.869511][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 988.888388][ T27] audit: type=1326 audit(2000000368.400:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.4.4669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x7ffc0000 [ 988.982285][ T27] audit: type=1326 audit(2000000368.400:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.4.4669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f92a2f9ce59 code=0x7ffc0000 [ 989.035557][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 989.051424][ T27] audit: type=1326 audit(2000000368.400:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.4.4669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x7ffc0000 [ 989.102233][ T27] audit: type=1326 audit(2000000368.400:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.4.4669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x7ffc0000 [ 989.145478][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 989.155417][ T27] audit: type=1326 audit(2000000368.400:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.4.4669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x7ffc0000 [ 989.233144][ T27] audit: type=1326 audit(2000000368.400:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.4.4669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x7ffc0000 [ 989.313563][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 989.345828][ T27] audit: type=1326 audit(2000000368.450:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.4.4669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f92a2f9ce59 code=0x7ffc0000 [ 989.415524][ T27] audit: type=1326 audit(2000000368.450:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24266 comm="syz.4.4669" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a2f9ce59 code=0x7ffc0000 [ 989.455422][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 990.567412][T24290] loop4: detected capacity change from 0 to 512 [ 990.585556][T24290] EXT4-fs: Ignoring removed i_version option [ 990.765503][T24290] EXT4-fs (loop4): 1 truncate cleaned up [ 990.782255][T24290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.196412][T19536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.531837][T24297] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4680'. [ 991.544273][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4680'. [ 991.554147][T24297] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4680'. [ 993.517875][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.524224][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.530966][T18855] net_ratelimit: 22 callbacks suppressed [ 993.530981][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 993.837528][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 994.288427][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 994.585800][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 994.847795][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 995.335746][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 995.935552][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 996.065571][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 996.215529][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 997.077858][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 998.625670][ T6084] net_ratelimit: 12 callbacks suppressed [ 998.625691][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 998.785689][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 998.847572][T24385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4707'. [ 999.110056][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 999.557614][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 999.614472][T24385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4707'. [ 999.707539][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 999.835482][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 999.945737][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1000.066291][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1000.199755][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1000.315703][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1003.534610][T24432] syzkaller0: entered promiscuous mode [ 1003.540309][T24432] syzkaller0: entered allmulticast mode [ 1004.016791][ T6084] net_ratelimit: 18 callbacks suppressed [ 1004.016810][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1004.280779][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1005.087250][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1005.246692][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1005.431836][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1005.460319][T24455] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1005.870220][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1006.080873][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1006.277239][T24455] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1006.324132][T24460] tipc: Bearer : already 2 bearers with priority 0 [ 1006.365707][T24460] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1006.386566][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1006.742850][T24476] bond_slave_1: entered promiscuous mode [ 1006.898117][T24476] bond_slave_1: left promiscuous mode [ 1008.353324][T24487] pimreg: entered allmulticast mode [ 1009.281838][ T61] net_ratelimit: 15 callbacks suppressed [ 1009.281867][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1009.621022][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1009.765490][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1009.995774][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1010.249080][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 1010.458720][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1011.126230][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1011.148999][T24506] loop4: detected capacity change from 0 to 2048 [ 1011.396016][T24509] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[24513] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[24509] [ 1011.840822][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1011.877088][T24506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.999957][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1012.667147][T24523] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4746'. [ 1013.026011][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1013.072511][T19536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.756830][ T6090] net_ratelimit: 6 callbacks suppressed [ 1014.756850][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 1014.945789][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1015.055392][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1015.175717][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1015.285598][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1015.348449][T24544] loop4: detected capacity change from 0 to 512 [ 1015.397374][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1015.407382][T24544] FAT-fs (loop4): Directory bread(block 199916) failed [ 1015.414309][T24544] FAT-fs (loop4): Directory bread(block 199917) failed [ 1015.995674][T24546] futex_wake_op: syz.9.4749 tries to shift op by 36; fix this program [ 1016.465774][T24544] FAT-fs (loop4): Directory bread(block 199918) failed [ 1016.472736][T24544] FAT-fs (loop4): Directory bread(block 199919) failed [ 1016.505365][T24544] FAT-fs (loop4): Directory bread(block 199920) failed [ 1016.512290][T24544] FAT-fs (loop4): Directory bread(block 199921) failed [ 1016.524648][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1016.563572][T24544] FAT-fs (loop4): Directory bread(block 199922) failed [ 1016.595405][T24544] FAT-fs (loop4): Directory bread(block 199923) failed [ 1016.655759][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1016.767824][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1016.876657][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 1017.204548][T24550] syz_tun: entered allmulticast mode [ 1017.251573][T24550] syz_tun: left allmulticast mode [ 1019.952949][ T61] net_ratelimit: 10 callbacks suppressed [ 1019.953007][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1020.405410][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1020.675813][T24573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4765'. [ 1020.710545][T24573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4765'. [ 1021.303374][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1021.457074][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1021.815605][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1023.072452][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1023.263001][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1023.405668][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1023.524637][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1023.689922][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1025.006808][ T6084] net_ratelimit: 10 callbacks suppressed [ 1025.006829][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1025.195568][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1025.327323][T24607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4775'. [ 1025.364128][T24606] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4774'. [ 1025.453518][T24608] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1025.469530][T24604] bond0: mtu less than device minimum [ 1025.479863][T24602] netlink: 'syz.1.4775': attribute type 10 has an invalid length. [ 1025.525470][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1025.631328][T24606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4774'. [ 1025.644048][T24606] bond9 (unregistering): (slave ip6gretap2): Releasing backup interface [ 1025.691980][T24606] bond9 (unregistering): Released all slaves [ 1025.745419][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1025.860563][T24614] lo speed is unknown, defaulting to 1000 [ 1025.955438][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1026.076415][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1027.066072][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1027.203901][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1027.339541][T24614] lo speed is unknown, defaulting to 1000 [ 1027.339872][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1028.319025][T24637] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4784'. [ 1028.658032][T24637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4784'. [ 1030.067408][ T9305] net_ratelimit: 6 callbacks suppressed [ 1030.067428][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1030.138060][T24675] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4792'. [ 1030.150724][T24674] loop4: detected capacity change from 0 to 2048 [ 1030.184065][T24675] syz_tun (unregistering): left allmulticast mode [ 1030.220626][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1030.251240][T24674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.376697][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1030.575484][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1030.647888][T24686] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1030.705391][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1031.063228][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1031.104758][T19536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.252791][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1031.819418][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1032.025942][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1032.971790][T24716] netlink: 'syz.8.4799': attribute type 9 has an invalid length. [ 1035.346525][T24758] futex_wake_op: syz.4.4806 tries to shift op by 36; fix this program [ 1036.315069][T18855] net_ratelimit: 23 callbacks suppressed [ 1036.315089][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1036.475654][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1036.592673][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1036.743748][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1037.507491][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1037.655447][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1037.785926][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1037.859923][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4810'. [ 1038.105504][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1038.476678][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1038.981518][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1041.673567][ T6090] net_ratelimit: 9 callbacks suppressed [ 1041.673586][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 1041.749013][T24796] syzkaller0: entered promiscuous mode [ 1041.754535][T24796] syzkaller0: entered allmulticast mode [ 1041.901287][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1042.042142][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1042.196108][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1042.310255][ T6090] bond3: (slave wlan0): failed to get link speed/duplex [ 1042.591908][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1042.815886][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1043.056929][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1043.205427][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1043.318566][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1048.133541][ T9305] net_ratelimit: 22 callbacks suppressed [ 1048.133562][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1048.388812][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1048.525536][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1048.655439][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1048.786820][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1048.897485][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1049.016912][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1049.137816][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1049.147690][ T5817] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1049.292645][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1049.355398][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 1049.379464][ T5817] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1050.398761][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1050.427658][ T5817] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1050.455363][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.472417][ T5817] usb 5-1: Product: syz [ 1050.486266][ T5817] usb 5-1: Manufacturer: syz [ 1050.502460][ T5817] usb 5-1: SerialNumber: syz [ 1051.508408][ T5817] usb 5-1: config 0 descriptor?? [ 1051.529027][T24863] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1051.559109][ T5817] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1051.638978][T24879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4837'. [ 1052.019917][ T42] usb 5-1: USB disconnect, device number 17 [ 1053.164904][ T6089] net_ratelimit: 11 callbacks suppressed [ 1053.164923][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1053.298126][T24903] Bluetooth: MGMT ver 1.22 [ 1053.350658][T24905] fuse: Bad value for 'fd' [ 1053.360375][T24903] loop4: detected capacity change from 0 to 512 [ 1053.382161][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1053.431938][T24903] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1053.483278][T24903] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 1053.506356][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1053.627068][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1053.756550][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1053.876081][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1054.017882][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1054.281550][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1054.475606][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1054.516737][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.523194][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.880768][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1061.055107][ T9305] net_ratelimit: 15 callbacks suppressed [ 1061.055138][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1061.175597][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1061.903777][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1062.101827][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1062.265975][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1062.446451][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1063.195737][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1064.068547][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1064.205374][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1064.445536][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1066.097146][T18855] net_ratelimit: 7 callbacks suppressed [ 1066.097191][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1066.355481][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1066.466725][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1066.641092][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1066.775680][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1066.906811][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1067.026618][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1067.186349][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1067.604277][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1067.760986][T25009] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 1067.765604][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1068.686152][T25002] loop4: detected capacity change from 0 to 1024 [ 1069.372555][T25029] ÿ: renamed from bond_slave_0 [ 1070.895869][T25023] nfs4: Unknown parameter 'uid' [ 1071.170470][ T6089] net_ratelimit: 27 callbacks suppressed [ 1071.170514][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1071.305673][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1071.425561][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1071.641551][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1071.807076][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1072.139547][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1072.345634][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1072.506095][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1072.906501][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1072.987438][T25064] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4887'. [ 1073.097272][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4886'. [ 1073.291790][T25064] bond9: entered promiscuous mode [ 1073.299711][T25064] bond9: entered allmulticast mode [ 1073.315872][ T9305] bond3: (slave wlan0): failed to get link speed/duplex [ 1074.499217][T25079] loop4: detected capacity change from 0 to 512 [ 1074.608336][T25079] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1074.617162][T25079] EXT4-fs (loop4): failed to open journal device unknown-block(8,1) -16 [ 1076.807356][ T3459] net_ratelimit: 15 callbacks suppressed [ 1076.807377][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 1077.102229][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1077.760547][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1077.914813][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1078.056565][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1078.176200][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1078.641973][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1078.815432][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1079.133151][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1079.258555][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1081.985138][T18851] net_ratelimit: 17 callbacks suppressed [ 1082.566211][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1082.697598][T25151] syz0: rxe_set_mtu: Set mtu to 1024 [ 1082.707872][T25151] infiniband syz0: set active [ 1082.733240][T25151] tipc: Resetting bearer [ 1082.739710][T25151] tipc: Resetting bearer [ 1082.756187][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1082.808443][T25148] IPVS: Error joining to the multicast group [ 1082.925275][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1083.050448][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1083.195664][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1083.350258][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1083.674503][ T42] lo speed is unknown, defaulting to 1000 [ 1083.780437][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1083.957624][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1084.104494][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1084.697138][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1085.168980][T25173] loop4: detected capacity change from 0 to 1024 [ 1085.218391][T25173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1085.349993][T25173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.733629][T25187] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4921'. [ 1086.987619][T19536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.026476][T18851] net_ratelimit: 7 callbacks suppressed [ 