last executing test programs: 15m42.748501142s ago: executing program 3 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="7961000000ac1639fa007e000700", @ANYBLOB], 0x1c}}, 0x20004000) 15m41.880093229s ago: executing program 3 (id=53): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x89f7e000) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x112, 0x0, 0x0) 15m40.743491495s ago: executing program 3 (id=56): socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfef3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x81) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "b7a34d", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}, 0x0) 15m39.228078803s ago: executing program 3 (id=61): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 15m36.340606144s ago: executing program 3 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x3}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r3, &(0x7f0000000080), 0x10) 15m33.987916608s ago: executing program 3 (id=78): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2590}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x160, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r3) 15m32.833657874s ago: executing program 32 (id=78): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2590}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x160, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r3) 13m42.213521008s ago: executing program 5 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13m40.728796595s ago: executing program 5 (id=297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) prctl$PR_SCHED_CORE(0x4e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x1, r1, 'id0\x00'}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000100)=0x7fff, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 13m39.711922267s ago: executing program 5 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) clock_getres(0x2, 0x0) 13m37.489823007s ago: executing program 5 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000003c0)={0x0, 0x0, {0xffffffffffffffff}}) 13m36.356950823s ago: executing program 5 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13m34.019279407s ago: executing program 5 (id=313): r0 = fanotify_init(0x200, 0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) fanotify_mark(r0, 0x200, 0x20, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) sendfile(r2, r1, 0x0, 0x23b) 13m17.163567487s ago: executing program 33 (id=313): r0 = fanotify_init(0x200, 0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) fanotify_mark(r0, 0x200, 0x20, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) sendfile(r2, r1, 0x0, 0x23b) 14.646594904s ago: executing program 2 (id=2131): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r6, 0x1000) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x4}, 0x0, 0x0, 0x0) 14.562981847s ago: executing program 4 (id=2133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000440), 0x1000a) sendfile(r3, r4, &(0x7f0000000080)=0x5, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 13.403870552s ago: executing program 2 (id=2135): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x40, 0x107, 0xfffffefe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000000000)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b68090890e0879b0a0a44e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b43dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669304e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f137ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a358aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 11.623053386s ago: executing program 4 (id=2136): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000680)={0x10000000, &(0x7f0000000240), &(0x7f0000000200)=0x0, &(0x7f00000001c0), {0x40d}, &(0x7f0000000800)=""/212, 0xd4, &(0x7f0000000440)=""/234, &(0x7f00000003c0)}, 0x58) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1c, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) syz_open_dev$sndctrl(0x0, 0x0, 0x40800) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpgrp(0x0) sched_getattr(r3, &(0x7f0000000180)={0x38}, 0x38, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 11.399651023s ago: executing program 2 (id=2138): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x5a1800, 0xfb8e3ef5619d1250) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x200000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a7", 0x4e, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 8.283816128s ago: executing program 6 (id=2144): bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x20000800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[{0x10, 0x108, 0x6}], 0x10}}, {{0x0, 0x0, &(0x7f0000001e00), 0x0, &(0x7f0000001e80)}}, {{&(0x7f00000042c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x4}, 0x80, 0x0}}], 0x3, 0x41) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000240)=[{0x0, 0x1, {0x2, 0xff, 0x1}, {0x1}, 0xfe, 0xfd}], 0x20) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 8.257075179s ago: executing program 0 (id=2145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x1, 0x0, 0xf, 0x11, 0x7, 0x4, 0xa, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0xa, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x34ae, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x16, 0x2, 0x6, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2c, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 8.087540074s ago: executing program 2 (id=2147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000440), 0x1000a) sendfile(r3, r4, &(0x7f0000000080)=0x5, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.88327455s ago: executing program 1 (id=2148): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @remote}]}) 6.801544883s ago: executing program 2 (id=2149): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x404) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 6.738190355s ago: executing program 1 (id=2150): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = open(0x0, 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x100, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x20004080) socket$inet6_udp(0xa, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.623764679s ago: executing program 0 (id=2152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000440), 0x1000a) sendfile(r3, r4, &(0x7f0000000080)=0x5, 0xffff) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.623331268s ago: executing program 4 (id=2153): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2861, &(0x7f0000000500)={[{@nobarrier}, {@oldalloc}, {@nodelalloc}]}, 0x0, 0x53b, &(0x7f0000000780)="$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") timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) umount2(0x0, 0x2) sendmsg$nl_route(r0, 0x0, 0x4010) syz_open_dev$vcsu(0x0, 0x3, 0x80000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) 6.58870477s ago: executing program 6 (id=2154): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xce, 0x40000000}}, 0x44) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x3200842, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x9000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 5.254446821s ago: executing program 0 (id=2155): r0 = syz_open_dev$admmidi(0x0, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) setuid(0xee00) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 4.644919139s ago: executing program 4 (id=2156): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 4.174662383s ago: executing program 2 (id=2157): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@audit}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$eJzs3c9vHFcdAPDvjO3Ydd3ahUr8ENBQCgFF3bU3rVX1VC4gVFVCVJw4pMbeWJZ3vZZ3HWKTg/M/IBGJE/wJHJA4IOXEnRvcEFI4IAWIQDESh0UzO3YcZ9exiL2Tej8faTTz5u3u9721573x1/a+AEbW5YjYi4hLEfFJRMwW55Niiw96W/a4Rw9vL+8/vL2cRLf78T+SvD47F0eek3m5eM2piPjBdyN+nDwdt72zu77UaNS3inK109ystnd2/7LWXFqtr9Y3arXFhcX59669Wzuzvr7R/PWD76x9+MPf/fbL9/+w962fZs2aKeqO9uMs9bo+cRgnMx4RH55HsBKMFf25VHZD+L+kEfGZiHgzu/67ZbcGABiGbnc2urNHywDARZfmObAkrRS5gJlI00qll8N7PabTRqvduXqjtb2x0suVzcVEemOtUZ8vcoVzMZFk5YX8+HG5dqx8LSJei4ifTb6UlyvLrcZKmTc+ADDCXj42//97sjf/AwAX3FTZDQAAhs78DwCjx/wPAKPH/A8Ao8f8DwCjx/wPAKPH/A8AI+X7H32Ubd394vOvV27ubK+3br69Um+vV5rby5Xl1tZmZbXVWs0/s6f5rNdrtFqbC+/E9q1qp97uVNs7u9ebre2NzvX8c72v1yeG0isA4CSvvXHvT0lE7L3/Ur7FkbUczNVwsaVlNwAozVjZDQBKM152A4DS+Bkf6LNE7xMG/onQ3YFPMbTAC+7KF+T/YVTJ/8Pokv+H0SX/D6Or202s+Q8AI0aOHziH3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhTeTb0laKdYCn4k0rVQiXomIuZhIbqw16vMR8WpE/HFyYjIrL5TdaADgOaV/S4r1v67MvjVzvPZS8p/JfB8RP/nFxz+/tdTpbC1k5/95eL5ztzhfOzGQpQYBoCQH8/TBPH7g0cPbywfbMNvz4Nu9xUWzuPvF1qsZj/F8P5XfOEz/KynKPdn9ytgZxN+7ExGf79f/JM+NzBUrnx6Pn8V+Zajx0yfip3ldb5+9F589g7bAqLmXjT8f9Lv+0ric7/tf/1P5CPX8Dsa//afGv/Rw/BsbMP5dPm2Md37/vYF1dyK+ON4vfnIYPxkQ/61Txv/zl77y5qC67i8jrkT/+EdjVTvNzWp7Z/fttebSan21vlGrLS4szr937d1aNc9RVw8y1U/7+/tXXz2p/9MD4k89o/9fP2X/f/XfT3701RPif/Nr/b/+r58QP5sTv3HK+EvTvxm4fHcWf6V//4vnDO7/1VPGv//X3ZVTPhQAGIL2zu76UqNR33IwtIPs3u0FaMaFO7jzqXlXs++As3idz51jU8semYDz9viiL7slAAAAAAAAAAAAAADAIMP4h6ey+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9b8AAAD//3Sb1xQ=") mount$fuseblk(0x0, 0x0, 0x0, 0x488, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) 2.935650471s ago: executing program 6 (id=2158): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x5a1800, 0xfb8e3ef5619d1250) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x200000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a7", 0x4e, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 2.910282821s ago: executing program 0 (id=2159): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x1, 0xc1) semop(r2, &(0x7f0000000200), 0x53) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) epoll_create1(0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x8800000, 0x101, 0x0) 2.851721554s ago: executing program 1 (id=2160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000440), 0x1000a) sendfile(r3, r4, &(0x7f0000000080)=0x5, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.608205971s ago: executing program 4 (id=2161): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000280)={0x2, 0x0, 0x6, 0xffff, 0x7, 0x7ff, 0x3, 0x19, 0x7}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x40000) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020) 2.378437528s ago: executing program 0 (id=2162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x1, 0x0, 0xf, 0x11, 0x7, 0x4, 0xa, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0xa, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x34ae, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x16, 0x2, 0x6, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2c, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.97185475s ago: executing program 6 (id=2163): sync() sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1}) close(0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close(r1) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 1.813197985s ago: executing program 1 (id=2164): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='stat\x00') preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x2, r2}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x24000000) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x90000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000e, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000440)=0xee) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 1.417920887s ago: executing program 4 (id=2165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000440), 0x1000a) sendfile(r3, r4, &(0x7f0000000080)=0x5, 0xffff) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.195821444s ago: executing program 1 (id=2166): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x6) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x2a}, {0x0, 0xd6}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000680)={'syz0\x00', {0x9, 0x78, 0xffff, 0x1}, 0x9, [0x2, 0x2, 0x1, 0x3, 0xffffffc0, 0x5, 0x7ff, 0xa1c5, 0x4, 0x1f90, 0x8, 0x3ff, 0x0, 0x4, 0x81, 0xe3, 0x2, 0x3, 0x4, 0x4, 0x6, 0x3, 0x2, 0x0, 0x800, 0x0, 0xff, 0x9, 0xfffffc2f, 0xfffffffd, 0x0, 0x6, 0x401, 0xfffffffe, 0x800, 0xe2, 0x1000, 0xa, 0xfe, 0x1b000000, 0x9, 0xfffffffb, 0xd6, 0x9, 0x0, 0x1, 0x72, 0x8, 0x2, 0x4, 0x0, 0x6, 0xc9, 0x8, 0x9, 0x2f8d8d4b, 0x80000001, 0x5, 0x6, 0xfffffffb, 0x4, 0x8, 0x8], [0x5, 0x0, 0x7fff, 0x1, 0x2144, 0x0, 0x9, 0x7, 0x338, 0x8, 0x4, 0x5c0, 0xa345f49, 0x3, 0x5, 0x6, 0x0, 0x6, 0x0, 0x614700f0, 0xa, 0x0, 0x5325, 0x2, 0x4, 0xffffffff, 0x3, 0x10000, 0x6, 0x68599e4c, 0xf751, 0x6, 0x7ff, 0x1ff, 0x100, 0x9, 0x9, 0x4, 0x5, 0x3, 0x100, 0x2e, 0x6, 0x4, 0x1, 0x8, 0x1, 0xf2, 0x80000000, 0x9, 0x1, 0x5, 0xffffffc0, 0x4, 0x8, 0x3, 0x9, 0x4, 0x80, 0x0, 0x8, 0x3d, 0x1], [0xd, 0x1000, 0x81, 0x68, 0x2, 0x12c, 0x10000, 0x9db6, 0x0, 0x5, 0x7, 0xb06, 0x9, 0x2, 0xfffff001, 0x3, 0x81d5, 0x80, 0x2, 0x5, 0x0, 0x90, 0x200, 0x3, 0x6, 0x0, 0x4, 0x7fffffff, 0x5ff, 0x5, 0xfffffffa, 0xffffffff, 0x800, 0x4, 0x86, 0x1, 0x9, 0x7, 0x6, 0x1, 0x401, 0x9, 0x9, 0x3, 0x0, 0x5, 0x9, 0x35e3, 0x7f, 0x6, 0x4, 0x7fff, 0x5, 0x392, 0x5, 0x80, 0x1, 0x0, 0x180000, 0x2, 0x7, 0x1, 0x10000, 0x5], [0x8000, 0x9, 0x8, 0xffffffff, 0x82, 0xb, 0x5, 0x9, 0x7f, 0x200, 0x0, 0x7, 0x400, 0x6, 0xdf5, 0x1, 0x1, 0xfffffffc, 0x5, 0x3, 0x100, 0x2, 0x6, 0x76, 0x0, 0x8, 0x2, 0x1, 0x5, 0x9, 0x1, 0x1, 0x5, 0x9, 0x800, 0xb0, 0x1ff, 0x80, 0x7, 0x5, 0x6, 0x81, 0x7, 0x0, 0x3, 0x5, 0x0, 0x9e, 0x2, 0x11c9, 0x4, 0x4, 0x5dd, 0x3, 0x1, 0x2, 0xffff2897, 0x3, 0xd697, 0x8, 0x2, 0xc, 0x9000, 0x8]}, 0x45c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x6400}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002d00010000000067a441856eee05774a88a8f97ae7bf749b6511c33986802faf", @ANYRES32, @ANYBLOB="0b00008000101e5738ebf700"], 0x24}], 0x1}, 0x0) 1.156811365s ago: executing program 6 (id=2167): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2861, &(0x7f0000000500)={[{@nobarrier}, {@oldalloc}, {@nodelalloc}]}, 0x0, 0x53b, &(0x7f0000000780)="$eJzs3e9rJGcdAPDvTLJ3ubvU5FTkLNgWW7kreruXxrZRpK0g6puCWt+fMdkL4TbZI7upl1A0xT9AEFFB3/tG8A8QSsF/QISCvhcVReSqL/VGZmdW82M3u5fuZe82nw9M9nnm1/f7DNnZ+cUzAZxZz0TEaxExFRHPR8RcOT4th5t5Za+Y7/17b63kQxJZ9sY/kkjKcd115fXpiLhULBIzEfGNr0R8Ozkat7Wze3u50ahvlfVae+NOrbWze319Y3mtvlbfXFxceGnp5aUXl25kpWLGvZO1cz4iXvnSX378g198+ZV3PvOdP97827Xv5ml94WNF3hGxcrI1H69Yd6WzLbrybbT1MIKNSd6eytS4swAAYBj5Mf6HI+KTneP/uZjqHM0BAAAAkyR7dTb+nURkD+7ySRYCAAAATl8aEbORpNXyWYDZSNNqtXiG96NxMW00W+1P32pub67m0yLmo5LeWm/Ub0TE+aKe5PWF8hnbbv2FQ/XFiLgcET+au9CpV1eajdVxX/wAAACAM+LS0wfP//81l+bl8+POCwAAABix+b4VAAAAYFI45QcAAIDJ5/wfAAAAJtrXXn89H7Lue7xX39zZvt188/pqvXW7urG9Ul1pbt2prjWba50++zYGra/RbN75bGxu36216612rbWze3Ojub3Zvrl+4BXYAAAAwCm6/PS7f0giYu/zFzpDlP0A9nDudDMDHil/HncCwChNjTsBYGymx50AMDaVgXPYQ8CkSwZMP/rwTnGtMH77cPIBAABG7+rHj97/797oH3xtAHic9XnWBwCYYO7uwdlVOekTgFdGnQkwLh8qPs73m963844+9/9/vq9cXGPIshMnBwAAjMRsZ0jSanmcPhtpWq1GPNF5LUAlubXeqN8ozw9+P1c5n9cXOksmA58ZBgAAAAAAAAAAAAAAAAAAAAAAAAAKWZZENthUZ1YAAADgsRSR/jXp9OYfcXXuudmDVwcOvfXrZ2/85O5yu721EHHuq8Vbvc5FRPun5fgXMq8EAAAAgEdAcZ5efi6MOxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJs37995a6Q6nGffvX4yI+V7xp2Om8zkTlYi4+M8kpvctl0TE1Aji770dEVd6xU/ifpZl82UWveJfeMjx5zubpnf8NCIujSA+nGXv5vuf13p9/9J4pvPZ+/s3XQ4fVP/9X/q//d9Un/3PE4fq/Tz53q9qfeO/HfHkdO/9Tzd+UsQ/ECKvPDtkG7/1zd3dnhP2rbJX/P2xau2NO7XWzu719Y3ltfpafXNxceGlpZeXXly6Ubu13qiXf3uG+eEnfn3/uPZf7BN//mD7j2z/54ZqfRb/ee/uvY8UlUqv+Nee7f37e6VP/LT87ftUWc6nX+2W94ryfk/98ndPHdf+1T7tnxnQ/mtDtT8+9/zXv/+nnlOObA0A4DS0dnZvLzca9a1jCjNDzHPKhVcfjTRGWIhHI41xFbLvFf+PD7TU/ezQmAdbfHAh+yCLT8cI0jh35Hs6FSddYRKxl69ryH9IAABgwvz/oP+4O0gAAAAAAAAAAAAAAAAAAADAwzRE52Hv/CaOdDk2ExFD9z12OObeeJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCs/wYAAP//rDfMnw==") timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) umount2(0x0, 0x2) sendmsg$nl_route(r0, 0x0, 0x4010) syz_open_dev$vcsu(0x0, 0x3, 0x80000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 1.076314937s ago: executing program 1 (id=2168): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba8", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 375.576429ms ago: executing program 0 (id=2169): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x810, 0xb, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x7, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x12, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 6 (id=2170): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x182900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='C\xa7\"F5m\x80\xee\x82k\x82\xbasource\xc2\xd3\xb9+\xac\'\xc3\xb4\x9e0O1\xb8\xec*_\xee\vF\xd5\a}\x9e$\xc2]\xf3Ld,s<\x0e#\x055\xaf\x9f\xd9\xcb\xfe\xe0\xe8\x9e\x02|~P\xad\xd2\xbe\xfa\xfb\x92\xff\xef\vY\x1a\r', &(0x7f0000000100)=':..