last executing test programs: 11m11.184546092s ago: executing program 32 (id=161): setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25OPTRT(r4, 0x89e7, 0x0) syz_usb_connect(0x0, 0x6e, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="500000001000e800000000000000", @ANYBLOB="a5f9ad8800000000300012800b00010067656e65766500002000028008000200e000000114000700ff010000000000000000000000000001", @ANYRESDEC], 0x50}}, 0x8080) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 10m34.96889876s ago: executing program 0 (id=288): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x5a5, &(0x7f0000001600)="$eJzs3U9rVFcbAPDnTiZRo+9r5BV520URXNRinZikfywUtKtSWqnQ7u2QjEEycSQzEZMK1UXddFOkUEqF0g/QfZfSL9BPIbSCFAntohRS7uROnCQziUkmzuj8fnD1nDn3eu7juefMOXNnuAH0rePpH7mIlyLi6yTicFNZPrLC4yv7LT2+OZluSSwvf/JHEkn2WmP/JPv7YJb5f0T88mXEqdzGeqsLizPFcrk0l+VHa7PXRqsLi6evzBanS9Olq+MTE2ffnBh/5+23Ohbraxf/+u7j+x+c/erE0rc/PTxyN4nzcSgra45jF241Z44X/8lSg3F+3Y5jHaislyTb2fnA3p0H2zOQ9fPBSMeAwzGQ9XrgxfdFRCwDfSrR/6FPNeYBjbV9h9bBz41H760sgOqxDzXHn1/5bCT219dGw0vJmpVRut4d6UD9aR0//37vbrrF5p9DrF81W0UDu3LrdkScyec3jv9JNv7t3Jn6h8ebW19Hv73/QDfdT+c/r7ea/+VW5z/RYv5zsEXf3Ymt+3/uYQeqaSud/73bcv67OnSNDGS5/9TnfIPJ5Svl0pmI+G9EnIzBfWl+7f2c/WtyZ5ceLLerv3n+l25p/Y25YHYeD/P71h4zVawVI2Jot7GnHt2OeDnfKv5ktf2TFu2/7lbXpo6V7r3Srmzr+PfW8o8Rr7Zs/yd3tJLN70+O1q+H0cZVsdGfd4792q7+bseftv/w5vGPJM33a6vbr+OH/X+X2pWl8Q/v4PofSj6tpxud4EaxVpsbixhKPtr4+viTYxv5xv5p/CdPrMS/drKS2/T6Txdfnz1l/HeO3mm7ay+0/9S22n/7iQcffv59u/qfbvx7o546mb2SjX+tZdfKVuf1v93+xwEAAAAAAEAPykXEoUhyhdV0LlcorHy/42gM58qVau3U5cr81amo/1Z2JAZzjTvdh5u+DzGWfR+2kR9fl5+IiCMR8c3AgXq+MFkpT3U7eAAAAAAAAAAAAAAAAAAAAOgRB9v8/j/120C3zw7Yc/UHG+zr9lkA3bDlI/878aQnoCdt2f+BF5b+D/1L/4f+tb7/d+TJwsBzwfs/9C/9H/qX/g/9S/8HAAAAAAAAAAAAAAAAAAAAAAAAAACAjrp44UK6LS89vjmZ5qeuL8zPVK6fnipVZwqz85OFycrctcJ0pTJdLhUmK7Nb/XvlSuXa2HjM3xitlaq10erC4qXZyvzV2qUrs8Xp0qXS4DOJCgAAAAAAAAAAAAAAAAAAAJ4v1YXFmWK5XJpbTeSzkrmNRU+TGNrd4TtLpBXuXRXn4tlE0bXEuazNdnR4vlei2JvE+wM9cRq7SdzOmnd7Rz37sQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2vk3AAD//w99H+4=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./file0\x00') lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 10m33.199085693s ago: executing program 0 (id=296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd26, 0x0, {{@in=@private=0xa010102, @in=@private, 0x0, 0xecdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3c}, {@in=@broadcast, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x2e}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24008051}, 0xc000) 10m32.55928559s ago: executing program 0 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000580)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0xff, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e26, @broadcast}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100123, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x4000}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5e1400, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 10m32.329354334s ago: executing program 33 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000580)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0xff, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e26, @broadcast}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100123, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x4000}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5e1400, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 10m5.267348809s ago: executing program 6 (id=377): r0 = io_uring_setup(0x79bb, &(0x7f0000000000)={0x0, 0x27d, 0x40}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x982, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000514603001c001280090001007866726d000000000c0002800800020000000000140003007866726d30"], 0x50}}, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0xb, 0x1a41, 0xe, 0x80, 0x1000, 0x6, 0xa583, 0x2}}) mknod(&(0x7f00000000c0)='./bus\x00', 0x10, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000000280)="f1", 0x1) sendfile(r8, r6, 0x0, 0x40001) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x40) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0x1800, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 10m3.232212687s ago: executing program 6 (id=382): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)={0x500, 0x20}, 0x18) openat(r1, &(0x7f0000000480)='./cgroup\x00', 0x80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB="1200000000000000", @ANYRES32=0x0, @ANYBLOB="ad6ea091cabba8858235479b", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x1c3b}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[], 0x20) 10m2.3309539s ago: executing program 3 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) faccessat(0xffffffffffffffff, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000680)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRES8=0x0, @ANYRESHEX, @ANYRES32, @ANYRES16=r0], 0x0, 0x151a, &(0x7f0000002a80)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=") ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r4}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0xa) 10m2.058189395s ago: executing program 6 (id=387): fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) 10m0.44130235s ago: executing program 3 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000680)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRES8=0x0, @ANYRESHEX, @ANYRES32, @ANYRES16=r0], 0x0, 0x151a, &(0x7f0000002a80)="$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") ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r4}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x94}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) 10m0.125739498s ago: executing program 6 (id=391): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000002680)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRESDEC], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000880), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x186) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./bus\x00', 0x0, 0x1005400, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2040, 0xe8) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3fd, 0x0, 0x0, 0x1, 0x19, "e735af413bb901277fe4d0ce5d299db7aac63a0100000000d445f320710e9caa84a0ea00004121000000ef001d0000200000dcfbe6a300", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000f8ff00000000f0fffffffff2ff00", [0x4]}) fdatasync(r0) 9m59.013400133s ago: executing program 3 (id=393): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000700)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1}, 0x4) 9m58.859243482s ago: executing program 3 (id=395): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) socket(0x400000000010, 0x6, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@grpquota}]}, 0xd, 0x5e1, &(0x7f0000001200)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) 9m58.589200687s ago: executing program 6 (id=398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x2, 0x6}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m56.978156541s ago: executing program 3 (id=404): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtclass={0x24, 0x28, 0x300, 0x755, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x6}, {0xde388da51b4516b0, 0x4}, {0x0, 0x7ffd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9m56.624207342s ago: executing program 6 (id=405): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 9m56.263293043s ago: executing program 34 (id=405): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 9m56.196221136s ago: executing program 3 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x5f, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4100}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48020}, 0x48090) 9m56.112992851s ago: executing program 35 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x5f, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4100}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48020}, 0x48090) 8m27.587447293s ago: executing program 5 (id=693): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000040), 0x1004) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) 8m24.986747425s ago: executing program 5 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000580)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000040)=0xff, 0x4) 8m23.956093715s ago: executing program 5 (id=703): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) 8m22.478957571s ago: executing program 5 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) 8m20.821130558s ago: executing program 5 (id=709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x93a204d1cc82959f) 8m20.675904106s ago: executing program 5 (id=711): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) 8m3.664534176s ago: executing program 36 (id=711): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) 7m4.304340727s ago: executing program 9 (id=984): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x473, &(0x7f0000001380)="$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") chdir(&(0x7f0000000240)='./file0\x00') syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) get_robust_list(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000002500)={[{@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4}}]}, 0xff, 0x26b, &(0x7f00000027c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) 7m2.245750946s ago: executing program 9 (id=993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x9, 0x5, 0x0, 0x8, 0xe1, 0x3a, 0x7, 0x1, 0xc, 0x30, 0x3, 0x0, 0x8, 0x80000020, 0x1, 0x8, 0x5, 0x5, '\x00', 0x6, 0x9}) 7m1.252255594s ago: executing program 9 (id=999): syz_mount_image$fuse(0x0, 0x0, 0x301242f, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000fff500000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb08000100e00000022c0010"], 0x1f0}}, 0x0) 7m0.391334384s ago: executing program 9 (id=1000): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) socket(0x400000000010, 0x6, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@grpquota}]}, 0xd, 0x5e1, &(0x7f0000001200)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', 0x0, 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020) 6m59.817448188s ago: executing program 9 (id=1004): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x154}, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$pptp(0x18, 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) socket$inet_udp(0x2, 0x2, 0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64], 0x0) 6m58.724318222s ago: executing program 9 (id=1008): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./mnt\x00', 0x200004, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m57.72602767s ago: executing program 37 (id=1008): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./mnt\x00', 0x200004, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 37.475094805s ago: executing program 7 (id=2767): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) readv(r0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 36.52001736s ago: executing program 7 (id=2772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x140, 0xb, 0xd0e0011, 0x0, 0xc6, 0x218, 0x1d8, 0x190, 0x218, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1, 0x0, 0x3b}, 0x0, 0x70, 0xd8, 0x2000000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x101, 0x0, 0xc, 'netbios-ns\x00', 'syz1\x00', {0x27ff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xffac, &(0x7f00000001c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r4}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd26}, 0xfffffffffffffe45}, 0x1, 0x0, 0x0, 0x50}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff12"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @private=0xa010102}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="140000000000000000000000070000b8455082bf118ef000"], 0x18}}], 0x1, 0x44008004) 35.887565467s ago: executing program 7 (id=2775): socket$kcm(0x10, 0x2, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) 34.901255665s ago: executing program 7 (id=2781): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) readv(r0, &(0x7f0000000480), 0x0) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 34.022121526s ago: executing program 7 (id=2784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x4000009, 0xffffffff, {{0x7, 0x4, 0x3, 0x2b, 0x1c, 0x67, 0x0, 0xf7, 0x29, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x6, 0xe3f1d214d2a8f2c7}]}}}}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 33.381157754s ago: executing program 7 (id=2787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d06, 0x0, 0x1}]}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4543(morus1280-sse2))\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x8, 0x1fffe00000000, 0x8, 0x8, 0x4, 0x0, 0x800, 0x5, 0x4, 0x1, 0x3, 0x2000000, 0x10, 0x100, 0xfff]}, &(0x7f0000000140)=0xfc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000002c0)={r8, 0x8}, &(0x7f0000000300)=0x8) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 17.66462689s ago: executing program 38 (id=2787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d06, 0x0, 0x1}]}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4543(morus1280-sse2))\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x8, 0x1fffe00000000, 0x8, 0x8, 0x4, 0x0, 0x800, 0x5, 0x4, 0x1, 0x3, 0x2000000, 0x10, 0x100, 0xfff]}, &(0x7f0000000140)=0xfc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000002c0)={r8, 0x8}, &(0x7f0000000300)=0x8) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 17.564229645s ago: executing program 8 (id=2844): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x154}, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$pptp(0x18, 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) socket$inet_udp(0x2, 0x2, 0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYRES8=r4, @ANYRES64=r0], 0x0) 16.544251885s ago: executing program 8 (id=2850): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) 14.392093131s ago: executing program 8 (id=2853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x1007, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x2, 0x6, 0xffffff9a, 0x3, 0xd, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x6, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x101, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x3, 0x10, 0x1fe, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x43, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0xfffffffd, 0x7, 0x5, 0xff, 0x7, 0x26, 0xfff, 0x7ff, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x6, 0xe2f3, 0x4, 0x4, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x5, 0x6, 0x5, 0x7ff, 0xc4, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x2, 0x3feb, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x2, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x1, 0x7, 0x240, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x101}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f00000006c0)='\'', 0x1}], 0x1}, 0x4) 14.023452082s ago: executing program 8 (id=2855): syz_clone(0x210580, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010000", 0x7) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = socket(0x10, 0x803, 0x2) getsockname$packet(r6, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r8, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x24044080) 12.036377698s ago: executing program 8 (id=2859): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x154}, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$pptp(0x18, 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) socket$inet_udp(0x2, 0x2, 0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYRES8=r4, @ANYRES64=r0], 0x0) 11.125333311s ago: executing program 8 (id=2860): socket$rds(0x15, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$peek(0x19, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x6c, 0x5, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x10000004) 8.821352825s ago: executing program 1 (id=2867): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_io_uring_setup(0x890, &(0x7f0000000440)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r4 = dup(r0) read$FUSE(r4, 0x0, 0x0) 7.824290654s ago: executing program 1 (id=2869): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x154}, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$pptp(0x18, 