last executing test programs: 12m20.094819859s ago: executing program 0 (id=61): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000200)=0xef, 0x4) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x5, 0x20000000, 0x8) recvmmsg(r1, &(0x7f0000006700), 0x0, 0x10162, 0x0) 12m15.220989489s ago: executing program 0 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 12m14.107983868s ago: executing program 0 (id=73): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) 12m13.748903716s ago: executing program 0 (id=77): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c3, &(0x7f0000000100)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40086602, 0x0) setns(r1, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 12m12.273107343s ago: executing program 0 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_gettime(r1, &(0x7f0000000000)) 12m11.384379995s ago: executing program 32 (id=85): personality(0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 12m9.96641571s ago: executing program 0 (id=94): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8949, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1, [0x0, 0x1ff]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x720, 0x1, 0x2, 0x40, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="11"], 0x14) 12m8.740218171s ago: executing program 33 (id=94): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8949, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1, [0x0, 0x1ff]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x720, 0x1, 0x2, 0x40, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="11"], 0x14) 9m50.823258591s ago: executing program 4 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$describe(0x6, 0x0, 0x0, 0xffffffffffffff87) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) close_range(r3, 0xffffffffffffffff, 0x0) 9m49.505955864s ago: executing program 4 (id=473): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0xa0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x705, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004091}, 0x0) 9m47.806993826s ago: executing program 4 (id=476): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x31, 0x83, 0x5}, {@rand_addr=0x64010100, 0x4e23, 0x1, 0xff, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x8, 0x5365}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffe00, 0x0, 0x3, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r0) process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/132, 0x84}, {&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/14, 0xe}], 0x4, &(0x7f0000000480)=[{&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/36, 0x24}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000440)}], 0x5, 0x0) 9m40.80256387s ago: executing program 4 (id=486): bpf$PROG_LOAD(0x5, 0x0, 0x0) stat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000003c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x8000) recvmsg(0xffffffffffffffff, 0x0, 0x12100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 9m37.5660817s ago: executing program 4 (id=490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x2000000, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPTPEER(r1, 0x5441, 0xa4) creat(&(0x7f0000000080)='./cgroup/../file0\x00', 0x11) 9m36.209677934s ago: executing program 4 (id=491): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000380)=""/244, 0xf4) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r6, 0x0) 9m20.465918905s ago: executing program 34 (id=491): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000380)=""/244, 0xf4) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r6, 0x0) 7m32.737895646s ago: executing program 7 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f0000000100)='\x01\x00', 0x40, 0x100, 0x0) mq_notify(r3, 0x0) mount(0x0, &(0x7f0000000080)='./trace\x00', 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) 7m31.886937037s ago: executing program 7 (id=714): fcntl$notify(0xffffffffffffffff, 0x402, 0x30) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 7m30.572410979s ago: executing program 7 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_dev$video4linux(0x0, 0x100000007, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3001, 0x101, 0x20000000, 0x400, 0x800}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 7m28.743876145s ago: executing program 7 (id=725): mkdir(&(0x7f0000000140)='./control\x00', 0x199) r0 = inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000922) 7m22.520253529s ago: executing program 7 (id=731): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x401, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r4, 0x5}, 0x0, &(0x7f00000008c0)="eb2bcb4403", 0x0) 7m20.350443413s ago: executing program 7 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1b0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x2000006, 0x10003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x4) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) 7m5.218711818s ago: executing program 35 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1b0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x2000006, 0x10003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x4) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) 3m15.758284933s ago: executing program 6 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0xfffffffe, 0x200000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x28, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0xffffff1e, 0x2, 0x1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x80000) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 3m13.85791163s ago: executing program 6 (id=1253): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0x4, {{0xa, 0x4004, 0x0, @mcast2, 0x9}}}, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x58}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0) 3m12.476644965s ago: executing program 6 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m7.175325747s ago: executing program 6 (id=1273): r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3m3.454792081s ago: executing program 6 (id=1267): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000008c0), 0x0, 0x12141, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000400)={0xfffffff8, {{0xa, 0x4e21, 0x9, @mcast1, 0x8}}, 0x0, 0x2, [{{0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0x100}}]}, 0x190) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2181) 3m2.204725402s ago: executing program 6 (id=1270): socket(0x10, 0x803, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, 0x0) 2m46.862803216s ago: executing program 36 (id=1270): socket(0x10, 0x803, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, 0x0) 1m26.298638271s ago: executing program 5 (id=1474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xc88, &(0x7f0000001c80)=ANY=[@ANYBLOB], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000180)=ANY=[@ANYRESDEC]) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xf) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1m25.11088699s ago: executing program 5 (id=1477): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 1m18.477283726s ago: executing program 5 (id=1485): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x32, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 1m18.120977065s ago: executing program 5 (id=1487): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m17.603536418s ago: executing program 5 (id=1499): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m16.782058728s ago: executing program 5 (id=1491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) inotify_init() 1m10.945158945s ago: executing program 8 (id=1510): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0x0, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d", 0x8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setreuid(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0xd, 0x7, 0x101c, 0x0, 0x5, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 1m9.53360594s ago: executing program 8 (id=1512): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000005580)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x0, 0x0, 0x260, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh={{0x30}, {0x1, 0x6, 0x4, 0x6, 0x3, 0x3000, 0x851}}, @common=@srh1={{0x90}, {0x33, 0x7, 0x6, 0x7, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 0x2000, 0x200}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @loopback, [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xff, 0xff], 'veth1_virt_wifi\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x3c, 0x8, 0x2, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x81, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x439b, 0x0, 0x78, 0x9}, &(0x7f0000000140)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f00000019c0)="ba", 0x10002, 0x4011, 0x0, 0x0) 1m7.167111079s ago: executing program 8 (id=1518): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m6.227259743s ago: executing program 8 (id=1523): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.686973191s ago: executing program 8 (id=1526): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x1e, 0xa, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) sendfile(r5, r5, 0x0, 0x200000) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') getdents64(r6, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x4044810) 1m1.002316143s ago: executing program 37 (id=1491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) inotify_init() 53.358362385s ago: executing program 8 (id=1544): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100, 0x4}}) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) 37.806573194s ago: executing program 38 (id=1544): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100, 0x4}}) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) 12.042136748s ago: executing program 1 (id=1614): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.936887951s ago: executing program 2 (id=1615): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x200800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) fsopen(&(0x7f0000000240)='debugfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 11.834460473s ago: executing program 1 (id=1616): ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000200)=0x1, 0x4) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) 9.310102796s ago: executing program 9 (id=1617): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x2, 0x24, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0x7, 0xb2, [@loopback]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000320, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 9.307626116s ago: executing program 1 (id=1618): epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) pipe(&(0x7f0000000500)) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0xa0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.026853414s ago: executing program 2 (id=1619): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) 8.995042044s ago: executing program 1 (id=1620): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e24, 0x8, @loopback, 0xfffffff9}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, @in={0x2, 0x4e21, @local}], 0x74) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r5, &(0x7f0000000400)='wwnn=0x3333333333333333,', 0x18) ptrace$peek(0x3, 0x0, &(0x7f0000000240)) 7.802142194s ago: executing program 2 (id=1621): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r5 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, 0x0, 0x0) sched_setattr(r0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 7.591814079s ago: executing program 1 (id=1623): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000005580)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x0, 0x0, 0x260, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh={{0x30}, {0x1, 0x6, 0x4, 0x6, 0x3, 0x3000, 0x851}}, @common=@srh1={{0x90}, {0x33, 0x7, 0x6, 0x7, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 0x2000, 0x200}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @loopback, [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xff, 0xff], 'veth1_virt_wifi\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x3c, 0x8, 0x2, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x81, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x439b, 0x0, 0x78, 0x9}, &(0x7f0000000140)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f00000019c0)="ba", 0x10002, 0x4011, 0x0, 0x0) 6.398508509s ago: executing program 3 (id=1624): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0xa, &(0x7f0000000180)={0x26, 0x6, 0x50}) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @short}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x21a302) 6.348801571s ago: executing program 2 (id=1625): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x80000001, 0x8001) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x800}, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) 5.369030655s ago: executing program 3 (id=1626): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close(0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 4.327219141s ago: executing program 3 (id=1627): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xaa, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7e37312f7eb8286ea199ecd22221ad7dade9e2b670d2dce18dd851fe6b48b3188c3764958b51a9aafc271972b28397406e611e1c0d1a8ecafe2e82d1df01e507e1c0c7f8093da6e376297d1c18eecdde56d5eb156d7ddf449d9e50010acfa620c4d7f6ee20c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x300001c) r2 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x208c}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f00000001c0)) 4.318225021s ago: executing program 2 (id=1628): mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x4, 0x3, 0x0, 0x7e34, 0xf, 0x0, {0x6, 0xfffffffffffffff7, 0x4b6, 0x1, 0x9, 0x1, 0x1, 0x200, 0x0, 0x6000, 0xf8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x20, 0xf, 0x37, {0x37, 0x4, "2f65e8e051e4a35f5325534d34b38137b79a937ce252c90504815b205c01dffb00b0c3767754c24ddedc62a1f56c55effc24e547a6"}}, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x3, 0x1, 0x407}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6c, 0xf, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0x3, 0x8, 0x160, 0x9}, @ptm_cap={0x3}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf5, 0xb, 0x6, 0x1, "ab03451d", "6ba21ef8"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x8, 0x6, 0x4, 0x6, 0x2, 0x9}}}, &(0x7f0000000900)={0x84, 0x0, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1260, 0x4}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xd}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "1b81"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "85f4"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x41}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x5}, 0x0}) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x40086603, &(0x7f0000000040)) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0x6, 0x3}}, 0x30) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x90, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.134504696s ago: executing program 3 (id=1629): fsopen(&(0x7f0000000300)='jfs\x00', 0x0) socket$packet(0x11, 0x3, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 3.060654723s ago: executing program 9 (id=1630): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000008c0), 0x0, 0x12141, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000400)={0xfffffff8, {{0xa, 0x4e21, 0x9, @mcast1, 0x8}}, 0x0, 0x2, [{{0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0x100}}]}, 0x190) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2181) 2.041808078s ago: executing program 9 (id=1631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f00000002c0), &(0x7f0000000380)=""/100}, 0x20) 1.468791452s ago: executing program 9 (id=1632): r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_dump={0x3e, 0x1ff, 0x7}}) connect$inet6(r4, 0x0, 