\x1a\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ace batadv_slave_0 (retrying later): interface not active [ 129.102672][ T4700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.114072][ T4700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.178764][ T4700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.489889][ T4928] exFAT-fs (nullb0): invalid boot record signature [ 130.496833][ T4928] exFAT-fs (nullb0): failed to read boot sector [ 130.503207][ T4928] exFAT-fs (nullb0): failed to recognize exfat type [ 131.939500][ T4700] device hsr_slave_0 entered promiscuous mode [ 131.999037][ T4700] device hsr_slave_1 entered promiscuous mode [ 132.011621][ T4700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.029968][ T4700] Cannot create hsr debugfs directory [ 132.070697][ T4565] device hsr_slave_0 left promiscuous mode [ 132.083287][ T4565] device hsr_slave_1 left promiscuous mode [ 132.400257][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.747085][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753441][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.843619][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.870243][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.877830][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.891242][ T4565] device bridge_slave_1 left promiscuous mode [ 132.900068][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.912537][ T4565] device bridge_slave_0 left promiscuous mode [ 132.923089][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.972464][ T4565] device veth1_macvtap left promiscuous mode [ 132.997529][ T4565] device veth0_macvtap left promiscuous mode [ 133.020762][ T4565] device veth1_vlan left promiscuous mode [ 133.033892][ T4565] device veth0_vlan left promiscuous mode [ 133.189355][ T27] audit: type=1800 audit(1782162531.280:3): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.132" name="/" dev="fuse" ino=1 res=0 errno=0 [ 135.222412][ T4565] team0 (unregistering): Port device team_slave_1 removed [ 135.266556][ T4565] team0 (unregistering): Port device team_slave_0 removed [ 135.338469][ T4565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.371801][ T4565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.270434][ T4565] bond0 (unregistering): Released all slaves [ 137.836268][ T27] audit: type=1326 audit(1782162535.930:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5014 comm="syz.2.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa36d9ce59 code=0x7fc00000 [ 140.164419][ T4700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.248679][ T4700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.275076][ T4700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.305740][ T4700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.338534][ T5045] lo speed is unknown, defaulting to 1000 [ 141.385371][ T4700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.437828][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.479221][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.505232][ T4700] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.539032][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.551960][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.903349][ T5061] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4275] was attempted by " [ 141.917758][ T4972] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.012002][ T4972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.192003][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.210009][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.225301][ T4972] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.232434][ T4972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.244838][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.303451][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.334130][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.410607][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.457352][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.184270][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.417719][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.184156][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.226748][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.266317][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.302415][ T4700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.359248][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.378045][ T5084] loop1: detected capacity change from 0 to 4096 [ 144.416885][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.447065][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.693654][ T27] audit: type=1800 audit(1782162542.750:5): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.154" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 145.609479][ T27] audit: type=1800 audit(1782162542.870:6): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.154" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=34 res=0 errno=0 [ 145.819173][ T5099] netlink: 'syz.4.156': attribute type 2 has an invalid length. [ 146.079080][ T5105] device syzkaller0 entered promiscuous mode [ 146.484233][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.506465][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.580319][ T4700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.273492][ T27] audit: type=1107 audit(1782162549.590:7): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 160.325122][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.354176][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.412848][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.530105][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.546757][ T4700] device veth0_vlan entered promiscuous mode [ 162.004632][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.030184][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.106316][ T4700] device veth1_vlan entered promiscuous mode [ 162.270070][ T4700] device veth0_macvtap entered promiscuous mode [ 162.286469][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.319600][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.347189][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.143076][ T4700] device veth1_macvtap entered promiscuous mode [ 163.386608][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.442023][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.487119][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.504504][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.515908][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.534841][ T5249] loop2: detected capacity change from 0 to 256 [ 163.542067][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.579006][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.629254][ T4700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.759532][ T5255] tipc: Enabled bearer , priority 0 [ 164.553677][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.604020][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.636609][ T5252] device syzkaller0 entered promiscuous mode [ 164.710515][ T5255] tipc: Resetting bearer [ 164.944730][ T5251] tipc: Resetting bearer [ 165.025180][ T5251] tipc: Disabling bearer [ 165.242027][ T4355] tipc: Node number set to 790961432 [ 165.652980][ T5275] device syzkaller0 entered promiscuous mode [ 166.114589][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.129086][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.137110][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.150217][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.170169][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 166.374893][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.926561][ T5288] lo speed is unknown, defaulting to 1000 [ 167.355147][ T5305] tipc: Enabling of bearer rejected, failed to enable media [ 168.443525][ T4292] Bluetooth: hci5: command 0x0409 tx timeout [ 169.066227][ T5322] misc userio: No port type given on /dev/userio [ 170.536728][ T4292] Bluetooth: hci5: command 0x041b tx timeout [ 170.554031][ T5336] nftables ruleset with unbound set [ 170.928396][ T5288] chnl_net:caif_netlink_parms(): no params data found [ 171.201051][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.229085][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.254719][ T5288] device bridge_slave_0 entered promiscuous mode [ 171.318504][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.339264][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.357646][ T5288] device bridge_slave_1 entered promiscuous mode [ 171.423933][ T5288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.436525][ T5288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.483572][ T5288] team0: Port device team_slave_0 added [ 171.520087][ T5288] team0: Port device team_slave_1 added [ 171.557786][ T5288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.564952][ T5288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.596253][ T5288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.642556][ T5288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.665355][ T5288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.695301][ T5288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.248545][ T5288] device hsr_slave_0 entered promiscuous mode [ 172.378938][ T5288] device hsr_slave_1 entered promiscuous mode [ 172.400263][ T5288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.593630][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 172.633286][ T5288] Cannot create hsr debugfs directory [ 173.853992][ T5363] device syzkaller0 left promiscuous mode [ 173.875561][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 173.941234][ T4972] device hsr_slave_0 left promiscuous mode [ 173.947795][ T4972] device hsr_slave_1 left promiscuous mode [ 173.957628][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.969108][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.980710][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.992112][ T4972] device bridge_slave_1 left promiscuous mode [ 173.998936][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.015100][ T4972] device bridge_slave_0 left promiscuous mode [ 174.022406][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.177552][ T4972] device veth1_macvtap left promiscuous mode [ 174.214407][ T4972] device veth0_macvtap left promiscuous mode [ 174.293152][ T4972] device veth1_vlan left promiscuous mode [ 174.330834][ T4972] device veth0_vlan left promiscuous mode [ 174.673654][ T4292] Bluetooth: hci5: command 0x0419 tx timeout [ 175.888392][ T5404] loop1: detected capacity change from 0 to 128 [ 175.918944][ T5404] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 175.960712][ T5404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.670469][ T4972] team0 (unregistering): Port device team_slave_1 removed [ 177.763879][ T4972] team0 (unregistering): Port device team_slave_0 removed [ 177.809112][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.085605][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.462777][ T4972] bond0 (unregistering): Released all slaves [ 179.591483][ T5388] tipc: Started in network mode [ 179.602718][ T5388] tipc: Node identity 76657468115f, cluster identity 4711 [ 179.628380][ T5388] tipc: Enabled bearer , priority 0 [ 181.174333][ T4324] tipc: Node number set to 1731884136 [ 182.323609][ T5473] input: syz0 as /devices/virtual/input/input5 [ 185.731268][ T5288] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 185.741523][ T5288] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 185.753163][ T5288] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.772034][ T5288] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.990005][ T5288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.028733][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.058844][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.075370][ T5288] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.096495][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.235199][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.260523][ T4983] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.267641][ T4983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.052114][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.088140][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.116030][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.156211][ T4983] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.163282][ T4983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.231313][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.248404][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.311391][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.332779][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.367159][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.405796][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.437003][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.504365][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.537633][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.706588][ T5288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.749016][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.488016][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.514806][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.003456][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 191.013920][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 191.021487][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 191.029231][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 191.275021][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.282522][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.325821][ T5288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.038337][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.049627][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.419021][ T5593] 9pnet_virtio: no channels available for device 127.0.0.1 [ 195.513645][ T4277] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 196.956596][ T5607] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.965680][ T5607] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.974475][ T5607] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.983145][ T5607] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.149660][ T5607] team0: Port device vxlan0 added [ 198.993630][ T4355] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 199.303775][ T4355] usb 3-1: Using ep0 maxpacket: 16 [ 199.315515][ T4355] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.326906][ T4355] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.352378][ T4355] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.371702][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.392433][ T4355] usb 3-1: Product: syz [ 199.402531][ T4355] usb 3-1: Manufacturer: syz [ 199.412154][ T4355] usb 3-1: SerialNumber: syz [ 199.636822][ T4355] usb 3-1: 0:2 : does not exist [ 199.671533][ T4355] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 200.000682][ T4355] usb 3-1: USB disconnect, device number 3 [ 200.391929][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.405679][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.457707][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.482476][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.525670][ T5645] tipc: Enabling of bearer rejected, failed to enable media [ 200.545700][ T5181] udevd[5181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.600901][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.619192][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.653728][ T5288] device veth0_vlan entered promiscuous mode [ 200.698975][ T5288] device veth1_vlan entered promiscuous mode [ 200.777755][ T5642] netlink: 'syz.4.266': attribute type 10 has an invalid length. [ 200.934142][ T5642] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 200.947226][ T5288] device veth0_macvtap entered promiscuous mode [ 200.955790][ T5633] loop1: detected capacity change from 0 to 32768 [ 