1087.026495][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1087.100440][T25187] netlink: 63 bytes leftover after parsing attributes in process `syz.9.4921'. [ 1088.175777][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1088.285328][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1088.399010][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1088.414568][T25202] netlink: 'syz.4.4927': attribute type 1 has an invalid length. [ 1088.639228][T25202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1088.676595][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1088.722532][T25205] bond5: entered allmulticast mode [ 1088.925181][T25207] bond5: (slave ip6gretap0): making interface the new active one [ 1088.969584][T25207] ip6gretap0: entered allmulticast mode [ 1089.111139][T25207] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1089.226252][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1089.472807][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1089.587373][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1089.955775][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1092.298836][T18851] bond3: (slave wlan0): failed to get link speed/duplex [ 1092.627476][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1092.735928][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1093.007550][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1093.126663][T18850] bond3: (slave wlan0): failed to get link speed/duplex [ 1093.142037][T25234] netlink: 'syz.4.4933': attribute type 1 has an invalid length. [ 1093.862850][T25234] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1094.098369][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 1094.947802][T25238] macvlan4: entered promiscuous mode [ 1094.953143][T25238] macvlan4: entered allmulticast mode [ 1094.960924][T25238] bond6: entered promiscuous mode [ 1094.975372][T25238] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1096.090633][T25238] bond6: left promiscuous mode [ 1096.889226][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 1097.016583][T25241] bond6: (slave ip6gretap1): making interface the new active one [ 1097.056293][T25241] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1097.146440][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1097.558755][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1097.945626][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1098.064412][ T6084] bond3: (slave wlan0): failed to get link speed/duplex [ 1098.212011][ T6089] bond3: (slave wlan0): failed to get link speed/duplex [ 1098.387061][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1098.497011][T18855] bond3: (slave wlan0): failed to get link speed/duplex [ 1098.685519][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 1098.865747][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 1099.187476][ T61] bond3: (slave wlan0): failed to get link speed/duplex [ 1099.298170][ T3459] bond3: (slave wlan0): failed to get link speed/duplex [ 1099.332820][T25288] loop4: detected capacity change from 0 to 1024 [ 1099.448054][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 1099.448071][ T27] audit: type=1800 audit(2000000085.900:1784): pid=25288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4942" name="file2" dev="loop4" ino=22 res=0 errno=0 [ 1099.672621][T25296] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4944'. [ 1099.805816][T25303] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4944'. [ 1099.827137][T25303] veth15: entered promiscuous mode [ 1099.832356][T25303] veth15: entered allmulticast mode [ 1099.913353][T25292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4943'. [ 1103.159720][T25328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.204914][T25328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.613512][T25328] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 1103.819439][T25328] vlan0: left allmulticast mode [ 1103.824326][T25328] bond2: left allmulticast mode [ 1103.829487][T25328] geneve2: left allmulticast mode [ 1103.835049][T25328] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.844024][T25328] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.854030][T25328] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.862967][T25328] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.880081][T25328] ip6erspan0: left promiscuous mode [ 1104.178736][T25328] bond0: left promiscuous mode [ 1104.183556][T25328] bond0: left allmulticast mode [ 1104.195418][T25328] bond8: left allmulticast mode [ 1104.200323][T25328] bridge7: left allmulticast mode [ 1104.215622][T25328] bridge8: left allmulticast mode [ 1104.288323][ T9] lo speed is unknown, defaulting to 1000 [ 1104.296495][T25330] smc: net device bond0 applied user defined pnetid SYZ2 [ 1104.315413][T25332] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4954'. [ 1104.501587][T25332] vlan3 (unregistering): left allmulticast mode [ 1104.525550][T25332] bond0 (unregistering): left allmulticast mode [ 1104.545743][T25332] macvlan3: left allmulticast mode [ 1104.559219][T25332] team0: left allmulticast mode [ 1104.569322][T25332] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1104.599271][T25332] vlan3 (unregistering): left promiscuous mode [ 1104.606089][T25332] bond0 (unregistering): left promiscuous mode [ 1104.612280][T25332] macvlan3: left promiscuous mode [ 1104.618873][T25332] team0: left promiscuous mode [ 1104.624377][T25332] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1104.632376][T25332] bridge0: port 1(vlan3) entered disabled state [ 1104.646911][T25332] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1104.656804][T25332] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 1104.678257][T25332] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1104.826831][T25332] bond0 (unregistering): Released all slaves [ 1108.192659][T25388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4964'. [ 1108.335705][T25388] bridge3: port 1(veth9) entered blocking state [ 1108.342410][T25388] bridge3: port 1(veth9) entered disabled state [ 1108.367309][T25388] veth9: entered allmulticast mode [ 1108.381365][T25388] veth9: entered promiscuous mode [ 1108.399851][T25398] bond1: (slave veth0_to_bond): Releasing active interface [ 1108.412058][T25398] bridge3: port 2(veth0_to_bond) entered blocking state [ 1108.426757][T25398] bridge3: port 2(veth0_to_bond) entered disabled state [ 1108.433894][T25398] veth0_to_bond: entered allmulticast mode [ 1108.442462][T25398] veth0_to_bond: entered promiscuous mode [ 1108.983669][T25406] loop4: detected capacity change from 0 to 512 [ 1109.029640][T25406] EXT4-fs: Ignoring removed nobh option [ 1109.038603][T25406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1109.142790][T25406] EXT4-fs (loop4): 1 truncate cleaned up [ 1109.193155][T25406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.429017][T19536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.593437][T25432] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4972'. [ 1110.628181][T25432] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4972'. [ 1110.643447][T25432] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4972'. [ 1111.653923][T25440] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1111.932992][T25448] netlink: 'syz.8.4975': attribute type 1 has an invalid length. [ 1112.570442][T25448] bond10: entered promiscuous mode [ 1112.614898][T25448] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1112.764851][T25450] vlan3: entered allmulticast mode [ 1112.840835][T25450] bond10: entered allmulticast mode [ 1112.950995][T25451] bond10: (slave bridge11): making interface the new active one [ 1112.964623][T25451] bridge11: entered promiscuous mode [ 1112.976823][T25451] bridge11: entered allmulticast mode [ 1113.003850][T25451] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 1114.586445][T25495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4982'. [ 1114.865049][T25507] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1115.978639][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.984996][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.962334][ T27] audit: type=1326 audit(2000000103.407:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.1.4995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5159ce59 code=0x7ffc0000 [ 1116.994373][ T27] audit: type=1326 audit(2000000103.447:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.1.4995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5159ce59 code=0x7ffc0000 [ 1117.080134][ T27] audit: type=1326 audit(2000000103.447:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.1.4995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5159ce59 code=0x7ffc0000 [ 1117.167542][ T27] audit: type=1326 audit(2000000103.447:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.1.4995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e5159ce59 code=0x7ffc0000 [ 1117.233517][ T27] audit: type=1326 audit(2000000103.447:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.1.4995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5159ce59 code=0x7ffc0000 [ 1117.301388][ T27] audit: type=1326 audit(2000000103.447:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.1.4995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5159ce59 code=0x7ffc0000 [ 1117.370717][ T27] audit: type=1326 audit(2000000103.447:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.1.4995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5159ce59 code=0x7ffc0000 [ 1117.443127][ T27] audit: type=1326 audit(2000000103.447:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.1.4995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9e5159ce59 code=0x7ffc0000 [ 1117.531262][ T27] audit: type=1326 audit(2000000103.447:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.1.4995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5159ce59 code=0x7ffc0000 [ 1117.587652][ T27] audit: type=1326 audit(2000000103.447:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.1.4995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5159ce59 code=0x7ffc0000 [ 1117.809978][T25564] net_ratelimit: 17 callbacks suppressed [ 1117.809997][T25564] netlink: zone id is out of range [ 1117.822602][T25564] netlink: zone id is out of range [ 1117.828550][T25564] netlink: zone id is out of range [ 1117.833700][T25564] netlink: zone id is out of range [ 1117.839473][T25564] netlink: zone id is out of range [ 1117.844750][T25564] netlink: zone id is out of range [ 1117.851266][T25564] netlink: zone id is out of range [ 1117.857163][T25564] netlink: zone id is out of range [ 1117.862365][T25564] netlink: zone id is out of range [ 1117.868350][T25564] netlink: zone id is out of range [ 1117.927230][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1118.125529][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1118.143127][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.173906][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1118.218705][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1118.253271][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.287933][ T9] usb 5-1: config 0 descriptor?? [ 1118.309119][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1119.514513][ T9] usb 5-1: USB disconnect, device number 18 [ 1119.637509][T25585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5005'. [ 1121.315336][T25612] syz.9.5011: attempt to access beyond end of device [ 1121.315336][T25612] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1121.355405][T25612] FAT-fs (loop19): unable to read boot sector [ 1121.489019][T25617] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2612942473/2612942475 [ 1121.527423][T25616] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3940430370/3940430371 [ 1121.561284][T25616] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3940430370/3940430371 [ 1122.061058][T25629] bridge0: entered promiscuous mode [ 1122.078273][T25629] bridge0: entered allmulticast mode [ 1122.935533][T25634] input: syz0 as /devices/virtual/input/input17 [ 1128.667009][T25687] warn_alloc: 1 callbacks suppressed [ 1128.667026][T25687] syz.4.5037: vmalloc error: size 18446744073709551614, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1128.735275][T25687] CPU: 0 PID: 25687 Comm: syz.4.5037 Not tainted syzkaller #0 [ 1128.742792][T25687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1128.752871][T25687] Call Trace: [ 1128.756183][T25687] [ 1128.759140][T25687] dump_stack_lvl+0x18c/0x250 [ 1128.763876][T25687] ? show_regs_print_info+0x20/0x20 [ 1128.769109][T25687] ? load_image+0x420/0x420 [ 1128.773659][T25687] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1128.780115][T25687] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1128.786657][T25687] warn_alloc+0x246/0x340 [ 1128.791035][T25687] ? zone_watermark_ok_safe+0x230/0x230 [ 1128.796639][T25687] ? __mutex_trylock_common+0x159/0x260 [ 1128.802228][T25687] __vmalloc_node_range+0x126/0x1330 [ 1128.807547][T25687] ? tomoyo_path_number_perm+0x217/0x620 [ 1128.813216][T25687] ? rcu_is_watching+0x15/0xb0 [ 1128.818019][T25687] ? trace_contention_end+0x39/0xe0 [ 1128.823251][T25687] ? __mutex_lock+0x315/0xcc0 [ 1128.827970][T25687] ? tomoyo_path_number_perm+0x5b4/0x620 [ 1128.833627][T25687] ? dvb_dvr_do_ioctl+0x79/0x220 [ 1128.838680][T25687] ? tomoyo_path_number_perm+0x217/0x620 [ 1128.844345][T25687] ? free_vm_area+0x50/0x50 [ 1128.848894][T25687] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 1128.853956][T25687] vmalloc+0x79/0x90 [ 1128.857885][T25687] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 1128.862943][T25687] dvb_dvr_do_ioctl+0x12e/0x220 [ 1128.867840][T25687] dvb_usercopy+0x195/0x2b0 [ 1128.872377][T25687] ? dvb_dvr_release+0x3e0/0x3e0 [ 1128.877353][T25687] ? dvb_generic_ioctl+0xb0/0xb0 [ 1128.882357][T25687] ? dvb_dvr_poll+0x230/0x230 [ 1128.887072][T25687] dvb_dvr_ioctl+0x29/0x30 [ 1128.891529][T25687] __se_sys_ioctl+0xfd/0x170 [ 1128.896183][T25687] do_syscall_64+0x55/0xb0 [ 1128.900648][T25687] ? clear_bhb_loop+0x40/0x90 [ 1128.905366][T25687] ? clear_bhb_loop+0x40/0x90 [ 1128.910077][T25687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1128.916013][T25687] RIP: 0033:0x7f92a2f9ce59 [ 1128.920458][T25687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.940098][T25687] RSP: 002b:00007f92a3e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.948553][T25687] RAX: ffffffffffffffda RBX: 00007f92a3216090 RCX: 00007f92a2f9ce59 [ 1128.956552][T25687] RDX: fffffffffffffffe RSI: 0000000000006f2d RDI: 0000000000000004 [ 1128.964555][T25687] RBP: 00007f92a3032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1128.972557][T25687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.980559][T25687] R13: 00007f92a3216128 R14: 00007f92a3216090 R15: 00007ffc9dc926a8 [ 1128.988577][T25687] [ 1129.095219][T25687] Mem-Info: [ 1129.098392][T25687] active_anon:68235 inactive_anon:1 isolated_anon:0 [ 1129.098392][T25687] active_file:18254 inactive_file:40748 isolated_file:0 [ 1129.098392][T25687] unevictable:16933 dirty:182 writeback:0 [ 1129.098392][T25687] slab_reclaimable:12153 slab_unreclaimable:113602 [ 1129.098392][T25687] mapped:27541 shmem:59311 pagetables:1318 [ 1129.098392][T25687] sec_pagetables:0 bounce:0 [ 1129.098392][T25687] kernel_misc_reclaimable:0 [ 1129.098392][T25687] free:1238994 free_pcp:7968 free_cma:0 [ 1129.195223][T25687] Node 0 active_anon:271404kB inactive_anon:4kB active_file:73016kB inactive_file:162796kB unevictable:67732kB isolated(anon):0kB isolated(file):0kB mapped:110164kB dirty:728kB writeback:0kB shmem:235708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14628kB pagetables:5272kB sec_pagetables:0kB all_unreclaimable? no [ 1129.246536][T25687] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1129.287971][T25687] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.324617][T25687] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1129.330772][T25687] Node 0 DMA32 free:1038076kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:271264kB inactive_anon:4kB active_file:73016kB inactive_file:161976kB unevictable:67732kB writepending:728kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:16944kB local_pcp:15904kB free_cma:0kB [ 1129.392842][T25687] lowmem_reserve[]: 0 0 0 0 0 [ 1129.405543][T25687] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1129.442058][T25687] lowmem_reserve[]: 0 0 0 0 0 [ 1129.448746][T25687] Node 1 Normal free:3902540kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15456kB local_pcp:11744kB free_cma:0kB [ 1129.503149][T25687] lowmem_reserve[]: 0 0 0 0 0 [ 1129.532754][T25687] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1129.692751][T25687] Node 0 DMA32: 26*4kB (E) 335*8kB (UE) 476*16kB (UME) 458*32kB (UME) 105*64kB (UME) 53*128kB (UME) 86*256kB (UME) 47*512kB (UM) 13*1024kB (UME) 4*2048kB (ME) 225*4096kB (UM) = 1027744kB [ 1129.799537][T25687] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1129.813655][T25687] Node 1 Normal: 239*4kB (UE) 60*8kB (UE) 45*16kB (UE) 215*32kB (UE) 70*64kB (UME) 15*128kB (UME) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3902540kB [ 1130.153846][T25687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.281619][T25687] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1130.457515][T25687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.468134][T25687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1130.537472][T25687] 134048 total pagecache pages [ 1130.542290][T25687] 1 pages in swap cache [ 1130.565483][T25687] Free swap = 124592kB [ 1130.569693][T25687] Total swap = 124996kB [ 1130.573875][T25687] 2097051 pages RAM [ 1130.585727][T25687] 0 pages HighMem/MovableOnly [ 1130.591698][T25687] 416933 pages reserved [ 1130.597274][T25687] 0 pages cma reserved [ 1131.994070][T25723] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5044'. [ 1132.181961][T25725] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1132.224011][T25726] loop4: detected capacity change from 0 to 2048 [ 1132.245308][T25725] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1132.284034][T25726] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1132.294806][T25725] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1132.532785][T25726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1132.550566][T25725] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1132.887437][T25725] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 1133.029649][T25723] bond11 (unregistering): (slave geneve3): Releasing backup interface [ 1133.087416][T25723] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1133.113446][ T27] kauditd_printk_skb: 467 callbacks suppressed [ 1133.113462][ T27] audit: type=1326 audit(2000000119.557:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25732 comm="syz.1.5048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e5159ce59 code=0x0 [ 1133.126536][T25723] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1133.173255][T25723] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1133.211434][T25723] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1133.250061][ T27] audit: type=1326 audit(2000000119.697:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25732 comm="syz.1.5048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e5159ce59 code=0x0 [ 1133.275286][T25723] bond11 (unregistering): Released all slaves [ 1133.496685][T25745] netlink: 260 bytes leftover after parsing attributes in process `syz.8.5052'. [ 1134.685408][ T5833] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1135.115308][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 1138.194672][ T5833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1138.223992][ T5833] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1138.245327][ T5833] usb 5-1: can't read configurations, error -71 [ 1139.266107][T25795] netlink: 'syz.1.5067': attribute type 1 has an invalid length. [ 1142.184318][T25801] loop4: detected capacity change from 0 to 8192 [ 1142.242321][T25801] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1142.348737][T25819] tipc: Bearer : already 2 bearers with priority 0 [ 1142.357293][T25819] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1143.765073][T25842] loop4: detected capacity change from 0 to 256 [ 1143.915118][T25786] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1145.086847][T25856] bridge0: entered promiscuous mode [ 1145.865641][T25856] bridge0: entered allmulticast mode [ 1146.716046][T25865] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.5083'. [ 1146.728435][T25865] net_ratelimit: 23 callbacks suppressed [ 1146.728451][T25865] openvswitch: netlink: ct_state flags 00030000 unsupported [ 1148.131843][T25883] autofs4:pid:25883:autofs_fill_super: called with bogus options [ 1150.445403][T25901] ipt_ECN: cannot use operation on non-tcp rule [ 1152.562385][T25923] set match dimension is over the limit! [ 1155.455828][T25346] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1156.246951][T25346] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1156.273386][T25346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.293718][T25346] usb 5-1: Product: syz [ 1156.301657][T25346] usb 5-1: Manufacturer: syz [ 1156.311691][T25346] usb 5-1: SerialNumber: syz [ 1156.323165][T25346] usb 