0x0) mremap(&(0x7f00002ca000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f000080b000/0x3000)=nil) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) 1.146628771s ago: executing program 3 (id=1633): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d00000004004005040000000600000050010000", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 628.788493ms ago: executing program 2 (id=1634): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) syz_emit_ethernet(0x182, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x174, 0x1235, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x160, 0x0, @opaque='\x00'/344}}}}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 594.343925ms ago: executing program 9 (id=1635): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x40084) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)={0x40000001, 0x80000000, 0x0, 0x800000, 0x0, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000280)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x0, 0x3cb25d0cbbdd8513, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r2) socket(0x1, 0x4, 0x2003) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) symlinkat(&(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') 372.44878ms ago: executing program 3 (id=1636): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) 286.699382ms ago: executing program 9 (id=1637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0xb) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) epoll_create(0x2) read$FUSE(r5, &(0x7f0000002540)={0x2020}, 0xfffffecf) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 0s ago: executing program 1 (id=1638): setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='s', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x2, 0x805, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x80, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x211a9823, 0x9}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x9ced7000) kernel console output (not intermixed with test programs): 438][ T4603] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.746190][ T4643] device hsr_slave_0 entered promiscuous mode [ 103.794645][ T4643] device hsr_slave_1 entered promiscuous mode [ 103.862651][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.886378][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.888799][ T4782] loop4: detected capacity change from 0 to 2048 [ 103.915882][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.923048][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.944927][ T4782] UDF-fs: bad mount option "./proc/1/root/var/run" or missing value [ 104.108136][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.256757][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.400981][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.408137][ T4698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.621087][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.884093][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.938587][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 105.141943][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.168348][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.209433][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.220384][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.230071][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.242128][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.263494][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.281839][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.333851][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.351963][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.401218][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.227485][ T4819] netlink: 'syz.1.123': attribute type 2 has an invalid length. [ 107.249491][ T4643] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.271677][ T4643] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.320438][ T4643] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.353309][ T4643] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.519271][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 107.604204][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.711445][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.930830][ T4603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.892351][ T4643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.996780][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.019293][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.075889][ T4643] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.124390][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.173809][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.222062][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.229272][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.268446][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.493172][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.510828][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.552295][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.559475][ T4427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.606626][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.612351][ T4856] 9pnet_virtio: no channels available for device syz [ 110.637787][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.688783][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.720452][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.749338][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.779144][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.804594][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.832547][ T4858] netlink: 156 bytes leftover after parsing attributes in process `syz.4.129'. [ 110.842729][ T4643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.878012][ T4643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.937023][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.951265][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.971388][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.987781][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.997568][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.016992][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.039580][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.197537][ T4603] device veth0_vlan entered promiscuous mode [ 111.245723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.265379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.302770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.287036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.364908][ T4603] device veth1_vlan entered promiscuous mode [ 112.569875][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 112.609565][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.630199][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.660445][ T4603] device veth0_macvtap entered promiscuous mode [ 112.704607][ T4603] device veth1_macvtap entered promiscuous mode [ 112.755930][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.793416][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.853107][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.882324][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.057788][ T4643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.703980][ T4912] fuse: Bad value for 'fd' [ 114.759963][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.778852][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.798647][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.829056][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.192377][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.225084][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.239559][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.293932][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.328593][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.338451][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.385973][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.499016][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 116.528160][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.568314][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.601107][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 116.626418][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.219934][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.390245][ T4603] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.427012][ T4603] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.444957][ T4931] ip_tables: iptables: counters copy to user failed while replacing table [ 117.458182][ T4603] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.492631][ T4603] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.549198][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.604388][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.656808][ T4274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.766504][ T4274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.087223][ T4643] device veth0_vlan entered promiscuous mode [ 118.291901][ T4643] device veth1_vlan entered promiscuous mode [ 118.524939][ T4643] device veth0_macvtap entered promiscuous mode [ 118.649502][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.654389][ T4958] loop4: detected capacity change from 0 to 512 [ 118.667593][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.676823][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.686353][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.695010][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.709460][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.743578][ T4274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.818276][ T4958] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.866111][ T4643] device veth1_macvtap entered promiscuous mode [ 118.882806][ T4958] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.158931][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.188417][ T4958] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.211418][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.245957][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.257096][ T4958] EXT4-fs (loop4): 1 truncate cleaned up [ 119.270900][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 119.533387][ T4274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.368607][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.410001][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.432835][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.450112][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.460060][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.470561][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.482024][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.498203][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.508737][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.519114][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.531730][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.557904][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 120.596529][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.606542][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.621685][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.633592][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.642522][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.652313][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.668374][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.685023][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.551686][ T4643] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.561971][ T4643] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.571143][ T4643] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.580530][ T4643] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.833657][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 123.058944][ T435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.066884][ T435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.077490][ T4998] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 9 (only 8 groups) [ 123.094300][ T4999] loop1: detected capacity change from 0 to 1024 [ 123.126632][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.224522][ T4691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.276368][ T4691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.288062][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.645228][ T5009] hfsplus: extend alloc file! (16384,256,150995124) [ 124.311115][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.399008][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.469042][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.691265][ T5018] overlayfs: failed to clone upperpath [ 126.381188][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.428273][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.594125][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.888760][ T5053] device syzkaller0 entered promiscuous mode [ 127.898414][ T5053] tipc: Started in network mode [ 127.905888][ T5053] tipc: Node identity 7e1bbcfacfa4, cluster identity 4711 [ 127.914064][ T5053] tipc: Enabled bearer , priority 0 [ 127.946758][ T5052] tipc: Resetting bearer [ 128.044269][ T5052] tipc: Disabling bearer [ 128.399821][ T5074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.565663][ T5079] device syzkaller0 entered promiscuous mode [ 128.639450][ T5083] loop4: detected capacity change from 0 to 512 [ 128.777780][ T5083] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 128.799071][ T5083] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.942125][ T4274] device hsr_slave_0 left promiscuous mode [ 128.969007][ T4274] device hsr_slave_1 left promiscuous mode [ 129.007518][ T5096] xt_hashlimit: max too large, truncated to 1048576 [ 129.014926][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.044808][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.071503][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.099474][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.129451][ T4274] device bridge_slave_1 left promiscuous mode [ 129.135731][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.164754][ T4274] device bridge_slave_0 left promiscuous mode [ 129.187665][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.232549][ T4274] device veth1_macvtap left promiscuous mode [ 129.252265][ T4274] device veth0_macvtap left promiscuous mode [ 129.275719][ T4274] device veth1_vlan left promiscuous mode [ 129.286772][ T4274] device veth0_vlan left promiscuous mode [ 129.660953][ T4274] team0 (unregistering): Port device team_slave_1 removed [ 129.690749][ T4274] team0 (unregistering): Port device team_slave_0 removed [ 129.717129][ T4274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.749788][ T4274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.427414][ T4274] bond0 (unregistering): Released all slaves [ 132.203190][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 132.927766][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937085][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.145358][ T5175] MPTCP: addr_signal error, add_addr=1, echo=0 [ 135.149520][ T5180] loop5: detected capacity change from 0 to 16 [ 135.183272][ T5175] MPTCP: addr_signal error, rm_addr=1 [ 135.223075][ T5182] jffs2: notice: (5182) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.251685][ T5180] erofs: (device loop5): mounted with root inode @ nid 36. [ 135.534896][ T5187] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 137.113790][ T5207] device syzkaller0 entered promiscuous mode [ 137.542744][ T5219] overlayfs: missing 'lowerdir' [ 139.834329][ T5233] loop5: detected capacity change from 0 to 512 [ 140.595212][ T5233] EXT4-fs (loop5): inline encryption not supported [ 140.607724][ T5233] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.669875][ T5233] EXT4-fs (loop5): 1 truncate cleaned up [ 140.676808][ T5233] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 150.148535][ T5341] overlayfs: missing 'lowerdir' [ 156.213629][ T5378] md: could not open device unknown-block(7,0). [ 158.992207][ T5403] overlayfs: missing 'lowerdir' [ 159.713871][ T5414] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 159.814160][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.252'. [ 159.850849][ T26] audit: type=1804 audit(1788484298.706:2): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.256" name="bus" dev="ramfs" ino=37509 res=1 errno=0 [ 159.916763][ T5414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.004856][ T26] audit: type=1804 audit(1788484298.706:3): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.256" name="bus" dev="ramfs" ino=37509 res=1 errno=0 [ 160.998803][ T5433] device syzkaller0 entered promiscuous mode [ 162.554560][ T5447] loop4: detected capacity change from 0 to 4096 [ 164.011681][ T5477] loop6: detected capacity change from 0 to 512 [ 164.054515][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.085533][ T5447] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.093456][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.104866][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.114893][ T5468] device bridge_slave_0 left promiscuous mode [ 164.121253][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.132570][ T5468] device bridge_slave_1 left promiscuous mode [ 164.144395][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.205914][ T5468] bond0: (slave bond_slave_0): Releasing backup interface [ 164.241479][ T5477] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nombcache,minixdf,errors=remount-ro,min_batch_time=0x000000000000bbbd,. Quota mode: writeback. [ 164.266481][ T5477] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.644886][ T5468] bond0: (slave bond_slave_1): Releasing backup interface [ 165.793749][ T5468] team0: Port device team_slave_0 removed [ 165.864080][ T5468] team0: Port device team_slave_1 removed [ 165.889636][ T5468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.899593][ T5468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.955259][ T5468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.966781][ T5468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.357585][ T5468] syz.1.268 (5468) used greatest stack depth: 19664 bytes left [ 166.505924][ T5515] tipc: Enabling of bearer rejected, failed to enable media [ 166.714326][ T5514] device syzkaller0 entered promiscuous mode [ 167.069282][ T5541] netlink: 79 bytes leftover after parsing attributes in process `syz.4.283'. [ 167.105656][ T5548] loop1: detected capacity change from 0 to 512 [ 167.131955][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 167.167435][ T5548] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.209551][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 167.240403][ T5541] netlink: 'syz.4.283': attribute type 11 has an invalid length. [ 168.690650][ T5548] EXT4-fs (loop1): 1 truncate cleaned up [ 168.846821][ T5548] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 169.867488][ T26] audit: type=1800 audit(1788484308.716:4): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.284" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 170.697531][ T5573] loop4: detected capacity change from 0 to 1024 [ 171.609460][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.291'. [ 171.659096][ T5573] hfsplus: request for non-existent node 33423360 in B*Tree [ 171.674686][ T5573] hfsplus: request for non-existent node 33423360 in B*Tree [ 171.775719][ T5573] hfsplus: request for non-existent node 33423360 in B*Tree [ 171.818925][ T5573] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.432159][ T5573] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.769696][ T5573] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.829427][ T5573] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.859504][ T5573] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.940530][ T5599] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.947887][ T5599] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.962868][ T5607] MPTCP: kernel_bind error, err=-98 [ 173.216320][ T5607] MPTCP: addr_signal error, rm_addr=1 [ 173.271710][ T5573] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.600708][ T5573] hfsplus: request for non-existent node 33423360 in B*Tree [ 174.739930][ T5613] hfsplus: request for non-existent node 33423360 in B*Tree [ 174.778565][ T5613] hfsplus: request for non-existent node 33423360 in B*Tree [ 175.717904][ T26] audit: type=1800 audit(1788484314.566:5): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.301" name="addr_traddr" dev="configfs" ino=38021 res=0 errno=0 [ 175.804049][ T26] audit: type=1800 audit(1788484314.646:6): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.301" name="addr_trsvcid" dev="configfs" ino=38025 res=0 errno=0 [ 175.906224][ T26] audit: type=1800 audit(1788484314.646:7): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.301" name="addr_adrfam" dev="configfs" ino=38027 res=0 errno=0 [ 175.948305][ T5649] nvmet: transport type 0 not supported [ 176.003673][ T5654] nvme_fabrics: missing parameter 'nqn=%s' [ 177.798381][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 177.868184][ T5678] loop4: detected capacity change from 0 to 1024 [ 178.779038][ T5689] hfsplus: extend alloc file! (16384,256,150995124) [ 179.690635][ T1352] syzkaller0: tun_net_xmit 76 [ 179.695969][ T1352] syzkaller0: tun_net_xmit 48 [ 179.779938][ T5680] syzkaller0: create flow: hash 1702256343 index 0 [ 180.668965][ T13] syzkaller0: tun_net_xmit 76 [ 180.676598][ T4231] syzkaller0: tun_net_xmit 76 [ 181.658727][ T1352] syzkaller0: tun_net_xmit 76 [ 182.189556][ T5699] syzkaller0 (unregistered): delete flow: hash 1702256343 index 0 [ 182.889418][ T5721] tipc: Started in network mode [ 183.257898][ T5721] tipc: Node identity 0eee16fc13e2, cluster identity 4711 [ 183.265662][ T5721] tipc: Enabled bearer , priority 0 [ 183.290289][ T5724] device syzkaller0 entered promiscuous mode [ 183.402231][ T5721] tipc: Resetting bearer [ 183.433774][ T5719] tipc: Resetting bearer [ 183.485472][ T5719] tipc: Disabling bearer [ 183.729730][ T5743] device syzkaller0 entered promiscuous mode [ 184.095135][ T5756] netlink: 'syz.4.334': attribute type 2 has an invalid length. [ 185.776442][ T5764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.972230][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 187.522219][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 187.568601][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 187.774858][ T5788] device bond_slave_0 entered promiscuous mode [ 187.781487][ T5788] device bond_slave_1 entered promiscuous mode [ 187.952561][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.341'. [ 188.126452][ T5788] device bond_slave_0 left promiscuous mode [ 188.132649][ T5788] device bond_slave_1 left promiscuous mode [ 192.070023][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.351'. [ 194.350858][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.357535][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.880396][ T5886] futex_wake_op: syz.4.361 tries to shift op by 32; fix this program [ 195.292032][ T5911] overlayfs: failed to clone upperpath [ 196.837916][ T5927] device syzkaller0 entered promiscuous mode [ 196.925836][ T26] audit: type=1800 audit(1788484335.776:8): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.380" name="addr_traddr" dev="configfs" ino=38363 res=0 errno=0 [ 196.946253][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.135476][ T5930] nvmet: transport type 0 not supported [ 198.202131][ T5938] tipc: Enabling of bearer rejected, failed to enable media [ 198.458065][ T5957] loop4: detected capacity change from 0 to 512 [ 198.605216][ T5959] loop6: detected capacity change from 0 to 256 [ 198.867594][ T5959] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 198.961802][ T26] audit: type=1800 audit(1788484337.796:9): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.376" name="file1" dev="loop6" ino=1048604 res=0 errno=0 [ 199.387220][ T5957] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nombcache,minixdf,errors=remount-ro,min_batch_time=0x000000000000bbbd,. Quota mode: writeback. [ 199.527229][ T5957] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.089794][ C1] hrtimer: interrupt took 281627 ns [ 204.234548][ T6020] loop1: detected capacity change from 0 to 1024 [ 204.853453][ T6033] hfsplus: extend alloc file! (16384,256,150995124) [ 205.296901][ T6041] device syzkaller0 left promiscuous mode [ 205.593519][ T6039] netlink: 'syz.5.397': attribute type 4 has an invalid length. [ 208.421802][ T6095] loop4: detected capacity change from 0 to 32768 [ 208.627283][ T6110] netlink: 'syz.5.415': attribute type 14 has an invalid length. [ 208.636732][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.415'. [ 208.683470][ T6095] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 211.160214][ T6095] syz.4.411 (6095) used greatest stack depth: 18304 bytes left [ 212.469537][ T6135] loop1: detected capacity change from 0 to 512 [ 212.720766][ T6135] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nombcache,minixdf,errors=remount-ro,min_batch_time=0x000000000000bbbd,. Quota mode: writeback. [ 212.872994][ T6135] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.137802][ T6145] loop6: detected capacity change from 0 to 32768 [ 213.275122][ T6145] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 213.300666][ T6145] JBD2: Ignoring recovery information on journal [ 214.194432][ T6145] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 216.286993][ T4643] ocfs2: Unmounting device (7,6) on (node local) [ 217.244461][ T6187] tipc: Enabling of bearer rejected, failed to enable media [ 217.852869][ T6205] loop6: detected capacity change from 0 to 1024 [ 217.980353][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 218.277405][ T6211] hfsplus: extend alloc file! (16384,256,150995124) [ 218.927213][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 220.153131][ T6226] loop6: detected capacity change from 0 to 1024 [ 220.836075][ T6236] hfsplus: extend alloc file! (16384,256,150995124) [ 222.289545][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.444'. [ 222.446248][ T6249] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.456244][ T6249] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.465350][ T6249] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.474102][ T6249] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.530684][ T4465] Bluetooth: hci3: command 0x0406 tx timeout [ 222.620109][ T6257] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.732314][ T6249] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.743060][ T6249] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.753581][ T6249] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.763920][ T6249] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.294165][ T6265] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 223.348075][ T6265] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 224.587554][ T6282] loop1: detected capacity change from 0 to 16 [ 224.669801][ T6282] erofs: (device loop1): mounted with root inode @ nid 36. [ 224.683480][ T6282] attempt to access beyond end of device [ 224.683480][ T6282] loop1: rw=524288, want=32, limit=16 [ 224.716647][ T6282] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 224.733230][ T26] audit: type=1800 audit(1788484363.586:10): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.453" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 229.835614][ T6297] loop4: detected capacity change from 0 to 1024 [ 230.212349][ T6305] loop1: detected capacity change from 0 to 128 [ 230.668354][ T6311] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6311] [ 231.509002][ T6314] hfsplus: extend alloc file! (16384,256,150995124) [ 235.303841][ T6357] loop4: detected capacity change from 0 to 128 [ 235.510315][ T26] audit: type=1800 audit(1788484374.366:11): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.471" name="addr_traddr" dev="configfs" ino=40321 res=0 errno=0 [ 235.600074][ T6357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 235.624825][ T6357] System zones: 1-3, 19-19, 35-36 [ 235.662682][ T6357] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 235.676819][ T6357] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.781492][ T6349] nvmet: transport type 0 not supported [ 242.088373][ T6392] loop1: detected capacity change from 0 to 1024 [ 242.464549][ T6378] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 245.683220][ T6412] netem: change failed [ 246.931324][ T6415] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 248.202745][ T6415] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 253.024791][ T6463] loop1: detected capacity change from 0 to 1024 [ 253.584553][ T6476] hfsplus: extend alloc file! (16384,256,150995124) [ 257.328687][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.336362][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.211555][ T6525] netlink: 'syz.4.491': attribute type 10 has an invalid length. [ 264.235149][ T6525] team0: Port device macvlan1 added [ 266.343963][ T6546] dccp_v6_rcv: dropped packet with invalid checksum [ 267.169138][ T6563] overlayfs: failed to clone upperpath [ 267.304543][ T6564] loop1: detected capacity change from 0 to 512 [ 267.434448][ T6564] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 267.456770][ T6540] chnl_net:caif_netlink_parms(): no params data found [ 267.504511][ T6564] System zones: 1-12 [ 267.542950][ T6564] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.510: missing EA_INODE flag [ 267.635439][ T6564] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.510: error while reading EA inode 12 err=-117 [ 267.734252][ T6564] EXT4-fs (loop1): 1 orphan inode deleted [ 267.753693][ T6564] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 268.088556][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.104161][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 268.201670][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.285817][ T6540] device bridge_slave_0 entered promiscuous mode [ 268.320536][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.376980][ T6577] loop6: detected capacity change from 0 to 512 [ 268.405653][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.447494][ T6540] device bridge_slave_1 entered promiscuous mode [ 268.479410][ T6577] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 268.579004][ T6577] EXT4-fs (loop6): Unrecognized mount option "fscontext=system_u" or missing value [ 269.227851][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.308376][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.488536][ T6584] tipc: Enabling of bearer rejected, failed to enable media [ 270.427483][ T4231] Bluetooth: hci5: command 0x041b tx timeout [ 270.883965][ T6540] team0: Port device team_slave_0 added [ 270.936563][ T6540] team0: Port device team_slave_1 added [ 271.073780][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.112183][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.143205][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.673234][ T1352] Bluetooth: hci5: command 0x040f tx timeout [ 273.172369][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.183109][ T6628] jffs2: notice: (6628) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 273.248492][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.360660][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.572572][ T6540] device hsr_slave_0 entered promiscuous mode [ 274.720899][ T4231] Bluetooth: hci5: command 0x0419 tx timeout [ 274.782308][ T6540] device hsr_slave_1 entered promiscuous mode [ 274.833986][ T6540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.848732][ T6540] Cannot create hsr