201.005869][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.019870][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.344797][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.382653][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.600270][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.197060][ T5288] device veth1_macvtap entered promiscuous mode [ 202.398827][ T3935] device veth1_vlan left promiscuous mode [ 202.559171][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.332243][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.437614][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.633371][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.673712][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.720484][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.732643][ T5687] loop2: detected capacity change from 0 to 128 [ 204.779674][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.905645][ T5288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.926316][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.930108][ T5687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 204.968243][ T5687] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.639101][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.824108][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.886360][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.318693][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.382516][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.447611][ T5288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.475520][ T5288] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.555294][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 206.578719][ T5288] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.635249][ T5288] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.703379][ T5288] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.750615][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.777844][ T5714] loop2: detected capacity change from 0 to 512 [ 206.814427][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.823948][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.884477][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.000201][ T5714] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 207.079408][ T5714] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 207.168092][ T4982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.190174][ T5714] EXT4-fs (loop2): 1 truncate cleaned up [ 207.219282][ T4982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.249607][ T5714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.265888][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.301133][ T4972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.330576][ T4972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.380982][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.883987][ T5731] loop1: detected capacity change from 0 to 32768 [ 209.006801][ T5731] XFS (loop1): Mounting V5 Filesystem [ 209.083060][ T5731] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 209.924960][ T5731] XFS (loop1): Starting recovery (logdev: internal) [ 209.942043][ T5731] XFS (loop1): Ending recovery (logdev: internal) [ 210.207508][ T4275] XFS (loop1): Unmounting Filesystem [ 211.146845][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 211.521959][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 214.924035][ T5776] device syzkaller0 entered promiscuous mode [ 214.935655][ T5772] tipc: Started in network mode [ 215.564601][ T5772] tipc: Node identity 9a3ac1dfae41, cluster identity 4711 [ 215.592568][ T5772] tipc: Enabled bearer , priority 0 [ 215.737817][ T5772] tipc: Resetting bearer [ 215.808953][ T5771] tipc: Resetting bearer [ 215.924380][ T5771] tipc: Disabling bearer [ 216.089662][ T5799] loop2: detected capacity change from 0 to 512 [ 216.117127][ T5799] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.131966][ T5791] loop1: detected capacity change from 0 to 128 [ 216.298371][ T5799] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 216.334564][ T5799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 216.335494][ T5791] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 216.598623][ T5799] EXT4-fs (loop2): orphan cleanup on readonly fs [ 216.779372][ T5791] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.977441][ T5799] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.295: bg 0: block 361: padding at end of block bitmap is not set [ 217.056719][ T5799] EXT4-fs (loop2): Remounting filesystem read-only [ 217.118597][ T5799] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 217.279894][ T5821] tipc: Enabling of bearer rejected, failed to enable media [ 217.341423][ T5799] EXT4-fs (loop2): Remounting filesystem read-only [ 217.374373][ T5799] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.295: attempt to clear invalid blocks 33619980 len 1 [ 217.601218][ T5799] EXT4-fs (loop2): Remounting filesystem read-only [ 218.028703][ T4277] Bluetooth: hci3: command 0x201b tx timeout [ 218.216506][ T5799] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.295: invalid indirect mapped block 1811939328 (level 0) [ 218.251050][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 219.317885][ T5799] EXT4-fs (loop2): Remounting filesystem read-only [ 219.388058][ T5799] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.295: invalid indirect mapped block 2185560079 (level 1) [ 219.479437][ T5799] EXT4-fs (loop2): Remounting filesystem read-only [ 219.492705][ T5799] EXT4-fs (loop2): 1 truncate cleaned up [ 219.499305][ T5799] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 219.764579][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 219.766639][ T5851] netlink: 'syz.0.306': attribute type 2 has an invalid length. [ 221.095456][ T5863] tipc: Enabling of bearer rejected, failed to enable media [ 223.015186][ T5877] tipc: Failed to remove unknown binding: 66,0,0/1731884136:1053906079/1053906080 [ 223.267324][ T5880] tipc: Failed to remove unknown binding: 66,0,0/1731884136:1526807370/1526807372 [ 223.288357][ T5877] tipc: Failed to remove unknown binding: 66,0,0/1731884136:1053906079/1053906080 [ 231.467590][ T5958] Cannot find set identified by id 0 to match [ 238.008249][ T6016] (syz.1.339,6016,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 238.017383][ T6016] (syz.1.339,6016,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 238.563626][ T6021] device syzkaller0 entered promiscuous mode [ 244.430981][ T3600] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 244.551419][ T5909] syz.5.313 (5909): drop_caches: 1 [ 244.671089][ T3600] usb 2-1: Using ep0 maxpacket: 8 [ 244.700358][ T3600] usb 2-1: config 0 has no interfaces? [ 244.743649][ T3600] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 244.785387][ T3600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 244.897511][ T3600] usb 2-1: Product: syz [ 244.923829][ T3600] usb 2-1: Manufacturer: syz [ 245.053884][ T6078] (syz.2.353,6078,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 245.062490][ T6078] (syz.2.353,6078,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 245.706913][ T3600] usb 2-1: SerialNumber: syz [ 245.750747][ T3600] usb 2-1: config 0 descriptor?? [ 245.857922][ T6084] futex_wake_op: syz.2.354 tries to shift op by 144; fix this program [ 245.872794][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 245.884283][ T6084] netlink: 'syz.2.354': attribute type 2 has an invalid length. [ 246.048871][ T3600] usb 2-1: USB disconnect, device number 6 [ 246.803339][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.816119][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.827361][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.835431][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.894277][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 247.588630][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.664885][ T6090] loop1: detected capacity change from 0 to 512 [ 247.777148][ T6090] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.836067][ T6090] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 247.877474][ T6090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 247.886625][ T6090] EXT4-fs (loop1): orphan cleanup on readonly fs [ 247.940347][ T6090] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.356: bg 0: block 361: padding at end of block bitmap is not set [ 248.051456][ T6090] EXT4-fs (loop1): Remounting filesystem read-only [ 248.058046][ T6090] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 248.108290][ T6085] lo speed is unknown, defaulting to 1000 [ 248.436055][ T6090] EXT4-fs (loop1): Remounting filesystem read-only [ 248.758596][ T6090] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.356: attempt to clear invalid blocks 33619980 len 1 [ 248.783966][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 248.935585][ T6090] EXT4-fs (loop1): Remounting filesystem read-only [ 248.943095][ T6090] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.356: invalid indirect mapped block 1811939328 (level 0) [ 249.000235][ T6090] EXT4-fs (loop1): Remounting filesystem read-only [ 249.006854][ T6090] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.356: invalid indirect mapped block 2185560079 (level 1) [ 249.853981][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 250.063141][ T6090] EXT4-fs (loop1): Remounting filesystem read-only [ 250.070137][ T6090] EXT4-fs (loop1): 1 truncate cleaned up [ 250.075996][ T6090] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 250.119302][ T4969] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.133036][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 250.287427][ T6111] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 250.300937][ T6111] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 250.523095][ T4969] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.108685][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 252.234881][ T4969] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.492580][ T4969] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.258263][ T6085] chnl_net:caif_netlink_parms(): no params data found [ 254.299525][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 256.530610][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 256.643090][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.871958][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.888782][ T6085] device bridge_slave_0 entered promiscuous mode [ 257.902761][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.912162][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.926806][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.285280][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.305301][ T6085] device bridge_slave_1 entered promiscuous mode [ 258.379092][ T4969] tipc: Left network mode [ 258.410433][ T6085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.453476][ T6085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.574063][ T4736] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 258.815356][ T6085] team0: Port device team_slave_0 added [ 258.825913][ T6085] team0: Port device team_slave_1 added [ 258.905047][ T4736] usb 3-1: Using ep0 maxpacket: 32 [ 258.957267][ T4736] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.992313][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.003404][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.031713][ T4736] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 259.182890][ T4736] usb 3-1: can't read configurations, error -71 [ 259.419338][ T6085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.433129][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.444066][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.492040][ T6085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.607774][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 259.736869][ T6085] device hsr_slave_0 entered promiscuous mode [ 260.464274][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'. [ 260.497432][ T6085] device hsr_slave_1 entered promiscuous mode [ 260.520037][ T6216] Bluetooth: MGMT ver 1.22 [ 260.701894][ T6085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.718311][ T6085] Cannot create hsr debugfs directory [ 262.272049][ T6210] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 262.282936][ T6210] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 262.293010][ T6210] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 265.143944][ T6085] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 265.176807][ T6085] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 265.220077][ T6085] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 265.437876][ T6085] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 265.768681][ T6085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.839674][ T4969] device hsr_slave_0 left promiscuous mode [ 265.869316][ T4969] device hsr_slave_1 left promiscuous mode [ 265.879905][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.902157][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.078027][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.099490][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.424343][ T4969] device bridge_slave_1 left promiscuous mode [ 267.430677][ T4969] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.527145][ T4969] device bridge_slave_0 left promiscuous mode [ 267.548093][ T4969] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.706921][ T4969] device veth1_macvtap left promiscuous mode [ 267.815338][ T4969] device veth0_macvtap left promiscuous mode [ 268.102916][ T4969] device veth1_vlan left promiscuous mode [ 268.123100][ T4969] device veth0_vlan left promiscuous mode [ 270.038368][ T4969] team0 (unregistering): Port device team_slave_1 removed [ 270.083800][ T4969] team0 (unregistering): Port device team_slave_0 removed [ 270.128577][ T4969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.177482][ T4969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.587667][ T4969] bond0 (unregistering): Released all slaves [ 271.165114][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.178111][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.212009][ T6085] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.276708][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.288077][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.333532][ T4972] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.342480][ T4972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.284148][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.335708][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.353103][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.370899][ T4972] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.379301][ T4972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.403878][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.483923][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.539905][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.553435][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.569029][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.581934][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.593226][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.606784][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.618093][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.812858][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.842249][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.869155][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.277721][ T6382] syz.2.421 uses obsolete (PF_INET,SOCK_PACKET) [ 276.115452][ T6393] device bridge1 entered promiscuous mode [ 276.173330][ T6393] team0: Port device bridge1 added [ 276.274677][ T6397] bridge0: port 3(team0) entered blocking state [ 276.301983][ T6397] bridge0: port 3(team0) entered disabled state [ 276.345658][ T6397] device team0 entered promiscuous mode [ 276.351287][ T6397] device team_slave_0 entered promiscuous mode [ 276.576317][ T6397] device team_slave_1 entered promiscuous mode [ 277.009667][ T6397] bridge0: port 3(team0) entered blocking state [ 277.016551][ T6397] bridge0: port 3(team0) entered forwarding state [ 