5-1: config 0 descriptor?? [ 1156.361947][T25346] ch341 5-1:0.0: ch341-uart converter detected [ 1157.625858][T25346] usb 5-1: failed to send control message: -110 [ 1157.657871][T25346] ch341-uart: probe of ttyUSB0 failed with error -110 [ 1158.005659][T25346] usb 5-1: USB disconnect, device number 21 [ 1158.126254][T25346] ch341 5-1:0.0: device disconnected [ 1166.057896][T26054] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5127'. [ 1170.720129][T26094] tipc: Started in network mode [ 1170.727464][T26094] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1170.736170][T26094] tipc: Enabled bearer , priority 16 [ 1172.357267][T26115] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 1172.396935][ T5817] tipc: Node number set to 10005162 [ 1174.575659][T26134] netlink: 'syz.8.5149': attribute type 4 has an invalid length. [ 1174.829480][T26134] syz0: rxe_set_mtu: Set mtu to 256 [ 1174.879108][T26134] infiniband syz0: set down [ 1174.890545][ T9] lo speed is unknown, defaulting to 1000 [ 1174.913512][T25346] lo speed is unknown, defaulting to 1000 [ 1177.177751][T26155] loop4: detected capacity change from 0 to 8192 [ 1177.400992][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.407499][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.417096][T26161] loop4: detected capacity change from 8192 to 0 [ 1177.465566][ C0] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1177.478185][ T61] loop: Write error at byte offset 9223372036854776319, length 512. [ 1177.500312][ C0] I/O error, dev loop4, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1177.509651][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 1177.518121][T26155] syz.4.5155: attempt to access beyond end of device [ 1177.518121][T26155] loop4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1177.540635][T26162] syz.4.5155: attempt to access beyond end of device [ 1177.540635][T26162] loop4: rw=1, sector=1, nr_sectors = 1 limit=0 [ 1177.573454][T26162] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 1177.852869][T26155] FAT-fs (loop4): FAT read failed (blocknr 1) [ 1177.934614][T26162] syz.4.5155: attempt to access beyond end of device [ 1177.934614][T26162] loop4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1177.976648][T26155] syz.4.5155: attempt to access beyond end of device [ 1177.976648][T26155] loop4: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1178.006453][T26162] FAT-fs (loop4): FAT read failed (blocknr 1) [ 1178.015990][T26155] FAT-fs (loop4): unable to read inode block for updating (i_pos 1051) [ 1178.038746][T26155] syz.4.5155: attempt to access beyond end of device [ 1178.038746][T26155] loop4: rw=2049, sector=97, nr_sectors = 40 limit=0 [ 1178.972255][T26171] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1179.416303][T19536] syz-executor: attempt to access beyond end of device [ 1179.416303][T19536] loop4: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1179.467072][T19536] FAT-fs (loop4): Directory bread(block 65) failed [ 1179.495674][T19536] syz-executor: attempt to access beyond end of device [ 1179.495674][T19536] loop4: rw=0, sector=66, nr_sectors = 1 limit=0 [ 1179.509519][T19536] FAT-fs (loop4): Directory bread(block 66) failed [ 1179.516606][T19536] syz-executor: attempt to access beyond end of device [ 1179.516606][T19536] loop4: rw=0, sector=67, nr_sectors = 1 limit=0 [ 1179.530087][T19536] FAT-fs (loop4): Directory bread(block 67) failed [ 1179.537669][T19536] syz-executor: attempt to access beyond end of device [ 1179.537669][T19536] loop4: rw=0, sector=68, nr_sectors = 1 limit=0 [ 1179.555291][T19536] FAT-fs (loop4): Directory bread(block 68) failed [ 1179.561891][T19536] syz-executor: attempt to access beyond end of device [ 1179.561891][T19536] loop4: rw=0, sector=69, nr_sectors = 1 limit=0 [ 1179.581309][T19536] FAT-fs (loop4): Directory bread(block 69) failed [ 1179.596495][T19536] FAT-fs (loop4): Directory bread(block 70) failed [ 1179.606690][T19536] FAT-fs (loop4): Directory bread(block 71) failed [ 1180.441769][T26197] tipc: Started in network mode [ 1180.442457][ T6089] FAT-fs (loop4): unable to read inode block for updating (i_pos 1051) [ 1180.454574][T26197] tipc: Node identity 080211, cluster identity 4711 [ 1180.506907][T26197] tipc: Enabled bearer , priority 0 [ 1180.624916][ T6089] FAT-fs (loop4): unable to read inode block for updating (i_pos 1054) [ 1180.718539][T22987] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 1181.007655][T26208] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5165'. [ 1181.321166][T26211] Invalid ELF header magic: != ELF [ 1181.692974][ T5817] tipc: Node number set to 134353152 [ 1183.876880][T26231] netlink: 'syz.1.5175': attribute type 4 has an invalid length. [ 1184.772431][ T27] audit: type=1107 audit(2000000171.217:2264): pid=26237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1187.254707][T26269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1187.276120][T26269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1187.284826][T26269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1187.293459][T26269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1187.294927][T26273] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5189'. [ 1187.316481][T26269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1187.325063][T26269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1187.424317][T26267] lo speed is unknown, defaulting to 1000 [ 1187.644542][T26267] lo speed is unknown, defaulting to 1000 [ 1187.944174][T26267] chnl_net:caif_netlink_parms(): no params data found [ 1188.132273][T26267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.163942][T26267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.241672][T26267] bridge_slave_0: entered allmulticast mode [ 1188.260338][T26267] bridge_slave_0: entered promiscuous mode [ 1188.302343][T26267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.330954][T26267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.355673][T26267] bridge_slave_1: entered allmulticast mode [ 1189.375603][T26267] bridge_slave_1: entered promiscuous mode [ 1189.386210][T14569] Bluetooth: hci2: command tx timeout [ 1190.002403][T26300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5195'. [ 1190.604442][T26267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.630802][T26305] tipc: Resetting bearer [ 1190.689670][T26305] bond7: (slave bridge10): Releasing active interface [ 1190.949893][T26305] bond10: (slave bridge11): Releasing backup interface [ 1190.975402][T26305] bridge11: left promiscuous mode [ 1190.980639][T26305] bridge11: left allmulticast mode [ 1191.000833][T26267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.023580][T26306] netlink: 'syz.8.5197': attribute type 10 has an invalid length. [ 1191.102191][T26306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.121341][T26306] team0: Device bond0 failed to register rx_handler [ 1191.330823][T26267] team0: Port device team_slave_0 added [ 1191.363497][T26267] team0: Port device team_slave_1 added [ 1191.394562][T26267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.414886][T26267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.951045][T14569] Bluetooth: hci2: command tx timeout [ 1192.344417][T26267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.546383][T26267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.565846][T26267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.632868][T26267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.846561][T26267] hsr_slave_0: entered promiscuous mode [ 1192.852842][T26267] hsr_slave_1: entered promiscuous mode [ 1192.873376][T26267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1192.958522][T26267] Cannot create hsr debugfs directory [ 1194.470692][T14569] Bluetooth: hci2: command tx timeout [ 1196.552062][T14569] Bluetooth: hci2: command tx timeout [ 1201.130458][T26410] netlink: 'syz.9.5218': attribute type 13 has an invalid length. [ 1201.940447][T26267] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1202.262481][T26267] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1202.292789][T26267] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1203.100242][T26267] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1203.445118][T26267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.507349][T26267] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.557941][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.565188][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.728480][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.735702][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.816570][T26267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.438055][T26267] veth0_vlan: entered promiscuous mode [ 1209.477373][T26267] veth1_vlan: entered promiscuous mode [ 1209.662821][T26267] veth0_macvtap: entered promiscuous mode [ 1209.698782][T26267] veth1_macvtap: entered promiscuous mode [ 1209.781297][T26267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.793733][T26267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.817241][T26267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.026162][T26267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1210.103505][T26267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.325799][T26267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.603634][T26267] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.641700][T26267] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.650592][T26267] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.659404][T26267] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.882458][ T6084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.915841][ T6084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.030554][T18850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.087216][T18850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.383412][T26531] loop7: detected capacity change from 0 to 1024 [ 1211.402819][T26535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5240'. [ 1211.437539][T26531] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1211.452830][T26531] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1211.466008][T26531] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1211.506499][T26531] EXT4-fs error (device loop7): ext4_get_journal_inode:5820: inode #5: comm syz.7.5184: unexpected bad inode w/o EXT4_IGET_BAD [ 1211.548689][T26531] EXT4-fs (loop7): no journal found [ 1211.555653][T26536] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5240'. [ 1211.581219][T26531] EXT4-fs (loop7): can't get journal size [ 1211.606634][T26536] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5240'. [ 1211.657547][T26531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1214.388479][T26267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.621739][T26561] tipc: Enabling of bearer rejected, failed to enable media [ 1214.703895][T26561] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5247'. [ 1214.775592][T26561] tipc: Enabling of bearer rejected, failed to enable media [ 1215.213294][T26578] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5251'. [ 1216.095802][T26587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5252'. [ 1216.181288][T26587] bond9: entered promiscuous mode [ 1216.235436][T26594] loop7: detected capacity change from 0 to 512 [ 1216.245677][T26587] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1216.261292][T26594] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1216.295199][T26594] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1216.339189][T26594] EXT4-fs (loop7): 1 truncate cleaned up [ 1216.369037][T26594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1216.607162][T26587] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1216.649868][T26587] bond9: (slave sit4): The slave device specified does not support setting the MAC address [ 1216.709040][T26587] bond9: (slave sit4): Error -95 calling set_mac_address [ 1217.854386][T26629] bond3: (slave dummy0): Releasing active interface [ 1217.887784][T26629] bond0: (slave bond_slave_0): Releasing backup interface [ 1217.946560][T26629] bond_slave_0: left promiscuous mode [ 1217.954229][T26629] bond_slave_0: left allmulticast mode [ 1217.996580][T26629] bond0: (slave bond_slave_1): Releasing backup interface [ 1218.044731][T26629] bond_slave_1: left promiscuous mode [ 1218.054737][T26629] bond_slave_1: left allmulticast mode [ 1218.077101][T26629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.089854][T26629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.106689][T26629] bond2: (slave geneve2): Releasing active interface [ 1218.119395][T26629] bond4: (slave geneve3): Releasing active interface [ 1218.131389][ T27] audit: type=1800 audit(2000000204.577:2265): pid=26594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5253" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1218.160985][T26629] bond6: (slave bond7): Releasing backup interface [ 1218.173791][T26629] bond10: (slave ip6gretap0): Releasing backup interface [ 1218.184832][T26629] bond12: (slave bond13): Releasing backup interface [ 1218.191667][T26629] bond12: (slave bond13): the permanent HWaddr of slave - 46:20:82:2a:51:73 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1218.208717][T26629] bond12: (slave gretap1): making interface the new active one [ 1218.219351][T26629] bond12: (slave gretap1): Releasing backup interface [ 1218.229388][T26629] bond14: (slave bridge7): Releasing backup interface [ 1218.239384][T26629] vlan6: left allmulticast mode [ 1218.244291][T26629] bond0: left allmulticast mode [ 1218.249269][T26629] vlan6: left promiscuous mode [ 1218.254305][T26629] bond0: left promiscuous mode [ 1218.260090][T26629] bridge0: port 1(vlan6) entered disabled state [ 1218.274775][T26630] netlink: 'syz.9.5258': attribute type 10 has an invalid length. [ 1218.348089][T26267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.124161][T26662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5266'. [ 1222.635459][T19676] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1226.993703][T26760] loop7: detected capacity change from 0 to 8 [ 1227.001456][T26760] squashfs: Unknown parameter 'ÿÿÿÿ' [ 1227.121683][T26523] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1229.942425][T26782] syzkaller0: entered promiscuous mode [ 1229.948346][T26782] syzkaller0: entered allmulticast mode [ 1230.111417][T26780] netlink: 'syz.1.5287': attribute type 13 has an invalid length. [ 1233.141521][T26827] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5293'. [ 1234.553423][T26860] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 1234.595798][T26860] ref_ctr increment failed for inode: 0x159d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6df00 [ 1234.926069][T26855] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 1235.085619][T26855] ref_ctr decrement failed for inode: 0x159d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6df00 [ 1235.864093][T26886] mac80211_hwsim hwsim18 syzkaller0: Caught tx_queue_len zero misconfig [ 1237.206220][T26926] loop7: detected capacity change from 0 to 512 [ 1237.240388][T26926] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 1237.290531][T26926] bio_check_eod: 5 callbacks suppressed [ 1237.290560][T26926] syz.7.5309: attempt to access beyond end of device [ 1237.290560][T26926] loop20: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1237.395661][T26926] EXT4-fs (loop7): couldn't read superblock of external journal [ 1238.206216][T26936] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5306'. [ 1238.841760][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.848833][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.516876][T26924] loop7: detected capacity change from 0 to 32768 [ 1239.606931][T26924] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1239.851389][T26924] XFS (loop7): Ending clean mount [ 1240.780322][ T9] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1240.792650][ T9] XFS (loop7): Unmount and run xfs_repair [ 1240.815338][ T9] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1240.824074][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1240.847210][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1240.859848][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1240.869869][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1240.880046][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1240.894832][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1240.915376][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1240.925779][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1240.937243][T26924] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1240.967463][T26924] XFS (loop7): page discard on page ffffea00005ea680, inode 0x1806, pos 2048. [ 1240.990105][ T788] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1241.012033][ T788] XFS (loop7): Unmount and run xfs_repair [ 1241.032655][ T788] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1241.050703][ T788] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1241.063928][ T788] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1241.075493][ T788] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1241.084707][ T788] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1241.104735][ T788] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1241.124961][ T788] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1241.144187][ T788] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1241.172343][ T788] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1241.214551][T26924] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1241.248513][T26924] XFS (loop7): page discard on page ffffea00011ccfc0, inode 0x1806, pos 4096. [ 1241.287000][T26924] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1241.346288][T26995] tipc: Bearer : already 2 bearers with priority 0 [ 1241.354461][T26995] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1241.370377][T26924] XFS (loop7): Unmount and run xfs_repair [ 1241.376614][T26924] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1241.384403][T26924] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1241.393525][T26924] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1241.410509][T26924] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1241.421376][T26924] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1241.431067][T26924] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1241.441501][T26924] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1241.450800][T26924] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1241.460873][T26924] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1241.480306][T26997] 9pnet_fd: p9_fd_create_tcp (26997): problem connecting socket to 127.0.0.1 [ 1241.548847][T26924] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1241.563561][T26924] XFS (loop7): page discard on page ffffea00016d5c00, inode 0x1806, pos 8192. [ 1241.665424][T26924] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1241.688462][T26924] XFS (loop7): Unmount and run xfs_repair [ 1241.694288][T26924] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1241.721878][T26924] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1241.750437][T26924] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1241.787583][T26924] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1241.817155][T26924] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1241.857924][T26924] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1241.903515][T26924] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1241.955220][T26924] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1241.975296][T26924] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1241.992384][T26924] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1242.038783][T26924] XFS (loop7): page discard on page ffffea0001d01000, inode 0x1806, pos 16384. [ 1242.062970][T26924] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1242.084341][T26924] XFS (loop7): Unmount and run xfs_repair [ 1242.091043][T26924] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1242.099638][T26924] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1242.124229][T26924] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1242.144141][T26924] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1242.164533][T26924] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1242.174511][T26924] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1242.194181][T26924] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1242.214218][T26924] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1242.239001][T26924] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1242.275397][T26924] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1242.286947][T26924] XFS (loop7): page discard on page ffffea00014ea000, inode 0x1806, pos 32768. [ 1242.300240][T26924] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1242.325201][T26924] XFS (loop7): Unmount and run xfs_repair [ 