debugfs directory [ 277.041867][ T6649] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.052704][ T6649] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.063095][ T6649] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.073600][ T6649] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.255794][ T6649] team0: Port device vxlan0 added [ 277.281756][ T6665] device syzkaller0 entered promiscuous mode [ 277.315307][ T6540] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 277.411812][ T6540] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 277.458681][ T6540] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 277.530241][ T6540] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 277.970236][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.997916][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 278.037148][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.049060][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.081298][ T6540] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.143315][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.159300][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.174098][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.181443][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.221523][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.772743][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.572510][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.651511][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.658683][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.670700][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.691786][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.701600][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.713422][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.724707][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.733980][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.743141][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.762179][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.959234][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.190441][ T6704] xt_HMARK: spi-set and port-set can't be combined [ 280.668098][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.692011][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.017738][ T6712] netlink: 72 bytes leftover after parsing attributes in process `syz.1.547'. [ 282.282035][ T6728] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 284.700827][ T6748] mmap: syz.3.555 (6748) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 284.747585][ T6742] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 284.788158][ T6752] jffs2: notice: (6752) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 285.033313][ T6759] device syzkaller0 entered promiscuous mode [ 285.215977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.238869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.342146][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.615652][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.653954][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.424684][ T6540] device veth0_vlan entered promiscuous mode [ 287.751296][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.832395][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.911864][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.949115][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.967338][ T6811] device syzkaller0 entered promiscuous mode [ 287.990947][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.565'. [ 288.030669][ T6818] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 288.050048][ T6540] device veth1_vlan entered promiscuous mode [ 288.314136][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.337665][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.500651][ T6540] device veth0_macvtap entered promiscuous mode [ 288.510763][ T6540] device veth1_macvtap entered promiscuous mode [ 288.528572][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.539621][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.551446][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.565185][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.579253][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.633306][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.647134][ T6826] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 288.672265][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.716413][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.759290][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.857272][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 288.895715][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.930628][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.962541][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.975458][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.997716][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.035865][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.068334][ T6540] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.086803][ T6540] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.121774][ T6540] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.242535][ T6540] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.291886][ T6828] device syzkaller0 entered promiscuous mode [ 289.355795][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.380983][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.506307][ T6854] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4603] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6854] [ 290.547135][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.591418][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.652719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 290.722954][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.741840][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.767865][ T6861] device syzkaller0 entered promiscuous mode [ 290.788935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.791242][ C1] Unknown status report in ack skb [ 292.913158][ T6897] loop6: detected capacity change from 0 to 512 [ 293.031128][ T6897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 293.141693][ T6897] System zones: 1-12 [ 293.160662][ T6897] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.582: missing EA_INODE flag [ 293.200759][ T6897] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.582: error while reading EA inode 12 err=-117 [ 293.211979][ T6900] loop1: detected capacity change from 0 to 1024 [ 293.323105][ T6897] EXT4-fs (loop6): 1 orphan inode deleted [ 293.361377][ T6897] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 295.645514][ T6923] hfsplus: extend alloc file! (16384,256,150995124) [ 297.736815][ T6939] jffs2: notice: (6939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 297.775761][ T6939] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.784561][ T6939] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 297.834188][ T6939] loop1: detected capacity change from 0 to 1024 [ 299.521206][ T6939] hfsplus: unable to load nls mapping "cp43" [ 299.527645][ T6939] hfsplus: unable to parse mount options [ 299.675816][ T6948] loop6: detected capacity change from 0 to 128 [ 300.122562][ T6950] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4643] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6950] [ 301.836636][ T6969] dccp_v6_rcv: dropped packet with invalid checksum [ 303.587901][ T6980] loop7: detected capacity change from 0 to 128 [ 304.196359][ T6980] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 304.647765][ T4691] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 304.918375][ T6984] loop7: detected capacity change from 0 to 1024 [ 305.286775][ T6986] hfsplus: extend alloc file! (16384,256,150995124) [ 308.782285][ T6998] device macvlan0 entered promiscuous mode [ 315.542080][ T7073] loop1: detected capacity change from 0 to 1024 [ 315.577497][ T7073] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 315.589240][ T7073] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 315.605873][ T7073] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.616: unexpected bad inode w/o EXT4_IGET_BAD [ 315.624852][ T7073] EXT4-fs (loop1): no journal found [ 317.670931][ T4261] Bluetooth: hci5: command 0x0405 tx timeout [ 318.670612][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.676955][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.486485][ T7095] device syzkaller0 entered promiscuous mode [ 319.530803][ T7097] device syzkaller0 entered promiscuous mode [ 321.766746][ T7119] loop1: detected capacity change from 0 to 8 [ 322.901801][ T7133] futex_wake_op: syz.3.630 tries to shift op by 32; fix this program [ 326.201959][ T26] audit: type=1800 audit(2000000019.930:12): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.636" name="addr_traddr" dev="configfs" ino=43520 res=0 errno=0 [ 326.318540][ T26] audit: type=1800 audit(2000000019.970:13): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.636" name="addr_trsvcid" dev="configfs" ino=43521 res=0 errno=0 [ 326.485490][ T7183] nvmet: transport type 0 not supported [ 326.519846][ T26] audit: type=1800 audit(2000000019.980:14): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.636" name="addr_adrfam" dev="configfs" ino=43523 res=0 errno=0 [ 326.578086][ T7187] nvme_fabrics: missing parameter 'nqn=%s' [ 326.725650][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 333.257892][ T7239] tipc: Started in network mode [ 333.307916][ T7239] tipc: Node identity dead5d54e79e, cluster identity 4711 [ 333.352123][ T7239] tipc: Enabled bearer , priority 0 [ 333.410931][ T7244] device syzkaller0 entered promiscuous mode [ 333.547047][ T7239] tipc: Resetting bearer [ 333.733403][ T7234] tipc: Resetting bearer [ 333.807471][ T7234] tipc: Disabling bearer [ 337.947213][ T7301] capability: warning: `syz.1.650' uses 32-bit capabilities (legacy support in use) [ 339.591321][ T7320] device syzkaller0 entered promiscuous mode [ 354.282357][ T7403] loop6: detected capacity change from 0 to 512 [ 354.384861][ T7403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 354.430227][ T7406] device syzkaller0 entered promiscuous mode [ 354.487741][ T7403] System zones: 1-12 [ 354.809182][ T7403] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.682: missing EA_INODE flag [ 354.921595][ T7430] netlink: 'syz.7.685': attribute type 10 has an invalid length. [ 356.011936][ T7431] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 356.081567][ T7430] team0: Device veth1_vlan failed to register rx_handler [ 356.360148][ T7403] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.682: error while reading EA inode 12 err=-117 [ 356.474609][ T7403] EXT4-fs (loop6): 1 orphan inode deleted [ 356.517102][ T7403] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 359.635240][ T7452] device bridge_slave_0 left promiscuous mode [ 359.708706][ T7452] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.063528][ T7471] loop7: detected capacity change from 0 to 4096 [ 360.082041][ T7477] jffs2: notice: (7477) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 360.489460][ T7471] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 360.620277][ T7452] device bridge_slave_1 left promiscuous mode [ 360.627766][ T7452] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.736943][ T7452] bond0: (slave bond_slave_0): Releasing backup interface [ 360.784845][ T7452] bond0: (slave bond_slave_1): Releasing backup interface [ 360.823481][ T7452] team0: Port device team_slave_0 removed [ 360.858005][ T7452] team0: Port device team_slave_1 removed [ 360.875147][ T7452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.884697][ T7452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.896058][ T7452] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 360.904445][ T7452] batman_adv: batadv0: Removing interface: ipvlan2 [ 361.561659][ T7486] ntfs3: loop7: failed to convert "0000" to iso8859-2 [ 361.573828][ T7486] ntfs3: loop7: failed to convert name for inode 1e. [ 361.788175][ T7490] loop1: detected capacity change from 0 to 512 [ 362.023970][ T7490] EXT4-fs (loop1): Test dummy encryption mode enabled [ 362.053917][ T7490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 362.401891][ T7490] EXT4-fs (loop1): 1 truncate cleaned up [ 362.948508][ T7490] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 368.910499][ T7532] loop1: detected capacity change from 0 to 1024 [ 372.328991][ T7542] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.712'. [ 372.880708][ T7555] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 373.198510][ T7548] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 373.226484][ T7548] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 373.289294][ T7546] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 373.359184][ T7546] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 373.593410][ T7568] netlink: 'syz.3.716': attribute type 4 has an invalid length. [ 375.149623][ T7583] netlink: 64 bytes leftover after parsing attributes in process `syz.5.719'. [ 375.216925][ T7569] device syzkaller0 entered promiscuous mode [ 375.942106][ T7598] jffs2: notice: (7598) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 378.622543][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.628956][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.343398][ T7624] loop7: detected capacity change from 0 to 512 [ 382.434431][ T7626] loop1: detected capacity change from 0 to 512 [ 382.512739][ T7629] loop6: detected capacity change from 0 to 512 [ 382.587918][ T7624] EXT4-fs (loop7): Unrecognized mount option "data=writeback.journal_async_commit" or missing value [ 382.611632][ T7633] tipc: Enabling of bearer rejected, failed to enable media [ 382.648736][ T7629] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 382.714073][ T7626] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.733: iget: bad i_size value: 38620345925642 [ 382.725247][ T7629] EXT4-fs (loop6): 1 truncate cleaned up [ 382.745109][ T7626] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.733: couldn't read orphan inode 15 (err -117) [ 382.755704][ T7629] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,quota,lazytime,errors=remount-ro,quota,quota,. Quota mode: writeback. [ 382.782654][ T7626] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 384.147211][ T7649] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.733: bg 0: block 5: invalid block bitmap [ 384.229997][ T7649] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 384.366812][ T7649] EXT4-fs (loop1): This should not happen!! Data will be lost [ 384.366812][ T7649] [ 385.808853][ T7649] EXT4-fs (loop1): Total free blocks count 0 [ 387.198539][ T7649] EXT4-fs (loop1): Free/Dirty block details [ 387.204707][ T7649] EXT4-fs (loop1): free_blocks=0 [ 387.277555][ T7649] EXT4-fs (loop1): dirty_blocks=8 [ 387.298446][ T7649] EXT4-fs (loop1): Block reservation details [ 387.513128][ T7649] EXT4-fs (loop1): i_reserved_data_blocks=8 [ 387.644802][ T7678] netlink: 48 bytes leftover after parsing attributes in process `syz.6.739'. [ 390.938698][ T4463] Bluetooth: hci5: command 0x0406 tx timeout [ 397.031866][ T7715] binder: BINDER_SET_CONTEXT_MGR already set [ 397.629798][ T7715] binder: 7713:7715 ioctl 4018620d 200000004a80 returned -16 [ 398.012995][ T26] audit: type=1326 audit(2000000091.740:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.5.749" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4633d9159 code=0x0 [ 401.371650][ T7766] syz.3.756 uses obsolete (PF_INET,SOCK_PACKET) [ 401.646304][ T7772] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4643] was attempted by "\x09 \x0a ./binderfs/binder0"[7772] [ 402.097690][ T7771] md/raid10:md0: not clean -- starting background reconstruction [ 402.153213][ T7771] md/raid10:md0: active with 1 out of 2 devices [ 402.221393][ T7771] md0: detected