277.157560][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.174792][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.198873][ T6085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.420784][ T6421] loop2: detected capacity change from 0 to 128 [ 278.557696][ T6421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 278.593220][ T6421] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 281.943159][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 284.010233][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.037858][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.079575][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.093581][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.113893][ T6085] device veth0_vlan entered promiscuous mode [ 284.138914][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.171297][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.983581][ T6085] device veth1_vlan entered promiscuous mode [ 285.633934][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 285.843337][ T6085] device veth0_macvtap entered promiscuous mode [ 285.856043][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.865541][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.877914][ T6085] device veth1_macvtap entered promiscuous mode [ 285.885538][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.049033][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.144262][ T6515] netlink: 36 bytes leftover after parsing attributes in process `syz.2.441'. [ 286.649568][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.705589][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.340710][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.661126][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.681948][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.714607][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.725176][ T6530] overlayfs: failed to clone upperpath [ 287.739902][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.770277][ T6529] loop2: detected capacity change from 0 to 2048 [ 287.831593][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.887480][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.920571][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.931941][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.939824][ T6529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 287.942107][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.961010][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.970852][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.981373][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.993662][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.002572][ T6533] bridge0: port 3(macsec0) entered blocking state [ 288.031305][ T6533] bridge0: port 3(macsec0) entered disabled state [ 288.051615][ T6533] device macsec0 entered promiscuous mode [ 288.072293][ T6533] bridge0: port 3(macsec0) entered blocking state [ 288.078899][ T6533] bridge0: port 3(macsec0) entered forwarding state [ 289.244260][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 289.387510][ T6085] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.423197][ T6085] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.447965][ T6085] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.467561][ T6085] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.536236][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.563463][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.898905][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 290.450595][ T6559] device macvtap1 entered promiscuous mode [ 290.478334][ T6559] device team0 entered promiscuous mode [ 290.489898][ T6559] device team_slave_0 entered promiscuous mode [ 290.505552][ T6559] device team_slave_1 entered promiscuous mode [ 290.513988][ T6559] device vxlan0 entered promiscuous mode [ 290.522305][ T6559] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 290.604927][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058385c00: rx timeout, send abort [ 290.681411][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 291.179155][ T4967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.203277][ T4967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.332349][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.606351][ T4970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.628502][ T4970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.637406][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.424467][ T6604] overlayfs: failed to clone upperpath [ 298.443586][ T6676] loop6: detected capacity change from 0 to 8 [ 298.957844][ T6676] SQUASHFS error: xz decompression failed, data probably corrupt [ 298.966338][ T6676] SQUASHFS error: Failed to read block 0x108: -5 [ 298.973006][ T6676] SQUASHFS error: Unable to read metadata cache entry [106] [ 298.980520][ T6676] SQUASHFS error: Unable to read inode 0x11f [ 301.721674][ T6701] loop6: detected capacity change from 0 to 32768 [ 301.907442][ T6701] XFS (loop6): Mounting V5 Filesystem [ 302.772233][ T6701] XFS (loop6): Ending clean mount [ 302.783774][ T6701] XFS (loop6): Quotacheck needed: Please wait. [ 303.421800][ T6727] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 303.440953][ T6727] hfsplus: unable to find HFS+ superblock [ 303.912983][ T6701] XFS (loop6): Quotacheck: Done. [ 304.182390][ T6737] mmap: syz.4.485 (6737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 304.495884][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 304.901944][ T6085] XFS (loop6): Unmounting Filesystem [ 310.391320][ T6823] tipc: Enabling of bearer rejected, failed to enable media [ 310.431132][ T6822] loop2: detected capacity change from 0 to 1024 [ 310.645631][ T6815] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.819075][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.854857][ T6815] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.864822][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.928757][ T6834] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.010259][ T6834] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.048795][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.062154][ T6815] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.080236][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.123103][ T6834] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.273642][ T6834] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.353616][ T6840] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.381922][ T6840] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.860861][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 312.004011][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 312.107339][ T6834] hfsplus: request for non-existent node 33423360 in B*Tree [ 312.116881][ T6815] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.153521][ T6834] hfsplus: request for non-existent node 33423360 in B*Tree [ 312.298799][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 312.409067][ T6848] device vlan2 entered promiscuous mode [ 312.414758][ T6848] device bridge0 entered promiscuous mode [ 312.433588][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 312.890239][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 312.943489][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 312.986466][ T6815] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.003034][ T6834] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.013095][ T6815] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.015892][ T6834] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.110835][ T6815] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.135440][ T6851] netlink: 'syz.1.507': attribute type 1 has an invalid length. [ 313.144543][ T6840] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.157505][ T6840] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.194643][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.202992][ T6822] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.499660][ T6815] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.870746][ T6859] bond1: (slave bridge1): making interface the new active one [ 314.135916][ T6859] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 314.835565][ T6881] unsupported nla_type 34 [ 315.286161][ T6878] loop2: detected capacity change from 0 to 4096 [ 315.367660][ T6878] ntfs: (device loop2): ntfs_read_inode_mount(): MST fixup failed. $MFT is corrupt. [ 315.377169][ T6878] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 315.386371][ T6878] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata. [ 315.443049][ T6601] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 319.985388][ T6944] loop2: detected capacity change from 0 to 1024 [ 320.143894][ T6944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 322.064548][ T6956] loop6: detected capacity change from 0 to 4096 [ 322.253446][ T6956] ntfs: (device loop6): ntfs_read_inode_mount(): MST fixup failed. $MFT is corrupt. [ 322.263509][ T6956] ntfs: (device loop6): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 322.274471][ T6956] ntfs: (device loop6): ntfs_fill_super(): Failed to load essential metadata. [ 322.321485][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 323.552190][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.572534][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.953444][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 327.569754][ T7016] loop6: detected capacity change from 0 to 32768 [ 327.695483][ T7016] XFS (loop6): Mounting V5 Filesystem [ 327.734778][ T7016] XFS (loop6): Ending clean mount [ 327.750760][ T7016] XFS (loop6): Quotacheck needed: Please wait. [ 327.817612][ T7016] XFS (loop6): Quotacheck: Done. [ 328.411625][ T6085] XFS (loop6): Unmounting Filesystem [ 328.978687][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.547'. [ 329.462073][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 330.775331][ T4735] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 330.973387][ T4735] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.052084][ T7085] loop6: detected capacity change from 0 to 2048 [ 331.052459][ T4735] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 331.068674][ T4735] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 331.077799][ T4735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.773480][ T7085] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 331.951182][ T7072] bridge0: port 4(macsec0) entered blocking state [ 331.957905][ T7072] bridge0: port 4(macsec0) entered disabled state [ 331.967286][ T7072] device macsec0 entered promiscuous mode [ 331.973519][ T7072] bridge0: port 4(macsec0) entered blocking state [ 331.980097][ T7072] bridge0: port 4(macsec0) entered forwarding state [ 332.975396][ T6085] EXT4-fs (loop6): unmounting filesystem. [ 333.061751][ T4736] usb 3-1: USB disconnect, device number 6 [ 337.408542][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.566'. [ 337.654518][ T7142] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 339.527313][ T7156] tmpfs: Unknown parameter 'usrquota' [ 340.617095][ T7181] loop2: detected capacity change from 0 to 4096 [ 341.157571][ T7181] EXT4-fs (loop2): Test dummy encryption mode enabled [ 341.856700][ T7181] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 341.937506][ T7181] System zones: 0-5 [ 342.085209][ T7181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 344.758748][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 344.765459][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.583'. [ 345.920086][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 346.926520][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 347.185642][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055eb9c00: rx timeout, send abort [ 349.895030][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 350.430557][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 354.961458][ T7348] loop6: detected capacity change from 0 to 128 [ 355.038395][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 355.112489][ T7348] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 355.147573][ T7348] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 355.548465][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 356.590328][ T6085] EXT4-fs (loop6): unmounting filesystem. [ 359.613104][ T7400] tipc: Started in network mode [ 359.629500][ T7400] tipc: Node identity , cluster identity 4711 [ 359.656421][ T7400] tipc: Failed to obtain node identity [ 359.666492][ T7400] tipc: Enabling of bearer rejected, failed to enable media [ 359.701813][ T7400] device syzkaller0 entered promiscuous mode [ 359.766873][ T7412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.303156][ T7428] loop2: detected capacity change from 0 to 4096 [ 364.318879][ T7454] xt_ecn: cannot match TCP bits for non-tcp packets [ 367.092132][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.643'. [ 367.180088][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 367.890808][ T7496] loop2: detected capacity change from 0 to 2048 [ 367.941041][ T7496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 368.945407][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 371.474386][ T7537] capability: warning: `syz.6.651' uses 32-bit capabilities (legacy support in use) [ 373.989268][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.657'. [ 375.748568][ T7588] xt_connbytes: Forcing CT accounting to be enabled [ 377.318011][ T27] audit: type=1800 audit(1782162765.318:8): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.665" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 379.307372][ T7646] loop2: detected capacity change from 0 to 512 [ 379.323351][ T7646] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 380.565726][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 382.262195][ T7676] syz.4.674 sent an empty control message without MSG_MORE. [ 383.031154][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 385.171133][ T7714] loop6: detected capacity change from 0 to 1024 [ 385.717079][ T7714] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 388.135576][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 389.254291][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.260674][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.662291][ T7765] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 393.819670][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 394.298015][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 394.507241][ T7822] tipc: Enabling of bearer rejected, failed to enable media [ 396.858022][ T7847] loop2: detected capacity change from 0 to 512 [ 396.939714][ T6894] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 397.264973][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 397.952737][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 398.583207][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 399.829064][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.734'. [ 399.850455][ T7899] loop2: detected capacity change from 0 to 512 [ 399.907064][ T7899] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 400.770872][ T7899] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 400.819279][ T7899] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.378121][ T7917] EXT4-fs error (device loop2): ext4_get_first_dir_block:3583: inode #12: comm syz.2.724: Attempting to read directory block (0) that is past i_size (3) [ 402.811978][ T7931] fuse: Bad value for 'fd' [ 403.944183][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 404.159171][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.735'. [ 409.471933][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 409.535648][ T3600] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 409.738947][ T3600] usb 3-1: Using ep0 maxpacket: 32 [ 409.752733][ T3600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.929919][ T3600] usb 3-1: config 0 has no interfaces? [ 410.028072][ T3600] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 410.088497][ T3600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.223337][ T3600] usb 3-1: config 0 descriptor?? [ 413.680602][ T4738] usb 3-1: USB disconnect, device number 7 [ 413.886556][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 414.577192][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 