1242.332215][T26924] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1242.757069][T26924] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1242.820678][T26924] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1242.971355][T26924] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1242.995221][T26924] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1243.024467][T26924] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1243.043588][T26924] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1243.075957][T26924] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1243.114319][T26924] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1243.145420][T26924] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1243.186668][T26924] XFS (loop7): page discard on page ffffea0001153000, inode 0x1806, pos 65536. [ 1243.231733][ T788] loop7: writeback error on inode 6150, offset 0, sector 12252 [ 1243.397120][ T788] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1243.436380][ T788] XFS (loop7): Unmount and run xfs_repair [ 1243.443034][ T788] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1243.483626][ T788] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1243.544582][ T788] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1243.602107][ T788] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1243.651772][ T788] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1243.930284][ T788] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1244.095471][ T788] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1244.134950][ T788] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1244.193525][ T788] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1244.237267][T18855] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1244.276417][T18855] XFS (loop7): page discard on page ffffea0000e46000, inode 0x1806, pos 131072. [ 1244.325356][ T788] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1244.355480][ T788] XFS (loop7): Unmount and run xfs_repair [ 1244.515432][ T788] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1244.533689][ T788] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1245.765200][ T788] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1245.774129][ T788] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1245.786747][ T788] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1245.795683][ T788] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1245.804563][ T788] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1245.813601][ T788] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1245.827660][ T788] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1245.840761][T18855] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1245.852886][T18855] XFS (loop7): page discard on page ffffea0000fd2000, inode 0x1806, pos 262144. [ 1245.863660][ T9] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1245.885309][ T9] XFS (loop7): Unmount and run xfs_repair [ 1245.915238][ T9] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1245.922667][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1245.973129][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1245.992583][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1246.014445][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1246.033812][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1246.043338][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1246.072002][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1246.085009][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1246.146438][T18855] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1246.185541][T18855] XFS (loop7): page discard on page ffffea0000f22000, inode 0x1806, pos 524288. [ 1246.224330][ T9] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1246.294769][ T9] XFS (loop7): Unmount and run xfs_repair [ 1246.311180][ T9] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1246.322373][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1246.365065][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1246.470328][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1246.574892][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1246.663709][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1246.749830][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1246.792129][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1246.931185][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1246.963825][T18855] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1247.011949][T18855] XFS (loop7): page discard on page ffffea0000f08000, inode 0x1806, pos 1048576. [ 1247.037022][ T9] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1247.095364][ T9] XFS (loop7): Unmount and run xfs_repair [ 1247.101455][ T9] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1247.135708][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1247.145569][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1247.171137][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1247.193718][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1247.204196][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1247.216644][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.225988][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.234958][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.314468][T18855] XFS (loop7): page discard on page ffffea0002038000, inode 0x1806, pos 2097152. [ 1247.342825][ T9] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1247.365243][ T9] XFS (loop7): Unmount and run xfs_repair [ 1247.371013][ T9] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1247.379692][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1247.412676][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1247.428097][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1247.437832][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1247.454423][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1247.464149][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.473826][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.483293][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.493281][T18855] XFS (loop7): page discard on page ffffea0001491b00, inode 0x1806, pos 4194304. [ 1247.504898][ T9] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1247.528733][ T9] XFS (loop7): Unmount and run xfs_repair [ 1247.534502][ T9] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1247.551495][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1247.561346][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1247.580622][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1247.599801][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1247.615512][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1247.634852][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.655483][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.664377][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.683794][T18855] XFS (loop7): page discard on page ffffea00012f7880, inode 0x1806, pos 4198400. [ 1247.704068][ T9] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1247.725246][ T9] XFS (loop7): Unmount and run xfs_repair [ 1247.733898][ T9] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1247.753552][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1247.774240][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1247.795460][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1247.825432][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1247.834546][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1247.845952][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.864785][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.884870][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1247.891316][T27075] overlayfs: failed to clone upperpath [ 1247.915700][T18855] XFS (loop7): page discard on page ffffea00016d5c80, inode 0x1806, pos 4202496. [ 1247.938232][ T5817] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1247.952574][ T5817] XFS (loop7): Unmount and run xfs_repair [ 1247.969353][ T5817] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1247.985662][ T5817] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1248.004441][ T5817] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1248.013845][ T5817] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1248.023393][ T5817] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1248.042633][ T5817] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1248.061544][ T5817] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.073494][ T5817] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.093175][ T5817] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.123997][T18855] XFS (loop7): page discard on page ffffea000167b300, inode 0x1806, pos 4210688. [ 1248.144005][ T9] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1248.155096][ T9] XFS (loop7): Unmount and run xfs_repair [ 1248.160970][ T9] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1248.178304][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1248.193850][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1248.219763][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1248.247218][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1248.270098][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1248.295587][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.305111][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.314183][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.338015][T18855] XFS (loop7): page discard on page ffffea0000f25400, inode 0x1806, pos 4227072. [ 1248.380761][ T5817] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1248.392417][ T5817] XFS (loop7): Unmount and run xfs_repair [ 1248.405397][ T5817] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1248.420139][ T5817] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1248.453579][ T5817] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1248.465305][ T5817] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1248.484380][ T5817] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1248.505500][ T5817] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1248.514394][ T5817] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.545774][ T5817] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.554893][ T5817] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.582922][T18855] XFS (loop7): page discard on page ffffea0001516000, inode 0x1806, pos 4259840. [ 1248.593282][ T5817] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1248.614574][ T5817] XFS (loop7): Unmount and run xfs_repair [ 1248.624672][ T5817] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1248.645318][ T5817] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1248.654460][ T5817] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1248.679593][ T5817] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1248.696127][ T5817] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1248.714067][ T5817] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1248.733648][ T5817] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.754651][ T5817] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.774702][ T5817] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.809403][T18855] XFS (loop7): page discard on page ffffea0000f68000, inode 0x1806, pos 4325376. [ 1248.824635][ T5817] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1248.836366][ T5817] XFS (loop7): Unmount and run xfs_repair [ 1248.842122][ T5817] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1248.850179][ T5817] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1248.859913][ T5817] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1248.869074][ T5817] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1248.879183][ T5817] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1248.888484][ T5817] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1248.897892][ T5817] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.907560][ T5817] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.917022][ T5817] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1248.927771][ T5817] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1248.939567][ T5817] XFS (loop7): Unmount and run xfs_repair [ 1248.945796][ T5817] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1248.955530][ T5817] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1248.967431][ T5817] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1248.976902][ T5817] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1248.988634][ T5817] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1248.998854][ T5817] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1249.008217][ T5817] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1249.017630][ T5817] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1249.032764][ T5817] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1249.053244][ T5817] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1249.105366][ T5817] XFS (loop7): Unmount and run xfs_repair [ 1249.111139][ T5817] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1249.151858][ T5817] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1249.176762][ T5817] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1249.202708][ T5817] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1249.221904][ T5817] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1249.245982][ T5817] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1249.254877][ T5817] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1249.284446][ T5817] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1249.314873][ T5817] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1249.363299][T26267] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1249.548003][T27105] ceph: No mds server is up or the cluster is laggy [ 1249.560016][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 1249.605533][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 1249.917057][T19676] libceph: connect (1)[c::]:6789 error -101 [ 1249.924846][T19676] libceph: mon0 (1)[c::]:6789 connect error [ 1256.387568][T27190] netlink: 201392 bytes leftover after parsing attributes in process `syz.8.5338'. [ 1256.967275][T14569] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1256.977846][T14569] CPU: 1 PID: 14569 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1256.985526][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1256.995624][T14569] Workqueue: hci0 hci_rx_work [ 1257.000419][T14569] Call Trace: [ 1257.003724][T14569] [ 1257.006683][T14569] dump_stack_lvl+0x18c/0x250 [ 1257.011415][T14569] ? show_regs_print_info+0x20/0x20 [ 1257.016656][T14569] ? load_image+0x420/0x420 [ 1257.021213][T14569] sysfs_create_dir_ns+0x26e/0x2a0 [ 1257.026385][T14569] ? sysfs_warn_dup+0xa0/0xa0 [ 1257.031097][T14569] ? do_raw_spin_unlock+0x121/0x230 [ 1257.036348][T14569] kobject_add_internal+0x61c/0xcc0 [ 1257.041640][T14569] kobject_add+0x164/0x240 [ 1257.046109][T14569] ? __rwlock_init+0x150/0x150 [ 1257.050918][T14569] ? kobject_init+0x1e0/0x1e0 [ 1257.055639][T14569] ? _raw_spin_unlock+0x28/0x40 [ 1257.060541][T14569] ? get_device_parent+0x366/0x390 [ 1257.065743][T14569] device_add+0x408/0xc50 [ 1257.070118][T14569] hci_conn_add_sysfs+0xd5/0x1e0 [ 1257.075179][T14569] hci_conn_complete_evt+0x758/0x12e0 [ 1257.080601][T14569] ? hci_inquiry_result_evt+0x540/0x540 [ 1257.086177][T14569] ? hci_inquiry_result_evt+0x540/0x540 [ 1257.091737][T14569] hci_event_packet+0x80e/0x1270 [ 1257.096698][T14569] ? bis_list+0x290/0x290 [ 1257.101053][T14569] ? lockdep_hardirqs_on+0x98/0x150 [ 1257.106274][T14569] ? hci_send_to_monitor+0xd7/0x4f0 [ 1257.111495][T14569] hci_rx_work+0x43a/0xd60 [ 1257.115936][T14569] ? process_scheduled_works+0x96f/0x15d0 [ 1257.121667][T14569] process_scheduled_works+0xa5d/0x15d0 [ 1257.127254][T14569] ? worker_attach_to_pool+0x380/0x380 [ 1257.132733][T14569] ? assign_work+0x3d2/0x5d0 [ 1257.137338][T14569] worker_thread+0xa55/0xfc0 [ 1257.141941][T14569] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1257.147862][T14569] ? _raw_spin_unlock+0x40/0x40 [ 1257.152738][T14569] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1257.158670][T14569] kthread+0x2fa/0x390 [ 1257.162749][T14569] ? pr_cont_work+0x560/0x560 [ 1257.167441][T14569] ? kthread_blkcg+0xd0/0xd0 [ 1257.172039][T14569] ret_from_fork+0x48/0x80 [ 1257.176488][T14569] ? kthread_blkcg+0xd0/0xd0 [ 1257.181088][T14569] ret_from_fork_asm+0x11/0x20 [ 1257.185896][T14569] [ 1257.198504][T14569] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1257.212592][T14569] Bluetooth: hci0: failed to register connection device [ 1257.423340][T27199] netlink: 'syz.1.5350': attribute type 1 has an invalid length. [ 1257.517630][T27201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1257.569883][T27201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1257.747204][T27201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1257.756408][T27201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1257.779874][T27201] bond10: (slave geneve3): making interface the new active one [ 1258.351052][T14569] Bluetooth: hci0: command 0x0406 tx timeout [ 1258.769607][T27201] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 1259.065455][T27199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5350'. [ 1259.083614][T27199] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1261.082083][T14569] Bluetooth: hci0: command 0x0406 tx timeout [ 1263.188421][T27254] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10846] was attempted by ""[27254] [ 1267.699984][T27289] vlan1: entered promiscuous mode [ 1267.705897][T27289] vlan1: entered allmulticast mode [ 1267.711135][T27289] hsr_slave_1: entered allmulticast mode [ 1267.799082][T27292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5366'. [ 1270.789533][T27330] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[26267] was attempted by ""[27330] [ 1273.096286][T27338] loop7: detected capacity change from 0 to 1024 [ 1273.445367][T27343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5374'. [ 1275.795710][T27370] 9pnet_fd: Insufficient options for proto=fd [ 1276.195275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1283.588542][T27417] gfs2: gfs2 mount does not exist [ 1283.888560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 1284.792504][T26269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1284.809350][T26269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1284.819575][T26269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1284.831987][T26269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1285.050641][T26269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1285.059066][T26269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1285.382488][T27429] lo speed is unknown, defaulting to 1000 [ 1286.667372][T27429] lo speed is unknown, defaulting to 1000 [ 1286.882199][T27443] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1286.891874][T27443] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1286.900762][T27443] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1286.909732][T27443] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1286.990749][T27443] team0: Port device vxlan0 added [ 1287.110391][T27429] chnl_net:caif_netlink_parms(): no params data found [ 1287.145632][T26269] Bluetooth: hci4: command tx timeout [ 1288.940022][T27429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.121291][T27429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.130349][T27429] bridge_slave_0: entered allmulticast mode [ 1289.140687][T27429] bridge_slave_0: entered promiscuous mode [ 1289.150449][T27429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.157913][T27429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.165249][T27429] bridge_slave_1: entered allmulticast mode [ 1289.177413][T27429] bridge_slave_1: entered promiscuous mode [ 1289.395400][T26269] Bluetooth: hci4: command tx timeout [ 1289.553919][T27429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.576606][T27429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.257316][T27429] team0: Port device team_slave_0 added [ 1291.326551][T27429] team0: Port device team_slave_1 added [ 1291.365044][T27429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.375775][T27429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.592526][T26269] Bluetooth: hci4: command tx timeout [ 1291.605253][T27429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.971571][T27429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.575292][T27429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.670615][T27429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.614058][T27429] hsr_slave_0: entered promiscuous mode [ 1293.625985][T26269] Bluetooth: hci4: command tx timeout [ 1293.625988][T27429] hsr_slave_1: entered promiscuous mode [ 1293.647668][T27429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1293.655898][T27429] Cannot create hsr debugfs directory [ 