capacity change from 0 to 2048 [ 402.314312][ T7787] md: resync of RAID array md0 [ 402.365505][ T7787] md: md0: resync done. [ 403.964641][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 404.291602][ T7774] chnl_net:caif_netlink_parms(): no params data found [ 405.363256][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.429015][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.559493][ T7817] loop6: detected capacity change from 0 to 1024 [ 405.590954][ T7774] device bridge_slave_0 entered promiscuous mode [ 405.769311][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.776549][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.786744][ T7774] device bridge_slave_1 entered promiscuous mode [ 405.874082][ T7817] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 406.106291][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 406.938327][ T7817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c018, mo2=0102] [ 406.966433][ T7817] System zones: 0-1, 3-12 [ 406.990363][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.104454][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.205856][ T7817] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,nodelalloc,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 407.255489][ T7774] team0: Port device team_slave_0 added [ 407.837800][ T7774] team0: Port device team_slave_1 added [ 408.280817][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 409.161620][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.528575][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.639302][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 411.369778][ T7866] loop6: detected capacity change from 0 to 1024 [ 411.450978][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.660387][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.668606][ T7866] hfsplus: extend alloc file! (16384,256,150995124) [ 412.077874][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.785686][ T7874] ODEBUG: Out of memory. ODEBUG disabled [ 415.161600][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.113629][ T7774] device hsr_slave_0 entered promiscuous mode [ 416.274678][ T7774] device hsr_slave_1 entered promiscuous mode [ 416.310228][ T7774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.317930][ T7774] Cannot create hsr debugfs directory [ 416.323285][ T7899] loop1: detected capacity change from 0 to 512 [ 416.378225][ T435] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.429040][ T7899] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 416.571608][ T7899] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 416.593014][ T435] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.683923][ T7899] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.715240][ T435] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.647786][ T435] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.008274][ T435] tipc: Left network mode [ 421.676968][ T7936] tc action pedit offset must be on 32 bit boundaries [ 421.684277][ T7936] tc action pedit offset must be on 32 bit boundaries [ 421.691123][ T7936] tc action pedit offset must be on 32 bit boundaries [ 421.697900][ T7936] tc action pedit offset must be on 32 bit boundaries [ 421.704734][ T7936] tc action pedit offset must be on 32 bit boundaries [ 421.711528][ T7936] tc action pedit offset must be on 32 bit boundaries [ 421.718301][ T7936] tc action pedit offset must be on 32 bit boundaries [ 421.725110][ T7936] tc action pedit offset must be on 32 bit boundaries [ 421.731934][ T7936] tc action pedit offset must be on 32 bit boundaries [ 421.738745][ T7936] tc action pedit offset must be on 32 bit boundaries [ 421.745555][ T7936] 0: reclassify loop, rule prio 0, protocol 800 [ 421.789507][ T7774] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 421.851344][ T7774] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 421.944338][ T7774] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 422.020544][ T7774] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 422.545362][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.373471][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 426.429374][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 426.527454][ T7774] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.566241][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 426.606646][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 426.666167][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.673337][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.789047][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 426.948614][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 426.967836][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.019974][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.028032][ T4698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.080000][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.106321][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 427.134726][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 427.166552][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 427.192786][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 427.324307][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 427.369828][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 427.409175][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 427.458976][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.482938][ T7968] loop6: detected capacity change from 0 to 1024 [ 427.554799][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 427.569093][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 427.625182][ T7774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 427.672473][ T7979] loop1: detected capacity change from 0 to 1024 [ 427.964760][ T7979] hfsplus: extend alloc file! (16384,256,150995124) [ 428.189681][ T7988] hfsplus: extend alloc file! (16384,256,150995124) [ 428.293424][ T435] device hsr_slave_0 left promiscuous mode [ 428.342102][ T435] device hsr_slave_1 left promiscuous mode [ 428.451876][ T435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.479940][ T435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.516913][ T435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.589627][ T435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.619009][ T435] device bridge_slave_1 left promiscuous mode [ 428.648620][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.679616][ T435] device bridge_slave_0 left promiscuous mode [ 428.696687][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.449611][ T435] device veth1_macvtap left promiscuous mode [ 431.456557][ T435] device veth0_macvtap left promiscuous mode [ 431.539363][ T435] device veth0_vlan left promiscuous mode [ 434.237713][ T8023] loop1: detected capacity change from 0 to 2048 [ 434.343646][ T8023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.690245][ T435] team0 (unregistering): Port device team_slave_1 removed [ 436.775827][ T435] team0 (unregistering): Port device team_slave_0 removed [ 436.855543][ T435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.908673][ T435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.550810][ T435] bond0 (unregistering): Released all slaves [ 440.063188][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.071700][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.812807][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.841123][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.892615][ T7774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.200914][ T8113] netlink: 20 bytes leftover after parsing attributes in process `syz.6.832'. [ 445.306299][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 445.319789][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.384695][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.403591][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.489463][ T7774] device veth0_vlan entered promiscuous mode [ 445.498726][ T8113] netlink: 20 bytes leftover after parsing attributes in process `syz.6.832'. [ 445.585861][ T7774] device veth1_vlan entered promiscuous mode [ 445.833362][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.875194][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.137501][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.748619][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.798044][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.894031][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.939628][ T7774] device veth0_macvtap entered promiscuous mode [ 446.976831][ T7774] device veth1_macvtap entered promiscuous mode [ 447.114767][ T8132] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.124907][ T8132] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.134791][ T8132] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.144814][ T8132] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.402603][ T7774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.445028][ T7774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.519808][ T7774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.591422][ T7774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.639211][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.868912][ T8142] device syzkaller0 entered promiscuous mode [ 447.881990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.905289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 448.026252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.073110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.122497][ T7774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.161702][ T7774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.217110][ T7774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.273905][ T7774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.335450][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.402297][ T7774] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.452241][ T7774] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.500038][ T7774] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.548452][ T7774] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.898566][ T4671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.906431][ T4671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.174928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.194151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.232022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 449.569802][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.586124][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.666664][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 450.212838][ T8170] loop8: detected capacity change from 0 to 32768 [ 454.466772][ T8170] XFS (loop8): Mounting V5 Filesystem [ 454.536548][ T8170] XFS (loop8): log mount failed [ 456.344648][ T8217] device syzkaller0 entered promiscuous mode [ 456.477844][ T8217] tipc: Enabled bearer , priority 0 [ 456.564064][ T8217] tipc: Resetting bearer [ 456.660911][ T8214] tipc: Resetting bearer [ 456.741734][ T8214] tipc: Disabling bearer [ 460.413287][ T1108] tipc: Node number set to 487331580 [ 460.447072][ T8250] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 467.227580][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 467.405170][ T8319] loop8: detected capacity change from 0 to 128 [ 467.464619][ T8319] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 467.632068][ T8319] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 470.318518][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.8.876'. [ 475.470169][ T4233] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 476.008685][ T4233] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 476.708498][ T4233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.210109][ T4233] usb 9-1: Product: syz [ 477.214435][ T4233] usb 9-1: Manufacturer: syz [ 477.220060][ T4233] usb 9-1: SerialNumber: syz [ 477.240891][ T4233] usb 9-1: config 0 descriptor?? [ 478.479515][ T4233] usb 9-1: can't set config #0, error -71 [ 478.681839][ T4233] usb 9-1: USB disconnect, device number 2 [ 480.223833][ T8429] loop6: detected capacity change from 0 to 8 [ 481.209237][ T8430] kAFS: No cell specified [ 481.509885][ C0] Unknown status report in ack skb [ 482.633292][ T8454] loop6: detected capacity change from 0 to 512 [ 483.387873][ T8454] EXT4-fs (loop6): inline encryption not supported [ 483.418706][ T8454] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 483.518291][ T8454] EXT4-fs (loop6): 1 truncate cleaned up [ 483.525199][ T8454] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 484.279189][ T8473] Cannot find add_set index 4 as target [ 487.599066][ T8513] loop1: detected capacity change from 0 to 512 [ 488.746224][ T8519] CacheFiles: No cache directory specified [ 491.478607][ T8513] EXT4-fs: error -4 creating inode table initialization thread [ 491.524377][ T8513] EXT4-fs (loop1): mount failed [ 491.651282][ T8526] device syzkaller0 entered promiscuous mode [ 491.727090][ T8529] tipc: Started in network mode [ 491.764247][ T8529] tipc: Node identity c67dc8903bc9, cluster identity 4711 [ 491.803562][ T8533] jffs2: notice: (8533) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 491.842463][ T8533] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 491.851353][ T8533] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 491.852258][ T8529] tipc: Enabled bearer , priority 0 [ 491.886735][ T8533] loop8: detected capacity change from 0 to 1024 [ 492.252933][ T8547] SET target dimension over the limit! [ 493.464917][ T8526] tipc: Resetting bearer [ 493.601848][ T8533] hfsplus: unable to load nls mapping "cp43" [ 493.607900][ T8533] hfsplus: unable to parse mount options [ 493.619217][ T8524] tipc: Resetting bearer [ 493.867010][ T8524] tipc: Disabling bearer [ 493.948511][ T8367] tipc: Node number set to 4256483472 [ 494.892311][ T8558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.978222][ T8558] team0: Failed to send options change via netlink (err -105) [ 494.991635][ T8558] team0: Port device bond1 added [ 495.079248][ T4671] team0: Failed to send port change of device bond1 via netlink (err -105) [ 497.187702][ T4202] Bluetooth: Wrong link type (-22) [ 497.407656][ T4462] libceph: connect (2)0.0.0.0:6789 error -22 [ 497.408647][ T8617] netlink: 64 bytes leftover after parsing attributes in process `syz.3.941'. [ 497.417413][ T4462] libceph: ceph_tcp_connect failed: -22 [ 497.425436][ T8624] netlink: 64 bytes leftover after parsing attributes in process `syz.6.943'. [ 497.430134][ T4462] libceph: mon0 (2)0.0.0.0:6789 connect error [ 497.455076][ T4462] libceph: connect (2)0.0.0.0:6789 error -22 [ 497.462182][ T4462] libceph: ceph_tcp_connect failed: -22 [ 497.468509][ T4462] libceph: mon0 (2)0.0.0.0:6789 connect error [ 497.589675][ T8624] siw: device registration error -23 [ 497.740287][ T4462] libceph: connect (2)0.0.0.0:6789 error -22 [ 497.747069][ T4462] libceph: ceph_tcp_connect failed: -22 [ 497.779152][ T4462] libceph: mon0 (2)0.0.0.0:6789 connect error [ 498.322603][ T4462] libceph: connect (2)0.0.0.0:6789 error -22 [ 498.890906][ T8609] ceph: No mds server is up or the cluster is laggy [ 498.979841][ T4462] libceph: ceph_tcp_connect failed: -22 [ 498.986235][ T4462] libceph: mon0 (2)0.0.0.0:6789 connect error [ 499.062896][ T8645] loop1: detected capacity change from 0 to 256 [ 499.144338][ T8645] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 499.853953][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz.6.949'. [ 501.509156][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.534573][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.228248][ T8742] loop8: detected capacity change from 0 to 32768 [ 507.505514][ T8742] XFS (loop8): Mounting V5 Filesystem [ 507.968200][ T8742] XFS (loop8): Ending clean mount [ 507.982801][ T8760] TCP: TCP_TX_DELAY enabled [ 507.987720][ T8742] XFS (loop8): Quotacheck needed: Please wait. [ 508.172715][ T8742] XFS (loop8): Quotacheck: Done. [ 509.005125][ T7774] XFS (loop8): Unmounting Filesystem [ 510.186973][ T8778] loop6: detected capacity change from 0 to 1024 [ 513.042100][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 513.573612][ T8825] netlink: 24 bytes leftover after parsing attributes in process `syz.5.986'. [ 514.826434][ T8843] ksmbd: Unknown IPC event: 10, ignore. [ 515.838910][ T8856] netlink: 'syz.5.997': attribute type 1 has an invalid length. [ 515.851680][ T8856] netlink: 'syz.5.997': attribute type 2 has an invalid length. [ 518.988153][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.998'. [ 519.032424][ T8867] device bridge_slave_1 left promiscuous mode [ 519.079882][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.318937][ T8867] device bridge_slave_0 left promiscuous mode [ 519.326239][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.362982][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 519.964549][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 520.486253][ T8892] loop8: detected capacity change from 0 to 1024 [ 521.498069][ T4671] hfsplus: b-tree write err: -5, ino 3 [ 522.441487][ T8914] CIFS: Attempting to mount \\127.0.0.1\share [ 522.483393][ T8914] CIFS: VFS: No username specified [ 524.792500][ T4463] Bluetooth: hci4: command 0x0406 tx timeout [ 530.101516][ T8965] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1011'. [ 530.134435][ T8965] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1011'. [ 530.151186][ T8981] xt_cgroup: path and classid specified [ 530.476412][ T8987] batman_adv: batadv0: Adding interface: veth0 [ 530.496029][ T8987] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.612995][ T8987] batman_adv: batadv0: Interface activated: veth0 [ 531.532737][ T8993] loop6: detected capacity change from 0 to 1024 [ 532.255917][ T9007] UBIFS error (pid: 9007): cannot open "(null)", error -22 [ 533.371680][ T8993] hfsplus: extend alloc file! (16384,256,150995124) [ 533.954812][ T9014] loop8: detected capacity change from 0 to 128 [ 534.651052][ T9014] attempt to access beyond end of device [ 534.651052][ T9014] loop8: rw=2049, want=449, limit=128 [ 534.743872][ T9014] attempt to access beyond end of device [ 534.743872][ T9014] loop8: rw=524288, want=369, limit=128 [ 534.838853][ T9014] attempt to access beyond end of device [ 534.838853][ T9014] loop8: rw=0, want=153, limit=128 [ 534.901837][ T9014] attempt to access beyond end of device [ 534.901837][ T9014] loop8: rw=0, want=153, limit=128 [ 535.016179][ T9024] attempt to access beyond end of device [ 535.016179][ T9024] loop8: rw=0, want=151, limit=128 [ 538.514453][ T9094] loop6: detected capacity change from 0 to 1024 [ 539.988604][ T4233] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 540.278460][ T4233] usb 9-1: Using ep0 maxpacket: 16 [ 540.408690][ T4233] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.438608][ T4233] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 540.699182][ T4233] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 540.767815][ T4233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.802803][ T9125] hfsplus: extend alloc file! (16384,256,150995124) [ 540.903313][ T4233] usb 9-1: Product: syz [ 540.948332][ T4233] usb 9-1: Manufacturer: syz [ 540.952982][ T4233] usb 9-1: SerialNumber: syz [ 541.368555][ T4233] usb 9-1: 0:2 : does not exist [ 541.553552][ T4233] usb 9-1: USB disconnect, device number 3 [ 542.588651][ T9152] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 545.613424][ T9167] set match dimension is over the limit! [ 548.380144][ T9200] device syzkaller0 entered promiscuous mode [ 551.258986][ T9225] tipc: Enabled bearer , priority 0 [ 551.299835][ T9225] device syzkaller0 entered promiscuous mode [ 551.512987][ T9224] tipc: Resetting bearer [ 552.141973][ T9224] tipc: Disabling bearer [ 554.085634][ T9256] gre0: MTU too low for tipc bearer [ 554.090970][ T9256] tipc: Enabling of bearer rejected, failed to enable media [ 562.953332][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.960601][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.025977][ T9380] loop8: detected capacity change from 0 to 1024 [ 564.532083][ T9389] hfsplus: extend alloc file! (16384,256,150995124) [ 565.394751][ T9388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'. [ 565.830428][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 566.053933][ T9409] loop6: detected capacity change from 0 to 1024 [ 566.226947][ T9409] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 566.237468][ T9409] EXT4-fs (loop6): orphan cleanup on readonly fs [ 566.256831][ T9409] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.1115: Invalid inode table block 0 in block_group 0 [ 566.277799][ T9409] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 566.293397][ T9409] EXT4-fs error (device loop6): ext4_quota_write:6648: inode #3: comm syz.6.1115: mark_inode_dirty error [ 566.307453][ T9409] Quota error (device loop6): write_blk: dquota write failed [ 566.316118][ T9409] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 566.327278][ T9409] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.1115: Failed to acquire dquot type 0 [ 566.341066][ T9409] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.1115: Invalid inode table block 0 in block_group 0 [ 566.363601][ T9409] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 566.377004][ T9409] EXT4-fs error (device loop6): ext4_ext_truncate:4487: inode #15: comm syz.6.1115: mark_inode_dirty error [ 566.390797][ T9409] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.1115: Invalid inode table block 0 in block_group 0 [ 566.411278][ T9409] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 566.425098][ T9409] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 566.435481][ T9409] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.1115: Invalid inode table block 0 in block_group 0 [ 566.451614][ T9409] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 566.464616][ T9409] EXT4-fs error (device loop6): ext4_truncate:4286: inode #15: comm syz.6.1115: mark_inode_dirty error [ 566.478164][ T9409] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 566.489173][ T9409] EXT4-fs (loop6): 1 truncate cleaned up [ 566.510858][ T9409] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 571.578155][ T9459] loop6: detected capacity change from 0 to 64 [ 579.627267][ T9523] loop8: detected capacity change from 0 to 1024 [ 580.049143][ T9531] hfsplus: extend alloc file! (16384,256,150995124) [ 584.235767][ T9575] loop8: detected capacity change from 0 to 256 [ 584.866013][ T9575] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 584.955228][ T26] audit: type=1800 audit(2000000278.680:16): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1150" name="file1" dev="loop8" ino=1048627 res=0 errno=0 [ 584.994467][ T9574] attempt to access beyond end of device [ 584.994467][ T9574] loop8: rw=0, want=304, limit=256 [ 586.685353][ T9599] loop6: detected capacity change from 0 to 256 [ 588.378148][ T9599] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 593.504441][ T9646] kAFS: No cell specified [ 593.789854][ T9647] loop8: detected capacity change from 0 to 1024 [ 594.652125][ T9647] hfsplus: extend alloc file! (16384,256,150995124) [ 598.019946][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1184'. [ 599.061463][ T9683] tipc: Enabled bearer , priority 10 [ 599.889473][ T9699] ip_tables: iptables: counters copy to user failed while replacing table [ 599.908190][ T9698] loop6: detected capacity change from 0 to 1024 [ 599.942528][ T9699] netlink: 'syz.1.1191': attribute type 4 has an invalid length. [ 599.974372][ T9699] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1191'. [ 600.023508][ T9699] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 600.429186][ T9698] hfsplus: extend alloc file! (16384,256,150995124) [ 601.194939][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1194'. [ 603.869188][ T9737] loop6: detected capacity change from 0 to 256 [ 605.033769][ T9737] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 605.115931][ T26] audit: type=1800 audit(2000000298.840:17): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1200" name="file1" dev="loop6" ino=1048629 res=0 errno=0 [ 605.140860][ T9734] attempt to access beyond end of device [ 605.140860][ T9734] loop6: rw=0, want=304, limit=256 [ 606.421945][ T9747] loop8: detected capacity change from 0 to 1024 [ 606.791084][ T9758] hfsplus: extend alloc file! (16384,256,150995124) [ 615.182579][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 615.194255][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 615.258242][ T9823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.989915][ T9837] ceph: No mds server is up or the cluster is laggy [ 617.697493][ T4465] libceph: connect (1)[c::]:6789 error -101 [ 618.740359][ T4465] libceph: mon0 (1)[c::]:6789 connect error [ 618.878870][ T9845] capability: warning: `syz.1.1227' uses deprecated v2 capabilities in a way that may be insecure [ 619.080211][ T4463] libceph: connect (1)[c::]:6789 error -101 [ 619.097183][ T4463] libceph: mon0 (1)[c::]:6789 connect error [ 619.988101][ T9863] loop6: detected capacity change from 0 to 128 [ 620.307083][ T9851] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 620.315175][ T4465] libceph: connect (1)[c::]:6789 error -101 [ 620.315238][ T9851] device veth1_vlan left promiscuous mode [ 620.330452][ T9851] team0: Device veth1_vlan failed to register rx_handler [ 620.351711][ T4465] libceph: mon0 (1)[c::]:6789 connect error [ 620.406608][ T9867] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4643] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9867] [ 622.861851][ T4463] libceph: connect (1)[c::]:6789 error -101 [ 622.908770][ T4463] libceph: mon0 (1)[c::]:6789 connect error [ 624.631962][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.639237][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.522055][ T9888] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 627.561808][ T9897] hub 8-0:1.0: USB hub found [ 627.618427][ T9897] hub 8-0:1.0: 1 port detected [ 627.969846][ T9913] device syzkaller0 entered promiscuous mode [ 628.464559][ T9926] loop8: detected capacity change from 0 to 128 [ 629.211750][ T9926] EXT4-fs (loop8): Test dummy encryption mode enabled [ 629.230197][ T9926] EXT4-fs (loop8): Test dummy encryption mode enabled [ 629.397690][ T9926] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 629.577257][ T9926] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 640.627851][ T4462] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 640.991973][ T4232] libceph: mon0 (2)0.0.0.0:6789 socket closed (con state V2_BANNER_PREFIX) [ 642.166565][T10009] ceph: No mds server is up or the cluster is laggy [ 642.304988][ T4232] libceph: mon0 (2)0.0.0.0:6789 socket closed (con state V2_BANNER_PREFIX) [ 642.366515][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 642.416979][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 643.163160][T10021] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 643.411511][ T4232] libceph: mon0 (2)0.0.0.0:6789 socket closed (con state V2_BANNER_PREFIX) [ 643.630583][T10032] batman_adv: batadv0: Adding interface: veth0 [ 643.672865][T10032] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.898403][T10032] batman_adv: batadv0: Interface activated: veth0 [ 646.273299][T10055] ceph: No mds server is up or the cluster is laggy [ 646.284484][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 646.329250][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 650.376488][T10093] using random self ethernet address [ 650.383272][T10093] using random host ethernet address [ 650.997620][T10097] loop8: detected capacity change from 0 to 128 [ 651.859161][T10100] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7774] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10100] [ 658.732015][T10158] loop8: detected capacity change from 0 to 256 [ 658.873459][T10158] netlink: 'syz.8.1306': attribute type 29 has an invalid length. [ 658.929979][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1306'. [ 658.998438][T10158] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 661.146545][T10162] chnl_net:caif_netlink_parms(): no params data found [ 661.418465][ T4233] Bluetooth: hci5: command 0x0409 tx timeout [ 661.651307][T10162] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.677651][T10162] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.711086][T10162] device bridge_slave_0 entered promiscuous mode [ 661.744015][T10162] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.767997][T10162] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.801620][T10162] device bridge_slave_1 entered promiscuous mode [ 661.926901][T10162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.975892][T10162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.230127][T10162] team0: Port device team_slave_0 added [ 662.293697][T10162] team0: Port device team_slave_1 added [ 662.632847][T10162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.661616][T10162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.698906][T10162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.717301][T10162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.726271][T10162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.756229][T10162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.874398][T10205] loop8: detected capacity change from 0 to 512 [ 662.908580][T10205] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 662.915966][T10205] EXT4-fs (loop8): Unrecognized mount option "fscontext=system_u" or missing value [ 663.696327][ T4233] Bluetooth: hci5: command 0x041b tx timeout [ 664.713420][T10162] device hsr_slave_0 entered promiscuous mode [ 664.763451][T10215] jffs2: notice: (10215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 664.789779][T10162] device hsr_slave_1 entered promiscuous mode [ 664.807032][T10162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.818484][T10162] Cannot create hsr debugfs directory [ 666.147631][ T1352] Bluetooth: hci5: command 0x040f tx timeout [ 666.343762][T10162] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 666.365616][T10162] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 666.384102][T10162] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 666.403662][T10162] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 666.569542][T10162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.597793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 666.644429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.675099][T10162] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.939759][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 666.956743][T10228] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 667.496260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 667.554078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.563378][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.570502][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.579559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 667.588837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.597354][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.604484][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.614399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 667.699246][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 667.717250][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 667.828480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 667.906169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.956795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 668.003318][T10242] o2cb: This node has not been configured. [ 668.014651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 668.042516][T10242] o2cb: Cluster check failed. Fix errors before retrying. [ 