417.261831][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 419.810566][ T8135] fuse: Unknown parameter 'fd0000000000000000000000000000000000000000' [ 424.197937][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 427.392637][ T8140] syz.2.775 (8140): drop_caches: 2 [ 427.629769][ T8197] tipc: Enabling of bearer rejected, already enabled [ 427.748027][ T8197] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 428.560483][ T8197] tipc: Resetting bearer [ 430.078049][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 439.408230][ T8312] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 439.434435][ T8312] CIFS mount error: No usable UNC path provided in device string! [ 439.434435][ T8312] [ 439.445230][ T8312] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 443.987552][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.827'. [ 446.501395][ T27] audit: type=1326 audit(1782162830.075:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.2.833" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa36d9ce59 code=0x0 [ 452.646056][ T8407] netlink: 'syz.4.830': attribute type 10 has an invalid length. [ 452.653857][ T8407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.830'. [ 452.670779][ T8407] team0: Port device geneve0 added [ 452.723009][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 452.855331][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 452.878322][ T8462] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.905944][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 454.887609][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.893970][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.627134][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.853'. [ 456.968651][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 457.890471][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 457.917453][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 460.891529][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.899579][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 462.795855][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 463.601598][ T4319] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 464.212816][ T4319] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 464.236338][ T4319] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 464.392673][ T4319] usb 7-1: Product: syz [ 464.399708][ T4319] usb 7-1: config 0 descriptor?? [ 464.407479][ T4319] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 464.417510][ T4319] usb 7-1: Detected FT232H [ 465.243811][ T4319] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 466.995910][ T4319] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 467.037851][ T4319] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 467.114460][ T4319] usb 7-1: USB disconnect, device number 2 [ 467.156370][ T8668] IPv6: NLM_F_CREATE should be specified when creating new route [ 468.233633][ T4319] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 468.266192][ T4319] ftdi_sio 7-1:0.0: device disconnected [ 468.770271][ T8682] ubi16: attaching mtd0 [ 468.846466][ T8682] ubi16: scanning is finished [ 468.859746][ T8682] ubi16: empty MTD device detected [ 470.040496][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 470.068007][ T8682] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 470.079529][ T8682] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 470.088799][ T8682] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 470.098545][ T8682] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 470.118363][ T8682] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 470.133713][ T8682] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 470.143494][ T8682] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4530885 [ 470.153906][ T8682] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 470.991911][ T8696] ubi16: background thread "ubi_bgt16d" started, PID 8696 [ 471.044473][ T4319] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 471.260049][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.330730][ T4319] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 471.393634][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.422323][ T8716] binder: BINDER_SET_CONTEXT_MGR already set [ 471.442707][ T4319] usb 3-1: config 0 descriptor?? [ 471.467314][ T4319] pwc: Askey VC010 type 2 USB webcam detected. [ 471.497415][ T8716] binder: 8712:8716 ioctl 4018620d 200000004a80 returned -16 [ 471.889330][ T4319] pwc: recv_control_msg error -32 req 02 val 2b00 [ 471.908111][ T4319] pwc: recv_control_msg error -32 req 02 val 2700 [ 471.944730][ T4319] pwc: recv_control_msg error -32 req 02 val 2c00 [ 471.958617][ T4319] pwc: recv_control_msg error -32 req 04 val 1000 [ 471.965805][ T4319] pwc: recv_control_msg error -32 req 04 val 1300 [ 471.974636][ T4319] pwc: recv_control_msg error -32 req 04 val 1400 [ 471.981795][ T4319] pwc: recv_control_msg error -32 req 02 val 2000 [ 471.991487][ T4319] pwc: recv_control_msg error -32 req 02 val 2100 [ 471.999954][ T4319] pwc: recv_control_msg error -32 req 04 val 1500 [ 472.016732][ T4319] pwc: recv_control_msg error -32 req 02 val 2500 [ 472.025582][ T4319] pwc: recv_control_msg error -32 req 02 val 2400 [ 472.074829][ T4319] pwc: recv_control_msg error -32 req 02 val 2600 [ 472.096507][ T4319] pwc: recv_control_msg error -32 req 02 val 2900 [ 472.128789][ T4319] pwc: recv_control_msg error -32 req 02 val 2800 [ 472.415543][ T4319] pwc: recv_control_msg error -71 req 04 val 1200 [ 472.437640][ T4319] pwc: Registered as video103. [ 472.495410][ T4319] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 473.299434][ T4319] usb 3-1: USB disconnect, device number 8 [ 476.536615][ T8756] lo speed is unknown, defaulting to 1000 [ 477.700776][ T8774] loop2: detected capacity change from 0 to 2048 [ 478.291514][ T8783] netlink: 'syz.6.904': attribute type 1 has an invalid length. [ 479.253375][ T8790] bond1: (slave bridge1): making interface the new active one [ 479.294752][ T8790] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 479.354207][ T8792] device macvlan2 entered promiscuous mode [ 479.367159][ T8792] device bond1 entered promiscuous mode [ 479.400539][ T8792] device bridge1 entered promiscuous mode [ 479.429375][ T8792] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 479.460954][ T8792] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 479.483844][ T8792] device bond1 left promiscuous mode [ 479.497141][ T8792] device bridge1 left promiscuous mode [ 479.640304][ T8808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.663135][ T8808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.742268][ T8808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.763551][ T8808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.924744][ T8851] loop6: detected capacity change from 0 to 256 [ 484.062106][ T8851] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 484.411131][ T8851] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 484.437233][ T8850] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 484.447103][ T8850] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 488.730118][ T8904] netlink: 'syz.1.925': attribute type 4 has an invalid length. [ 490.536005][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.931'. [ 491.772374][ T8937] lo speed is unknown, defaulting to 1000 [ 492.012128][ T8941] netlink: 'syz.2.933': attribute type 10 has an invalid length. [ 492.020125][ T8941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.933'. [ 492.550055][ T8941] device geneve0 entered promiscuous mode [ 492.556630][ T8941] team0: Port device geneve0 added [ 493.698204][ T8953] loop2: detected capacity change from 0 to 256 [ 493.984746][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.937'. [ 494.114208][ T8959] bridge2: port 1(erspan0) entered blocking state [ 494.150967][ T8953] FAT-fs (loop2): Directory bread(block 64) failed [ 494.279490][ T8953] FAT-fs (loop2): Directory bread(block 65) failed [ 494.286219][ T8953] FAT-fs (loop2): Directory bread(block 66) failed [ 494.293210][ T8953] FAT-fs (loop2): Directory bread(block 67) failed [ 494.300996][ T8953] FAT-fs (loop2): Directory bread(block 68) failed [ 494.307595][ T8953] FAT-fs (loop2): Directory bread(block 69) failed [ 494.314949][ T8953] FAT-fs (loop2): Directory bread(block 70) failed [ 494.314970][ T8959] bridge2: port 1(erspan0) entered disabled state [ 494.322518][ T8953] FAT-fs (loop2): Directory bread(block 71) failed [ 495.026463][ T8953] FAT-fs (loop2): Directory bread(block 72) failed [ 495.029350][ T8959] device erspan0 entered promiscuous mode [ 495.456293][ T8953] FAT-fs (loop2): Directory bread(block 73) failed [ 497.277276][ T4969] kworker/u4:37: attempt to access beyond end of device [ 497.277276][ T4969] loop2: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 497.443347][ T4969] kworker/u4:37: attempt to access beyond end of device [ 497.443347][ T4969] loop2: rw=1, sector=1864, nr_sectors = 64 limit=256 [ 497.467071][ T4969] kworker/u4:37: attempt to access beyond end of device [ 497.467071][ T4969] loop2: rw=1, sector=1960, nr_sectors = 5664 limit=256 [ 497.467113][ T8981] device vlan2 left promiscuous mode [ 498.128302][ T8981] device bridge0 left promiscuous mode [ 498.138627][ T8990] tipc: Enabling of bearer rejected, failed to enable media [ 498.151729][ T4969] kworker/u4:37: attempt to access beyond end of device [ 498.151729][ T4969] loop2: rw=1, sector=7624, nr_sectors = 2048 limit=256 [ 498.192844][ T4969] kworker/u4:37: attempt to access beyond end of device [ 498.192844][ T4969] loop2: rw=1, sector=9672, nr_sectors = 2048 limit=256 [ 498.437259][ T4969] kworker/u4:37: attempt to access beyond end of device [ 498.437259][ T4969] loop2: rw=1, sector=11720, nr_sectors = 2048 limit=256 [ 498.760222][ T4969] kworker/u4:37: attempt to access beyond end of device [ 498.760222][ T4969] loop2: rw=1, sector=13768, nr_sectors = 2048 limit=256 [ 499.067052][ T4969] kworker/u4:37: attempt to access beyond end of device [ 499.067052][ T4969] loop2: rw=1, sector=15816, nr_sectors = 2664 limit=256 [ 499.305180][ T4969] kworker/u4:37: attempt to access beyond end of device [ 499.305180][ T4969] loop2: rw=1, sector=18480, nr_sectors = 4096 limit=256 [ 499.324814][ T4969] kworker/u4:37: attempt to access beyond end of device [ 499.324814][ T4969] loop2: rw=1, sector=22576, nr_sectors = 384 limit=256 [ 512.547141][ T9172] loop6: detected capacity change from 0 to 32768 [ 513.413359][ T9172] XFS (loop6): Mounting V5 Filesystem [ 513.518454][ T9172] XFS (loop6): Ending clean mount [ 513.540892][ T9172] XFS (loop6): Quotacheck needed: Please wait. [ 513.652938][ T9172] XFS (loop6): Quotacheck: Done. [ 514.825528][ T6085] XFS (loop6): Unmounting Filesystem [ 516.326405][ T3600] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 518.442055][ T3600] usb 3-1: Using ep0 maxpacket: 32 [ 518.469529][ T3600] usb 3-1: config 0 has no interfaces? [ 518.482080][ T3600] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 518.520395][ T9232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.527978][ T9232] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.544017][ T3600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.552116][ T9232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.608892][ T3600] usb 3-1: Product: syz [ 518.808448][ T3600] usb 3-1: Manufacturer: syz [ 518.813466][ T3600] usb 3-1: SerialNumber: syz [ 518.823911][ T3600] usb 3-1: config 0 descriptor?? [ 519.422649][ T3600] usb 3-1: USB disconnect, device number 9 [ 520.516260][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.523374][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 522.188608][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 523.029172][ T9291] xt_l2tp: unknown flags: 17 [ 523.449495][ T9294] overlayfs: failed to clone upperpath [ 524.426498][ T9307] netlink: 'syz.4.1001': attribute type 4 has an invalid length. [ 524.763878][ T9310] netlink: 'syz.4.1001': attribute type 4 has an invalid length. [ 526.615146][ T9334] loop6: detected capacity change from 0 to 512 [ 526.797736][ T9241] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 527.869959][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1007'. [ 532.419857][ T9380] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 534.985666][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 539.420396][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 539.778231][ T4735] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 540.504021][ T4735] usb 3-1: Using ep0 maxpacket: 16 [ 540.517885][ T4735] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 541.017974][ T4735] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.033262][ T4735] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.132964][ T4735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.144027][ T4735] usb 3-1: Product: syz [ 541.148382][ T4735] usb 3-1: Manufacturer: syz [ 541.153007][ T4735] usb 3-1: SerialNumber: syz [ 541.361763][ T4711] libceph: connect (1)[c::]:6789 error -101 [ 541.391256][ T4735] usb 3-1: 0:2 : does not exist [ 541.402347][ T4735] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 541.415392][ T4711] libceph: mon0 (1)[c::]:6789 connect error [ 541.464987][ T4711] libceph: connect (1)[c::]:6789 error -101 [ 541.477294][ T4711] libceph: mon0 (1)[c::]:6789 connect error [ 541.493338][ T9452] ceph: No mds server is up or the cluster is laggy [ 541.504486][ T4735] usb 3-1: USB disconnect, device number 10 [ 541.830488][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 541.838561][ T9241] udevd[9241]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.860856][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 543.181193][ T4711] libceph: connect (1)[c::]:6789 error -101 [ 543.939246][ T4711] libceph: mon0 (1)[c::]:6789 connect error [ 544.174688][ T9479] Bluetooth: MGMT ver 1.22 [ 545.323309][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 545.757543][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 549.441750][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 555.042411][ T9582] device syzkaller0 entered promiscuous mode [ 555.064445][ T9582] tc action pedit offset must be on 32 bit boundaries [ 556.976759][ T9599] loop6: detected capacity change from 0 to 512 [ 557.319335][ T9609] sctp: [Deprecated]: syz.4.1068 (pid 9609) Use of int in max_burst socket option. [ 557.319335][ T9609] Use struct sctp_assoc_value instead [ 557.351201][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1067'. [ 560.022933][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 562.025418][ T9652] loop6: detected capacity change from 0 to 256 [ 563.245828][ T9652] FAT-fs (loop6): Directory bread(block 64) failed [ 563.252484][ T9652] FAT-fs (loop6): Directory bread(block 65) failed [ 563.259194][ T9652] FAT-fs (loop6): Directory bread(block 66) failed [ 563.265815][ T9652] FAT-fs (loop6): Directory bread(block 67) failed [ 563.272432][ T9652] FAT-fs (loop6): Directory bread(block 68) failed [ 563.279047][ T9652] FAT-fs (loop6): Directory bread(block 69) failed [ 563.285653][ T9652] FAT-fs (loop6): Directory bread(block 70) failed [ 563.292268][ T9652] FAT-fs (loop6): Directory bread(block 71) failed [ 563.299005][ T9652] FAT-fs (loop6): Directory bread(block 72) failed [ 563.305638][ T9652] FAT-fs (loop6): Directory bread(block 73) failed [ 563.391163][ T9661] loop2: detected capacity change from 0 to 512 [ 563.469654][ T9581] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 563.690602][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 568.141133][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 568.818028][ T9718] loop6: detected capacity change from 0 to 128 [ 569.744808][ T9581] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 570.178911][ T9733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 570.375295][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1098'. [ 573.601026][ T9800] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 575.036640][ T9812] overlayfs: failed to clone upperpath [ 575.843607][ T9819] overlayfs: failed to clone upperpath [ 576.829340][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 586.196858][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 586.203303][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 586.995388][ T9919] netlink: 'syz.6.1128': attribute type 4 has an invalid