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) socket$inet_udp(0x2, 0x2, 0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES8=r4, @ANYRES64=r0], 0x0) 6.048622807s ago: executing program 2 (id=2874): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8880) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r2}, 0x14) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r5, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) 5.773811673s ago: executing program 2 (id=2875): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) 4.640278329s ago: executing program 1 (id=2876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x54f, &(0x7f0000000140)={0x0, 0x84d9, 0x400, 0xffffffff, 0x204}, &(0x7f00000001c0), &(0x7f0000000440)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0x0) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0x5ecfb203) syz_fuse_handle_req(r6, &(0x7f00000047c0)="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", 0x2000, 0x0) 4.210216344s ago: executing program 4 (id=2877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008014}, 0x20000480) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a6331}, 0x0) 4.164808357s ago: executing program 0 (id=2842): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) 4.036135774s ago: executing program 4 (id=2878): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x20000008, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x2, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffdfe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc75700"}}, 0x38}}, 0x0) 4.019186455s ago: executing program 0 (id=2879): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000100)=[{r1, 0x1100}, {0xffffffffffffffff, 0x100}], 0x2, 0x6) 3.983138418s ago: executing program 4 (id=2880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x140, 0xb, 0xd0e0011, 0x0, 0xc6, 0x218, 0x1d8, 0x190, 0x218, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1, 0x0, 0x3b}, 0x0, 0x70, 0xd8, 0x2000000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x101, 0x0, 0xc, 'netbios-ns\x00', 'syz1\x00', {0x27ff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xffac, &(0x7f00000001c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r4}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd26}, 0xfffffffffffffe45}, 0x1, 0x0, 0x0, 0x50}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff12"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @private=0xa010102}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="140000000000000000000000070000b8455082bf118ef000"], 0x18}}], 0x1, 0x44008004) 2.972875846s ago: executing program 4 (id=2881): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40140921, 0x200000000005) socket(0x1000000010, 0x80002, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.800320516s ago: executing program 4 (id=2882): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x6008000}, 0x8080) sendfile(r1, r2, 0x0, 0x100000500) 2.681048853s ago: executing program 4 (id=2883): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000200)=""/127, 0x7f, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x58}, 0x52) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x44b, 0x70bd2d, 0x0, {0x7a, 0x0, 0x0, r2, 0xd84e2d4e0a85ad5b}}, 0x20}, 0x1, 0x0, 0x0, 0x40005}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@val={0x88a8, 0x4}, {0x8035, 0x7, 0x0, 0x3}}, {@canfd={0xd, {{0x3, 0x1}, 0x19, 0x0, 0x0, 0x0, "185dbb1cd7b284fee8cba2a31982503227a0ff346406455075b841f871b84b9dff1af3ba0a3fbfba7671ea11278096e5abfb374f6a01ec216cdde1aba35ee5e3"}}}}, 0x0) 2.071686889s ago: executing program 2 (id=2884): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20004000) 1.1841439s ago: executing program 0 (id=2885): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000001f40), 0x0, 0x1, 0x0, 0x0, r5}) 812.326782ms ago: executing program 1 (id=2886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 623.204963ms ago: executing program 1 (id=2887): statfs(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0502460c"], 0x8) 400.216286ms ago: executing program 1 (id=2888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x44801) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 241.140136ms ago: executing program 2 (id=2889): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) 141.974851ms ago: executing program 2 (id=2890): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000a00)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x14, 0x110, 0xc, "ac253a2fa3"}], 0x14}, 0x0) 0s ago: executing program 2 (id=2891): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2000c805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r4, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000180)="d2", 0x1}], 0x2) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000440)='encrypted\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001", 0x3, r5) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) kernel console output (not intermixed with test programs): 17.795541][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.805639][ T589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.813713][ T589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.845500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.855290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.879502][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.492'. [ 217.893137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.922195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.941987][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.984206][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.028390][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.065673][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.103578][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.137119][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.155541][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.191485][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.211854][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.243134][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.275471][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.319547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.353709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.391299][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.424957][ T5755] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.447512][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.456061][ T5755] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.495725][ T5755] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.513979][ T5755] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.553032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.818314][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.847103][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.944718][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.964815][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.043814][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.130544][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.245272][ T6198] loop8: detected capacity change from 0 to 1024 [ 220.536372][ T6198] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 220.765154][ T6198] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 221.206803][ T6198] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 221.228856][ T6198] System zones: 0-1, 3-36 [ 221.282732][ T6198] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,bsddf,,errors=continue. Quota mode: writeback. [ 225.345929][ T6277] loop8: detected capacity change from 0 to 1024 [ 225.803651][ T6277] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.400869][ T6292] overlayfs: conflicting lowerdir path [ 228.263161][ T6321] device syzkaller0 entered promiscuous mode [ 229.594487][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.8.530'. [ 231.875415][ T4234] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 231.964201][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 231.973541][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 232.079533][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 232.102708][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 232.157081][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 232.216619][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 232.264315][ T4234] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.291190][ T4234] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.303627][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 232.529916][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 232.609662][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 232.624422][ T4234] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.633488][ T4234] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.710824][ T4234] usb 9-1: SerialNumber: syz [ 232.783003][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.897189][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.129375][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.156652][ T4234] usb 9-1: 0:2 : does not exist [ 233.188995][ T4234] usb 9-1: USB disconnect, device number 2 [ 234.217097][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.535710][ T6407] loop8: detected capacity change from 0 to 512 [ 234.581421][ T5163] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.643274][ T6407] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.542: inode #1: comm syz.8.542: iget: illegal inode # [ 234.678561][ T6407] EXT4-fs (loop8): Remounting filesystem read-only [ 234.709748][ T6407] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.542: error while reading EA inode 1 err=-117 [ 234.759590][ T5163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.795894][ T6407] EXT4-fs (loop8): Remounting filesystem read-only [ 234.802673][ T6407] EXT4-fs (loop8): 1 orphan inode deleted [ 234.826896][ T6407] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,errors=remount-ro,noblock_validity,block_validity,. Quota mode: none. [ 234.960485][ T5163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.170329][ T5163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.414050][ T4234] Bluetooth: hci3: command 0x0406 tx timeout [ 239.232331][ T5163] device hsr_slave_0 left promiscuous mode [ 239.246420][ T6488] fuse: Bad value for 'group_id' [ 239.256876][ T5163] device hsr_slave_1 left promiscuous mode [ 239.266691][ T5163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.281149][ T5163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.318715][ T5163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.345450][ T5163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.390538][ T5163] device bridge_slave_1 left promiscuous mode [ 239.487093][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.540128][ T5163] device bridge_slave_0 left promiscuous mode [ 239.568187][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.597042][ T5163] device veth1_macvtap left promiscuous mode [ 239.603141][ T5163] device veth0_macvtap left promiscuous mode [ 239.623005][ T5163] device veth1_vlan left promiscuous mode [ 239.738588][ T6494] __nla_validate_parse: 65 callbacks suppressed [ 239.738611][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.559'. [ 240.088378][ T5163] device veth0_vlan left promiscuous mode [ 242.605788][ T5163] team0 (unregistering): Port device team_slave_1 removed [ 242.958901][ T5163] team0 (unregistering): Port device team_slave_0 removed [ 243.059948][ T5163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.155182][ T5163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.428918][ T5163] bond0 (unregistering): Released all slaves [ 243.672634][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.7.572'. [ 245.945788][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.954406][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.088116][ T6573] netlink: 300 bytes leftover after parsing attributes in process `syz.1.584'. [ 246.323771][ T6584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.599132][ T6605] loop8: detected capacity change from 0 to 4096 [ 248.849805][ T6605] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 251.139304][ T6655] overlayfs: failed to clone upperpath [ 252.256103][ T6673] netlink: 60 bytes leftover after parsing attributes in process `syz.5.611'. [ 252.378020][ T6680] loop8: detected capacity change from 0 to 512 [ 252.419108][ T6680] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 252.480547][ T6680] EXT4-fs (loop8): invalid journal inode [ 252.509865][ T6680] EXT4-fs (loop8): can't get journal size [ 252.531869][ T6680] EXT4-fs (loop8): 1 truncate cleaned up [ 252.544001][ T6680] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,bsdgroups,,errors=continue. Quota mode: none. [ 252.771380][ T6680] EXT4-fs warning (device loop8): verify_group_input:147: Cannot add at group 1768189806 (only 1 groups) [ 254.650054][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.8.624'. [ 260.551496][ T6817] loop8: detected capacity change from 0 to 256 [ 260.631618][ T6817] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.806203][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.869071][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.907907][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.915936][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.927142][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.936349][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.944597][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.950925][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.466223][ T6828] loop8: detected capacity change from 0 to 40427 [ 264.649828][ T6882] loop8: detected capacity change from 0 to 4096 [ 264.848394][ T6882] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 264.975162][ T6882] EXT4-fs (loop8): Online resizing not supported with bigalloc [ 272.963503][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.028697][ T6987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.286523][ T7090] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.817259][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.718'. [ 286.024153][ T4299] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 286.364102][ T4299] usb 9-1: Using ep0 maxpacket: 16 [ 286.494427][ T4299] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.533936][ T4299] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 286.603996][ T4299] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 286.637459][ T4299] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.671566][ T4299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.744338][ T7143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 286.775131][ T4299] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 288.790883][ T4299] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 289.162333][ T4299] usb 9-1: USB disconnect, device number 4 [ 289.481328][ T7201] loop8: detected capacity change from 0 to 512 [ 289.687780][ T7201] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 289.861862][ T7201] EXT4-fs (loop8): 1 truncate cleaned up [ 289.867859][ T7201] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,errors=continue,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 289.899436][ T7213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.739'. [ 293.030848][ T7267] loop8: detected capacity change from 0 to 256 [ 293.133217][ T7267] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 293.175359][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 293.204444][ T7271] device syzkaller0 entered promiscuous mode [ 293.244315][ T26] audit: type=1800 audit(1770237248.215:7): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.754" name="file1" dev="loop8" ino=1048605 res=0 errno=0 [ 293.353129][ T7271] device syzkaller0 left promiscuous mode [ 298.432960][ T7323] loop8: detected capacity change from 0 to 1024 [ 298.522605][ T7323] EXT4-fs (loop8): Ignoring removed orlov option [ 298.619652][ T7323] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nobarrier,auto_da_alloc=0x0000000000000052,norecovery,,errors=continue. Quota mode: none. [ 