1295.091480][T27429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1295.100970][T27429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1295.117110][T27429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1295.130209][T27429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1295.243261][T27429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.268326][T27429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.298843][T27429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1295.315270][T27429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1295.339313][T26601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.346480][T26601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.386749][T26601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.394265][T26601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.870409][T27429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.949514][T27429] veth0_vlan: entered promiscuous mode [ 1295.986393][T27429] veth1_vlan: entered promiscuous mode [ 1296.038741][T27429] veth0_macvtap: entered promiscuous mode [ 1296.060304][T27429] veth1_macvtap: entered promiscuous mode [ 1296.100506][T27429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1296.111795][T27429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.132836][T27429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1296.143816][T27429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.164251][T27429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.180915][T27429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1296.191692][T27429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.202001][T27429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1296.213435][T27429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.225682][T27429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.279051][T27429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.288383][T27429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.300566][T27429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.310088][T27429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.492396][T26605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.510333][T26605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.566199][T26601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.574391][T26601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.481617][ T27] audit: type=1326 audit(2000000283.837:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27546 comm="syz.7.5416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfb19ce59 code=0x7ffc0000 [ 1297.623355][ T5817] IPVS: starting estimator thread 0... [ 1297.687319][ T27] audit: type=1326 audit(2000000283.837:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27546 comm="syz.7.5416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfb19ce59 code=0x7ffc0000 [ 1297.760695][ T27] audit: type=1326 audit(2000000283.927:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27546 comm="syz.7.5416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f0cfb19ce59 code=0x7ffc0000 [ 1297.785700][T27558] IPVS: using max 16 ests per chain, 38400 per kthread [ 1297.985303][ T27] audit: type=1326 audit(2000000283.927:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27546 comm="syz.7.5416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfb19ce59 code=0x7ffc0000 [ 1298.055235][ T27] audit: type=1326 audit(2000000283.927:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27546 comm="syz.7.5416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfb19ce59 code=0x7ffc0000 [ 1298.218166][T27567] loop3: detected capacity change from 0 to 1024 [ 1300.466979][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.473273][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.093754][T27602] loop3: detected capacity change from 0 to 2048 [ 1303.112894][T27602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1303.212043][T27606] loop7: detected capacity change from 0 to 16 [ 1303.234847][T27606] erofs: (device loop7): mounted with root inode @ nid 36. [ 1303.291656][T26269] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1303.377698][T27606] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1303.391682][ T27] audit: type=1800 audit(2000000289.847:2271): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5417" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 1305.099604][T27620] dns_resolver: Unsupported server list version (6) [ 1308.154074][T27644] loop3: detected capacity change from 0 to 512 [ 1308.178956][T27644] EXT4-fs: Ignoring removed nobh option [ 1308.233871][T27644] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1309.086754][T27644] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5428: invalid indirect mapped block 4294967295 (level 1) [ 1309.212841][T27644] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5428: invalid indirect mapped block 4294967295 (level 1) [ 1309.296219][T27644] EXT4-fs (loop3): 2 truncates cleaned up [ 1309.303489][T27644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.563703][T27429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.747871][T27681] (null): rxe_set_mtu: Set mtu to 256 [ 1311.761551][T27681] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1311.861100][T27682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1311.977355][T27682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1312.144686][T27683] netlink: 'syz.1.5434': attribute type 4 has an invalid length. [ 1312.287402][T27683] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1312.405230][T27683] .`: renamed from  [ 1312.527337][T27687] loop7: detected capacity change from 0 to 128 [ 1312.590365][T14569] Bluetooth: hci2: command 0x0406 tx timeout [ 1312.607047][T27687] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1312.620048][T27687] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1313.549801][T27706] atomic_op ffff88805c57c998 conn xmit_atomic 0000000000000000 [ 1314.423622][T26267] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1314.454182][T27709] netlink: 'syz.8.5430': attribute type 39 has an invalid length. [ 1317.155149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1321.131832][T27780] gfs2: path_lookup on  returned error -2 [ 1321.488232][T27787] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5448'. [ 1322.699684][T27804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1322.705867][T27804] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1322.723275][T27804] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1322.734139][T27787] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5448'. [ 1322.752600][T27804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1322.759355][T27804] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1322.769187][T27804] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1322.775262][T27804] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1322.789478][T27804] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1323.611680][T27824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5456'. [ 1323.748831][T27812] syzkaller0: entered promiscuous mode [ 1323.754368][T27812] syzkaller0: entered allmulticast mode [ 1323.862715][T27801] lo speed is unknown, defaulting to 1000 [ 1324.346272][T26269] Bluetooth: hci0: command 0x0c1a tx timeout [ 1324.827774][T26269] Bluetooth: hci4: command 0x0c1a tx timeout [ 1324.834352][T26269] Bluetooth: hci2: command 0x0406 tx timeout [ 1326.432887][T26269] Bluetooth: hci0: command 0x0c1a tx timeout [ 1326.905567][T26269] Bluetooth: hci2: command 0x0406 tx timeout [ 1326.911666][T14569] Bluetooth: hci4: command 0x0c1a tx timeout [ 1328.505646][T14569] Bluetooth: hci0: command 0x0c1a tx timeout [ 1328.997458][T14569] Bluetooth: hci4: command 0x0c1a tx timeout [ 1333.623227][T27801] lo speed is unknown, defaulting to 1000 [ 1336.327502][T27914] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1337.635181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1338.722139][T27937] gfs2: path_lookup on  returned error -2 [ 1339.307280][T26269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1339.321637][T26269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1339.332065][T26269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1339.354802][T26269] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1339.363867][T26269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1339.371405][T26269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1339.713191][T27938] lo speed is unknown, defaulting to 1000 [ 1340.970247][T27938] lo speed is unknown, defaulting to 1000 [ 1341.465786][T14569] Bluetooth: hci1: command tx timeout [ 1341.635381][T27951] netlink: 184 bytes leftover after parsing attributes in process `syz.8.5478'. [ 1341.644483][T27951] bond0: entered allmulticast mode [ 1341.681874][T27965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5480'. [ 1341.916643][T27938] chnl_net:caif_netlink_parms(): no params data found [ 1342.439862][T27938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.601184][T27938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.725007][T27938] bridge_slave_0: entered allmulticast mode [ 1342.902187][T27938] bridge_slave_0: entered promiscuous mode [ 1343.126537][T27938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.157431][T27938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.185787][T27938] bridge_slave_1: entered allmulticast mode [ 1343.196766][T27938] bridge_slave_1: entered promiscuous mode [ 1344.065209][T14569] Bluetooth: hci1: command tx timeout [ 1344.124223][T27938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.849866][T27938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.945175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1345.336396][T27938] team0: Port device team_slave_0 added [ 1345.356498][T27938] team0: Port device team_slave_1 added [ 1346.106155][T14569] Bluetooth: hci1: command tx timeout [ 1346.411927][T28005] bridge_slave_0: left allmulticast mode [ 1346.429582][T28005] bridge_slave_0: left promiscuous mode [ 1346.455468][T28005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.505913][T28005] bridge_slave_1: left allmulticast mode [ 1346.511607][T28005] bridge_slave_1: left promiscuous mode [ 1346.527469][T28005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.551806][T28005] bond0: (slave bond_slave_0): Releasing backup interface [ 1346.583803][T28005] bond0: (slave bond_slave_1): Releasing backup interface [ 1346.695290][ T5833] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1346.815182][T28005] team0: Port device team_slave_0 removed [ 1346.873066][T28005] team0: Port device team_slave_1 removed [ 1346.899994][T28005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.915246][T28005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.917952][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 1346.936980][T28005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.954214][T28005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.955834][ T5833] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1346.981770][ T5833] usb 4-1: config 0 has no interface number 0 [ 1346.992999][ T5833] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1347.002906][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.012146][ T5833] usb 4-1: Product: syz [ 1347.025684][ T5833] usb 4-1: Manufacturer: syz [ 1347.034330][ T5833] usb 4-1: SerialNumber: syz [ 1347.051541][ T5833] usb 4-1: config 0 descriptor?? [ 1347.064343][ T5833] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1347.951012][ T5833] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1348.023162][ T5833] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1348.197686][T14569] Bluetooth: hci1: command tx timeout [ 1349.772497][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1349.772764][T25341] usb 4-1: USB disconnect, device number 6 [ 1349.836174][T18850] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.858453][T25341] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1349.989279][T25341] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1351.211561][T25341] quatech2 4-1:0.51: device disconnected [ 1353.587860][T18850] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.642773][T27938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.655448][T27938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.745255][T27938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.777860][T27938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.784842][T27938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.911193][T27938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.299678][T18850] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.671065][T27938] hsr_slave_0: entered promiscuous mode [ 1354.750125][T27938] hsr_slave_1: entered promiscuous mode [ 1354.853298][T27938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1354.872168][T27938] Cannot create hsr debugfs directory [ 1355.525701][T28089] loop3: detected capacity change from 0 to 128 [ 1355.580631][T28089] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1355.603263][T28089] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.627637][T18850] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.080671][T27429] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1357.992332][T28109] lo: Caught tx_queue_len zero misconfig [ 1361.710406][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.717108][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.893899][T28165] lo speed is unknown, defaulting to 1000 [ 1362.463808][T28165] lo speed is unknown, defaulting to 1000 [ 1364.284139][T27938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1364.311330][T27938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1364.324748][T27938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1364.351414][T27938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1364.619483][T18850] hsr_slave_0: left promiscuous mode [ 1364.636662][T18850] hsr_slave_1: left promiscuous mode [ 1364.642672][T18850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.661255][T18850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.670189][T18850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.682877][T18850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.696219][T18850] bridge_slave_1: left allmulticast mode [ 1364.701900][T18850] bridge_slave_1: left promiscuous mode [ 1364.708879][T18850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.719248][T18850] bridge_slave_0: left allmulticast mode [ 1364.735279][T18850] bridge_slave_0: left promiscuous mode [ 1364.741081][T18850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.847906][T18850] veth1_macvtap: left promiscuous mode [ 1364.853493][T18850] veth0_macvtap: left promiscuous mode [ 1364.860693][T18850] veth1_vlan: left promiscuous mode [ 1364.866245][T18850] veth0_vlan: left promiscuous mode [ 1366.339614][T18850] team0 (unregistering): Port device team_slave_1 removed [ 1366.419463][T18850] team0 (unregistering): Port device team_slave_0 removed [ 1366.494993][T18850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.574940][T18850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.165417][T18850] bond0 (unregistering): Released all slaves [ 1367.379948][T27938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.498446][T27938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1367.522627][T26601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.529855][T26601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.567555][T18855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.574696][T18855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.276398][T27938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.418795][T27938] veth0_vlan: entered promiscuous mode [ 1368.458358][T27938] veth1_vlan: entered promiscuous mode [ 1368.547833][T27938] veth0_macvtap: entered promiscuous mode [ 1368.568874][T27938] veth1_macvtap: entered promiscuous mode [ 1368.591762][T27938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.602335][T27938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.614726][T27938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.635638][T27938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.649569][T27938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.661592][T27938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.685612][T27938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.694353][T27938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.703758][T27938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.713623][T27938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.895337][T26601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.903212][T26601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.953146][T26605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.961764][T26605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.482071][T28287] No such timeout policy "syz1" [ 1371.988670][T28285] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1372.031457][T28282] sch_tbf: burst 12 is lower than device lo mtu (18) ! [ 1372.059924][T28295] loop0: detected capacity change from 0 to 128 [ 1372.145015][T28295] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1372.167880][T28295] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.347091][T27938] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1377.741804][T26269] Bluetooth: hci2: command 0x1003 tx timeout [ 1377.764988][T14569] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1380.757289][T28387] Cannot find add_set index 0 as target [ 1381.862425][T28395] bridge_slave_0: left allmulticast mode [ 1381.906968][T28395] bridge_slave_0: left promiscuous mode [ 1381.937510][T28395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.007240][T28395] bridge_slave_1: left allmulticast mode [ 1382.033413][T28395] bridge_slave_1: left promiscuous mode [ 1382.064083][T28395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.142737][T28395] bond0: (slave bond_slave_0): Releasing backup interface [ 1382.176123][ T5817] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1382.438076][T28395] bond0: (slave bond_slave_1): Releasing backup interface [ 1382.560485][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 1382.586614][ T5817] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1383.114575][ T5817] usb 1-1: config 0 has no interface number 0 [ 1383.266430][ T5817] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1383.276183][T28395] team0: Port device team_slave_0 removed [ 1383.430050][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.445250][ T5817] usb 1-1: Product: syz [ 1383.449466][ T5817] usb 1-1: Manufacturer: syz [ 1383.454090][ T5817] usb 1-1: SerialNumber: syz [ 1383.527849][ T5817] usb 1-1: config 0 descriptor?? [ 1383.541254][ T5817] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1383.655325][T28395] team0: Port device team_slave_1 removed [ 1383.691038][T28395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.776548][ T5817] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1383.793650][T28395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.814775][ T5817] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1383.977053][T28395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.984505][T28395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.963592][T28395] team0: Mode changed to "loadbalance" [ 1385.003922][T28395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5540'. [ 1385.333633][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1385.342112][T19676] usb 1-1: USB disconnect, device number 3 [ 1385.352870][T19676] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1385.378887][T19676] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1385.400041][T19676] quatech2 1-1:0.51: device disconnected [ 1392.063576][T28514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5557'. [ 1392.103579][T28514] loop0: detected capacity change from 0 to 256 [ 1392.177740][T28514] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 1398.363836][T28561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.605422][T28561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1399.925033][T25342] lo speed is unknown, defaulting to 1000 [ 1401.940106][T28584] loop3: detected capacity change from 0 to 128 [ 1405.233188][T28609] netlink: 'syz.3.5577': attribute type 1 has an invalid length. [ 1406.160977][T28609] bond1: entered promiscuous mode [ 1406.215458][T28609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1406.312846][T28612] macvtap1: entered allmulticast mode [ 1407.767040][T28618] macvtap2: entered allmulticast mode [ 1407.889804][T28620] bond1: (slave bridge2): making interface the new active one [ 1407.929668][T28620] bridge2: entered promiscuous mode [ 1407.943596][T28620] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1408.316384][T28629] tipc: Enabled bearer , priority 10 [ 1409.587164][T28647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5582'. [ 1409.838465][T28651] netlink: 'syz.3.5584': attribute type 13 has an invalid length. [ 1411.517666][T28654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5584'. [ 1412.374385][T28675] debugfs: Directory 'netdev:veth0_macvtap' with parent 'phy43' already present! [ 1414.297055][T14569] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1414.338458][T28705] netlink: 'syz.1.5595': attribute type 12 has an invalid length. [ 1414.495831][T28706] libceph: secret too big 32 [ 1415.546015][T28722] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1417.586311][T28747] tipc: Enabling of bearer rejected, failed to enable media [ 1419.475957][T28764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5605'. [ 1419.667545][T28764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5605'. [ 1419.687263][T28764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5605'. [ 1424.074183][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.080638][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.317121][T28812] tipc: Started in network mode [ 1425.322093][T28812] tipc: Node identity ac14140f, cluster identity 4711 [ 1425.329488][T28812] tipc: Enabled bearer , priority 10 [ 1426.336221][ T5833] tipc: Node number set to 2886997007 [ 1432.389471][T28887] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1434.171277][T28895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1449.700441][T28986] loop0: detected capacity change from 0 to 128 [ 1450.029408][T28986] FAT-fs (loop0): Directory bread(block 414) failed [ 1450.036393][T28986] FAT-fs (loop0): Directory bread(block 415) failed [ 1450.043134][T28986] FAT-fs (loop0): Directory bread(block 416) failed [ 1450.049975][T28986] FAT-fs (loop0): Directory bread(block 417) failed [ 1450.056779][T28986] FAT-fs (loop0): Directory bread(block 418) failed [ 1450.063482][T28986] FAT-fs (loop0): Directory bread(block 419) failed [ 1450.070196][T28986] FAT-fs (loop0): Directory bread(block 420) failed [ 1450.076956][T28986] FAT-fs (loop0): Directory bread(block 421) failed [ 1451.971919][T28993] set match dimension is over the limit! [ 1456.436826][T29035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5647'. [ 1460.325791][T29083] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1460.360178][ T5833] IPVS: starting estimator thread 0... [ 1460.486969][T29084] IPVS: using max 14 ests per chain, 33600 per kthread [ 1460.631348][T29085] loop3: detected capacity change from 0 to 256 [ 1463.809006][T29104] overlayfs: failed to clone lowerpath [ 1465.242378][T29130] gretap1: entered promiscuous mode [ 1466.606335][T14569] Bluetooth: hci1: command 0x0406 tx timeout [ 1466.681384][T29144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5668'. [ 1469.152133][T29161] syzkaller0: entered promiscuous mode [ 1469.169222][T29161] syzkaller0: entered allmulticast mode [ 1483.832371][T26269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1483.849323][T26269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1483.868009][T26269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1483.928412][T26269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1483.936505][T26269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1483.945273][T26269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1484.210639][T29258] lo speed is unknown, defaulting to 1000 [ 1484.593644][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.600315][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.656705][T29266] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5695'. [ 1485.439760][T29258] lo speed is unknown, defaulting to 1000 [ 1486.535241][T14569] Bluetooth: hci2: command tx timeout [ 1487.413561][T29288] gretap1: entered promiscuous mode [ 1487.420894][T29288] batman_adv: batadv0: Adding interface: gretap1 [ 1487.427452][T29288] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 1487.448102][T29288] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1488.548936][ T1111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.585406][T14569] Bluetooth: hci2: command tx timeout [ 1488.644193][T29258] chnl_net:caif_netlink_parms(): no params data found [ 1488.808241][ T1111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.892619][T29320] lo: Caught tx_queue_len zero misconfig [ 1488.898961][T29313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5702'. [ 1489.011139][T29320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.025534][T25341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.037468][ T1111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.051321][T25341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.065322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.099047][T29320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.397704][ T1111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.582445][T29258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.623553][T29258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.661539][T29258] bridge_slave_0: entered allmulticast mode [ 1489.692460][T29258] bridge_slave_0: entered promiscuous mode [ 1489.713638][T29258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.732466][T29258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.752805][T29258] bridge_slave_1: entered allmulticast mode [ 1489.764409][T29258] bridge_slave_1: entered promiscuous mode [ 1490.667050][T14569] Bluetooth: hci2: command tx timeout [ 1491.087453][T29258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1491.241889][T29258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1492.484570][T29258] team0: Port device team_slave_0 added [ 1492.745530][T14569] Bluetooth: hci2: command tx timeout [ 1493.553897][T29258] team0: Port device team_slave_1 added [ 1494.116887][T29258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1494.165360][T29258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1494.242086][T29258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1494.258310][T29258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1494.265663][T29258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1494.292315][T29258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1494.355120][ T1111] tipc: Disabling bearer [ 1494.383950][ T1111] tipc: Left network mode [ 1494.797208][T29258] hsr_slave_0: entered promiscuous mode [ 1494.902230][T29258] hsr_slave_1: entered promiscuous mode [ 1495.615120][T29258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1495.638781][T29258] Cannot create hsr debugfs directory [ 1496.974361][T19676] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1497.007476][T19676] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1497.030152][T19676] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1497.057429][T19676] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1497.064903][T19676] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1497.095383][T19676] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 1497.145355][T19676] hid-generic 00A0:0006:0003.000C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1497.257060][ T5833] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1498.265122][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 1498.273201][ T5833] usb 4-1: config 0 has no interfaces? [ 1498.284723][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.287426][ T5833] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1498.293755][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.308389][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.315233][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.323261][ T5833] usb 4-1: Product: syz [ 1498.324870][T29424] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1498.345613][ T5833] usb 4-1: Manufacturer: syz [ 1498.379055][ T5833] usb 4-1: SerialNumber: syz [ 1498.387447][ T5833] usb 4-1: config 0 descriptor?? [ 1498.583634][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.617458][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.639359][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.691498][T29412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5716'. [ 1498.703230][T25346] usb 4-1: USB disconnect, device number 7 [ 1498.812285][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.823522][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.835438][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.843518][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.872582][T29424] virt_wifi0 speed is unknown, defaulting to 1000 [ 1504.035502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1512.518496][T29258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1512.542960][T29258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1512.581083][T29258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1512.694243][T29258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1513.040230][T29258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.533248][T29258] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.783997][T26605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.791366][T26605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.867748][T26605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.874959][T26605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1514.943285][ T1111] hsr_slave_0: left promiscuous mode [ 1514.991977][ T1111] hsr_slave_1: left promiscuous mode [ 1515.105493][ T1111] veth1_macvtap: left promiscuous mode [ 1515.111108][ T1111] veth0_macvtap: left promiscuous mode [ 1515.117632][ T1111] veth1_vlan: left promiscuous mode [ 1515.127523][ T1111] veth0_vlan: left promiscuous mode [ 1524.758294][ T1111] bond0 (unregistering): Released all slaves [ 1524.927828][T29522] debugfs: Directory 'netdev:veth0_macvtap' with parent 'phy43' already present! [ 1524.995497][T29538] netlink: 'syz.8.5740': attribute type 14 has an invalid length. [ 1525.017670][T29538] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5740'. [ 1525.035930][T29538] bond0: option xmit_hash_policy: invalid value (21) [ 1525.116600][T29540] netlink: 'syz.1.5748': attribute type 1 has an invalid length. [ 1525.232969][T29540] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1525.449574][T29546] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1525.676286][T29546] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1525.741859][T29546] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1525.790258][T29546] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1525.946636][T29546] bond11: (slave geneve4): making interface the new active one [ 1526.081061][T29546] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 1526.173990][T29258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1526.292054][T29553] loop3: detected capacity change from 0 to 512 [ 1526.322605][T29553] EXT4-fs: Ignoring removed nobh option [ 1526.389095][T29553] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.5743: iget: bad i_size value: 38620345925642 [ 1526.428315][T29553] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.5743: couldn't read orphan inode 15 (err -117) [ 1526.470511][T29553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1526.983903][T29258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.311915][T29258] veth0_vlan: entered promiscuous mode [ 1527.376900][T29258] veth1_vlan: entered promiscuous mode [ 1527.582381][T29258] veth0_macvtap: entered promiscuous mode [ 1527.607727][T29258] veth1_macvtap: entered promiscuous mode [ 1527.657576][T27429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.684121][T29258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.727244][T29258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.757133][T29258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.788776][T29258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.905699][T29258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.932776][T29258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1528.635592][T29258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.644354][T29258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.735395][T29258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.759970][T29258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.791384][T29571] tipc: Started in network mode [ 1528.802328][T29571] tipc: Node identity a6e5c69fe517, cluster identity 4711 [ 1528.821279][T29571] tipc: Enabled bearer , priority 0 [ 1528.839414][T29572] syzkaller0: entered promiscuous mode [ 1528.848260][T29572] syzkaller0: entered allmulticast mode [ 1528.938312][T29568] tipc: Resetting bearer [ 1529.215567][T29567] tipc: Resetting bearer [ 1529.278843][ T1111] IPVS: stop unused estimator thread 0... [ 1529.646751][T29567] tipc: Disabling bearer [ 1530.048456][T26603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.071343][T26603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.740101][T29594] lo speed is unknown, defaulting to 1000 [ 1530.920572][T29594] lo speed is unknown, defaulting to 1000 [ 1530.927990][T29594] virt_wifi0 speed is unknown, defaulting to 1000 [ 1531.049337][T26609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.076933][T26609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.130826][T29600] pim6reg: entered allmulticast mode [ 1536.155101][T29642] bridge_slave_0: mtu less than device minimum [ 1536.511820][T29646] loop3: detected capacity change from 0 to 256 [ 1536.610389][T29646] FAT-fs (loop3): Directory bread(block 64) failed [ 1536.645515][T29646] FAT-fs (loop3): Directory bread(block 65) failed [ 1536.676629][T29646] FAT-fs (loop3): Directory bread(block 66) failed [ 1536.683211][T29646] FAT-fs (loop3): Directory bread(block 67) failed [ 1536.712737][T29646] FAT-fs (loop3): Directory bread(block 68) failed [ 1536.739178][T29646] FAT-fs (loop3): Directory bread(block 69) failed [ 1536.780582][T29646] FAT-fs (loop3): Directory bread(block 70) failed [ 1536.814039][T29646] FAT-fs (loop3): Directory bread(block 71) failed [ 1536.835892][T29646] FAT-fs (loop3): Directory bread(block 72) failed [ 1536.862839][T29646] FAT-fs (loop3): Directory bread(block 73) failed [ 1536.887414][T25341] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1536.925614][T29646] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1537.295114][T25341] usb 3-1: Using ep0 maxpacket: 16 [ 1537.302273][T25341] usb 3-1: config 0 has no interfaces? [ 1537.312488][T25341] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1537.439957][T25341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.465399][T25341] usb 3-1: Product: syz [ 1537.469615][T25341] usb 3-1: Manufacturer: syz [ 1537.474373][T25341] usb 3-1: SerialNumber: syz [ 1537.496475][T25341] usb 3-1: config 0 descriptor?? [ 1537.775362][T29652] netlink: 'syz.2.5762': attribute type 1 has an invalid length. [ 1538.633349][T29683] loop3: detected capacity change from 0 to 64 [ 1539.021633][T25341] usb 3-1: USB disconnect, device number 5 [ 1540.019067][T29695] loop2: detected capacity change from 0 to 128 [ 1543.394306][T29714] lo speed is unknown, defaulting to 1000 [ 1543.643083][T29714] lo speed is unknown, defaulting to 1000 [ 1543.650493][T29714] virt_wifi0 speed is unknown, defaulting to 1000 [ 1543.968131][T29722] loop3: detected capacity change from 0 to 2048 [ 1544.026656][T29722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1546.027833][T29726] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1546.041059][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.047562][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.090595][T27429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1547.143997][T29741] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1547.835280][T29755] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[29258] was attempted by ""[29755] [ 1554.521829][T29812] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1554.590439][T29811] x_tables: duplicate underflow at hook 2 [ 1557.932832][T29836] debugfs: Directory 'netdev:veth0_macvtap' with parent 'phy43' already present! [ 1559.956865][T29847] loop2: detected capacity change from 0 to 128 [ 1560.367797][T29847] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1560.445218][T29847] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1560.576310][T29853] syzkaller0: entered promiscuous mode [ 1560.581839][T29853] syzkaller0: entered allmulticast mode [ 1561.468756][T29258] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1562.906675][T29877] netlink: 'syz.3.5801': attribute type 1 has an invalid length. [ 1563.122737][T29877] bond2: entered promiscuous mode [ 1563.232760][T29877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1563.248674][T29881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5801'. [ 1563.260570][T29881] bond2: entered allmulticast mode [ 1563.527446][T29888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1563.544674][T29888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1563.554842][T29888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1563.569218][T29888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1563.579692][T29888] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1563.589569][T29888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1565.736449][T29886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.744229][T29886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.887156][T29888] Bluetooth: hci1: command tx timeout [ 1566.730725][T29908] overlayfs: failed to clone lowerpath [ 1567.299348][T29886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.325862][T29886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.729311][T29886] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.738333][T29886] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.747830][T29886] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.757763][T29886] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.955488][T29888] Bluetooth: hci1: command tx timeout [ 1568.678797][T29881] bond2: (slave bridge3): making interface the new active one [ 1568.711289][T29881] bridge3: entered promiscuous mode [ 1568.725198][T29881] bridge3: entered allmulticast mode [ 1568.734983][T29881] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1570.035233][T29888] Bluetooth: hci1: command tx timeout [ 1570.997768][T26611] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1572.105144][T29888] Bluetooth: hci1: command tx timeout [ 1572.766407][T26611] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1573.124350][T29966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5811'. [ 1573.208928][T29966] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5811'. [ 1573.324348][T29966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5811'. [ 1573.425902][T29966] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5811'. [ 1573.472960][T29887] lo speed is unknown, defaulting to 1000 [ 1573.675853][T26611] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1574.652307][ T27] audit: type=1800 audit(2000000560.597:2272): pid=29990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5814" name="file0" dev="overlay" ino=105 res=0 errno=0 [ 1575.798538][T26611] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.908341][T29887] lo speed is unknown, defaulting to 1000 [ 1575.936734][T29887] virt_wifi0 speed is unknown, defaulting to 1000 [ 1579.237396][T26611] tipc: Disabling bearer [ 1579.243093][T26611] tipc: Disabling bearer [ 1579.355662][T26611] tipc: Disabling bearer [ 1579.425511][T26611] tipc: Left network mode [ 1580.697945][T26611] ip6gretap0 (unregistering): left promiscuous mode [ 1581.160491][T29887] chnl_net:caif_netlink_parms(): no params data found [ 1581.883106][T30048] pimreg: entered allmulticast mode [ 1582.193695][T30056] loop2: detected capacity change from 0 to 1024 [ 1582.216127][T30056] EXT4-fs: Ignoring removed mblk_io_submit option [ 1582.283679][T30056] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 1582.283679][T30056] [ 1582.660205][T29887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.668266][T29887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.676374][T29887] bridge_slave_0: entered allmulticast mode [ 1582.699803][ T27] audit: type=1800 audit(2000000569.147:2273): pid=30055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5829" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1582.786090][T29887] bridge_slave_0: entered promiscuous mode [ 1584.017599][T29887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.024877][T29887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.048460][T29887] bridge_slave_1: entered allmulticast mode [ 1584.086227][T29887] bridge_slave_1: entered promiscuous mode [ 1585.110631][T30074] xt_CT: No such helper "pptp" [ 1585.222832][T29887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1585.741853][T29887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.462371][T30109] veth3: entered promiscuous mode [ 1587.508837][T29887] team0: Port device team_slave_0 added [ 1587.525908][T30107] netlink: 'syz.2.5838': attribute type 1 has an invalid length. [ 1587.581039][T30108] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1587.935743][T30111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5838'. [ 1587.979614][T26609] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1588.001375][T30111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1588.030271][T29887] team0: Port device team_slave_1 added [ 1588.104034][T30113] debugfs: Directory 'netdev:veth0_macvtap' with parent 'phy20' already present! [ 1588.260657][T26609] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1589.186140][T30130] overlayfs: failed to clone upperpath [ 1589.964932][T26611] IPVS: stopping backup sync thread 23569 ... [ 1589.989664][T29887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1590.037393][T29887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1590.048964][T30133] loop2: detected capacity change from 0 to 4096 [ 1590.133836][T29887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1590.148579][T30133] EXT4-fs: inline encryption not supported [ 1590.213357][T30133] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1590.230998][T29887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1590.258968][T29887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1590.265212][T30133] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 1590.286591][T29887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1590.395356][T30133] System zones: 0-5 [ 1590.419305][T30133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1593.256048][T29887] hsr_slave_0: entered promiscuous mode [ 1593.302893][T29887] hsr_slave_1: entered promiscuous mode [ 1593.339846][T29887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1593.375694][T29887] Cannot create hsr debugfs directory [ 1593.477591][T29258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.101929][T30159] debugfs: Directory 'netdev:veth0_macvtap' with parent 'phy43' already present! [ 1595.208753][T30170] syzkaller0: entered promiscuous mode [ 1595.231966][T30170] syzkaller0: entered allmulticast mode [ 1595.279874][T30170] tc action pedit offset 4096 out of bounds [ 1595.286562][T30170] tc action pedit offset 4096 out of bounds [ 1595.292517][T30170] tc action pedit offset 4096 out of bounds [ 1595.298489][T30170] tc action pedit offset 4096 out of bounds [ 1595.304408][T30170] tc action pedit offset 4096 out of bounds [ 1595.310359][T30170] tc action pedit offset 4096 out of bounds [ 1595.316307][T30170] tc action pedit offset 4096 out of bounds [ 1595.322226][T30170] tc action pedit offset 4096 out of bounds [ 1595.328175][T30170] tc action pedit offset 4096 out of bounds [ 1595.334125][T30170] tc action pedit offset 4096 out of bounds [ 1595.340185][T30170] TC_ACT_REPEAT abuse ? [ 1596.416204][T30179] loop2: detected capacity change from 0 to 1024 [ 1596.474019][T26611] hsr_slave_0: left promiscuous mode [ 1596.481598][T26611] hsr_slave_1: left promiscuous mode [ 1596.528713][T26611] veth1_vlan: left allmulticast mode [ 1596.688849][T30187] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1596.696157][T30187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1596.747567][T30187] vhci_hcd vhci_hcd.0: Device attached [ 1597.021261][T30188] vhci_hcd: connection closed [ 1597.120123][T18850] vhci_hcd: stop threads [ 1597.253266][T18850] vhci_hcd: release socket [ 1597.295709][T18850] vhci_hcd: disconnect device [ 1598.953056][T26611] bond10 (unregistering): Released all slaves [ 1599.152896][T26611] bond9 (unregistering): Released all slaves [ 1599.252069][T26611] bond8 (unregistering): Released all slaves [ 1599.955255][T26611] bond7 (unregistering): Released all slaves [ 1600.523623][T26611] bond6 (unregistering): Released all slaves [ 1600.940007][T26611] bond5 (unregistering): Released all slaves [ 1601.038051][T26611] bond4 (unregistering): Released all slaves [ 1601.414682][T26611] bond3 (unregistering): Released all slaves [ 1601.757701][T26611] bond2 (unregistering): Released all slaves [ 1601.994484][T26611] bond1 (unregistering): Released all slaves [ 1603.482060][T26611] bond0 (unregistering): Released all slaves [ 1603.506489][T26607] smc: removing ib device syz0 [ 1603.578367][T30181] netlink: 'syz.1.5844': attribute type 3 has an invalid length. [ 1605.566559][T30253] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1605.573145][T30253] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1605.645141][T30253] vhci_hcd vhci_hcd.0: Device attached [ 1605.935234][T29912] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1606.386519][T30255] vhci_hcd: connection reset by peer [ 1606.514892][T26603] vhci_hcd: stop threads [ 1606.531031][T26603] vhci_hcd: release socket [ 1606.689122][T26603] vhci_hcd: disconnect device [ 1607.005514][T30252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5860'. [ 1607.470783][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.490806][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.598922][T30257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.619607][T30257] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.671590][T30257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1607.711891][T30253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5859'. [ 1609.558329][T14569] Bluetooth: hci2: command 0x0406 tx timeout [ 1609.899167][T26611] IPVS: stop unused estimator thread 0... [ 1610.227163][T29887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1610.269282][T29887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1610.357469][T29887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1610.388944][T30308] debugfs: Directory 'netdev:veth0_macvtap' with parent 'phy20' already present! [ 1610.398568][T29887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1610.721694][T29887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1611.065326][T29912] vhci_hcd: vhci_device speed not set [ 1611.366294][T29887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1611.427449][T26611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.434621][T26611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1611.500187][T26611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.507411][T26611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1611.960012][T29887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1612.356813][T29887] veth0_vlan: entered promiscuous mode [ 1612.386391][T29887] veth1_vlan: entered promiscuous mode [ 1612.420312][T29887] veth0_macvtap: entered promiscuous mode [ 1612.437753][T29887] veth1_macvtap: entered promiscuous mode [ 1612.465748][T29887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1612.477028][T29887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1612.492142][T29887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1612.510028][T29887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1612.532212][T29887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1612.554105][T29887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1612.595416][T29887] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.604157][T29887] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.617095][T29887] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.625977][T29887] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.814731][ T6084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.836464][ T6084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.909673][ T6084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.927337][ T6084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.338518][T30361] netlink: 'syz.6.5796': attribute type 1 has an invalid length. [ 1616.622674][T30391] loop2: detected capacity change from 0 to 40427 [ 1616.957354][T30391] F2FS-fs (loop2): invalid crc value [ 1617.672687][T30391] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1617.800436][T30391] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1617.947389][ T27] audit: type=1800 audit(2000000604.387:2274): pid=30391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5869" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1618.391553][T29258] syz-executor: attempt to access beyond end of device [ 1618.391553][T29258] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1618.435182][T29258] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1618.503056][ T27] audit: type=1800 audit(2000000604.467:2275): pid=30410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5869" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 1618.546105][T30411] loop6: detected capacity change from 0 to 1024 [ 1618.559458][T30411] EXT4-fs: Ignoring removed orlov option [ 1618.599016][T30411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1618.618895][T30411] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1619.861006][T29887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1620.085378][T30428] netlink: 'syz.1.5877': attribute type 1 has an invalid length. [ 1620.250235][T30432] bond12: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1620.935776][T30428] veth21: entered promiscuous mode [ 1620.963205][T30428] bond12: (slave veth21): Enslaving as a backup interface with a down link [ 1621.043455][T30434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5877'. [ 1621.098611][T30434] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1621.113964][ T6090] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1621.345904][ T6084] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1623.085257][T30465] IPVS: Error connecting to the multicast addr [ 1623.309130][T30460] loop3: detected capacity change from 0 to 4096 [ 1625.173661][T29929] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1625.404598][T30479] bridge_slave_0: left allmulticast mode [ 1625.421922][T29929] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 1625.455993][T30479] bridge_slave_0: left promiscuous mode [ 1625.461799][T30479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.482269][T29929] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1625.547796][T30479] bridge_slave_1: left allmulticast mode [ 1625.553480][T30479] bridge_slave_1: left promiscuous mode [ 1625.586961][T29929] usb 7-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice= 0.40 [ 1625.638117][T29929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.657827][T30479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.696484][T29929] usb 7-1: Product: syz [ 1625.758256][T30479] bond0: (slave bond_slave_0): Releasing backup interface [ 1625.766117][T29929] usb 7-1: Manufacturer: syz [ 1625.783897][T29929] usb 7-1: SerialNumber: syz [ 1625.801664][T30479] bond0: (slave bond_slave_1): Releasing backup interface [ 1625.868700][T30479] team0: Port device team_slave_0 removed [ 1625.877566][T30479] team0: Port device team_slave_1 removed [ 1625.883973][T30479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1625.892456][T30479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1625.918656][T30479] bond1: (slave ip6gretap1): Removing an active aggregator [ 1625.936061][T30479] bond1: (slave ip6gretap1): Releasing backup interface [ 1625.974510][T30480] team0: Mode changed to "random" [ 1626.003640][T30483] tipc: Started in network mode [ 1626.035042][T30483] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1626.063229][T30483] tipc: Enabled bearer , priority 0 [ 1626.116906][T30482] vlan0: entered promiscuous mode [ 1626.158451][T30473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5885'. [ 1626.313845][T30489] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1626.324045][T30489] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1627.072489][T29929] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1627.085086][ T5833] tipc: Node number set to 11578026 [ 1627.094238][T29929] snd-usb-audio: probe of 7-1:1.0 failed with error -2 [ 1627.112250][T29929] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1627.120622][T29929] snd-usb-audio: probe of 7-1:1.1 failed with error -2 [ 1627.149099][T29929] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1627.769642][T29929] snd-usb-audio: probe of 7-1:1.2 failed with error -2 [ 1627.835266][T29929] usb 7-1: USB disconnect, device number 12 [ 1627.847048][T30228] udevd[30228]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1634.595173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1637.887055][T30545] syzkaller0: entered promiscuous mode [ 1637.892584][T30545] syzkaller0: entered allmulticast mode [ 1637.935425][T30545] tcf_pedit_act: 22 callbacks suppressed [ 1637.935503][T30545] tc action pedit offset 4096 out of bounds [ 1637.948008][T30545] tc action pedit offset 4096 out of bounds [ 1637.953930][T30545] tc action pedit offset 4096 out of bounds [ 1637.959920][T30545] tc action pedit offset 4096 out of bounds [ 1637.965881][T30545] tc action pedit offset 4096 out of bounds [ 1637.971803][T30545] tc action pedit offset 4096 out of bounds [ 1637.977775][T30545] tc action pedit offset 4096 out of bounds [ 1637.983699][T30545] tc action pedit offset 4096 out of bounds [ 1637.989673][T30545] tc action pedit offset 4096 out of bounds [ 1637.995638][T30545] tc action pedit offset 4096 out of bounds [ 1638.001645][T30545] TC_ACT_REPEAT abuse ? [ 1638.816746][ T5833] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1639.572512][ T5833] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1639.602239][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1639.625171][ T5833] usb 3-1: Product: syz [ 1639.641981][ T5833] usb 3-1: config 0 descriptor?? [ 1639.668827][ T5833] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1639.697286][ T5833] usb 3-1: Detected FT232H [ 1639.893477][ T5833] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1640.181597][T30567] lo speed is unknown, defaulting to 1000 [ 1640.210503][T30567] virt_wifi0 speed is unknown, defaulting to 1000 [ 1641.218707][ T5833] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1641.243732][ T5833] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1641.255902][ T5833] usb 3-1: USB disconnect, device number 6 [ 1641.345628][ T5833] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1641.377661][ T5833] ftdi_sio 3-1:0.0: device disconnected [ 1641.912816][T30599] loop2: detected capacity change from 0 to 128 [ 1642.047444][T30599] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1642.366661][T30606] loop6: detected capacity change from 0 to 4096 [ 1642.521003][T30599] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1644.259792][T30619] UBIFS error (pid: 30619): cannot open "ubifs", error -22 [ 1645.786841][T29258] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1646.414195][T30625] loop6: detected capacity change from 0 to 32768 [ 1646.423939][T30625] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.5913 (30625) [ 1646.449817][T30625] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1646.460190][T30625] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 1646.469659][T30625] BTRFS info (device loop6): force zlib compression, level 3 [ 1646.477496][T30625] BTRFS info (device loop6): force clearing of disk cache [ 1646.484656][T30625] BTRFS info (device loop6): setting nodatasum [ 1646.490957][T30625] BTRFS info (device loop6): use zlib compression, level 3 [ 1646.498332][T30625] BTRFS info (device loop6): enabling disk space caching [ 1646.506268][T30625] BTRFS info (device loop6): disk space caching is enabled [ 1646.725126][T30625] BTRFS info (device loop6): enabling ssd optimizations [ 1646.732161][T30625] BTRFS info (device loop6): auto enabling async discard [ 1646.748380][T30625] BTRFS info (device loop6): rebuilding free space tree [ 1646.807923][T30625] BTRFS info (device loop6): disabling free space tree [ 1646.814898][T30625] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1646.824710][T30625] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1648.293954][T29887] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1648.431014][T30651] loop2: detected capacity change from 0 to 512 [ 1648.463273][T30651] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1651.384684][T30685] loop6: detected capacity change from 0 to 512 [ 1651.482721][T30683] syzkaller0: entered promiscuous mode [ 1651.507117][T30683] syzkaller0: entered allmulticast mode [ 1651.698220][T30685] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.5919: invalid indirect mapped block 4294967295 (level 1) [ 1651.770556][T30685] EXT4-fs (loop6): Remounting filesystem read-only [ 1653.746306][T30685] EXT4-fs (loop6): 2 truncates cleaned up [ 1653.779039][T30685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1654.177740][T29887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.490590][T30722] virtio-fs: tag not found [ 1661.458269][T30744] loop6: detected capacity change from 0 to 1024 [ 1662.869126][T30758] syzkaller0: entered promiscuous mode [ 1662.887131][T30758] syzkaller0: entered allmulticast mode [ 1664.606011][T30779] loop3: detected capacity change from 0 to 512 [ 1665.144013][T30779] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1665.582193][T30782] syzkaller0: entered promiscuous mode [ 1665.592669][T30782] syzkaller0: entered allmulticast mode [ 1665.636883][T30782] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1665.823181][T30785] loop6: detected capacity change from 0 to 512 [ 1666.227036][T30785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.426974][T30785] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1668.916012][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.922437][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.797177][T30822] PKCS7: Unknown OID: [4] 0.0 [ 1669.797228][T30822] PKCS7: Only support pkcs7_signedData type [ 1670.015439][T30821] tty tty27: ldisc open failed (-12), clearing slot 26 [ 1670.261587][T29887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.555126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1677.173233][T30859] loop3: detected capacity change from 0 to 32768 [ 1677.632526][T30859] JBD2: Ignoring recovery information on journal [ 1677.640098][T30859] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 1677.648871][T30859] JBD2: bad block at offset 32 [ 1677.683768][T30859] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1677.934657][T27429] ocfs2: Unmounting device (7,3) on (node local) [ 1679.668976][T30884] loop6: detected capacity change from 0 to 2048 [ 1679.936805][T30888] PKCS7: Unknown OID: [4] 0.0 [ 1679.941597][T30888] PKCS7: Only support pkcs7_signedData type [ 1680.979802][T30884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1681.198656][T30899] loop2: detected capacity change from 0 to 1024 [ 1681.250939][T30903] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1681.619347][T30907] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1681.651531][T30907] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 1681.664559][T30907] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1681.664559][T30907] [ 1681.674344][T30907] EXT4-fs (loop6): Total free blocks count 0 [ 1681.680483][T30907] EXT4-fs (loop6): Free/Dirty block details [ 1681.686796][T30907] EXT4-fs (loop6): free_blocks=2415919504 [ 1681.692698][T30907] EXT4-fs (loop6): dirty_blocks=48 [ 1681.698130][T30907] EXT4-fs (loop6): Block reservation details [ 1681.704672][T30907] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 1682.406699][T30910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1682.951622][T29887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1683.289511][T30916] loop3: detected capacity change from 0 to 1024 [ 1683.323463][T30916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1683.435389][T30916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1683.860447][T30916] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1684.965849][T27429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.464500][T14569] Bluetooth: hci1: command 0x0406 tx timeout [ 1686.692343][T30946] loop3: detected capacity change from 0 to 128 [ 1688.983335][T30962] lo speed is unknown, defaulting to 1000 [ 1689.072655][T30962] virt_wifi0 speed is unknown, defaulting to 1000 [ 1690.798575][T30981] loop6: detected capacity change from 0 to 512 [ 1690.847721][T30981] EXT4-fs: Ignoring removed mblk_io_submit option [ 1690.916663][T30981] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1691.026758][T30981] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1691.095726][T30981] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1691.143724][T30981] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.5971: bg 0: block 361: padding at end of block bitmap is not set [ 1691.183672][T30987] netlink: 'syz.3.5969': attribute type 21 has an invalid length. [ 1691.202130][T30987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5969'. [ 1691.220245][T30987] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1691.263515][T30981] EXT4-fs (loop6): Remounting filesystem read-only [ 1691.283841][T30981] EXT4-fs (loop6): 1 truncate cleaned up [ 1691.331296][T30981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1692.062624][T31000] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.5971: dx entry: limit 0 != root limit 125 [ 1692.075249][T31000] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5971: Corrupt directory, running e2fsck is recommended [ 1692.519660][T29887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1692.597094][T31008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5970'. [ 1696.520775][T31032] loop6: detected capacity change from 0 to 2048 [ 1696.688916][T31035] lo speed is unknown, defaulting to 1000 [ 1696.696346][T31035] virt_wifi0 speed is unknown, defaulting to 1000 [ 1698.170463][T31032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1706.119245][T31082] tipc: Enabled bearer , priority 0 [ 1706.171584][T31082] syzkaller0: entered promiscuous mode [ 1706.260042][T31082] syzkaller0: entered allmulticast mode [ 1706.952035][T31082] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1707.658147][T29912] tipc: Node number set to 1139984031 [ 1708.036738][T31087] tipc: Resetting bearer [ 