length. [ 587.116646][ T9922] netlink: 'syz.6.1128': attribute type 4 has an invalid length. [ 588.923677][ T9941] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 589.728315][ T9945] xt_connbytes: Forcing CT accounting to be enabled [ 590.518238][ T4324] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 591.550569][ T9961] ubi: mtd0 is already attached to ubi16 [ 591.819191][ T27] audit: type=1326 audit(1782162966.047:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.0.1131" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82db9ce59 code=0x7fc00000 [ 591.901600][ T4324] usb 3-1: device descriptor read/all, error -71 [ 591.950212][ T9964] tmpfs: Unknown parameter 'usrquota' [ 592.493990][ T9970] binder_alloc: 9968: binder_alloc_buf, no vma [ 600.831601][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 601.531108][T10047] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 606.087566][T10083] loop6: detected capacity change from 0 to 512 [ 606.499602][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1165'. [ 608.756461][T10101] Can't find ip_set type hash:m [ 610.194800][T10125] loop2: detected capacity change from 0 to 32768 [ 610.424181][T10125] XFS (loop2): Mounting V5 Filesystem [ 611.859931][T10125] XFS (loop2): Ending clean mount [ 611.875185][T10125] XFS (loop2): Quotacheck needed: Please wait. [ 612.195970][T10154] loop6: detected capacity change from 0 to 512 [ 612.222093][T10125] XFS (loop2): Quotacheck: Done. [ 613.311786][ T4282] XFS (loop2): Unmounting Filesystem [ 613.934042][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1178'. [ 614.558069][T10172] lo speed is unknown, defaulting to 1000 [ 617.665902][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1181'. [ 618.617015][T10216] tipc: Enabling of bearer rejected, failed to enable media [ 618.844704][T10223] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1192'. [ 619.781556][T10238] device ip6erspan0 entered promiscuous mode [ 621.735590][T10255] loop6: detected capacity change from 0 to 32768 [ 622.677032][T10255] XFS (loop6): Mounting V5 Filesystem [ 622.738226][T10255] XFS (loop6): Ending clean mount [ 622.749266][T10255] XFS (loop6): Quotacheck needed: Please wait. [ 623.059294][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'. [ 623.407981][T10255] XFS (loop6): Quotacheck: Done. [ 626.130715][ T6085] XFS (loop6): Unmounting Filesystem [ 628.135723][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 629.079091][T10356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1222'. [ 629.984904][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 630.093169][T10361] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1211'. [ 633.689344][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 635.139944][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 640.461365][ T27] audit: type=1326 audit(1782163011.573:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e32d9ce59 code=0x0 [ 641.342822][T10474] tmpfs: Unknown parameter 'grpquota' [ 642.193910][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.202026][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.315698][T10466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.384088][T10466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.849188][T10466] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.921165][T10466] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.962363][T10466] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.971443][T10466] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.230145][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 651.842601][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 651.851580][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.453367][T10698] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 662.173537][T10718] xt_limit: Overflow, try lower: 0/0 [ 662.190249][T10718] xt_cgroup: path and classid specified [ 665.294972][T10749] Invalid ELF header magic: != ELF [ 665.823648][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 666.513855][ T4290] Bluetooth: hci3: Malformed Event: 0x02 [ 668.437327][T10790] syz.0.1325 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 669.238344][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 670.509491][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 670.821642][T10826] lo speed is unknown, defaulting to 1000 [ 672.105336][ T3600] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 672.405783][ T3600] usb 3-1: Using ep0 maxpacket: 32 [ 672.478481][ T3600] usb 3-1: unable to get BOS descriptor or descriptor too short [ 672.605444][ T3600] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 672.729192][ T3600] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 672.752830][ T3600] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 672.897590][ T3600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.919632][ T3600] usb 3-1: Product: syz [ 672.923967][ T3600] usb 3-1: Manufacturer: syz [ 672.933425][ T3600] usb 3-1: SerialNumber: syz [ 673.427819][ T3600] usb 3-1: USB disconnect, device number 13 [ 673.526542][T10869] fuse: Bad value for 'fd' [ 675.335359][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 675.357604][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 675.368631][ T4290] CPU: 0 PID: 4290 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 675.376226][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.386291][ T4290] Workqueue: hci0 hci_rx_work [ 675.391180][ T4290] Call Trace: [ 675.394566][ T4290] [ 675.397596][ T4290] dump_stack_lvl+0x188/0x24e [ 675.402366][ T4290] ? show_regs_print_info+0x12/0x12 [ 675.407654][ T4290] ? load_image+0x410/0x410 [ 675.412199][ T4290] sysfs_create_dir_ns+0x26a/0x290 [ 675.417390][ T4290] ? __lock_acquire+0x7bd0/0x7bd0 [ 675.422471][ T4290] ? sysfs_warn_dup+0xa0/0xa0 [ 675.427157][ T4290] ? do_raw_spin_unlock+0x11d/0x230 [ 675.432385][ T4290] kobject_add_internal+0x617/0xca0 [ 675.437663][ T4290] kobject_add+0x160/0x230 [ 675.442125][ T4290] ? kobject_init+0x1c0/0x1c0 [ 675.446848][ T4290] ? __raw_spin_lock_init+0x41/0x100 [ 675.452152][ T4290] ? klist_children_get+0x50/0x50 [ 675.457286][ T4290] ? get_device_parent+0x121/0x3e0 [ 675.462400][ T4290] device_add+0x470/0x1050 [ 675.466841][ T4290] hci_conn_add_sysfs+0xd1/0x1e0 [ 675.472057][ T4290] le_conn_complete_evt+0xf69/0x1560 [ 675.477579][ T4290] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 675.483883][ T4290] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 675.489648][ T4290] ? mutex_unlock+0x10/0x10 [ 675.494283][ T4290] ? skb_pull_data+0xec/0x1f0 [ 675.499040][ T4290] hci_le_conn_complete_evt+0x183/0x440 [ 675.504646][ T4290] ? hci_remote_host_features_evt+0x230/0x230 [ 675.510768][ T4290] hci_event_packet+0x7b3/0x1290 [ 675.515762][ T4290] ? __lock_acquire+0x7bd0/0x7bd0 [ 675.520833][ T4290] ? bis_list+0x280/0x280 [ 675.525199][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 675.531148][ T4290] ? kcov_remote_start+0x4b0/0x7e0 [ 675.536401][ T4290] ? nf_ct_resolve_clash+0x572/0x68f [ 675.541725][ T4290] ? hci_send_to_monitor+0x9c/0x4a0 [ 675.547241][ T4290] hci_rx_work+0x3eb/0xd40 [ 675.551711][ T4290] ? _raw_spin_unlock+0x40/0x40 [ 675.556626][ T4290] ? process_one_work+0x7b4/0x1160 [ 675.561919][ T4290] process_one_work+0x8ab/0x1160 [ 675.566916][ T4290] ? worker_detach_from_pool+0x240/0x240 [ 675.572595][ T4290] ? _raw_spin_lock_irq+0xb7/0xf0 [ 675.577671][ T4290] ? _raw_spin_lock_irqsave+0x100/0x100 [ 675.583285][ T4290] ? wq_worker_running+0x97/0x190 [ 675.588354][ T4290] worker_thread+0xaf5/0x12a0 [ 675.593097][ T4290] kthread+0x29d/0x330 [ 675.597290][ T4290] ? worker_clr_flags+0x1a0/0x1a0 [ 675.602358][ T4290] ? kthread_blkcg+0xd0/0xd0 [ 675.606987][ T4290] ret_from_fork+0x1f/0x30 [ 675.611500][ T4290] [ 675.617528][ T4290] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 675.636583][ T4290] Bluetooth: hci0: failed to register connection device [ 677.229769][T10926] loop6: detected capacity change from 0 to 128 [ 677.924187][T10938] loop6: detected capacity change from 0 to 32768 [ 677.941759][T10901] Bluetooth: hci0: command 0x2016 tx timeout [ 678.269358][T10938] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.1365 (10938) [ 678.473236][T10938] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 678.484536][T10938] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 678.494308][T10938] BTRFS info (device loop6): enabling disk space caching [ 678.503308][T10938] BTRFS info (device loop6): force clearing of disk cache [ 678.510882][T10938] BTRFS info (device loop6): enabling auto defrag [ 678.518788][T10938] BTRFS info (device loop6): disk space caching is enabled [ 678.885928][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1366'. [ 679.193154][T10938] BTRFS info (device loop6): enabling ssd optimizations [ 679.214592][T10938] BTRFS info (device loop6): rebuilding free space tree [ 679.305370][T10938] BTRFS info (device loop6): disabling free space tree [ 679.312490][T10938] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 679.322922][T10938] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 680.253854][ T6085] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 681.554670][ T9834] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop6 scanned by udevd (9834) [ 682.315790][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1371'. [ 683.007322][T11022] overlayfs: failed to clone upperpath [ 684.806535][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1381'. [ 687.656960][T11079] ipt_REJECT: ECHOREPLY no longer supported. [ 688.101856][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 688.866294][T11098] tipc: Enabling of bearer rejected, failed to enable media [ 690.184981][T11122] loop2: detected capacity change from 0 to 64 [ 690.304763][T11123] loop6: detected capacity change from 0 to 1024 [ 690.916342][ T27] audit: type=1800 audit(1782163058.794:12): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1398" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 691.473905][T11131] loop6: detected capacity change from 0 to 512 [ 691.487863][T11131] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 691.530105][T11134] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 691.539102][T11134] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 692.445495][T11131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 692.607766][T11131] System zones: 1-12 [ 692.699713][T11131] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.1400: bad orphan inode 16 [ 692.775769][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 692.792461][T11131] ext4_test_bit(bit=15, block=4) = 0 [ 692.835289][T11131] EXT4-fs (loop6): 1 orphan inode deleted [ 692.884403][T11131] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 694.112299][ T6085] EXT4-fs (loop6): unmounting filesystem. [ 697.807683][T11186] loop2: detected capacity change from 0 to 512 [ 700.844776][T11215] fuse: Bad value for 'fd' [ 701.097943][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1417'. [ 701.465422][T11219] loop2: detected capacity change from 0 to 256 [ 701.473538][T11219] exfat: Deprecated parameter 'utf8' [ 701.496315][T11219] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 701.963406][T11232] loop6: detected capacity change from 0 to 256 [ 702.632758][T11232] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 702.643491][T11232] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 703.309248][T11232] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 704.835154][T11249] loop6: detected capacity change from 0 to 512 [ 704.842834][T11249] EXT4-fs: Ignoring removed bh option [ 704.954834][T11249] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 705.156555][T11249] EXT4-fs (loop6): 1 truncate cleaned up [ 705.169115][T11249] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 705.768854][T11259] IPVS: Unknown mcast interface: vcan0 [ 706.099261][T11271] kAFS: No cell specified [ 706.669943][ T6085] EXT4-fs (loop6): unmounting filesystem. [ 706.726226][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 708.525833][ T3600] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 708.668310][T11301] loop6: detected capacity change from 0 to 512 [ 708.823043][ T3600] usb 3-1: device descriptor read/64, error -71 [ 709.486858][ T3600] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 709.728326][ T3600] usb 3-1: device descriptor read/64, error -71 [ 709.902560][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1440'. [ 709.926878][ T3600] usb usb3-port1: attempt power cycle [ 710.981702][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1445'. [ 711.043733][ T3600] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 712.048707][ T3600] usb 3-1: device descriptor read/8, error -71 [ 714.504011][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 715.861836][T11391] loop6: detected capacity change from 0 to 736 [ 717.583485][T11398] loop2: detected capacity change from 0 to 128 [ 717.613387][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 718.399822][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 718.898368][T10287] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 719.190156][T11403] ipt_REJECT: ECHOREPLY no longer supported. [ 719.819122][T11406] device syzkaller0 left promiscuous mode [ 720.661801][T11423] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 720.887426][T11416] loop2: detected capacity change from 0 to 32768 [ 720.917602][T11416] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 722.281470][T11434] fuse: Bad value for 'fd' [ 723.107239][T10287] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 726.434775][ T129] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 726.480020][T11463] ipt_REJECT: ECHOREPLY no longer supported. [ 726.668141][ T129] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 726.748164][ T129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.845668][ T129] usb 7-1: Product: syz [ 726.932632][ T129] usb 7-1: Manufacturer: syz [ 726.996503][ T129] usb 7-1: SerialNumber: syz [ 727.043028][ T129] usb 7-1: config 0 descriptor?? [ 727.170567][T11486] loop2: detected capacity change from 0 to 256 [ 727.212958][T11486] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 727.271266][ T129] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 727.321209][T11486] FAT-fs (loop2): Filesystem has been set read-only [ 727.353858][T11486] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 727.517364][T11486] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 728.309548][T11499] fuse: Bad value for 'fd' [ 730.951531][ T129] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 731.558773][ T129] usb 7-1: USB disconnect, device number 3 [ 732.809628][T11537] tmpfs: Unknown parameter 'grpquota' [ 736.778048][T11579] ipt_REJECT: ECHOREPLY no longer supported. [ 737.103505][T11586] loop2: detected capacity change from 0 to 256 [ 737.120345][T11586] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 737.258436][T11586] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 737.314065][T11586] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 737.323127][T11586] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 742.124940][T11636] tipc: Enabling of bearer rejected, already enabled [ 742.134562][T11636] device syzkaller0 entered promiscuous mode [ 742.219804][T11639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1518'. [ 746.601639][T11690] loop2: detected capacity change from 0 to 4096 [ 746.954498][T11690] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 746.968628][T11690] ntfs3: loop2: Failed to load $Bitmap. [ 747.496893][T11701] netlink: 'syz.4.1530': attribute type 10 has an invalid length. [ 747.979541][T11701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1530'. [ 748.518905][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 748.926683][T11718] loop6: detected capacity change from 0 to 128 [ 753.784135][T11742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1538'. [ 755.016255][T11775] lo speed is unknown, defaulting to 1000 [ 758.555446][T11813] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 761.042663][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 773.370960][T11887] xt_connbytes: Forcing CT accounting to be enabled [ 774.283414][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 780.886022][T11955] tipc: Enabling of bearer rejected, already enabled [ 784.103880][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 784.110244][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 784.167941][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 797.391351][T12067] can0: slcan on ttyS3. [ 797.622265][T12046] can0 (unregistered): slcan off ttyS3. [ 800.273998][T12093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1612'. [ 802.330273][T12112] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 802.339541][T12112] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 809.210051][T12202] IPVS: lc: FWM 3 0x00000003 - no destination available [ 814.665265][T12236] device syzkaller0 entered promiscuous mode [ 814.706963][T12236] tipc: Started in network mode [ 814.726567][T12236] tipc: Node identity f61a980f0d8, cluster identity 4711 [ 814.751425][T12236] tipc: Enabled bearer , priority 0 [ 814.795915][T12236] tipc: Resetting bearer [ 814.839209][T12235] tipc: Resetting bearer [ 815.082699][T12235] tipc: Disabling bearer [ 816.075010][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1646'. [ 816.122472][T12249] device bridge0 entered promiscuous mode [ 816.143765][T12249] device macvtap1 entered promiscuous mode [ 816.396095][T12254] device bridge0 left promiscuous mode [ 816.399849][T12252] loop2: detected capacity change from 0 to 32768 [ 817.090258][T12254] device macvtap1 left promiscuous mode [ 817.226361][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 817.267435][T12252] XFS (loop2): Mounting V5 Filesystem [ 817.402959][T12252] XFS (loop2): Ending clean mount [ 817.419483][T12252] XFS (loop2): Quotacheck needed: Please wait. [ 817.426674][T12274] loop6: detected capacity change from 0 to 1024 [ 817.480221][T12252] XFS (loop2): Quotacheck: Done. [ 820.090880][ T4282] XFS (loop2): Unmounting Filesystem [ 820.606678][T12291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.627322][T12291] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.173880][T12291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 826.041153][T12336] loop2: detected capacity change from 0 to 2048 [ 826.311504][T12336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 827.573231][T12356] loop6: detected capacity change from 0 to 512 [ 829.053879][T12356] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1669: invalid indirect mapped block 4294967295 (level 1) [ 829.069904][T12356] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1669: invalid indirect mapped block 4294967295 (level 1) [ 829.092063][T12356] EXT4-fs (loop6): 2 truncates cleaned up [ 829.098053][T12356] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 829.813649][ T6085] EXT4-fs (loop6): unmounting filesystem. [ 831.564435][T12396] xt_hashlimit: max too large, truncated to 1048576 [ 831.690313][T12400] loop6: detected capacity change from 0 to 512 [ 831.736260][T12400] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 831.757720][T12400] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.406693][T12405] CIFS mount error: No usable UNC path provided in device string! [ 832.406693][T12405] [ 832.416826][T12405] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 832.737206][ T6085] EXT4-fs (loop6): unmounting filesystem. [ 836.897379][T12467] device syzkaller0 entered promiscuous mode [ 840.086044][T12503] binder: 12496:12503 ioctl c0306201 2000000003c0 returned -14 [ 841.226086][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1701'. [ 841.235181][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1701'. [ 841.264903][T12513] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.275271][T12513] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.287462][T12513] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.296671][T12513] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.311515][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1701'. [ 841.323610][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1701'. [ 848.902791][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 848.909165][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.308697][T12555] loop6: detected capacity change from 0 to 512 [ 849.320012][T12555] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 849.357939][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1713'. [ 850.099258][T12555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 850.117876][T12555] System zones: 1-12 [ 851.231033][T12555] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.1705: bad orphan inode 16 [ 851.316510][T12555] ext4_test_bit(bit=15, block=4) = 0 [ 851.414659][T12555] EXT4-fs (loop6): 1 orphan inode deleted [ 851.495732][T12555] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 854.430111][ T6085] EXT4-fs (loop6): unmounting filesystem. [ 854.541740][T12598] tipc: New replicast peer: 172.30.0.1 [ 854.547721][T12598] tipc: Enabled bearer , priority 10 [ 856.159006][T12608] device syzkaller0 entered promiscuous mode [ 856.365359][T12615] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4284] was attempted by " [ 856.526829][T12616] xt_hashlimit: max too large, truncated to 1048576 [ 857.460909][T12608] tipc: Enabled bearer , priority 0 [ 857.495848][T12605] tipc: Resetting bearer [ 858.181152][T12632] CIFS mount error: No usable UNC path provided in device string! [ 858.181152][T12632] [ 858.191473][T12632] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 858.224721][T12605] tipc: Disabling bearer [ 860.451838][ T27] audit: type=1326 audit(1782163216.841:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.6.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6101f9ce59 code=0x7ffc0000 [ 860.573992][ T27] audit: type=1326 audit(1782163216.841:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.6.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6101f9ce59 code=0x7ffc0000 [ 860.765022][ T27] audit: type=1326 audit(1782163216.860:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.6.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f6101f9ce59 code=0x7ffc0000 [ 861.322674][T12660] xt_hashlimit: max too large, truncated to 1048576 [ 861.385518][ T27] audit: type=1326 audit(1782163216.860:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.6.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6101f9ce59 code=0x7ffc0000 [ 861.443153][ T27] audit: type=1326 audit(1782163216.860:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.6.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6101f9ce59 code=0x7ffc0000 [ 861.802284][ T27] audit: type=1326 audit(1782163216.869:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.6.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6101f9ce59 code=0x7ffc0000 [ 862.794988][ T27] audit: type=1326 audit(1782163216.869:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.6.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6101f9ce59 code=0x7ffc0000 [ 863.098735][ T27] audit: type=1326 audit(1782163216.869:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.6.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6101f9ce59 code=0x7ffc0000 [ 863.319701][T12674] random: crng reseeded on system resumption [ 864.779781][ T27] audit: type=1326 audit(1782163216.888:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.6.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f6101f9ce59 code=0x7ffc0000 [ 864.991762][ T27] audit: type=1326 audit(1782163216.888:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.6.1733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6101f9ce59 code=0x7ffc0000 [ 867.406004][T12708] overlayfs: failed to resolve './file1': -2 [ 867.967429][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 867.967598][ T27] audit: type=1326 audit(1782163224.449:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.0.1751" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa82db9ce59 code=0x0 [ 868.636456][T12720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 868.708077][T12720] loop2: detected capacity change from 0 to 2048 [ 869.232086][T12720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.190064][T12753] loop6: detected capacity change from 0 to 128 [ 872.818585][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 873.246955][T12768] tipc: Enabling of bearer rejected, failed to enable media [ 875.060011][T12789] xt_connbytes: Forcing CT accounting to be enabled [ 875.066989][T12789] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 876.135358][T12797] Cannot find del_set index 14804 as target [ 876.703594][T12812] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 877.216034][T12817] loop6: detected capacity change from 0 to 32768 [ 878.315672][T12817] XFS (loop6): Mounting V5 Filesystem [ 878.423121][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 878.847104][T12817] XFS (loop6): Ending clean mount [ 878.859156][T12817] XFS (loop6): Quotacheck needed: Please wait. [ 879.007366][T12817] XFS (loop6): Quotacheck: Done. [ 880.597777][T12853] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 880.646338][ T6085] XFS (loop6): Unmounting Filesystem [ 882.303529][T12872] loop2: detected capacity change from 0 to 1024 [ 882.885093][T12872] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 884.373064][T12895] xt_TCPMSS: Only works on TCP SYN packets [ 885.212606][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1794'. [ 886.351512][T12917] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1798'. [ 890.756785][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'. [ 892.603103][T12983] loop6: detected capacity change from 0 to 1024 [ 892.870046][T12983] EXT4-fs: Ignoring removed orlov option [ 893.005620][T12983] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 893.974512][ T6085] EXT4-fs (loop6): unmounting filesystem. [ 894.733158][T13010] loop6: detected capacity change from 0 to 512 [ 894.760742][T13011] loop2: detected capacity change from 0 to 128 [ 894.888106][T13010] EXT4-fs: Ignoring removed mblk_io_submit option [ 894.958837][T13011] ext4: Unknown parameter 'fsmagic' [ 895.166654][T13010] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.1822: corrupted in-inode xattr [ 896.145645][T13010] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1822: couldn't read orphan inode 15 (err -117) [ 896.180726][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 896.243698][T13010] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 896.418062][T13010] EXT4-fs: Ignoring removed bh option [ 896.568765][T13010] System zones: 1-12 [ 896.595575][T13010] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 897.279820][ T27] audit: type=1326 audit(1782163251.887:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.2.1828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa36d9ce59 code=0x0 [ 898.273984][ T6085] EXT4-fs (loop6): unmounting filesystem. [ 902.541122][T13088] loop6: detected capacity change from 0 to 32768 [ 902.635457][T13088] XFS (loop6): Mounting V5 Filesystem [ 902.715082][T13088] XFS (loop6): Ending clean mount [ 902.723148][T13088] XFS (loop6): Quotacheck needed: Please wait. [ 902.891241][T13088] XFS (loop6): Quotacheck: Done. [ 903.968343][ T6085] XFS (loop6): Unmounting Filesystem [ 905.078517][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1842'. [ 905.375555][T13122] loop6: detected capacity change from 0 to 256 [ 905.409734][T13122] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xa81a85aa, utbl_chksum : 0xe619d30d) [ 905.958633][T13130] tipc: New replicast peer: 172.30.0.7 [ 905.964820][T13130] tipc: Enabled bearer , priority 10 [ 907.384746][T10561] tipc: Node number set to 4221212687 [ 908.437946][T13148] device syzkaller0 entered promiscuous mode [ 909.667276][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 909.676583][T13163] device macsec0 left promiscuous mode [ 909.684440][T13163] bridge0: port 3(macsec0) entered disabled state [ 909.694265][T13163] device bridge_slave_1 left promiscuous mode [ 909.700645][T13163] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.708907][T13163] device bridge_slave_0 left promiscuous mode [ 909.715184][T13163] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.855025][T13168] loop2: detected capacity change from 0 to 8 [ 910.018583][T13169] SQUASHFS error: Unable to read directory block [629:26] [ 913.197089][T13188] loop2: detected capacity change from 0 to 256 [ 913.233716][ T4738] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 914.868813][T13193] tipc: New replicast peer: 172.30.0.2 [ 914.874515][T13193] tipc: Enabled bearer , priority 10 [ 917.198367][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 917.204735][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 917.350378][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 918.975655][T13219] device syzkaller0 entered promiscuous mode [ 919.898486][T13228] IPVS: Unknown mcast interface: vcan0 [ 920.922583][T13232] sctp: [Deprecated]: syz.6.1878 (pid 13232) Use of int in maxseg socket option. [ 920.922583][T13232] Use struct sctp_assoc_value instead [ 921.426276][T13250] x_tables: ip_tables: osf match: only valid for protocol 6 [ 921.872747][T13249] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 922.000778][T13243] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 922.221192][T13257] loop6: detected capacity change from 0 to 128 [ 922.896044][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 923.047572][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1886'. [ 923.298499][T13271] loop6: detected capacity change from 0 to 24 [ 923.349699][T13271] romfs: read error for inode 0x8000 [ 925.048120][T13289] loop2: detected capacity change from 0 to 32768 [ 925.171978][T13289] XFS (loop2): Mounting V5 Filesystem [ 925.312868][T13289] XFS (loop2): Ending clean mount [ 925.324178][T13289] XFS (loop2): Quotacheck needed: Please wait. [ 926.403868][T13289] XFS (loop2): Quotacheck: Done. [ 926.671301][T13304] overlayfs: failed to resolve './bus': -2 [ 927.023059][ T4282] XFS (loop2): Unmounting Filesystem [ 929.553705][T13328] loop2: detected capacity change from 0 to 128 [ 929.562575][T13328] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 929.574118][T13328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 929.797658][T13331] futex_wake_op: syz.6.1899 tries to shift op by 144; fix this program [ 929.829401][T13331] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1899'. [ 930.801871][T13338] device syzkaller0 entered promiscuous mode [ 930.848380][T13340] overlayfs: failed to clone lowerpath [ 930.976357][T13346] overlayfs: unrecognized mount option "/ÿÿÿD" or missing value [ 932.860394][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1907'. [ 933.152890][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1911'. [ 934.872336][T13397] device syzkaller0 entered promiscuous mode [ 937.509081][T13417] tipc: Enabling of bearer rejected, already enabled [ 938.855170][T13430] tipc: Enabling of bearer rejected, already enabled [ 939.193947][T13438] device syzkaller0 entered promiscuous mode [ 941.671299][T13475] loop6: detected capacity change from 0 to 512 [ 941.859337][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1933'. [ 941.976888][T13481] tipc: Enabling of bearer rejected, failed to enable media [ 945.161120][T13521] loop2: detected capacity change from 0 to 256 [ 945.787823][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1947'. [ 946.334670][T13538] loop6: detected capacity change from 0 to 40427 [ 946.345401][T13538] F2FS-fs (loop6): invalid crc value [ 946.377543][T13540] tipc: Enabling of bearer rejected, failed to enable media [ 946.403454][T13538] F2FS-fs (loop6): Found nat_bits in checkpoint [ 946.453273][T13538] F2FS-fs (loop6): Start checkpoint disabled! [ 946.547201][T13538] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 947.899488][T13570] openvswitch: netlink: EtherType 0 is less than min 600 [ 949.414993][T13577] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 949.427089][T13577] infiniband syz1: set active [ 949.450192][T13577] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 949.843369][ T4355] lo speed is unknown, defaulting to 1000 [ 950.073936][T13580] overlayfs: failed to clone upperpath [ 950.087690][ T4984] kworker/u4:49: attempt to access beyond end of device [ 950.087690][ T4984] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 950.200700][T13586] device syzkaller0 left promiscuous mode [ 950.425633][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1959'. [ 