298.767973][ T7323] syz.8.768 uses obsolete (PF_INET,SOCK_PACKET) [ 299.212654][ T7314] bridge0: port 3(syz_tun) entered disabled state [ 299.962063][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.970085][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.755634][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.794802][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.854077][ T2368] Bluetooth: hci5: command 0x0409 tx timeout [ 301.002948][ T7341] loop8: detected capacity change from 0 to 512 [ 301.092021][ T7341] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #15: comm syz.8.771: corrupted inode contents [ 301.123827][ T7341] EXT4-fs (loop8): Remounting filesystem read-only [ 301.143472][ T7341] EXT4-fs error (device loop8): ext4_dirty_inode:6058: inode #15: comm syz.8.771: mark_inode_dirty error [ 301.162198][ T7341] EXT4-fs (loop8): Remounting filesystem read-only [ 301.169241][ T7341] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #15: comm syz.8.771: corrupted inode contents [ 301.189122][ T7341] EXT4-fs (loop8): Remounting filesystem read-only [ 301.197321][ T7341] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2951: inode #15: comm syz.8.771: mark_inode_dirty error [ 301.210222][ T7341] EXT4-fs (loop8): Remounting filesystem read-only [ 301.217194][ T7341] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2954: inode #15: comm syz.8.771: mark inode dirty (error -117) [ 301.230405][ T7341] EXT4-fs (loop8): Remounting filesystem read-only [ 301.237400][ T7341] EXT4-fs warning (device loop8): ext4_evict_inode:302: xattr delete (err -117) [ 301.250937][ T7341] EXT4-fs (loop8): 1 orphan inode deleted [ 301.257501][ T7341] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x0000000000000040,max_batch_time=0x0000000000000000,resuid=0x000000000000ee01,errors=remount-ro,init_itable=0x000000000000ad55,. Quota mode: none. [ 301.358652][ T7314] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.368402][ T7314] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.377415][ T7314] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.386788][ T7314] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.552729][ T7346] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 301.997181][ T7332] chnl_net:caif_netlink_parms(): no params data found [ 302.294857][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.330528][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.366647][ T7332] device bridge_slave_0 entered promiscuous mode [ 302.407044][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.444183][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.482203][ T7332] device bridge_slave_1 entered promiscuous mode [ 302.678643][ T7379] xt_hashlimit: size too large, truncated to 1048576 [ 302.681893][ T7332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.699062][ T7381] netlink: 196 bytes leftover after parsing attributes in process `syz.8.778'. [ 302.715368][ T7332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.825640][ T7332] team0: Port device team_slave_0 added [ 302.855634][ T7332] team0: Port device team_slave_1 added [ 302.934141][ T4250] Bluetooth: hci5: command 0x041b tx timeout [ 302.951916][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.973778][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.030658][ T7332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.079253][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.094338][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.140818][ T7332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.164077][ T7] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 303.256365][ T7332] device hsr_slave_0 entered promiscuous mode [ 303.272693][ T7332] device hsr_slave_1 entered promiscuous mode [ 303.283523][ T7332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.300976][ T7332] Cannot create hsr debugfs directory [ 303.414158][ T7] usb 9-1: Using ep0 maxpacket: 16 [ 303.534261][ T7] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.556676][ T7] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.633231][ T7332] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 303.663463][ T7332] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 303.686631][ T7332] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 303.710587][ T7332] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 303.754256][ T7] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.769965][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.798257][ T7] usb 9-1: Product: syz [ 303.821850][ T7] usb 9-1: Manufacturer: syz [ 303.839025][ T7] usb 9-1: SerialNumber: syz [ 303.988828][ T7332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.024492][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.047588][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.067889][ T7332] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.099638][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.140573][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.216001][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.223139][ T4433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.289818][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.328269][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.386347][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.445771][ T4433] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.452958][ T4433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.542490][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.623375][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.624289][ T7] usb 9-1: 0:2 : does not exist [ 304.660587][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.673132][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.705962][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.714601][ T7] usb 9-1: USB disconnect, device number 5 [ 304.753340][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.793284][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.830981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.846398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.880428][ T7332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.945739][ T7332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.014535][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 305.021877][ T7168] udevd[7168]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.037885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.093555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.341573][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.364651][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.392538][ T7332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.289263][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.310017][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.391199][ T7332] device veth0_vlan entered promiscuous mode [ 306.413542][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.422936][ T7473] loop8: detected capacity change from 0 to 512 [ 306.445418][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.449942][ T7473] EXT4-fs (loop8): Ignoring removed nobh option [ 306.462356][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.494414][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.532813][ T7332] device veth1_vlan entered promiscuous mode [ 306.580961][ T7473] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000002,quota,nobh,,errors=continue. Quota mode: writeback. [ 306.667084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.681837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.719291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.761048][ T7473] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.775392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.814459][ T7332] device veth0_macvtap entered promiscuous mode [ 306.852297][ T7332] device veth1_macvtap entered promiscuous mode [ 306.901949][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.915229][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.969739][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.007716][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.042967][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.068963][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.086014][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.094268][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 307.112883][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.223947][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.254453][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.317749][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.356932][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.379270][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.404811][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.428672][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.450309][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.472574][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.513706][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.551445][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.592787][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.606125][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.641933][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.711968][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.731104][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.775320][ T7332] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.800782][ T7332] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.822960][ T7332] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.835780][ T7332] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.137560][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.154224][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.197601][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.216895][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.229160][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.270297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.448206][ T7517] loop8: detected capacity change from 0 to 256 [ 308.644901][ T7517] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.096281][ T4257] Bluetooth: hci1: command 0x0406 tx timeout [ 309.384141][ T7524] loop9: detected capacity change from 0 to 512 [ 309.533127][ T7524] EXT4-fs (loop9): Encoding requested by superblock is unknown [ 309.598936][ T26] audit: type=1800 audit(1770237264.575:8): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.807" name="file1" dev="loop8" ino=1048608 res=0 errno=0 [ 310.931323][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.9.818'. [ 311.119497][ T7565] loop9: detected capacity change from 0 to 512 [ 311.260193][ T7565] EXT4-fs error (device loop9): ext4_do_update_inode:5222: inode #15: comm syz.9.820: corrupted inode contents [ 311.369774][ T7565] EXT4-fs (loop9): Remounting filesystem read-only [ 311.394038][ T7565] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 311.472094][ T7565] EXT4-fs (loop9): Remounting filesystem read-only [ 311.491076][ T7565] EXT4-fs error (device loop9): ext4_do_update_inode:5222: inode #15: comm syz.9.820: corrupted inode contents [ 311.611990][ T7565] EXT4-fs (loop9): Remounting filesystem read-only [ 311.618681][ T7565] EXT4-fs error (device loop9): ext4_evict_inode:330: inode #15: comm syz.9.820: mark_inode_dirty error [ 311.644352][ T7565] EXT4-fs (loop9): Remounting filesystem read-only [ 312.731939][ T7565] EXT4-fs (loop9): 1 orphan inode deleted [ 312.792933][ T7565] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,journal_dev=0x00000000000000ff,resuid=0x0000000000000000,max_batch_time=0x0000000000000000,resuid=0x000000000000ee01,errors=remount-ro,init_itable=0x000000000000ad55,. Quota mode: none. [ 312.927949][ T7593] 9pnet: Insufficient options for proto=fd [ 313.013830][ T7556] loop8: detected capacity change from 0 to 40427 [ 313.283640][ T7556] F2FS-fs (loop8): build fault injection attr: rate: 691, type: 0x1ffff [ 313.312826][ T7556] F2FS-fs (loop8): group quota file already specified [ 313.874614][ T4257] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 314.426535][ T7609] loop9: detected capacity change from 0 to 4096 [ 314.454011][ T4257] usb 9-1: Using ep0 maxpacket: 16 [ 314.506706][ T7609] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 314.538932][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 314.634100][ T4257] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 314.641721][ T4257] usb 9-1: can't read configurations, error -71 [ 318.523395][ T7654] loop9: detected capacity change from 0 to 256 [ 318.850807][ T7654] exfat: Unknown parameter 'keep_last_dots' [ 319.828976][ T7692] loop9: detected capacity change from 0 to 512 [ 320.376930][ T7692] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 320.467639][ T7692] EXT4-fs (loop9): orphan cleanup on readonly fs [ 320.528221][ T7692] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.845: bad orphan inode 15 [ 320.601928][ T7692] ext4_test_bit(bit=14, block=18) = 1 [ 320.613315][ T7692] is_bad_inode(inode)=0 [ 320.619238][ T7692] NEXT_ORPHAN(inode)=1023 [ 320.624905][ T7692] max_ino=32 [ 320.629337][ T7692] i_nlink=0 [ 320.650287][ T7692] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2922: inode #15: comm syz.9.845: corrupted xattr block 19 [ 320.674115][ T4250] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 320.722955][ T7692] EXT4-fs warning (device loop9): ext4_evict_inode:302: xattr delete (err -117) [ 320.752280][ T7692] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.253157][ T4250] usb 9-1: Using ep0 maxpacket: 16 [ 322.376956][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.383531][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.385894][ T4250] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.779581][ T7692] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.845: deleted inode referenced: 15 [ 323.236619][ T4250] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.404063][ T4250] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.427139][ T4250] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.482097][ T4250] usb 9-1: Product: syz [ 323.504028][ T4250] usb 9-1: Manufacturer: syz [ 323.536208][ T7752] loop8: detected capacity change from 0 to 512 [ 323.551365][ T4250] usb 9-1: can't set config #1, error -71 [ 323.588536][ T4250] usb 9-1: USB disconnect, device number 8 [ 324.549443][ T7773] loop8: detected capacity change from 0 to 1024 [ 324.592835][ T7773] EXT4-fs (loop8): inline encryption not supported [ 324.656445][ T7773] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 329.133599][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'. [ 329.723656][ T7837] loop8: detected capacity change from 0 to 1024 [ 329.962249][ T7832] 9pnet: Insufficient options for proto=fd [ 330.075685][ T7837] EXT4-fs (loop8): inline encryption not supported [ 330.149968][ T7837] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 331.668564][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.9.895'. [ 332.643991][ T5470] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 332.676182][ T7913] loop9: detected capacity change from 0 to 1024 [ 332.742372][ T7913] EXT4-fs (loop9): inline encryption not supported [ 332.804671][ T7913] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 332.884120][ T5470] usb 9-1: Using ep0 maxpacket: 32 [ 333.004193][ T5470] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.043963][ T5470] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.194318][ T5470] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 333.223523][ T5470] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 333.242734][ T5470] usb 9-1: Product: syz [ 333.247374][ T5470] usb 9-1: Manufacturer: syz [ 333.354236][ T5470] hub 9-1:4.0: USB hub found [ 333.574267][ T5470] hub 9-1:4.0: 2 ports detected [ 333.879002][ T5470] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 334.629839][ T5470] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 334.715533][ T5470] usb 9-1: USB disconnect, device number 9 [ 336.565213][ T7947] print_req_error: 10 callbacks suppressed [ 336.565231][ T7947] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.582031][ T7947] F2FS-fs (loop9): Unable to read 1th superblock [ 336.588529][ T7947] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.599439][ T7947] F2FS-fs (loop9): Unable to read 2th superblock [ 337.192647][ T7953] loop8: detected capacity change from 0 to 512 [ 337.241836][ T7959] loop9: detected capacity change from 0 to 512 [ 337.313388][ T7953] EXT4-fs (loop8): orphan cleanup on readonly fs [ 337.338637][ T7953] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.911: bg 0: block 248: padding at end of block bitmap is not set [ 337.382598][ T7959] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 337.382685][ T7953] Quota error (device loop8): write_blk: dquota write failed [ 337.494379][ T7953] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 337.541511][ T7953] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.911: Failed to acquire dquot type 1 [ 337.644505][ T7953] EXT4-fs (loop8): 1 truncate cleaned up [ 337.901761][ T7953] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 338.724054][ T7981] netlink: 'syz.9.919': attribute type 7 has an invalid length. [ 338.731739][ T7981] netlink: 'syz.9.919': attribute type 8 has an invalid length. [ 341.526646][ T7981] device veth0_to_team entered promiscuous mode [ 342.608062][ T8003] loop8: detected capacity change from 0 to 256 [ 343.057475][ T8003] exfat: Deprecated parameter 'utf8' [ 343.062815][ T8003] exfat: Deprecated parameter 'utf8' [ 343.161008][ T8003] exfat: Deprecated parameter 'utf8' [ 343.204101][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.928'. [ 343.507311][ T8003] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 347.466531][ T8069] xt_hashlimit: size too large, truncated to 1048576 [ 347.481306][ T8066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.943'. [ 348.314925][ T8087] tipc: Enabling of bearer rejected, failed to enable media [ 349.631444][ T8105] loop9: detected capacity change from 0 to 256 [ 349.884850][ T8105] exfat: Bad value for 'uid' [ 350.700073][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.9.959'. [ 350.794686][ T8135] device syzkaller0 entered promiscuous mode [ 350.863547][ T8135] device syzkaller0 left promiscuous mode [ 351.615431][ T8152] netlink: 104 bytes leftover after parsing attributes in process `syz.9.960'. [ 352.131025][ T8162] bridge0: port 3(syz_tun) entered blocking state [ 352.137771][ T8162] bridge0: port 3(syz_tun) entered disabled state [ 352.150136][ T8162] device syz_tun entered promiscuous mode [ 352.157592][ T8162] bridge0: port 3(syz_tun) entered blocking state [ 352.164081][ T8162] bridge0: port 3(syz_tun) entered forwarding state [ 353.196692][ T8175] loop9: detected capacity change from 0 to 256 [ 353.473022][ T8175] FAT-fs (loop9): Directory bread(block 64) failed [ 353.533076][ T8175] FAT-fs (loop9): Directory bread(block 65) failed [ 353.591686][ T8175] FAT-fs (loop9): Directory bread(block 66) failed [ 353.650868][ T8175] FAT-fs (loop9): Directory bread(block 67) failed [ 353.719905][ T8175] FAT-fs (loop9): Directory bread(block 68) failed [ 353.754015][ T8175] FAT-fs (loop9): Directory bread(block 69) failed [ 353.760665][ T8175] FAT-fs (loop9): Directory bread(block 70) failed [ 353.804935][ T8175] FAT-fs (loop9): Directory bread(block 71) failed [ 353.839394][ T8175] FAT-fs (loop9): Directory bread(block 72) failed [ 353.865346][ T8175] FAT-fs (loop9): Directory bread(block 73) failed [ 356.884635][ T8242] loop9: detected capacity change from 0 to 256 [ 356.944604][ T8242] exfat: Bad value for 'uid' [ 357.187717][ T8247] loop9: detected capacity change from 0 to 1024 [ 357.272815][ T8247] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 357.314028][ T8247] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.380419][ T8247] EXT4-fs (loop9): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 357.445066][ T26] audit: type=1800 audit(1770237312.425:9): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.980" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 357.807300][ T8268] loop9: detected capacity change from 0 to 512 [ 359.016791][ T8268] EXT4-fs (loop9): Test dummy encryption mode enabled [ 359.033959][ T8268] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 359.087592][ T8268] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.984: bad orphan inode 131083 [ 359.197910][ T8268] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 360.844486][ T8327] netlink: 216 bytes leftover after parsing attributes in process `syz.9.999'. [ 360.856090][ T8327] netlink: 40 bytes leftover after parsing attributes in process `syz.9.999'. [ 361.718487][ T8334] loop9: detected capacity change from 0 to 1024 [ 361.790927][ T8334] EXT4-fs (loop9): inline encryption not supported [ 361.879623][ T8334] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 362.044524][ T26] audit: type=1326 audit(1770237317.015:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.7.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb85eb9 code=0x7ffc0000 [ 362.148513][ T26] audit: type=1326 audit(1770237317.015:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.7.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f413fb85eb9 code=0x7ffc0000 [ 362.181178][ T7332] Quota error (device loop9): find_tree_dqentry: Getting block too big (262149 >= 6) [ 362.208797][ T7332] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 362.240840][ T7332] EXT4-fs error (device loop9): ext4_acquire_dquot:6234: comm syz-executor: Failed to acquire dquot type 0 [ 362.260454][ T26] audit: type=1326 audit(1770237317.065:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.7.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb85eb9 code=0x7ffc0000 [ 362.358644][ T26] audit: type=1326 audit(1770237317.065:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.7.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb85eb9 code=0x7ffc0000 [ 362.472361][ T26] audit: type=1326 audit(1770237317.115:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.7.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f413fb85eb9 code=0x7ffc0000 [ 362.524502][ T26] audit: type=1326 audit(1770237317.115:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.7.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb85eb9 code=0x7ffc0000 [ 362.613170][ T26] audit: type=1326 audit(1770237317.115:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.7.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb85eb9 code=0x7ffc0000 [ 362.781700][ T26] audit: type=1326 audit(1770237317.115:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.7.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f413fb85eb9 code=0x7ffc0000 [ 362.811999][ T26] audit: type=1326 audit(1770237317.115:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.7.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb85eb9 code=0x7ffc0000 [ 362.835493][ T26] audit: type=1326 audit(1770237317.115:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.7.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413fb85eb9 code=0x7ffc0000 [ 362.900918][ T4477] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.722237][ T4477] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.824173][ T26] audit: type=1326 audit(1770237318.785:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.1.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eadafeb9 code=0x7ffc0000 [ 363.924103][ T26] audit: type=1326 audit(1770237318.785:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.1.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7eadafeb9 code=0x7ffc0000 [ 364.047875][ T4477] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.093204][ T26] audit: type=1326 audit(1770237318.785:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.1.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7eadafeb9 code=0x7ffc0000 [ 364.164739][ T26] audit: type=1326 audit(1770237318.785:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.1.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7eadafeb9 code=0x7ffc0000 [ 364.241104][ T4477] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.456870][ T8392] chnl_net:caif_netlink_parms(): no params data found [ 365.683730][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.691488][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.702695][ T8392] device bridge_slave_0 entered promiscuous mode [ 365.803833][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.810998][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.855271][ T8392] device bridge_slave_1 entered promiscuous mode [ 365.926769][ T8392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.939352][ T8392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.262660][ T8392] team0: Port device team_slave_0 added [ 367.015204][ T8392] team0: Port device team_slave_1 added [ 367.102094][ T4477] device hsr_slave_0 left promiscuous mode [ 367.104078][ T4257] Bluetooth: hci3: command 0x0409 tx timeout [ 367.135323][ T4477] device hsr_slave_1 left promiscuous mode [ 367.164511][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.172063][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.224851][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.232323][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.319157][ T4477] device bridge_slave_1 left promiscuous mode [ 367.341513][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.373084][ T4477] device bridge_slave_0 left promiscuous mode [ 367.386690][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.776595][ T4477] device veth1_macvtap left promiscuous mode [ 367.906487][ T4477] device veth0_macvtap left promiscuous mode [ 368.038383][ T4477] device veth1_vlan left promiscuous mode [ 368.165873][ T4477] device veth0_vlan left promiscuous mode [ 368.881124][ T4477] team0 (unregistering): Port device team_slave_1 removed [ 368.911372][ T4477] team0 (unregistering): Port device team_slave_0 removed [ 368.944519][ T4477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.979001][ T4477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.147709][ T4477] bond0 (unregistering): Released all slaves [ 369.174252][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 369.284662][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.291697][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.331672][ T8392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.353648][ T8463] netlink: 'syz.1.1031': attribute type 6 has an invalid length. [ 369.385532][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.393149][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.544446][ T8392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.754314][ T8392] device hsr_slave_0 entered promiscuous mode [ 370.074645][ T8392] device hsr_slave_1 entered promiscuous mode [ 370.180703][ T8392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.210686][ T8392] Cannot create hsr debugfs directory [ 370.254288][ T8503] bridge0: port 3(syz_tun) entered blocking state [ 370.260799][ T8503] bridge0: port 3(syz_tun) entered disabled state [ 370.268426][ T8503] device syz_tun entered promiscuous mode [ 370.275759][ T8503] bridge0: port 3(syz_tun) entered blocking state [ 370.282247][ T8503] bridge0: port 3(syz_tun) entered forwarding state [ 371.254011][ T5471] Bluetooth: hci3: command 0x040f tx timeout [ 372.796030][ T8568] device bridge0 entered promiscuous mode [ 373.334115][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 373.383830][ T8392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.430290][ T8392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.471194][ T8392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.512495][ T8392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.884998][ T8392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.936055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.961022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.012758][ T8392] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.070013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.099133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.205994][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.213156][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.299826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.314801][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.354464][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.364892][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.371998][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.752376][ T8392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.828210][ T8392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.904319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.924958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 375.033181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 375.078183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 375.120402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 375.169630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.371322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.415064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.457622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.494637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.532075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.559971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.598259][ T8645] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 375.825292][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.832977][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.882297][ T8392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.944322][ T8660] netlink: 'syz.8.1082': attribute type 3 has an invalid length. [ 376.021696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.064191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.120976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.244859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.348033][ T8392] device veth0_vlan entered promiscuous mode [ 376.373639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.711126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.784022][ T8677] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.791129][ T8677] bridge0: port 2(bridge_slave_1) entered listening state [ 376.798491][ T8677] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.805688][ T8677] bridge0: port 1(bridge_slave_0) entered listening state [ 376.813148][ T8677] device bridge0 entered promiscuous mode [ 376.833688][ T8392] device veth1_vlan entered promiscuous mode [ 376.875722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 377.004916][ T8682] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 377.035386][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.045502][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.081745][ T8392] device veth0_macvtap entered promiscuous mode [ 377.119802][ T8392] device veth1_macvtap entered promiscuous mode [ 377.217836][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.260560][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.281489][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.329230][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.382559][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.412854][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.465438][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.519722][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.563337][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.610110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 377.626820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 377.655654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.687252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.718899][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.742797][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.772411][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.818872][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.899336][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.984474][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.994657][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.005673][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.027370][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.048616][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1096'. [ 