1708.276075][T31078] tipc: Resetting bearer [ 1708.489169][T31078] tipc: Disabling bearer [ 1708.980908][T31121] loop6: detected capacity change from 0 to 32768 [ 1709.177422][T31121] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1709.412089][T31121] XFS (loop6): Ending clean mount [ 1709.426273][T31121] XFS (loop6): Quotacheck needed: Please wait. [ 1709.626029][T31121] XFS (loop6): Quotacheck: Done. [ 1710.943690][T29929] IPVS: starting estimator thread 0... [ 1711.335181][T31150] IPVS: using max 16 ests per chain, 38400 per kthread [ 1711.408366][T29887] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1712.550969][T31163] loop3: detected capacity change from 0 to 1024 [ 1714.555069][T31184] loop6: detected capacity change from 0 to 2048 [ 1714.694111][T31184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1716.081308][T31197] bond1: (slave bridge2): Releasing backup interface [ 1716.375134][T31197] bridge2: left promiscuous mode [ 1716.442953][T31197] batman_adv: batadv0: Removing interface: gretap1 [ 1716.511577][T31197] bond2: (slave bridge3): Releasing backup interface [ 1716.525029][T31197] bridge3: left promiscuous mode [ 1716.530195][T31197] bridge3: left allmulticast mode [ 1716.602036][T31203] team0: Mode changed to "random" [ 1716.665995][T31205] vlan0: entered promiscuous mode [ 1716.797503][T31205] team0: Port device vlan0 added [ 1716.847401][T31206] tipc: Enabled bearer , priority 0 [ 1718.921819][T31223] netlink: 'syz.3.6006': attribute type 4 has an invalid length. [ 1719.585669][T29888] Bluetooth: hci2: SCO packet for unknown connection handle 3840 [ 1722.597548][T31256] team0: No ports can be present during mode change [ 1722.747181][T31255] vlan0: entered promiscuous mode [ 1723.057606][T31255] team0: Port device vlan0 added [ 1723.200470][T31254] tipc: Started in network mode [ 1723.416799][T31254] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1723.480956][T31254] tipc: Enabled bearer , priority 0 [ 1724.931121][T29913] tipc: Node number set to 11578026 [ 1725.197069][T31280] netlink: 'syz.6.6018': attribute type 1 has an invalid length. [ 1725.260055][T31280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1725.432829][T31283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1725.467610][T31283] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1725.499953][T31283] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1725.563840][T31284] gretap1: entered promiscuous mode [ 1725.610685][T31284] bond1: (slave gretap1): making interface the new active one [ 1725.621800][T31284] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1725.647933][T31280] macvlan2: entered promiscuous mode [ 1725.665085][T31280] macvlan2: entered allmulticast mode [ 1725.678403][T31280] bond1: entered promiscuous mode [ 1725.691006][T31280] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1725.713007][T31280] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1725.737779][T31280] bond1: left promiscuous mode [ 1726.823657][T31304] loop3: detected capacity change from 0 to 2048 [ 1726.885057][T31304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1728.743551][T31319] netlink: 'syz.6.6023': attribute type 1 has an invalid length. [ 1728.940057][T31322] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1729.107326][T31322] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1730.076773][T31319] bond2: (slave gretap2): making interface the new active one [ 1730.113634][T31319] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1730.142304][T31322] macvlan2: entered promiscuous mode [ 1731.578110][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.586613][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.630521][T31322] macvlan2: entered allmulticast mode [ 1731.657162][T31322] bond2: entered promiscuous mode [ 1731.669594][T31322] gretap2: entered promiscuous mode [ 1731.683927][T31322] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1731.713175][T31322] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 1731.755880][T31322] bond2: left promiscuous mode [ 1731.773444][T31322] gretap2: left promiscuous mode [ 1739.203376][T31407] ceph: No mds server is up or the cluster is laggy [ 1739.210506][T29917] libceph: connect (1)[c::]:6789 error -101 [ 1739.251016][T29917] libceph: mon0 (1)[c::]:6789 connect error [ 1743.586499][T31447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6049'. [ 1747.640424][ T27] audit: type=1326 audit(2000000735.014:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31461 comm="syz.6.6053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f3279ce59 code=0x0 [ 1748.258794][T31475] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6055'. [ 1749.535239][T31482] loop2: detected capacity change from 0 to 1024 [ 1751.091263][T14569] Bluetooth: Unknown LE signaling command 0x1d [ 1751.107349][T14569] Bluetooth: Wrong link type (-22) [ 1754.072703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1756.980538][T31534] loop3: detected capacity change from 0 to 1024 [ 1758.000768][T31540] tipc: Enabled bearer , priority 0 [ 1758.358824][T31540] tipc: Resetting bearer [ 1758.682011][T31538] tipc: Disabling bearer [ 1760.228699][T31563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6069'. [ 1760.237754][T31563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6069'. [ 1760.383275][T31559] syzkaller0: entered promiscuous mode [ 1760.407675][T31559] syzkaller0: entered allmulticast mode [ 1760.448383][T31559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6068'. [ 1760.448414][T31559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6068'. [ 1760.466940][T31559] TC_ACT_REPEAT abuse ? [ 1763.937523][T31600] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1763.944119][T31600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1763.965535][T31600] vhci_hcd vhci_hcd.0: Device attached [ 1764.215993][T31602] vhci_hcd: connection closed [ 1764.236848][ T1111] vhci_hcd: stop threads [ 1764.256290][T19676] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1764.311035][ T1111] vhci_hcd: release socket [ 1764.689929][ T1111] vhci_hcd: disconnect device [ 1766.171954][T31628] hugetlbfs: syz.2.6079 (31628): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1766.712311][T31632] loop6: detected capacity change from 0 to 512 [ 1766.747358][T31632] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1766.805298][T31632] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1766.959928][T31632] EXT4-fs error (device loop6): __ext4_get_inode_loc:4496: comm syz.6.6082: Invalid inode table block 1 in block_group 0 [ 1767.122101][T31632] EXT4-fs (loop6): get root inode failed [ 1767.171283][T31632] EXT4-fs (loop6): mount failed [ 1769.228362][T19676] vhci_hcd: vhci_device speed not set [ 1769.969128][T31659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6086'. [ 1770.552255][T31669] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1770.558856][T31669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1770.597419][T31669] vhci_hcd vhci_hcd.0: Device attached [ 1770.839420][T31680] syzkaller0: entered promiscuous mode [ 1770.849898][T31680] syzkaller0: entered allmulticast mode [ 1770.866340][T19676] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1770.940946][T31670] vhci_hcd: connection reset by peer [ 1770.950201][T26601] vhci_hcd: stop threads [ 1770.967282][T26601] vhci_hcd: release socket [ 1770.987282][T26601] vhci_hcd: disconnect device [ 1772.140081][T31697] loop3: detected capacity change from 0 to 512 [ 1772.157936][T31697] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1772.188261][T31697] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1772.232829][T31697] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.6094: Invalid inode table block 1 in block_group 0 [ 1772.400307][T31697] EXT4-fs (loop3): get root inode failed [ 1772.410930][T31697] EXT4-fs (loop3): mount failed [ 1774.838246][T14569] Bluetooth: hci1: command 0x0406 tx timeout [ 1776.184522][T31742] loop2: detected capacity change from 0 to 1024 [ 1776.783652][T31743] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6104'. [ 1776.797020][T19676] vhci_hcd: vhci_device speed not set [ 1778.909743][T31742] hfsplus: failed to load extents file [ 1780.925653][T31761] loop2: detected capacity change from 0 to 8192 [ 1781.309653][T31761] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1781.322760][T31761] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1781.332200][T31761] REISERFS (device loop2): using ordered data mode [ 1781.339416][T31761] reiserfs: using flush barriers [ 1781.354901][T31761] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1781.371997][T31761] REISERFS (device loop2): checking transaction log (loop2) [ 1781.381225][T31761] REISERFS (device loop2): Using r5 hash to sort names [ 1781.388681][T31761] REISERFS (device loop2): using 3.5.x disk format [ 1781.395680][T31761] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 1781.409303][T31761] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1783.537418][T31784] loop2: detected capacity change from 0 to 64 [ 1783.599188][T31784] hfs: unable to locate alternate MDB [ 1783.605512][T31784] hfs: continuing without an alternate MDB [ 1783.645867][T31784] hfs: inconsistency in B*Tree (3,2,0,3,0) [ 1783.652546][T31784] hfs: get root inode failed [ 1787.113587][T31818] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1787.120147][T31818] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1787.273450][T31818] vhci_hcd vhci_hcd.0: Device attached [ 1787.648527][T31819] vhci_hcd: connection closed [ 1787.670346][T26607] vhci_hcd: stop threads [ 1788.024342][T26607] vhci_hcd: release socket [ 1788.141611][T26607] vhci_hcd: disconnect device [ 1788.222627][T29929] vhci_hcd: vhci_device speed not set [ 1788.408875][T14569] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 1788.590073][T31837] loop2: detected capacity change from 0 to 2048 [ 1788.749709][T31837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1788.819596][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1788.826680][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.609989][T31851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6123'. [ 1791.620155][T31851] netlink: get zone limit has 8 unknown bytes [ 1791.762095][T31851] loop2: detected capacity change from 0 to 4096 [ 1792.661911][T31885] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1792.668515][T31885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1792.708976][T31885] vhci_hcd vhci_hcd.0: Device attached [ 1792.717865][T31880] loop2: detected capacity change from 0 to 4096 [ 1794.371825][T31886] vhci_hcd: connection closed [ 1794.372645][ T6084] vhci_hcd: stop threads [ 1794.406689][ T6084] vhci_hcd: release socket [ 1794.437785][ T6084] vhci_hcd: disconnect device [ 1794.728077][T31901] futex_wake_op: syz.2.6131 tries to shift op by 144; fix this program [ 1795.775056][T14569] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 1796.968469][T31912] comedi comedi0: Minor 3 could not be opened [ 1800.777959][T31938] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1800.784560][T31938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1800.815958][T31938] vhci_hcd vhci_hcd.0: Device attached [ 1801.110910][T29929] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1801.186822][T31939] vhci_hcd: connection closed [ 1801.190680][ T6084] vhci_hcd: stop threads [ 1801.555049][ T6084] vhci_hcd: release socket [ 1801.577708][ T6084] vhci_hcd: disconnect device [ 1806.120884][T29929] vhci_hcd: vhci_device speed not set [ 1807.523033][T31991] No such timeout policy "syz1" [ 1809.714263][T32017] netlink: 'syz.2.6156': attribute type 1 has an invalid length. [ 1809.795652][T32020] loop6: detected capacity change from 0 to 128 [ 1809.824332][T32017] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1809.836228][T32017] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1809.881549][T32020] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1809.895359][T32020] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1810.049957][T32022] bond2: (slave gretap1): making interface the new active one [ 1810.144217][T32022] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1810.158316][T32025] loop3: detected capacity change from 0 to 2048 [ 1810.212819][T32025] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1810.407443][T32026] macvlan0: entered promiscuous mode [ 1810.508215][T32026] macvlan0: entered allmulticast mode [ 1810.694210][T32026] bond2: entered promiscuous mode [ 1810.927703][T32026] gretap1: entered promiscuous mode [ 1811.019527][T32026] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1811.666103][T32026] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1811.681090][T29887] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1811.718005][T32026] bond2: left promiscuous mode [ 1811.795914][T32026] gretap1: left promiscuous mode [ 1812.488895][T32043] syzkaller0: entered promiscuous mode [ 1812.753452][T32043] syzkaller0: entered allmulticast mode [ 1813.557077][T32054] loop3: detected capacity change from 0 to 1024 [ 1816.105816][T32076] loop6: detected capacity change from 0 to 512 [ 1816.715530][ T6084] hfsplus: b-tree write err: -5, ino 25 [ 1816.736151][ T6084] hfsplus: b-tree write err: -5, ino 4 [ 1816.751363][ T6084] hfsplus: b-tree write err: -5, ino 2 [ 1816.782116][T32076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1816.868464][T32076] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1817.684938][ T27] audit: type=1800 audit(2000000808.506:2277): pid=32097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6165" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1817.970352][T29887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1818.249723][T32096] loop3: detected capacity change from 0 to 32768 [ 1818.272956][T32096] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.6167 (32096) [ 1818.330711][T32096] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1818.365318][T32096] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1818.386151][T32096] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1818.422511][T32096] BTRFS info (device loop3): turning on flush-on-commit [ 1818.430872][T32096] BTRFS info (device loop3): trying to use backup root at mount time [ 1818.439757][T32096] BTRFS info (device loop3): enabling auto defrag [ 1818.446257][T32096] BTRFS info (device loop3): max_inline at 23 [ 1818.455110][T32096] BTRFS info (device loop3): using free space tree [ 1818.620628][T32096] BTRFS info (device loop3): enabling ssd optimizations [ 1818.627651][T32096] BTRFS info (device loop3): auto enabling async discard [ 1820.082367][T27429] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1821.258738][T32155] netlink: 'syz.1.6172': attribute type 1 has an invalid length. [ 1821.604992][T32155] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1821.627109][T32155] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 1821.867336][T32167] macvlan0: entered promiscuous mode [ 1822.319481][T32167] macvlan0: entered allmulticast mode [ 1822.448593][T32167] bond13: entered promiscuous mode [ 1822.515535][T32167] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1822.678219][T32167] bond13: left promiscuous mode [ 1822.825118][T32175] loop3: detected capacity change from 0 to 1024 [ 1825.582062][T32191] bridge_slave_0: left allmulticast mode [ 1825.604290][T32191] bridge_slave_0: left promiscuous mode [ 1825.629621][T32191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.710923][T32197] loop6: detected capacity change from 0 to 1024 [ 1825.810831][T32191] .`: (slave bond_slave_0): Releasing backup interface [ 1825.899100][T32191] .`: (slave bond_slave_1): Releasing backup interface [ 1827.089479][T18855] hfsplus: b-tree write err: -5, ino 25 [ 1827.107633][T32191] team0: Port device team_slave_0 removed [ 1827.127718][T18855] hfsplus: b-tree write err: -5, ino 4 [ 1827.268107][T18855] hfsplus: b-tree write err: -5, ino 2 [ 1827.275058][T32191] team0: Port device team_slave_1 removed [ 1827.281922][T32191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1827.331862][T32191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1827.809938][T32191] .`: (slave netdevsim0): Releasing backup interface [ 1828.103358][T32191] bond3: (slave wlan0): Releasing active interface [ 1828.139352][T32191] bond3: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1828.292815][T32191] batadv1: entered promiscuous mode [ 1829.241475][T32191] bond1: (slave veth7): Releasing backup interface [ 1829.350548][T32191] bond2: (slave geneve2): Releasing active interface [ 1829.465336][T32191] bond3: (slave batadv1): Releasing active interface [ 1829.475580][T32191] batadv1: left promiscuous mode [ 1830.430329][T32191] bond4: (slave veth11): Releasing active interface [ 1830.575226][T32191] bond5: (slave gretap1): Releasing backup interface [ 1830.888264][T32191] bond7: (slave veth13): Releasing active interface [ 1831.179527][T32191] bond8: (slave bridge7): Releasing backup interface [ 1831.197116][T29927] libceph: connect (1)[c::]:6789 error -101 [ 1831.208552][T32191] bond8: (slave bridge7): the permanent HWaddr of slave - f6:44:a8:0f:0f:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1831.471258][T14569] Bluetooth: hci4: unexpected event for opcode 0x041b [ 1831.802931][T32191] bond8: (slave bridge8): Releasing backup interface [ 1831.926427][T29927] libceph: mon0 (1)[c::]:6789 connect error [ 1832.085141][T32246] ceph: No mds server is up or the cluster is laggy [ 1832.209112][T32191] bond10: (slave geneve3): Releasing active interface [ 1832.237691][T29929] libceph: connect (1)[c::]:6789 error -101 [ 1832.253455][T29929] libceph: mon0 (1)[c::]:6789 connect error [ 1832.290536][T32191] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1832.459243][T32191] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1832.468265][T32191] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1832.509185][T32191] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1833.393333][T32191] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1833.402759][T32191] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1833.411667][T32191] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1833.420710][T32191] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1833.466071][T32191] team0: Port device vxlan0 removed [ 1834.314656][T32191] bond11: (slave geneve4): Releasing active interface [ 1835.400839][T32191] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1835.432326][T32191] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1835.441760][T32191] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1835.451177][T32191] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1835.473683][T32191] bond12: (slave ip6gretap1): Removing an active aggregator [ 1835.482698][T32191] bond12: (slave ip6gretap1): Releasing backup interface [ 1835.497128][T32191] bond12: (slave ip6gretap1): the permanent HWaddr of slave - d6:4a:33:32:1b:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1835.548238][T32191] bond12: (slave veth21): Releasing backup interface [ 1838.106646][T32315] loop3: detected capacity change from 0 to 16 [ 1838.135493][ T5833] IPVS: starting estimator thread 0... [ 1840.412998][T32316] IPVS: using max 14 ests per chain, 33600 per kthread [ 1840.814476][T32315] erofs: (device loop3): mounted with root inode @ nid 36. [ 1841.344747][T32325] netdevsim netdevsim2 ªªªªª»: renamed from netdevsim0 [ 1842.903897][T32342] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1843.687857][T32360] futex_wake_op: syz.3.6205 tries to shift op by 144; fix this program [ 1845.321567][T32371] loop3: detected capacity change from 0 to 512 [ 1845.831507][T32371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1845.916935][T32371] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1846.324784][T32379] loop6: detected capacity change from 0 to 1024 [ 1847.063637][ T27] audit: type=1800 audit(2000000839.317:2278): pid=32384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6208" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1847.351552][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1847.363832][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1847.670640][T27429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1849.233053][ T27] audit: type=1800 audit(2000000840.934:2279): pid=32401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6211" name="file0" dev="overlay" ino=1200 res=0 errno=0 [ 1854.929793][T32453] loop3: detected capacity change from 0 to 1024 [ 1905.868425][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1905.874925][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1964.394516][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1964.400910][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2022.907728][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2022.914070][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2081.433623][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2081.440459][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2139.959275][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2139.965947][ T1291] ieee802154 phy1 wpan1: encryption failed: -22