950.488335][T11002] libceph: connect (1)[c::]:6789 error -101 [ 950.528579][T13589] ceph: No mds server is up or the cluster is laggy [ 950.574883][T11002] libceph: mon0 (1)[c::]:6789 connect error [ 955.893836][T13647] loop2: detected capacity change from 0 to 32768 [ 956.041315][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 956.283190][T13647] XFS (loop2): Mounting V5 Filesystem [ 956.345635][T13647] XFS (loop2): Ending clean mount [ 956.353895][T13647] XFS (loop2): Quotacheck needed: Please wait. [ 956.457329][T13662] futex_wake_op: syz.4.1975 tries to shift op by 144; fix this program [ 957.281463][T13647] XFS (loop2): Quotacheck: Done. [ 958.087102][ T4282] XFS (loop2): Unmounting Filesystem [ 961.205800][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1984'. [ 961.942479][T13726] fuse: Bad value for 'fd' [ 966.824604][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 967.526616][T13778] loop2: detected capacity change from 0 to 32768 [ 967.611149][T13778] XFS (loop2): Mounting V5 Filesystem [ 967.641948][T13778] XFS (loop2): Ending clean mount [ 967.650406][T13778] XFS (loop2): Quotacheck needed: Please wait. [ 967.946138][T13778] XFS (loop2): Quotacheck: Done. [ 968.527980][T13794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2002'. [ 969.900910][ T4282] XFS (loop2): Unmounting Filesystem [ 973.973769][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 974.746025][T13837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.690748][T13874] IPVS: lc: FWM 3 0x00000003 - no destination available [ 980.613739][T13892] device syzkaller0 entered promiscuous mode [ 980.654014][T13892] tipc: Enabled bearer , priority 0 [ 980.664016][T13891] tipc: Resetting bearer [ 980.817558][T13891] tipc: Disabling bearer [ 980.879380][T13895] overlayfs: failed to clone lowerpath [ 981.722880][T13900] overlayfs: unrecognized mount option "lowerd" or missing value [ 982.154303][T13906] xt_CONNSECMARK: invalid mode: 66 [ 984.351794][T13920] loop6: detected capacity change from 0 to 32768 [ 984.494891][T13920] XFS (loop6): Mounting V5 Filesystem [ 984.778278][T13920] XFS (loop6): Ending clean mount [ 984.795211][T13920] XFS (loop6): Quotacheck needed: Please wait. [ 985.179720][T13920] XFS (loop6): Quotacheck: Done. [ 985.534187][T13940] overlayfs: failed to resolve './bus': -2 [ 985.720861][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 985.727254][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 986.364062][ T6085] XFS (loop6): Unmounting Filesystem [ 988.358940][T13956] overlayfs: failed to clone lowerpath [ 988.429859][T13959] overlayfs: failed to clone lowerpath [ 988.519141][T13961] overlayfs: failed to clone upperpath [ 992.611932][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2052'. [ 992.738745][T13993] NILFS (nullb0): couldn't find nilfs on the device [ 996.559410][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 999.710509][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 999.922895][T10901] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1000.537649][T14070] fuse: Bad value for 'fd' [ 1000.647330][T14075] ipt_REJECT: ECHOREPLY no longer supported. [ 1002.520677][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 1003.592891][T14097] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2077'. [ 1005.266177][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2081'. [ 1005.431517][T14119] loop2: detected capacity change from 0 to 1024 [ 1005.445684][T14119] journal_path: not usable as path [ 1005.451514][T14119] EXT4-fs: error: could not find journal device path [ 1005.901176][T14126] tipc: Enabling of bearer rejected, failed to enable media [ 1006.115266][T14133] loop6: detected capacity change from 0 to 512 [ 1006.347428][T14098] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1006.591217][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2087'. [ 1009.853465][T14173] loop2: detected capacity change from 0 to 2048 [ 1011.752213][T14184] tipc: Enabling of bearer rejected, failed to enable media [ 1011.780190][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'. [ 1012.022126][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 1012.264412][T14191] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1014.739904][T14173] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=3): entry number 7168 already freed [ 1014.822373][T14191] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1014.868865][T14191] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1015.011211][T14191] Remounting filesystem read-only [ 1015.092187][ T4282] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1015.379833][T14227] tipc: Enabling of bearer rejected, failed to enable media [ 1016.564513][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 1016.842436][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2113'. [ 1017.680765][T14256] tipc: Enabling of bearer rejected, failed to enable media [ 1018.275293][T14271] loop2: detected capacity change from 0 to 64 [ 1018.330373][T14271] hfs: unable to locate alternate MDB [ 1018.336657][T14271] hfs: continuing without an alternate MDB [ 1018.374804][T14271] hfs: inconsistency in B*Tree (3,2,0,3,0) [ 1018.381437][T14271] hfs: get root inode failed [ 1019.285305][T14287] device syzkaller0 entered promiscuous mode [ 1019.431687][T14290] tipc: Enabled bearer , priority 0 [ 1019.466200][T14281] tipc: Resetting bearer [ 1019.583911][T14281] tipc: Disabling bearer [ 1021.040739][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2126'. [ 1021.069749][T14323] tipc: Enabling of bearer rejected, failed to enable media [ 1023.301894][T10901] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 1026.842655][T14387] loop6: detected capacity change from 0 to 512 [ 1026.960094][T14387] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1026.996810][T14387] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1027.089619][T14387] System zones: 0-1, 15-15, 18-18, 34-34 [ 1027.187416][T14387] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1027.230590][T14387] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1027.291055][T14387] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1027.362185][T14387] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1027.422008][T14387] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.2151: bad orphan inode 16 [ 1027.485674][T14387] ext4_test_bit(bit=15, block=18) = 1 [ 1027.516064][T14387] is_bad_inode(inode)=0 [ 1027.538304][T14387] NEXT_ORPHAN(inode)=0 [ 1027.549748][T14387] max_ino=32 [ 1027.562379][T14387] i_nlink=2 [ 1027.569673][T14387] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1028.591330][ T6085] EXT4-fs (loop6): unmounting filesystem. [ 1029.040597][T14422] tipc: Enabling of bearer rejected, failed to enable media [ 1029.204762][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2144'. [ 1032.423182][T14462] loop6: detected capacity change from 0 to 2048 [ 1033.724894][T14463] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1033.991990][T14463] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1034.024474][T14463] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1034.228914][T14463] Remounting filesystem read-only [ 1034.269636][ T6085] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 1035.250051][T14493] tipc: Enabling of bearer rejected, failed to enable media [ 1035.820010][T14502] loop6: detected capacity change from 0 to 512 [ 1035.897532][T14098] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1036.946460][T14506] smc: removing ib device syz1 [ 1037.275849][T14506] ------------[ cut here ]------------ [ 1037.281349][T14506] WARNING: CPU: 1 PID: 14506 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x3e/0x50 [ 1037.292213][T14506] Modules linked in: [ 1037.296099][T14506] CPU: 1 PID: 14506 Comm: syz.1.2168 Not tainted syzkaller #0 [ 1037.303590][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.313665][T14506] RIP: 0010:rxe_pool_cleanup+0x3e/0x50 [ 1037.319142][T14506] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 34 b0 3a fa 48 83 3b 00 75 07 e8 69 88 e9 f9 5b c3 e8 62 88 e9 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 41 57 41 [ 1037.338866][T14506] RSP: 0018:ffffc9001c2371c8 EFLAGS: 00010246 [ 1037.345030][T14506] RAX: ffffffff879898ae RBX: ffff8880726ad2a0 RCX: 0000000000080000 [ 1037.353015][T14506] RDX: ffffc9000609a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1037.360997][T14506] RBP: 0000000000000002 R08: ffff8880726ac743 R09: 1ffff1100e4d58e8 [ 1037.368959][T14506] R10: dffffc0000000000 R11: ffffed100e4d58e9 R12: dffffc0000000000 [ 1037.376943][T14506] R13: 0000000000000008 R14: ffffffff87971bc0 R15: dffffc0000000000 [ 1037.384923][T14506] FS: 00007f7d7152b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1037.393885][T14506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1037.400466][T14506] CR2: 0000560c6f8f74d0 CR3: 00000000361e2000 CR4: 00000000003506e0 [ 1037.408659][T14506] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1037.416642][T14506] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1037.424693][T14506] Call Trace: [ 1037.428002][T14506] [ 1037.430922][T14506] rxe_dealloc+0x2f/0x100 [ 1037.435248][T14506] ? trace_raw_output_rtrs_clt_conn_class+0x230/0x230 [ 1037.442023][T14506] ib_dealloc_device+0x4a/0x1f0 [ 1037.446912][T14506] __ib_unregister_device+0x110/0x170 [ 1037.452271][T14506] ib_unregister_device_and_put+0xb4/0xf0 [ 1037.458001][T14506] nldev_dellink+0x28f/0x320 [ 1037.462706][T14506] ? nldev_newlink+0x610/0x610 [ 1037.467569][T14506] ? apparmor_capable+0x12c/0x190 [ 1037.472694][T14506] ? bpf_lsm_capable+0x5/0x10 [ 1037.477414][T14506] ? security_capable+0x85/0xb0 [ 1037.482410][T14506] ? nldev_newlink+0x610/0x610 [ 1037.487435][T14506] rdma_nl_rcv+0x6e7/0xa20 [ 1037.491877][T14506] ? rdma_nl_net_init+0x190/0x190 [ 1037.496979][T14506] ? netlink_deliver_tap+0x2e/0x1b0 [ 1037.502254][T14506] ? __netlink_deliver_tap+0x92/0x7e0 [ 1037.507641][T14506] ? net_generic+0x1e/0x240 [ 1037.512168][T14506] ? netlink_deliver_tap+0x2e/0x1b0 [ 1037.517355][T14506] netlink_unicast+0x7ad/0x920 [ 1037.522154][T14506] netlink_sendmsg+0x8ad/0xbd0 [ 1037.526928][T14506] ? netlink_getsockopt+0x550/0x550 [ 1037.532140][T14506] ? aa_sock_msg_perm+0x94/0x150 [ 1037.537065][T14506] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1037.542533][T14506] ? security_socket_sendmsg+0x7c/0xa0 [ 1037.548023][T14506] ? netlink_getsockopt+0x550/0x550 [ 1037.553237][T14506] ____sys_sendmsg+0x5ed/0x9a0 [ 1037.558142][T14506] ? __sys_sendmsg_sock+0x30/0x30 [ 1037.563199][T14506] ? __import_iovec+0x306/0x510 [ 1037.568089][T14506] ? import_iovec+0x6f/0xa0 [ 1037.572950][T14506] ___sys_sendmsg+0x2a2/0x360 [ 1037.577733][T14506] ? __sys_sendmsg+0x2a0/0x2a0 [ 1037.582514][T14506] __se_sys_sendmsg+0x1c3/0x2b0 [ 1037.587460][T14506] ? __x64_sys_sendmsg+0x80/0x80 [ 1037.592480][T14506] ? lockdep_hardirqs_on+0x94/0x140 [ 1037.597694][T14506] do_syscall_64+0x4c/0xa0 [ 1037.602208][T14506] ? clear_bhb_loop+0x60/0xb0 [ 1037.606960][T14506] ? clear_bhb_loop+0x60/0xb0 [ 1037.611621][T14506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.617525][T14506] RIP: 0033:0x7f7d7059ce59 [ 1037.621934][T14506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.641923][T14506] RSP: 002b:00007f7d7152b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.650345][T14506] RAX: ffffffffffffffda RBX: 00007f7d70815fa0 RCX: 00007f7d7059ce59 [ 1037.658306][T14506] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1037.666304][T14506] RBP: 00007f7d70632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1037.674284][T14506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.682414][T14506] R13: 00007f7d70816038 R14: 00007f7d70815fa0 R15: 00007ffcbf5c4248 [ 1037.690403][T14506] [ 1037.693459][T14506] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1037.700726][T14506] CPU: 1 PID: 14506 Comm: syz.1.2168 Not tainted syzkaller #0 [ 1037.708189][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.718230][T14506] Call Trace: [ 1037.721622][T14506] [ 1037.724541][T14506] dump_stack_lvl+0x188/0x24e [ 1037.729208][T14506] ? memcpy+0x3c/0x60 [ 1037.733247][T14506] ? show_regs_print_info+0x12/0x12 [ 1037.738434][T14506] ? load_image+0x410/0x410 [ 1037.742933][T14506] panic+0x2d3/0x710 [ 1037.746818][T14506] ? bpf_jit_dump+0xd0/0xd0 [ 1037.751314][T14506] __warn+0x2f8/0x4f0 [ 1037.755372][T14506] ? rxe_pool_cleanup+0x3e/0x50 [ 1037.760206][T14506] ? rxe_pool_cleanup+0x3e/0x50 [ 1037.765039][T14506] report_bug+0x2ba/0x4f0 [ 1037.769876][T14506] ? rxe_pool_cleanup+0x3e/0x50 [ 1037.774721][T14506] handle_bug+0x3a/0x70 [ 1037.778860][T14506] exc_invalid_op+0x16/0x40 [ 1037.783345][T14506] asm_exc_invalid_op+0x16/0x20 [ 1037.788183][T14506] RIP: 0010:rxe_pool_cleanup+0x3e/0x50 [ 1037.793627][T14506] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 34 b0 3a fa 48 83 3b 00 75 07 e8 69 88 e9 f9 5b c3 e8 62 88 e9 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 41 57 41 [ 1037.813243][T14506] RSP: 0018:ffffc9001c2371c8 EFLAGS: 00010246 [ 1037.819293][T14506] RAX: ffffffff879898ae RBX: ffff8880726ad2a0 RCX: 0000000000080000 [ 1037.827247][T14506] RDX: ffffc9000609a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1037.835203][T14506] RBP: 0000000000000002 R08: ffff8880726ac743 R09: 1ffff1100e4d58e8 [ 1037.843159][T14506] R10: dffffc0000000000 R11: ffffed100e4d58e9 R12: dffffc0000000000 [ 1037.851111][T14506] R13: 0000000000000008 R14: ffffffff87971bc0 R15: dffffc0000000000 [ 1037.859068][T14506] ? trace_raw_output_rtrs_clt_conn_class+0x230/0x230 [ 1037.865824][T14506] ? rxe_pool_cleanup+0x3e/0x50 [ 1037.870666][T14506] ? rxe_pool_cleanup+0x3e/0x50 [ 1037.875500][T14506] rxe_dealloc+0x2f/0x100 [ 1037.879812][T14506] ? trace_raw_output_rtrs_clt_conn_class+0x230/0x230 [ 1037.886559][T14506] ib_dealloc_device+0x4a/0x1f0 [ 1037.891392][T14506] __ib_unregister_device+0x110/0x170 [ 1037.896747][T14506] ib_unregister_device_and_put+0xb4/0xf0 [ 1037.902621][T14506] nldev_dellink+0x28f/0x320 [ 1037.907197][T14506] ? nldev_newlink+0x610/0x610 [ 1037.911980][T14506] ? apparmor_capable+0x12c/0x190 [ 1037.916992][T14506] ? bpf_lsm_capable+0x5/0x10 [ 1037.921743][T14506] ? security_capable+0x85/0xb0 [ 1037.926579][T14506] ? nldev_newlink+0x610/0x610 [ 1037.931332][T14506] rdma_nl_rcv+0x6e7/0xa20 [ 1037.935739][T14506] ? rdma_nl_net_init+0x190/0x190 [ 1037.940747][T14506] ? netlink_deliver_tap+0x2e/0x1b0 [ 1037.945927][T14506] ? __netlink_deliver_tap+0x92/0x7e0 [ 1037.951283][T14506] ? net_generic+0x1e/0x240 [ 1037.955766][T14506] ? netlink_deliver_tap+0x2e/0x1b0 [ 1037.960946][T14506] netlink_unicast+0x7ad/0x920 [ 1037.965719][T14506] netlink_sendmsg+0x8ad/0xbd0 [ 1037.970496][T14506] ? netlink_getsockopt+0x550/0x550 [ 1037.975679][T14506] ? aa_sock_msg_perm+0x94/0x150 [ 1037.980605][T14506] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1037.985871][T14506] ? security_socket_sendmsg+0x7c/0xa0 [ 1037.991337][T14506] ? netlink_getsockopt+0x550/0x550 [ 1037.996518][T14506] ____sys_sendmsg+0x5ed/0x9a0 [ 1038.001270][T14506] ? __sys_sendmsg_sock+0x30/0x30 [ 1038.006276][T14506] ? __import_iovec+0x306/0x510 [ 1038.011112][T14506] ? import_iovec+0x6f/0xa0 [ 1038.015618][T14506] ___sys_sendmsg+0x2a2/0x360 [ 1038.020304][T14506] ? __sys_sendmsg+0x2a0/0x2a0 [ 1038.025113][T14506] __se_sys_sendmsg+0x1c3/0x2b0 [ 1038.029960][T14506] ? __x64_sys_sendmsg+0x80/0x80 [ 1038.034894][T14506] ? lockdep_hardirqs_on+0x94/0x140 [ 1038.040080][T14506] do_syscall_64+0x4c/0xa0 [ 1038.044486][T14506] ? clear_bhb_loop+0x60/0xb0 [ 1038.049161][T14506] ? clear_bhb_loop+0x60/0xb0 [ 1038.053819][T14506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1038.059701][T14506] RIP: 0033:0x7f7d7059ce59 [ 1038.064099][T14506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.083707][T14506] RSP: 002b:00007f7d7152b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.092105][T14506] RAX: ffffffffffffffda RBX: 00007f7d70815fa0 RCX: 00007f7d7059ce59 [ 1038.100207][T14506] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1038.108175][T14506] RBP: 00007f7d70632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1038.116134][T14506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.124110][T14506] R13: 00007f7d70816038 R14: 00007f7d70815fa0 R15: 00007ffcbf5c4248 [ 1038.132076][T14506] [ 1038.135359][T14506] Kernel Offset: disabled [ 1038.139769][T14506] Rebooting in 86400 seconds..