379.114042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.153488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.222800][ T8392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.253559][ T8392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.294116][ T8392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.302863][ T8392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.624873][ T4433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.633169][ T4433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.694884][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 379.718147][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.748449][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.792406][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 382.059179][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1116'. [ 383.816974][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.828446][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.771700][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 390.177675][ T8850] device bridge0 entered promiscuous mode [ 393.334329][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 393.342668][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 394.710562][ T8910] loop2: detected capacity change from 0 to 512 [ 394.779165][ T8910] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,nobarrier,nogrpid,,errors=continue. Quota mode: writeback. [ 395.619640][ T8956] device syzkaller0 entered promiscuous mode [ 395.676713][ T8956] device syzkaller0 left promiscuous mode [ 396.843560][ T8991] loop2: detected capacity change from 0 to 1024 [ 396.935219][ T8991] EXT4-fs (loop2): Ignoring removed bh option [ 396.967593][ T8991] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 397.028745][ T8997] bridge0: port 3(syz_tun) entered disabled state [ 397.041270][ T8997] device bridge0 left promiscuous mode [ 397.088799][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.101570][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.797963][ T8991] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,auto_da_alloc,user_xattr,nouid32,nomblk_io_submit,,errors=continue. Quota mode: none. [ 398.152882][ T8991] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.1187: Allocating blocks 497-513 which overlap fs metadata [ 398.264795][ T9016] device syzkaller0 entered promiscuous mode [ 398.305236][ T8991] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.1187: Allocating blocks 497-513 which overlap fs metadata [ 398.451368][ T9016] device syzkaller0 left promiscuous mode [ 398.501745][ T8991] EXT4-fs (loop2): pa ffff888074b272a0: logic 48, phys. 177, len 21 [ 398.510453][ T8991] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 398.784427][ T9032] device bridge0 entered promiscuous mode [ 399.160535][ T9039] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1200'. [ 399.363979][ T4257] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 400.094640][ T4257] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 400.180167][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.604692][ T4257] usb 3-1: config 0 descriptor?? [ 400.825226][ T9077] device syzkaller0 entered promiscuous mode [ 400.899271][ T9077] device syzkaller0 left promiscuous mode [ 402.164802][ T4257] usb 3-1: Cannot set autoneg [ 402.193169][ T4257] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 402.609082][ T4257] usb 3-1: USB disconnect, device number 3 [ 402.966630][ T4477] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.970244][ T9104] loop2: detected capacity change from 0 to 512 [ 403.057899][ T9104] EXT4-fs (loop2): 1 truncate cleaned up [ 403.063602][ T9104] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 403.094602][ T4477] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.346661][ T4477] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.455107][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 403.455122][ T26] audit: type=1326 audit(1770237358.435:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9119 comm="syz.8.1221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33f87a9eb9 code=0x0 [ 403.510716][ T4477] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.553214][ T9130] loop2: detected capacity change from 0 to 512 [ 403.705825][ T9130] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 404.987478][ T9155] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1228'. [ 406.021590][ T9174] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1235'. [ 406.182026][ T9182] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1238'. [ 407.282126][ T9203] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1244'. [ 408.309315][ T9215] Illegal XDP return value 243596748, expect packet loss! [ 408.363022][ T9221] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1248'. [ 408.643600][ T4477] device hsr_slave_0 left promiscuous mode [ 408.688246][ T4477] device hsr_slave_1 left promiscuous mode [ 408.727441][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.766680][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.773971][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.774032][ C1] bridge0: topology change detected, propagating [ 408.775892][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.775917][ C1] bridge0: topology change detected, propagating [ 408.841898][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.866997][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.887441][ T4477] device bridge_slave_1 left promiscuous mode [ 409.081281][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.095219][ T4477] device bridge_slave_0 left promiscuous mode [ 409.101457][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.137549][ T4477] device veth1_macvtap left promiscuous mode [ 409.146321][ T4477] device veth0_macvtap left promiscuous mode [ 409.152561][ T4477] device veth1_vlan left promiscuous mode [ 409.171707][ T4477] device veth0_vlan left promiscuous mode [ 412.271549][ T9293] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1269'. [ 412.950948][ T4477] team0 (unregistering): Port device team_slave_1 removed [ 412.966861][ T4477] team0 (unregistering): Port device team_slave_0 removed [ 412.981992][ T4477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.002096][ T4477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.085341][ T4477] bond0 (unregistering): Released all slaves [ 413.138271][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 413.148235][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1266'. [ 414.426889][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1281'. [ 415.398721][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1284'. [ 418.633764][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1299'. [ 421.114884][ T9436] netlink: 'syz.7.1307': attribute type 1 has an invalid length. [ 421.186652][ T9436] netlink: 'syz.7.1307': attribute type 2 has an invalid length. [ 423.996387][ T9488] capability: warning: `syz.7.1322' uses 32-bit capabilities (legacy support in use) [ 425.643536][ T9511] fuse: Bad value for 'fd' [ 426.354301][ T9536] netlink: 'syz.8.1336': attribute type 1 has an invalid length. [ 434.150482][ T9613] "syz.1.1356" (9613) uses obsolete ecb(arc4) skcipher [ 434.151951][ T9615] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1355'. [ 438.436426][ T9672] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1374'. [ 439.252268][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1379'. [ 445.987736][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.998853][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.431117][ T9932] device syzkaller0 entered promiscuous mode [ 459.538833][ T9932] device syzkaller0 left promiscuous mode [ 459.860771][ T9936] process '/newroot/336/file0' started with executable stack [ 462.061281][ T9989] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1462'. [ 463.386488][T10018] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 464.568209][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1475'. [ 465.472482][T10057] mmap: syz.8.1482 (10057) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 468.490137][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1492'. [ 469.401708][T10111] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1500'. [ 470.189476][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 471.158985][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 471.245875][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 471.324853][T10156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.585535][T10169] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1514'. [ 473.576243][T10213] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1526'. [ 475.760141][T10266] fuse: Bad value for 'fd' [ 478.241101][T10306] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1554'. [ 483.232639][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'. [ 486.626872][T10407] 9pnet: Insufficient options for proto=fd [ 486.760864][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 487.574737][T10407] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1586'. [ 488.293962][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 492.214590][T10483] fuse: Bad value for 'fd' [ 494.595251][T10520] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1612'. [ 499.485911][T10572] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1627'. [ 499.762775][T10588] netlink: 'syz.7.1632': attribute type 3 has an invalid length. [ 501.165899][T10654] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095516150x0000000000000004 [ 502.648677][T10697] bridge_slave_1: default FDB implementation only supports local addresses [ 505.478607][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1682'. [ 505.598132][T10759] fuse: Bad value for 'fd' [ 506.697799][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.704160][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.835410][T10773] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1693'. [ 513.907445][T10908] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 514.318913][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 518.753683][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1770'. [ 518.794423][T11013] 9pnet: Insufficient options for proto=fd [ 519.874232][T11030] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1777'. [ 519.898579][T11028] device veth0 entered promiscuous mode [ 521.533386][T11025] device veth0 left promiscuous mode [ 522.426262][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1785'. [ 523.860232][T11079] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1788'. [ 524.052467][T11084] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1790'. [ 524.080768][T11084] netlink: del zone limit has 8 unknown bytes [ 526.504756][T11116] 9pnet: p9_fd_create_unix (11116): problem connecting socket: éq‰Y’3aK: -111 [ 527.049930][ T26] audit: type=1326 audit(1770237482.025:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.7.1797" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f413fb85eb9 code=0x0 [ 528.343305][T11137] netlink: 'syz.7.1806': attribute type 10 has an invalid length. [ 528.391859][T11137] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1806'. [ 532.215955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 532.225375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 532.243817][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 532.252827][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 532.261878][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 532.270946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 532.279965][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 532.288981][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 532.297995][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 532.307001][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 533.514042][T11199] 9pnet: p9_fd_create_unix (11199): problem connecting socket: éq‰Y’3aK: -111 [ 536.428060][T11225] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1825'. [ 536.473855][T11225] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 536.676934][T11225] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 543.339046][T11287] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1838'. [ 543.348725][T11287] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 543.357070][T11287] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 547.227277][T11331] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.1850'. [ 547.270153][T11331] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 548.152262][T11331] openvswitch: netlink: Message has 4 unknown bytes. [ 551.466545][T11382] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.1864'. [ 551.504027][T11382] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 551.527388][T11382] openvswitch: netlink: Message has 4 unknown bytes. [ 558.290002][T11557] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1914'. [ 558.341242][T11557] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 558.359035][T11557] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 559.641342][T11553] overlayfs: failed to clone upperpath [ 559.772721][T11598] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1926'. [ 559.818239][T11598] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 559.843999][T11598] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 562.078591][T11648] overlayfs: failed to clone upperpath [ 568.147352][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.154550][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.185405][T11806] overlayfs: failed to clone lowerpath [ 570.238894][T11810] overlayfs: failed to clone lowerpath [ 575.479257][T11935] overlayfs: failed to clone lowerpath [ 590.299027][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 590.645304][T12202] device bridge0 entered promiscuous mode [ 593.066974][T12250] overlayfs: failed to clone upperpath [ 593.300903][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2109'. [ 596.163961][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2126'. [ 599.380586][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2142'. [ 599.972519][T12383] netlink: 208188 bytes leftover after parsing attributes in process `syz.7.2145'. [ 599.999145][T12383] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 600.028959][T12383] openvswitch: netlink: Message has 4 unknown bytes. [ 601.910257][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2159'. [ 602.008251][T12392] overlayfs: failed to clone upperpath [ 602.142643][T12428] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2162'. [ 603.306627][T12444] overlayfs: failed to clone upperpath [ 603.322541][T12444] overlayfs: failed to clone lowerpath [ 604.857599][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2174'. [ 605.082622][T12469] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2178'. [ 608.784278][T12509] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2195'. [ 611.173687][T12525] overlayfs: failed to clone upperpath [ 612.799143][T12564] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.2218'. [ 612.827488][T12564] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 612.871785][T12564] openvswitch: netlink: Message has 4 unknown bytes. [ 614.135210][T12584] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2226'. [ 617.081804][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2247'. [ 619.971589][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2260'. [ 621.539836][T12694] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2270'. [ 622.043583][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2277'. [ 624.675936][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2290'. [ 624.922809][T12752] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2295'. [ 624.955421][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2295'. [ 626.705536][T12748] overlayfs: failed to clone upperpath [ 627.458178][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2309'. [ 