668.060308][T10242] (syz.8.1325,10242,1):user_dlm_register:675 ERROR: status = -22 [ 668.069404][T10242] (syz.8.1325,10242,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain1" [ 668.973928][ T4231] Bluetooth: hci5: command 0x0419 tx timeout [ 669.046116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 669.316507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 669.334403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 670.704072][T10162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.909791][T10269] loop8: detected capacity change from 0 to 40427 [ 671.005650][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 671.037078][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.380563][T10269] F2FS-fs (loop8): invalid crc value [ 671.412137][T10269] F2FS-fs (loop8): Found nat_bits in checkpoint [ 671.465293][T10269] F2FS-fs (loop8): Start checkpoint disabled! [ 671.547020][T10269] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 673.726533][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.790261][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.924509][T10162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.655824][ T4671] attempt to access beyond end of device [ 674.655824][ T4671] loop8: rw=2049, want=40976, limit=40427 [ 676.906191][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 676.925728][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 677.009888][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 677.028957][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 677.073097][T10162] device veth0_vlan entered promiscuous mode [ 677.091878][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 677.131934][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 677.164252][T10162] device veth1_vlan entered promiscuous mode [ 677.289208][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 677.338944][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 677.430161][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 677.480539][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 677.495359][T10330] loop8: detected capacity change from 0 to 1024 [ 678.174487][T10162] device veth0_macvtap entered promiscuous mode [ 678.255194][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 678.301334][T10162] device veth1_macvtap entered promiscuous mode [ 678.421371][T10330] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 678.484363][T10162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.570536][T10162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.111730][T10162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.936317][T10162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.026838][T10162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.058974][T10162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.094385][T10162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.311364][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 680.341513][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 680.371088][T10162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.455972][T10162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.083837][T10162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.676230][T10162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.718413][T10162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.778289][T10162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.941086][T10162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.004233][T10162] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.028934][T10162] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.046131][T10162] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.680434][T10162] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.909554][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 683.935440][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 685.211469][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.498849][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.552681][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 685.572263][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.618897][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.664887][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 685.825127][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.831509][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.323475][T10395] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 687.659115][T10403] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 688.097592][T10404] loop8: detected capacity change from 0 to 1024 [ 688.660825][T10412] binder: 10405:10412 ioctl c0306201 0 returned -14 [ 707.373274][T10533] binder: 10529:10533 ioctl c0306201 0 returned -14 [ 711.784229][T10564] loop8: detected capacity change from 0 to 4096 [ 712.020619][T10564] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 712.975150][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 715.530347][T10582] loop8: detected capacity change from 0 to 4096 [ 716.590351][T10582] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 718.246001][T10638] binder: 10631:10638 ioctl c0306201 0 returned -14 [ 723.892629][T10679] device syzkaller0 entered promiscuous mode [ 723.933751][T10679] tipc: Started in network mode [ 723.970354][T10679] tipc: Node identity 224257dd57c3, cluster identity 4711 [ 723.978862][T10679] tipc: Enabled bearer , priority 0 [ 724.214060][T10677] tipc: Resetting bearer [ 724.372333][T10677] tipc: Disabling bearer [ 726.110015][T10706] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 731.121740][T10733] loop9: detected capacity change from 0 to 1024 [ 733.481446][T10741] loop8: detected capacity change from 0 to 512 [ 733.569008][T10741] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 734.358919][T10741] EXT4-fs: error -4 creating inode table initialization thread [ 734.377654][T10741] EXT4-fs (loop8): mount failed [ 736.662807][T10795] sctp: [Deprecated]: syz.1.1470 (pid 10795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 736.662807][T10795] Use struct sctp_sack_info instead [ 737.322825][T10805] /dev/loop0: Can't open blockdev [ 741.517072][T10825] futex_wake_op: syz.5.1477 tries to shift op by 144; fix this program [ 746.688674][T10862] loop9: detected capacity change from 0 to 1024 [ 746.705486][ T26] audit: type=1804 audit(2000000440.430:18): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1486" name="/newroot/113/file0" dev="fuse" ino=1 res=1 errno=0 [ 746.936567][ T26] audit: type=1804 audit(2000000440.430:19): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1486" name="/newroot/113/file0" dev="fuse" ino=1 res=1 errno=0 [ 747.263362][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.270244][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.523820][T10889] loop9: detected capacity change from 0 to 512 [ 750.622219][T10889] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 751.090371][T10889] EXT4-fs (loop9): 1 truncate cleaned up [ 751.101866][T10889] EXT4-fs (loop9): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 753.202938][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 753.265164][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 753.273125][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 759.727058][T10997] tmpfs: Unknown parameter '18446744073709551615' [ 764.636509][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.718533][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.910621][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.922381][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.005423][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.024100][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.115498][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.135360][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.435613][T11018] chnl_net:caif_netlink_parms(): no params data found [ 765.548278][ T144] tipc: Left network mode [ 765.692515][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.734010][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.758663][T11018] device bridge_slave_0 entered promiscuous mode [ 765.779880][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.795552][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.819110][T11018] device bridge_slave_1 entered promiscuous mode [ 765.913335][T11018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.939016][T11018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.052095][T11018] team0: Port device team_slave_0 added [ 766.070896][T11018] team0: Port device team_slave_1 added [ 766.135755][T11018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.160599][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.204007][T11018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.234486][T11018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.243435][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.272874][T11018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.452108][T11018] device hsr_slave_0 entered promiscuous mode [ 766.481077][T11018] device hsr_slave_1 entered promiscuous mode [ 766.492507][T11018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.501319][T11018] Cannot create hsr debugfs directory [ 766.618324][ T4261] Bluetooth: hci2: command 0x0409 tx timeout [ 767.022181][ T144] device hsr_slave_0 left promiscuous mode [ 767.029315][ T144] device hsr_slave_1 left promiscuous mode [ 767.036019][ T144] batman_adv: batadv0: Interface deactivated: veth0 [ 767.045877][ T144] batman_adv: batadv0: Removing interface: veth0 [ 767.053278][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.061098][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.079305][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.086765][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.116654][ T144] device bridge_slave_1 left promiscuous mode [ 767.129826][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.138918][ T144] device bridge_slave_0 left promiscuous mode [ 767.147041][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.227588][ T144] device veth1_macvtap left promiscuous mode [ 767.247506][ T144] device veth0_macvtap left promiscuous mode [ 767.257703][ T144] device veth1_vlan left promiscuous mode [ 767.266242][ T144] device veth0_vlan left promiscuous mode [ 767.599762][ T144] team0 (unregistering): Port device vxlan0 removed [ 767.787935][ T144] team0 (unregistering): Port device team_slave_1 removed [ 767.804166][ T144] team0 (unregistering): Port device team_slave_0 removed [ 767.818792][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.834610][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.920683][ T144] bond0 (unregistering): Released all slaves [ 768.698305][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 768.763825][T11018] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 768.809498][T11018] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 768.825998][T11018] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 768.869310][T11018] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 769.014312][T11018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.054006][T11018] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.070486][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 769.087395][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 769.147312][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 769.156999][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 769.187159][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.194349][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.212970][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 769.226218][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 769.244935][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.252098][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.269399][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 769.285816][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 769.337690][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 769.346762][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 769.407591][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 769.430270][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 769.457191][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 769.487284][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 769.527975][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 769.551696][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 769.570672][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 769.588407][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 769.598994][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 769.926556][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 769.938789][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 769.961291][T11018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.001899][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 770.020980][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 770.063127][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 770.080327][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 770.106282][T11018] device veth0_vlan entered promiscuous mode [ 770.123469][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 770.137413][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 770.163666][T11018] device veth1_vlan entered promiscuous mode [ 770.238645][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 770.249561][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 770.269666][T11018] device veth0_macvtap entered promiscuous mode [ 770.290252][T11018] device veth1_macvtap entered promiscuous mode [ 770.318796][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.351623][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.382673][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.398506][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.409639][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.421557][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.437014][T11018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.454509][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 770.473153][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 770.500350][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 770.512443][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 770.527313][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.557415][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.567632][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.588180][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.606760][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.627769][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.648142][T11018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.662343][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 770.673546][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 770.693122][T11018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.718732][T11018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.727472][T11018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.757914][T11018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.779021][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 770.899508][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.949359][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.975142][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 771.014817][ T435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.038978][ T435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.047500][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 772.531801][T11105] device syzkaller0 entered promiscuous mode [ 772.639512][T11105] loop2: detected capacity change from 0 to 8 [ 772.693349][T11105] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 772.696229][T10834] udevd[10834]: incorrect cramfs checksum on /dev/loop2 [ 772.858746][ T8367] Bluetooth: hci2: command 0x0419 tx timeout [ 779.154156][ T26] audit: type=1326 audit(2000000472.870:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.2.1547" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5bc01159 code=0x7ffc0000 [ 779.393456][ T26] audit: type=1326 audit(2000000472.910:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.2.1547" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5bc01159 code=0x7ffc0000 [ 780.401045][ T26] audit: type=1326 audit(2000000472.910:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.2.1547" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5bc01159 code=0x7ffc0000 [ 780.637201][ T26] audit: type=1326 audit(2000000472.930:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.2.1547" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5bc01159 code=0x7ffc0000 [ 780.662229][ T26] audit: type=1326 audit(2000000472.930:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.2.1547" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d5bc01159 code=0x7ffc0000 [ 780.865853][ T26] audit: type=1326 audit(2000000472.930:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.2.1547" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5bc01159 code=0x7ffc0000 [ 781.079916][ T26] audit: type=1326 audit(2000000472.930:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.2.1547" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5bc01159 code=0x7ffc0000 [ 781.249369][ T26] audit: type=1326 audit(2000000472.930:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.2.1547" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5bc01159 code=0x7ffc0000 [ 781.300325][T11179] tmpfs: Unknown parameter '18446744073709551615' [ 781.338332][ T26] audit: type=1326 audit(2000000472.930:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.2.1547" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f0d5bc01159 code=0x7ffc0000 [ 781.408560][ T26] audit: type=1326 audit(2000000472.940:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.2.1547" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5bc01159 code=0x7ffc0000 [ 782.435632][T11187] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 785.165150][T11201] loop9: detected capacity change from 0 to 1024 [ 785.338396][ T4231] Bluetooth: hci5: command 0x0406 tx timeout [ 786.716995][T10766] hfsplus: b-tree write err: -5, ino 25 [ 786.723555][T10766] hfsplus: b-tree write err: -5, ino 4 [ 786.815282][T10766] hfsplus: b-tree write err: -5, ino 2 [ 786.838510][T10766] hfsplus: b-tree write err: -5, ino 26 [ 790.714200][ T144] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.996849][ T4231] Bluetooth: hci3: command 0x0409 tx timeout [ 791.026416][ T144] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.078278][ T144] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.179507][T11272] overlayfs: failed to clone upperpath [ 793.201609][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 793.462475][ T144] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.615291][T11237] chnl_net:caif_netlink_parms(): no params data found [ 794.683614][T11279] loop2: detected capacity change from 0 to 4096 [ 794.978529][T11279] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 795.258513][ T1352] Bluetooth: hci3: command 0x040f tx timeout [ 795.835947][ T144] tipc: Left network mode [ 796.086805][T11279] ntfs3: loop2: failed to convert "0000" to iso8859-2 [ 796.094649][T11279] ntfs3: loop2: failed to convert name for inode 1e. [ 796.130258][T11237] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.252450][T11237] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.263888][T11237] device bridge_slave_0 entered promiscuous mode [ 796.290917][T11237] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.683493][T11237] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.697354][T11237] device bridge_slave_1 entered promiscuous mode [ 797.170004][T11321] tmpfs: Unknown parameter '18446744073709551615' [ 799.386211][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 799.462396][T11237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.310320][T11237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.855720][T11237] team0: Port device team_slave_0 added [ 801.423469][T11237] team0: Port device team_slave_1 added [ 801.601307][T11237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.702121][T11237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.938431][T11237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.050568][T11237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.057557][T11237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.324083][T11237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.672743][T11237] device hsr_slave_0 entered promiscuous mode [ 803.458801][T11237] device hsr_slave_1 entered promiscuous mode [ 803.478308][T11237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.556616][T11237] Cannot create hsr debugfs directory [ 804.639569][T11366] device vlan0 entered promiscuous mode [ 805.229264][T11377] tipc: Started in network mode [ 805.234325][T11377] tipc: Node identity 2a3fc118a1f9, cluster identity 4711 [ 805.282401][T11377] tipc: Enabled bearer , priority 0 [ 805.502043][T11380] device syzkaller0 entered promiscuous mode [ 805.707481][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 805.721192][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 806.772145][T11384] tipc: Resetting bearer [ 806.996960][T11375] tipc: Resetting bearer [ 807.079137][T11375] tipc: Disabling bearer [ 807.212950][ T1352] tipc: Node number set to 2345058584 [ 808.703425][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.710041][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.000891][T11423] loop9: detected capacity change from 0 to 1024 [ 812.630710][T11450] loop9: detected capacity change from 0 to 512 [ 815.380791][ T144] device hsr_slave_0 left promiscuous mode [ 815.419562][ T144] device hsr_slave_1 left promiscuous mode [ 815.489573][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.537448][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.596587][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.643325][ T1352] libceph: connect (1)[c::]:6789 error -101 [ 815.662928][ T1352] libceph: mon0 (1)[c::]:6789 connect error [ 815.682135][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.468278][T11483] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 816.505843][T11476] ceph: No mds server is up or the cluster is laggy [ 816.865411][ T144] device veth1_macvtap left promiscuous mode [ 816.928365][ T144] device veth0_macvtap left promiscuous mode [ 816.944132][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 816.944260][ T26] audit: type=1800 audit(2000000510.670:91): pid=11488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1622" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 817.008590][ T144] device veth1_vlan left promiscuous mode [ 817.015336][ T144] device veth0_vlan left promiscuous mode [ 819.405086][T11512] hugetlbfs: syz.3.1626 (11512): Using mlock ulimits for SHM_HUGETLB is deprecated [ 820.498356][ T4463] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 820.659943][ T144] team0 (unregistering): Port device team_slave_1 removed [ 820.758020][ T144] team0 (unregistering): Port device team_slave_0 removed [ 820.846743][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.948927][ T4463] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 820.968527][ T4463] usb 3-1: config 0 has no interface number 0 [ 821.000973][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.218424][ T4463] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 821.247094][ T4463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.284383][ T4463] usb 3-1: Product: syz [ 821.308465][ T4463] usb 3-1: Manufacturer: syz [ 821.313718][ T4463] usb 3-1: SerialNumber: syz [ 821.331858][ T144] bond0 (unregistering): Released all slaves [ 821.344442][ T4463] usb 3-1: config 0 descriptor?? [ 822.808657][ T4463] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 822.868269][ T4463] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 822.997837][T11237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 823.047128][ T4463] asix: probe of 3-1:0.251 failed with error -71 [ 823.112630][ T4463] usb 3-1: USB disconnect, device number 2 [ 823.389919][T11237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 823.673047][T11237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 823.977506][T11237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 825.216114][T11585] ================================================================== [ 825.216212][T11585] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 825.216361][T11585] Write of size 4 at addr ffffc90004bb1fc0 by task syz.9.1637/11585 [ 825.216379][T11585] [ 825.216394][T11585] CPU: 1 PID: 11585 Comm: syz.9.1637 Not tainted syzkaller #0 [ 825.216417][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.216431][T11585] Call Trace: [ 825.216464][T11585] [ 825.216515][T11585] dump_stack_lvl+0x188/0x250 [ 825.216645][T11585] ? show_regs_print_info+0x20/0x20 [ 825.216762][T11585] ? load_image+0x410/0x410 [ 825.216807][T11585] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 825.216891][T11585] print_address_description+0x60/0x2d0 [ 825.216916][T11585] ? sys_imageblit+0x1ba8/0x25d0 [ 825.216937][T11585] kasan_report+0xdf/0x130 [ 825.217025][T11585] ? sys_imageblit+0x1ba8/0x25d0 [ 825.217052][T11585] sys_imageblit+0x1ba8/0x25d0 [ 825.217090][T11585] ? sys_copyarea+0x2530/0x2530 [ 825.217130][T11585] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 825.217182][T11585] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 825.217209][T11585] cw_putcs+0x15ef/0x18a0 [ 825.217271][T11585] ? cw_clear+0x250/0x250 [ 825.217315][T11585] fbcon_putcs+0x2c8/0x450 [ 825.217339][T11585] ? cw_clear+0x250/0x250 [ 825.217362][T11585] do_update_region+0x4e5/0x640 [ 825.217410][T11585] ? hide_cursor+0x320/0x320 [ 825.217435][T11585] ? fbcon_set_palette+0x54a/0x660 [ 825.217463][T11585] redraw_screen+0xa2c/0x1000 [ 825.217484][T11585] ? _raw_spin_unlock+0x40/0x40 [ 825.217513][T11585] ? clear_buffer_attributes+0x320/0x320 [ 825.217542][T11585] ? tty_do_resize+0xeb/0x160 [ 825.217609][T11585] vc_do_resize+0x122c/0x17b0 [ 825.217656][T11585] ? read_lock_is_recursive+0x10/0x10 [ 825.217704][T11585] ? vc_resize+0x50/0x50 [ 825.217722][T11585] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 825.217745][T11585] ? _raw_spin_unlock+0x40/0x40 [ 825.217777][T11585] vt_resizex+0x3ec/0x5a0 [ 825.217808][T11585] ? vt_disallocate+0x90/0x90 [ 825.217832][T11585] ? security_capable+0x85/0xb0 [ 825.217911][T11585] vt_ioctl+0xfd8/0x1ca0 [ 825.217941][T11585] ? __vt_event_wait+0x260/0x260 [ 825.217985][T11585] ? tty_jobctrl_ioctl+0x164/0xae0 [ 825.218013][T11585] tty_ioctl+0x848/0xc30 [ 825.218033][T11585] ? security_file_ioctl+0x7c/0xa0 [ 825.218074][T11585] ? tty_get_icount+0xa0/0xa0 [ 825.218097][T11585] __se_sys_ioctl+0xfa/0x170 [ 825.218141][T11585] do_syscall_64+0x4c/0xa0 [ 825.218165][T11585] ? clear_bhb_loop+0x30/0x80 [ 825.218202][T11585] ? clear_bhb_loop+0x30/0x80 [ 825.218223][T11585] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 825.218254][T11585] RIP: 0033:0x7f2f1f741159 [ 825.218295][T11585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.218335][T11585] RSP: 002b:00007f2f1d957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.218362][T11585] RAX: ffffffffffffffda RBX: 00007f2f1f9c9180 RCX: 00007f2f1f741159 [ 825.218378][T11585] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000007 [ 825.218392][T11585] RBP: 00007f2f1f7d8024 R08: 0000000000000000 R09: 0000000000000000 [ 825.218407][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.218421][T11585] R13: 00007f2f1f9c9218 R14: 00007f2f1f9c9180 R15: 00007ffd08bdc168 [ 825.218455][T11585] [ 825.218463][T11585] [ 825.218468][T11585] [ 825.218474][T11585] Memory state around the buggy address: [ 825.218486][T11585] ffffc90004bb1e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 825.218499][T11585] ffffc90004bb1f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 825.218513][T11585] >ffffc90004bb1f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 825.218523][T11585] ^ [ 825.218535][T11585] ffffc90004bb2000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 825.218549][T11585] ffffc90004bb2080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 825.218560][T11585] ================================================================== [ 825.218569][T11585] Disabling lock debugging due to kernel taint [ 825.218879][T11585] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 825.218889][T11585] CPU: 1 PID: 11585 Comm: syz.9.1637 Tainted: G B syzkaller #0 [ 825.218909][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.218920][T11585] Call Trace: [ 825.218927][T11585] [ 825.218934][T11585] dump_stack_lvl+0x188/0x250 [ 825.218959][T11585] ? show_regs_print_info+0x20/0x20 [ 825.218981][T11585] ? load_image+0x410/0x410 [ 825.219007][T11585] panic+0x2f8/0x850 [ 825.219029][T11585] ? bpf_jit_dump+0xd0/0xd0 [ 825.219048][T11585] ? sys_imageblit+0x1ba8/0x25d0 [ 825.219069][T11585] ? check_panic_on_warn+0x6c/0xa0 [ 825.219145][T11585] ? sys_imageblit+0x1ba8/0x25d0 [ 825.219165][T11585] check_panic_on_warn+0x80/0xa0 [ 825.219186][T11585] ? sys_imageblit+0x1ba8/0x25d0 [ 825.219206][T11585] end_report+0x6d/0xf0 [ 825.219227][T11585] kasan_report+0x102/0x130 [ 825.219248][T11585] ? sys_imageblit+0x1ba8/0x25d0 [ 825.219269][T11585] sys_imageblit+0x1ba8/0x25d0 [ 825.219294][T11585] ? sys_copyarea+0x2530/0x2530 [ 825.219319][T11585] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 825.219339][T11585] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 825.219360][T11585] cw_putcs+0x15ef/0x18a0 [ 825.219391][T11585] ? cw_clear+0x250/0x250 [ 825.219417][T11585] fbcon_putcs+0x2c8/0x450 [ 825.219435][T11585] ? cw_clear+0x250/0x250 [ 825.219454][T11585] do_update_region+0x4e5/0x640 [ 825.219477][T11585] ? hide_cursor+0x320/0x320 [ 825.219496][T11585] ? fbcon_set_palette+0x54a/0x660 [ 825.219516][T11585] redraw_screen+0xa2c/0x1000 [ 825.219535][T11585] ? _raw_spin_unlock+0x40/0x40 [ 825.219555][T11585] ? clear_buffer_attributes+0x320/0x320 [ 825.219576][T11585] ? tty_do_resize+0xeb/0x160 [ 825.219596][T11585] vc_do_resize+0x122c/0x17b0 [ 825.219624][T11585] ? read_lock_is_recursive+0x10/0x10 [ 825.219646][T11585] ? vc_resize+0x50/0x50 [ 825.219663][T11585] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 825.219682][T11585] ? _raw_spin_unlock+0x40/0x40 [ 825.219703][T11585] vt_resizex+0x3ec/0x5a0 [ 825.219726][T11585] ? vt_disallocate+0x90/0x90 [ 825.219746][T11585] ? security_capable+0x85/0xb0 [ 825.219766][T11585] vt_ioctl+0xfd8/0x1ca0 [ 825.219788][T11585] ? __vt_event_wait+0x260/0x260 [ 825.219815][T11585] ? tty_jobctrl_ioctl+0x164/0xae0 [ 825.219836][T11585] tty_ioctl+0x848/0xc30 [ 825.219854][T11585] ? security_file_ioctl+0x7c/0xa0 [ 825.219882][T11585] ? tty_get_icount+0xa0/0xa0 [ 825.219901][T11585] __se_sys_ioctl+0xfa/0x170 [ 825.219920][T11585] do_syscall_64+0x4c/0xa0 [ 825.219937][T11585] ? clear_bhb_loop+0x30/0x80 [ 825.219955][T11585] ? clear_bhb_loop+0x30/0x80 [ 825.219974][T11585] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 825.219994][T11585] RIP: 0033:0x7f2f1f741159 [ 825.220009][T11585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.220026][T11585] RSP: 002b:00007f2f1d957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.220045][T11585] RAX: ffffffffffffffda RBX: 00007f2f1f9c9180 RCX: 00007f2f1f741159 [ 825.220059][T11585] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000007 [ 825.220072][T11585] RBP: 00007f2f1f7d8024 R08: 0000000000000000 R09: 0000000000000000 [ 825.220084][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.220096][T11585] R13: 00007f2f1f9c9218 R14: 00007f2f1f9c9180 R15: 00007ffd08bdc168 [ 825.220117][T11585] [ 825.220350][T11585] Kernel Offset: disabled [ 825.955655][T11585] Rebooting in 86400 seconds..