629.577521][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.583996][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.670068][T12812] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2319'. [ 629.697341][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2319'. [ 630.524961][T12808] overlayfs: failed to clone lowerpath [ 633.357619][T12870] tmpfs: Unknown parameter 'usrquota' [ 634.704116][T12885] syz.7.2344 (12885) used greatest stack depth: 18512 bytes left [ 637.969737][T12924] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2358'. [ 638.016014][T12924] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 638.043496][T12924] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 640.214234][T12985] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2376'. [ 640.257072][T12985] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 640.273428][T12985] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 640.997981][T13002] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2382'. [ 642.224035][T13015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2386'. [ 642.928908][ T1111] Bluetooth: hci3: command 0x2021 tx timeout [ 643.580553][T13037] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2393'. [ 643.609923][T13037] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 643.639856][T13037] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 643.944765][T13047] tipc: Enabling of bearer rejected, failed to enable media [ 644.227925][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2401'. [ 644.473657][T13061] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2403'. [ 644.506776][T13061] device wireguard0 entered promiscuous mode [ 647.425422][T13103] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2413'. [ 647.455212][T13103] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 647.529715][T13103] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 652.919604][ T26] audit: type=1326 audit(1770237607.765:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.1.2430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7eadafeb9 code=0x0 [ 652.987884][T13155] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2429'. [ 653.020248][T13155] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 653.049177][T13155] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 674.464680][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2486'. [ 681.795667][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2504'. [ 682.121456][T13440] vcan0: tx address claim with different name [ 682.293446][T13438] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2509'. [ 683.454305][ T26] audit: type=1326 audit(1770237638.345:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13444 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e5940eb9 code=0x7fc00000 [ 684.323348][T13471] device vxcan1 entered promiscuous mode [ 685.260978][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2525'. [ 686.628551][T13496] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2531'. [ 686.739827][ T5838] device syz_tun left promiscuous mode [ 686.745540][ T5838] bridge0: port 3(syz_tun) entered disabled state [ 686.759679][T13496] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 686.799664][T13496] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 687.004099][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2538'. [ 687.076230][T13507] chnl_net:caif_netlink_parms(): no params data found [ 687.190957][T13507] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.198443][T13507] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.207029][T13507] device bridge_slave_0 entered promiscuous mode [ 687.239704][T13507] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.252268][T13507] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.268721][T13507] device bridge_slave_1 entered promiscuous mode [ 687.326247][T13507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.349964][T13507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.560818][T13507] team0: Port device team_slave_0 added [ 687.596338][T13507] team0: Port device team_slave_1 added [ 687.665703][T13507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.677789][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.730766][T13507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.762567][T13507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.772819][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.848592][T13507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.853642][T13546] 9pnet_virtio: no channels available for device syz [ 687.996153][T13507] device hsr_slave_0 entered promiscuous mode [ 688.029465][T13507] device hsr_slave_1 entered promiscuous mode [ 688.051642][T13507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.092733][T13507] Cannot create hsr debugfs directory [ 688.248142][T13555] fuse: Bad value for 'fd' [ 689.168430][ T5470] Bluetooth: hci0: command 0x0409 tx timeout [ 689.504899][T13508] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 690.421370][ T5369] device hsr_slave_0 left promiscuous mode [ 690.444686][ T5369] device hsr_slave_1 left promiscuous mode [ 690.481905][ T5369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.499020][ T5369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.535713][ T5369] device bridge_slave_1 left promiscuous mode [ 690.572864][ T5369] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.635800][ T5369] device bridge_slave_0 left promiscuous mode [ 690.674541][ T5369] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.032118][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.038529][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.254103][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 691.482554][ T5369] team0 (unregistering): Port device team_slave_1 removed [ 691.645477][ T5369] team0 (unregistering): Port device team_slave_0 removed [ 691.795153][ T5369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.868306][ T5369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.187691][ T5369] bond0 (unregistering): Released all slaves [ 694.761930][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 695.157172][T13507] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 695.344782][T13507] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 695.459601][T13507] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 695.497987][T13507] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 695.932799][T13508] Bluetooth: unknown link type 128 [ 696.863847][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 697.211256][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.211574][T13693] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2584'. [ 697.512164][T13693] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 697.528872][T13693] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 697.571834][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 697.594930][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 697.660170][T13507] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.711942][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.725896][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.761714][ T8830] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.768898][ T8830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.844707][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 697.932296][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 697.974027][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 698.008932][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 698.032954][ T4433] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.040079][ T4433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.112634][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 698.175514][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 698.205574][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 698.274178][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 698.319661][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 698.419597][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 698.514673][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 698.557760][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 698.606920][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 698.658138][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 698.734402][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 698.776089][T13507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 699.584782][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.592247][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 699.666995][T13507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.800405][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 699.822776][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 699.958848][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 699.982124][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 700.051967][T13507] device veth0_vlan entered promiscuous mode [ 700.070232][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 700.103677][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 700.156487][T13507] device veth1_vlan entered promiscuous mode [ 700.322182][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 700.351451][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 700.412881][T13507] device veth0_macvtap entered promiscuous mode [ 700.464676][T13507] device veth1_macvtap entered promiscuous mode [ 700.545482][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.609484][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.654202][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.736428][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.788566][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.839846][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.885825][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.941572][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.990503][T13507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.018937][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 701.044841][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 701.084894][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 701.114582][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.145871][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.186635][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.233913][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.285523][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.313752][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.353199][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.380256][T13764] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2595'. [ 701.384523][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.405652][T13764] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 701.440550][T13764] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 701.443796][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.504599][T13507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.531807][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 701.543622][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.577828][T13507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.597268][T13507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.613761][T13507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.632844][T13507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.812367][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.836837][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.919090][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 701.941046][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.978302][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.030755][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 703.253782][ T26] audit: type=1326 audit(1770237658.225:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.8.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f87a9eb9 code=0x7fc00000 [ 704.770092][T13826] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2607'. [ 704.782532][T13826] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 704.800472][T13826] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 707.121257][ T5471] libceph: connect (1)[c::]:6789 error -101 [ 707.140742][ T5471] libceph: mon0 (1)[c::]:6789 connect error [ 707.147894][T13850] ceph: No mds server is up or the cluster is laggy [ 707.476780][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 707.787904][T13878] binder: 13875:13878 unknown command 1074553619 [ 707.809124][T13878] binder: 13875:13878 ioctl c0306201 2000000001c0 returned -22 [ 708.381047][T13895] hsr0 speed is unknown, defaulting to 1000 [ 708.413996][T13895] hsr0 speed is unknown, defaulting to 1000 [ 708.452628][T13895] hsr0 speed is unknown, defaulting to 1000 [ 708.520091][T13895] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 708.586892][T13895] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 708.718677][T13895] hsr0 speed is unknown, defaulting to 1000 [ 708.747806][T13895] hsr0 speed is unknown, defaulting to 1000 [ 708.766144][T13895] hsr0 speed is unknown, defaulting to 1000 [ 708.783310][T13895] hsr0 speed is unknown, defaulting to 1000 [ 709.085547][T13895] hsr0 speed is unknown, defaulting to 1000 [ 709.489627][T13909] 9pnet_virtio: no channels available for device syz [ 710.094886][ T26] audit: type=1326 audit(1770237665.075:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f87a9eb9 code=0x7ffc0000 [ 710.273254][T13924] netlink: 39 bytes leftover after parsing attributes in process `syz.8.2641'. [ 710.312975][ T26] audit: type=1326 audit(1770237665.095:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f33f87a9eb9 code=0x7ffc0000 [ 710.864867][T13932] 9pnet_virtio: no channels available for device syz [ 711.078992][T13924] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2641'. [ 711.179080][ T26] audit: type=1326 audit(1770237665.095:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f87a9eb9 code=0x7ffc0000 [ 712.150356][ T26] audit: type=1326 audit(1770237665.095:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33f87a9eb9 code=0x7ffc0000 [ 712.300203][ T26] audit: type=1326 audit(1770237665.095:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f87a9eb9 code=0x7ffc0000 [ 713.257534][ T26] audit: type=1326 audit(1770237665.135:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33f87ab747 code=0x7ffc0000 [ 713.409957][ T26] audit: type=1326 audit(1770237665.135:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f33f876a78e code=0x7ffc0000 [ 713.433882][ T26] audit: type=1326 audit(1770237665.135:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f33f876a78e code=0x7ffc0000 [ 713.480295][ T26] audit: type=1326 audit(1770237665.135:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f33f876a78e code=0x7ffc0000 [ 713.675310][ T26] audit: type=1326 audit(1770237665.135:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f33f876a78e code=0x7ffc0000 [ 714.321052][T13981] loop1: detected capacity change from 0 to 2048 [ 715.111453][ T26] audit: type=1326 audit(1770237665.145:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f87a9eb9 code=0x7ffc0000 [ 715.158872][T13981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.173285][T13982] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2658'. [ 715.235614][T13982] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 715.424125][T13982] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 715.478464][ T26] audit: type=1326 audit(1770237665.145:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33f87a9eb9 code=0x7ffc0000 [ 715.664135][ T26] audit: type=1326 audit(1770237665.145:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f87a9eb9 code=0x7ffc0000 [ 715.689167][T13993] netlink: 'syz.4.2663': attribute type 10 has an invalid length. [ 715.792493][T13993] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 715.821579][ T26] audit: type=1326 audit(1770237665.145:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33f87ab747 code=0x7ffc0000 [ 715.898121][ T26] audit: type=1326 audit(1770237665.145:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f33f876a78e code=0x7ffc0000 [ 715.957847][ T26] audit: type=1326 audit(1770237665.145:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f33f876a78e code=0x7ffc0000 [ 716.020436][ T26] audit: type=1326 audit(1770237665.145:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f33f876a78e code=0x7ffc0000 [ 716.077032][ T26] audit: type=1326 audit(1770237665.145:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f33f876a78e code=0x7ffc0000 [ 716.108607][ T26] audit: type=1326 audit(1770237665.145:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33f87a9eb9 code=0x7ffc0000 [ 716.151205][ T26] audit: type=1326 audit(1770237665.245:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13920 comm="syz.8.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f33f87a9eb9 code=0x7ffc0000 [ 716.649566][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.667974][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.719317][T14020] netlink: 208644 bytes leftover after parsing attributes in process `syz.7.2674'. [ 716.773960][T14020] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 716.845404][T14020] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 720.143168][T14073] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 721.090737][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 721.121385][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 721.226677][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 721.593376][T14101] netlink: 208644 bytes leftover after parsing attributes in process `syz.4.2701'. [ 721.632464][T14101] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 721.646016][T14101] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 724.873242][T14170] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2719'. [ 726.864447][T14179] overlayfs: failed to clone lowerpath [ 729.271907][T14207] 9pnet_virtio: no channels available for device syz [ 730.675252][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 730.675272][ T26] audit: type=1326 audit(1770237684.655:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz.1.2726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98fd361eb9 code=0x0 [ 731.048099][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2732'. [ 735.227229][T14251] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2738'. [ 735.270461][T14251] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2738'. [ 737.344358][ T7] Bluetooth: hci0: command 0x0c1a tx timeout [ 738.133321][ T4317] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.222137][T14289] hsr0 speed is unknown, defaulting to 1000 [ 738.235377][ T4317] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.338834][ T4317] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.446015][ T4317] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.806574][T14289] chnl_net:caif_netlink_parms(): no params data found [ 739.129179][T14289] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.163588][T14289] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.215697][T14289] device bridge_slave_0 entered promiscuous mode [ 739.260860][T14309] 9pnet_virtio: no channels available for device syz [ 739.347190][T14289] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.357248][T14289] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.388642][T14289] device bridge_slave_1 entered promiscuous mode [ 739.467488][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2756'. [ 739.516843][T14289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.549994][T14289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.748467][T14289] team0: Port device team_slave_0 added [ 739.792268][T14289] team0: Port device team_slave_1 added [ 740.143995][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 740.182807][T14289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.303883][T14289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.331000][T14289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.605171][T14289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.613836][T14289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.709092][T14289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.826213][ T4317] bond0: (slave wlan1): Releasing backup interface [ 740.917615][T14289] device hsr_slave_0 entered promiscuous mode [ 740.974162][T14289] device hsr_slave_1 entered promiscuous mode [ 740.997807][T14289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.015964][T14289] Cannot create hsr debugfs directory [ 742.214492][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 742.224415][ T4317] device hsr_slave_0 left promiscuous mode [ 742.230919][ T4317] device hsr_slave_1 left promiscuous mode [ 742.239081][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.268496][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.341996][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.395669][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.444423][ T4317] device bridge_slave_1 left promiscuous mode [ 742.450682][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.611832][ T4317] device bridge_slave_0 left promiscuous mode [ 742.623939][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.690070][ T4317] device veth1_macvtap left promiscuous mode [ 742.729960][ T4317] device veth0_macvtap left promiscuous mode [ 742.761812][ T4317] device veth1_vlan left promiscuous mode [ 744.463918][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 744.590258][ T4317] team0 (unregistering): Port device team_slave_1 removed [ 744.615727][ T4317] team0 (unregistering): Port device team_slave_0 removed [ 744.639030][ T4317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.670434][ T4317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.788462][ T4317] bond0 (unregistering): Released all slaves [ 744.993381][T14376] 9pnet_virtio: no channels available for device syz [ 746.120443][T14289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 746.223396][T14289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 746.291707][T14289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 746.356627][T14289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 746.544294][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 746.728641][T14289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.800724][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 746.816601][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 746.870732][T14289] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.910538][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 746.930088][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 746.960185][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.967361][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.101357][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 747.160811][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 747.205273][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 747.269795][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.277062][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.321990][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 747.371643][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 747.392455][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 747.486778][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 747.557483][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 747.591151][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 747.616478][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 747.639987][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 747.664301][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 747.699344][T14289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 747.731183][T14289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 747.763839][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 747.784063][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.203814][ T4202] block nbd1: Receive control failed (result -32) [ 748.225981][T14433] block nbd1: shutting down sockets [ 748.663925][T14456] device macvtap1 entered promiscuous mode [ 748.692761][T14456] device wlan0 entered promiscuous mode [ 748.818414][T14456] team0: Device macvtap1 failed to register rx_handler [ 748.894743][T14456] device wlan0 left promiscuous mode [ 749.050739][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 749.064156][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 749.090101][T14289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.748461][T14487] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 750.181476][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 750.215885][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 750.272755][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 750.301766][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 750.340945][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 750.398353][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 750.454184][T14289] device veth0_vlan entered promiscuous mode [ 750.513451][T14289] device veth1_vlan entered promiscuous mode [ 750.631720][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 750.689665][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 750.749765][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 750.787775][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 750.852911][T14289] device veth0_macvtap entered promiscuous mode [ 750.901090][T14289] device veth1_macvtap entered promiscuous mode [ 751.002893][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.071278][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.114638][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.156222][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.231007][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.319413][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.458127][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.464578][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.596842][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.614425][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.649425][T14289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.668339][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 752.680982][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 752.728557][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 752.768995][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 752.800544][T14516] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 752.979368][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.078911][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.116325][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.156297][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.199774][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.305368][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.330374][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.862531][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.882913][T14289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.911909][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 754.934593][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 755.089626][T14289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.098856][T14289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.107770][T14289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.133953][T14289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.457300][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.487294][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.577420][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 755.623475][ T4448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.690191][ T4448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.761380][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 757.493427][T14594] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2817'. [ 757.534181][T14594] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 757.567540][T14594] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 760.584038][T14644] fuse: Bad value for 'fd' [ 761.310866][T14657] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2829'. [ 761.329700][T14657] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 761.358356][T14657] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 761.585600][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2832'. [ 761.742909][T14670] trusted_key: encrypted_key: insufficient parameters specified [ 761.784325][T14671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 763.242787][T14693] hsr0 speed is unknown, defaulting to 1000 [ 764.479892][T14706] fuse: Unknown parameter 'ff' [ 765.093586][T14712] hsr0 speed is unknown, defaulting to 1000 [ 765.368592][T14712] chnl_net:caif_netlink_parms(): no params data found [ 767.369001][ T5471] Bluetooth: hci5: command 0x0409 tx timeout [ 767.399208][T14729] hsr0 speed is unknown, defaulting to 1000 [ 767.524666][T14712] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.564889][T14712] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.590285][T14712] device bridge_slave_0 entered promiscuous mode [ 767.617928][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2852'. [ 767.635829][T14712] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.663496][T14712] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.696025][T14712] device bridge_slave_1 entered promiscuous mode [ 767.724727][T14742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2852'. [ 767.835039][T14712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.903226][T14712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.011642][T14712] team0: Port device team_slave_0 added [ 768.040497][T14712] team0: Port device team_slave_1 added [ 768.163269][T14712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.180125][T14712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.527189][T14712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.747702][ T5470] Bluetooth: hci5: command 0x041b tx timeout [ 769.812093][T14712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.952843][T14712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.066882][T14712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.170893][T14462] bridge0: port 3(syz_tun) entered disabled state [ 770.315150][T14462] device syz_tun left promiscuous mode [ 770.395468][T14462] bridge0: port 3(syz_tun) entered disabled state [ 770.577926][T14712] device hsr_slave_0 entered promiscuous mode [ 770.611599][T14712] device hsr_slave_1 entered promiscuous mode [ 771.143923][T14778] netlink: 'syz.1.2861': attribute type 1 has an invalid length. [ 771.814001][ T5471] Bluetooth: hci5: command 0x040f tx timeout [ 772.674717][T14806] input: syz1 as /devices/virtual/input/input8 [ 772.861043][T14712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 772.924813][T14712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 773.008090][T14712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 773.061284][T14712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 773.421762][T14712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.488869][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 773.514094][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 773.573882][T14712] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.611568][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 773.638528][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 773.688969][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.696139][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.766105][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 773.815880][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 773.844907][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 773.881387][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.888581][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.897876][ T4235] Bluetooth: hci5: command 0x0419 tx timeout [ 773.953585][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 773.991978][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 774.019192][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 774.066975][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 774.135120][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 774.174897][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 774.192613][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 774.238311][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 774.295463][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 774.337853][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 774.374644][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 774.427737][T14712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 774.545226][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 774.784562][ T21] usb 2-1: device descriptor read/64, error -71 [ 774.910242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 774.928502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 774.949858][T14712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.018716][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 775.039240][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 775.064395][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 775.110506][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 775.138122][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 775.159460][T14712] device veth0_vlan entered promiscuous mode [ 775.177800][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 775.221495][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 775.238843][T14712] device veth1_vlan entered promiscuous mode [ 775.284027][ T21] usb 2-1: device descriptor read/64, error -71 [ 775.302116][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 775.340712][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 775.361138][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 775.381486][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 775.414324][ T145] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.426798][ T21] usb usb2-port1: attempt power cycle [ 775.461831][T14712] device veth0_macvtap entered promiscuous mode [ 775.506848][T14712] device veth1_macvtap entered promiscuous mode [ 775.555349][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 775.578313][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 775.617576][ T145] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.794773][T14712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.843783][T14712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.849040][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 775.853634][T14712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.853654][T14712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.918111][T14712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.953915][T14712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.973939][T14712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.996479][T14712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.013817][T14712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.019246][ T21] usb 2-1: device descriptor read/8, error -71 [ 776.054637][T14712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.080850][T14712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.101664][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 776.202991][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 776.322830][T14712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.333541][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 776.366879][T14712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.397373][T14712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.423843][T14712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.444071][ T21] usb 2-1: device descriptor read/8, error -71 [ 776.460798][T14712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.486910][T14712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.513840][T14712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.540754][T14712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.563371][T14712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.584226][ T21] usb usb2-port1: unable to enumerate USB device [ 776.594047][T14712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.627550][T14712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.663449][ T145] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.715696][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 776.735471][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 776.775215][T14712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.806813][T14712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.839837][T14712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.873243][T14712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.912204][ T145] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.178609][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.201927][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.288333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 777.472999][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.517246][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.603568][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 779.133848][ T1111] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 779.397315][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 779.513983][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 779.566010][ T1111] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 779.623778][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.681578][ T1111] usb 1-1: config 0 descriptor?? [ 779.798662][ T145] device hsr_slave_0 left promiscuous mode [ 779.806414][ T145] device hsr_slave_1 left promiscuous mode [ 779.844106][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.851586][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.900702][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.954124][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.987552][ T1111] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 780.120934][ T145] device bridge_slave_1 left promiscuous mode [ 780.131661][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.185639][ T1111] usb 1-1: USB disconnect, device number 5 [ 780.302954][ T145] device bridge_slave_0 left promiscuous mode [ 780.319696][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.373510][ T145] device veth1_macvtap left promiscuous mode [ 780.384161][ T145] device veth0_macvtap left promiscuous mode [ 781.355985][ T145] team0 (unregistering): Port device team_slave_1 removed [ 781.413955][T13508] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 781.454820][ T145] team0 (unregistering): Port device team_slave_0 removed [ 781.638425][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.723577][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.099693][ T145] bond0 (unregistering): Released all slaves [ 782.252679][T14923] device bridge0 entered promiscuous mode [ 782.260787][ T4185] hsr0 speed is unknown, defaulting to 1000 [ 782.310172][ T4185] ================================================================== [ 782.318811][ T4185] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 782.326049][ T4185] Read of size 4 at addr ffff88801fe660d8 by task kworker/1:3/4185 [ 782.333967][ T4185] [ 782.336308][ T4185] CPU: 1 PID: 4185 Comm: kworker/1:3 Not tainted syzkaller #0 [ 782.343790][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 782.353867][ T4185] Workqueue: infiniband ib_cache_event_task [ 782.359802][ T4185] Call Trace: [ 782.363102][ T4185] [ 782.366056][ T4185] dump_stack_lvl+0x188/0x250 [ 782.370765][ T4185] ? show_regs_print_info+0x20/0x20 [ 782.375985][ T4185] ? _printk+0xda/0x130 [ 782.380184][ T4185] ? load_image+0x400/0x400 [ 782.384715][ T4185] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 782.390218][ T4185] print_address_description+0x60/0x2d0 [ 782.395797][ T4185] ? siw_query_port+0x358/0x450 [ 782.400675][ T4185] kasan_report+0xdf/0x130 [ 782.405134][ T4185] ? siw_query_port+0x358/0x450 [ 782.410017][ T4185] siw_query_port+0x358/0x450 [ 782.414729][ T4185] ib_cache_update+0x1bf/0x9c0 [ 782.419534][ T4185] ? ib_cache_setup_one+0x5d0/0x5d0 [ 782.424760][ T4185] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 782.430771][ T4185] ? read_lock_is_recursive+0x10/0x10 [ 782.436172][ T4185] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 782.442102][ T4185] ? _raw_spin_unlock+0x40/0x40 [ 782.446980][ T4185] ib_cache_event_task+0xd4/0x1c0 [ 782.452030][ T4185] process_one_work+0x85f/0x1010 [ 782.457012][ T4185] ? worker_detach_from_pool+0x240/0x240 [ 782.462667][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 782.467976][ T4185] ? _raw_spin_lock_irq+0xb7/0xf0 [ 782.473021][ T4185] ? _raw_spin_lock_irqsave+0x100/0x100 [ 782.478592][ T4185] ? wq_worker_running+0x97/0x170 [ 782.483639][ T4185] worker_thread+0xaa6/0x1290 [ 782.488351][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 782.493568][ T4185] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 782.499499][ T4185] kthread+0x436/0x520 [ 782.503594][ T4185] ? rcu_lock_release+0x20/0x20 [ 782.508469][ T4185] ? kthread_blkcg+0xd0/0xd0 [ 782.513077][ T4185] ret_from_fork+0x1f/0x30 [ 782.517535][ T4185] [ 782.520568][ T4185] [ 782.522908][ T4185] Allocated by task 5747: [ 782.527245][ T4185] __kasan_kmalloc+0xb5/0xf0 [ 782.531852][ T4185] kvmalloc_node+0x84/0x130 [ 782.536373][ T4185] alloc_netdev_mqs+0x84/0xc40 [ 782.541157][ T4185] rtnl_create_link+0x2fb/0xa90 [ 782.546025][ T4185] rtnl_newlink+0x127c/0x1a50 [ 782.550723][ T4185] rtnetlink_rcv_msg+0x844/0xf30 [ 782.555680][ T4185] netlink_rcv_skb+0x1f5/0x440 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 782.560466][ T4185] netlink_unicast+0x774/0x920 [ 782.565252][ T4185] netlink_sendmsg+0x8ba/0xbe0 [ 782.570036][ T4185] __sys_sendto+0x46d/0x620 [ 782.574557][ T4185] __x64_sys_sendto+0xda/0xf0 [ 782.579251][ T4185] do_syscall_64+0x4c/0xa0 [ 782.583683][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 782.589594][ T4185] [ 782.591929][ T4185] Freed by task 145: [ 782.595832][ T4185] kasan_set_track+0x4b/0x70 [ 782.600444][ T4185] kasan_set_free_info+0x1f/0x40 [ 782.605400][ T4185] ____kasan_slab_free+0xd5/0x110 [ 782.610463][ T4185] slab_free_freelist_hook+0xea/0x170 [ 782.615856][ T4185] kfree+0xef/0x2a0 [ 782.619680][ T4185] device_release+0x92/0x1c0 [ 782.624288][ T4185] kobject_put+0x21d/0x460 [ 782.628718][ T4185] netdev_run_todo+0x8f4/0xa70 [ 782.633503][ T4185] default_device_exit_batch+0x369/0x3c0 [ 782.639152][ T4185] cleanup_net+0x791/0xba0 [ 782.643587][ T4185] process_one_work+0x85f/0x1010 [ 782.648542][ T4185] worker_thread+0xaa6/0x1290 [ 782.653236][ T4185] kthread+0x436/0x520 [ 782.657320][ T4185] ret_from_fork+0x1f/0x30 [ 782.661753][ T4185] [ 782.664084][ T4185] The buggy address belongs to the object at ffff88801fe66000 [ 782.664084][ T4185] which belongs to the cache kmalloc-cg-4k of size 4096 [ 782.678415][ T4185] The buggy address is located 216 bytes inside of [ 782.678415][ T4185] 4096-byte region [ffff88801fe66000, ffff88801fe67000) [ 782.691802][ T4185] The buggy address belongs to the page: [ 782.697473][ T4185] page:ffffea00007f9800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fe60 [ 782.707728][ T4185] head:ffffea00007f9800 order:3 compound_mapcount:0 compound_pincount:0 [ 782.716073][ T4185] memcg:ffff8880608f2ac1 [ 782.720331][ T4185] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 782.728335][ T4185] raw: 00fff00000010200 ffffea0001835800 0000000200000002 ffff888016c4c280 [ 782.736945][ T4185] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff8880608f2ac1 [ 782.745545][ T4185] page dumped because: kasan: bad access detected [ 782.751971][ T4185] page_owner tracks the page as allocated [ 782.757713][ T4185] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3568, ts 20345810236, free_ts 20339139020 [ 782.776845][ T4185] get_page_from_freelist+0x1bbd/0x1ca0 [ 782.782431][ T4185] __alloc_pages+0x1ee/0x480 [ 782.787065][ T4185] new_slab+0xc0/0x4b0 [ 782.791168][ T4185] ___slab_alloc+0x80a/0xdd0 [ 782.795780][ T4185] __kmalloc_node+0x200/0x3b0 [ 782.800489][ T4185] kvmalloc_node+0x84/0x130 [ 782.805010][ T4185] seq_read_iter+0x1f6/0xd50 [ 782.809623][ T4185] vfs_read+0x759/0xd60 [ 782.813791][ T4185] ksys_read+0x152/0x260 [ 782.818166][ T4185] do_syscall_64+0x4c/0xa0 [ 782.822615][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 782.828540][ T4185] page last free stack trace: [ 782.833362][ T4185] free_unref_page_prepare+0x637/0x6c0 [ 782.838859][ T4185] free_unref_page+0x8f/0x2a0 [ 782.843656][ T4185] __unfreeze_partials+0x1a5/0x200 [ 782.848792][ T4185] put_cpu_partial+0x12d/0x190 [ 782.853579][ T4185] qlist_free_all+0x35/0x90 [ 782.858100][ T4185] kasan_quarantine_reduce+0x150/0x160 [ 782.863582][ T4185] __kasan_slab_alloc+0x2f/0xd0 [ 782.868455][ T4185] slab_post_alloc_hook+0x4c/0x380 [ 782.873588][ T4185] __kmalloc+0x127/0x330 [ 782.877942][ T4185] tomoyo_realpath_from_path+0x118/0x610 [ 782.883595][ T4185] tomoyo_path_perm+0x23f/0x5d0 [ 782.888470][ T4185] security_inode_getattr+0xcf/0x120 [ 782.893779][ T4185] vfs_getattr+0x26/0x3a0 [ 782.898130][ T4185] vfs_statx+0x14e/0x500 [ 782.902384][ T4185] __x64_sys_newfstatat+0x15f/0x200 [ 782.907599][ T4185] do_syscall_64+0x4c/0xa0 [ 782.912040][ T4185] [ 782.914373][ T4185] Memory state around the buggy address: [ 782.920010][ T4185] ffff88801fe65f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 782.928086][ T4185] ffff88801fe66000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 782.936165][ T4185] >ffff88801fe66080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 782.944237][ T4185] ^ [ 782.951188][ T4185] ffff88801fe66100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 782.959265][ T4185] ffff88801fe66180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 782.967339][ T4185] ================================================================== [ 782.975408][ T4185] Disabling lock debugging due to kernel taint [ 783.105244][ T4185] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 783.112489][ T4185] CPU: 1 PID: 4185 Comm: kworker/1:3 Tainted: G B syzkaller #0 [ 783.121450][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 783.131528][ T4185] Workqueue: infiniband ib_cache_event_task [ 783.137527][ T4185] Call Trace: [ 783.140834][ T4185] [ 783.143787][ T4185] dump_stack_lvl+0x188/0x250 [ 783.148578][ T4185] ? show_regs_print_info+0x20/0x20 [ 783.153803][ T4185] ? load_image+0x400/0x400 [ 783.158335][ T4185] panic+0x2e5/0x810 [ 783.162257][ T4185] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 783.168476][ T4185] ? bpf_jit_dump+0xd0/0xd0 [ 783.173003][ T4185] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 783.178996][ T4185] ? _raw_spin_unlock+0x40/0x40 [ 783.183870][ T4185] ? siw_query_port+0x358/0x450 [ 783.188736][ T4185] check_panic_on_warn+0x80/0xa0 [ 783.193693][ T4185] ? siw_query_port+0x358/0x450 [ 783.198559][ T4185] end_report+0x6d/0xf0 [ 783.202734][ T4185] kasan_report+0x102/0x130 [ 783.207252][ T4185] ? siw_query_port+0x358/0x450 [ 783.212120][ T4185] siw_query_port+0x358/0x450 [ 783.216810][ T4185] ib_cache_update+0x1bf/0x9c0 [ 783.221594][ T4185] ? ib_cache_setup_one+0x5d0/0x5d0 [ 783.226802][ T4185] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 783.232778][ T4185] ? read_lock_is_recursive+0x10/0x10 [ 783.238135][ T4185] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 783.244021][ T4185] ? _raw_spin_unlock+0x40/0x40 [ 783.248857][ T4185] ib_cache_event_task+0xd4/0x1c0 [ 783.253871][ T4185] process_one_work+0x85f/0x1010 [ 783.258818][ T4185] ? worker_detach_from_pool+0x240/0x240 [ 783.264445][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 783.269734][ T4185] ? _raw_spin_lock_irq+0xb7/0xf0 [ 783.274750][ T4185] ? _raw_spin_lock_irqsave+0x100/0x100 [ 783.280330][ T4185] ? wq_worker_running+0x97/0x170 [ 783.285339][ T4185] worker_thread+0xaa6/0x1290 [ 783.290006][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 783.295192][ T4185] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 783.301073][ T4185] kthread+0x436/0x520 [ 783.305126][ T4185] ? rcu_lock_release+0x20/0x20 [ 783.309958][ T4185] ? kthread_blkcg+0xd0/0xd0 [ 783.314531][ T4185] ret_from_fork+0x1f/0x30 [ 783.318944][ T4185] [ 783.322227][ T4185] Kernel Offset: disabled [ 783.326558][ T4185] Rebooting in 86400 seconds..