last executing test programs: 6m56.683208975s ago: executing program 0 (id=1669): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200030200"/42, @ANYBLOB], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x40040c4) 6m55.592997191s ago: executing program 0 (id=1673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x0) 6m53.94938575s ago: executing program 0 (id=1679): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x240, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0xc2) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a01, "0f9d0000002000000000b82100"}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x29, 0x5, 0x24) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) readv(r2, &(0x7f00000026c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}], 0x3) listen(r3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) accept4$unix(r3, 0x0, 0x0, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 6m52.67332134s ago: executing program 0 (id=1682): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r2, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x19b, 0x81, 0x2, 0x601, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0x0, 0x0) 6m51.055091289s ago: executing program 0 (id=1685): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0xfffffffc00000000, 0x0, 0x0, 0x1e, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x6]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x9a0000, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @p_u16=&(0x7f0000000280)=0x4}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m50.876604613s ago: executing program 0 (id=1689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000380)='10000', 0x5) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) read$FUSE(r0, &(0x7f0000004780)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_open_dev$sndctrl(0x0, 0x1ff, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=ANY=[@ANYRESOCT=0x0], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x803, 0x6) unshare(0x42000000) 6m35.574892097s ago: executing program 32 (id=1689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000380)='10000', 0x5) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) read$FUSE(r0, &(0x7f0000004780)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_open_dev$sndctrl(0x0, 0x1ff, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=ANY=[@ANYRESOCT=0x0], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x803, 0x6) unshare(0x42000000) 2m16.839822801s ago: executing program 5 (id=2414): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f0000001080)=[{r4, 0x1580}, {r4, 0x30e4}, {r2, 0x2000}, {r2, 0x2000}, {r0}, {0xffffffffffffffff, 0x2010}], 0x6, &(0x7f00000010c0)={0x77359400}, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 2m16.698000644s ago: executing program 5 (id=2417): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) 2m15.099552842s ago: executing program 5 (id=2420): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) 2m14.802997219s ago: executing program 5 (id=2423): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80004}, 0x40c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1e8}}, 0x10004000) 2m13.592448167s ago: executing program 5 (id=2424): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x40040c4) 2m12.079004094s ago: executing program 5 (id=2429): landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x6, 0x2, 0x0, 0x4}, 0x30, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xef5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x4b6a, &(0x7f00000006c0)={0x2208, 0x5, 0x1, 0x0, 0x15, "0400"}) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/559, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x23b) 1m56.438327485s ago: executing program 33 (id=2429): landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x6, 0x2, 0x0, 0x4}, 0x30, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xef5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x4b6a, &(0x7f00000006c0)={0x2208, 0x5, 0x1, 0x0, 0x15, "0400"}) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/559, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x23b) 27.213277703s ago: executing program 6 (id=2451): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000050019000100000008001600000001"], 0x44}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 20.264162829s ago: executing program 6 (id=2451): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000050019000100000008001600000001"], 0x44}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 18.226789247s ago: executing program 2 (id=2636): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) 17.622463551s ago: executing program 6 (id=2451): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000050019000100000008001600000001"], 0x44}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 15.463091952s ago: executing program 2 (id=2633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 13.87594088s ago: executing program 3 (id=2637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x78, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x45a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd0ae}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x70}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.87531266s ago: executing program 2 (id=2638): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) syz_open_dev$usbfs(0x0, 0x205, 0x8401) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x1}) 12.6236867s ago: executing program 4 (id=2639): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) sendfile(r3, r2, 0x0, 0x20000) 11.056877167s ago: executing program 3 (id=2640): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 11.001157598s ago: executing program 1 (id=2641): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x43f, 0x6, 0x80c20048, r6}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x9}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 9.907416664s ago: executing program 6 (id=2451): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000050019000100000008001600000001"], 0x44}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 9.906348175s ago: executing program 1 (id=2643): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) 7.806118934s ago: executing program 1 (id=2644): io_uring_setup(0x1b54, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x10, 0x1) userfaultfd(0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r4 = syz_open_dev$radio(&(0x7f0000000500), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000540)={0x6, "9e58dca567d4404ef94f54652acb330ec0aabc93cd0dd92d6960273c928540d0", 0x800, 0x5, 0x8e, 0x0, 0x1}) 7.800401625s ago: executing program 2 (id=2645): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000"], 0x17) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) unshare(0x8040480) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) setsockopt$inet_buf(r1, 0x0, 0x20, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 7.794466315s ago: executing program 3 (id=2646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x78, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x45a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd0ae}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x70}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.793310005s ago: executing program 4 (id=2647): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200030200"/42], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x40040c4) 7.272218757s ago: executing program 4 (id=2648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x101}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x8, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439756e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x8, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7ff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x3}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x102, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0xfe, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6.475032786s ago: executing program 3 (id=2649): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000041000701fefffffffeffffff017c0000040042800c000180060006008d0a00ec0b00028004"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.396085838s ago: executing program 2 (id=2659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x78, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x45a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd0ae}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x70}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.394668248s ago: executing program 1 (id=2650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 6.182890923s ago: executing program 4 (id=2651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x78, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x45a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd0ae}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x70}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.941256909s ago: executing program 6 (id=2451): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000050019000100000008001600000001"], 0x44}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 3.751426241s ago: executing program 1 (id=2652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 3.745490551s ago: executing program 2 (id=2653): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) syz_open_dev$usbfs(0x0, 0x80, 0x113201) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 3.736439431s ago: executing program 3 (id=2654): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200030200"/37, @ANYBLOB], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x40040c4) 3.727701441s ago: executing program 4 (id=2655): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) syz_open_dev$usbfs(0x0, 0x205, 0x8401) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x1}) 2.657189597s ago: executing program 3 (id=2656): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) 1.25011441s ago: executing program 1 (id=2657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) tgkill(r2, r0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.24987182s ago: executing program 4 (id=2658): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200030200"/42], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x40040c4) 0s ago: executing program 6 (id=2451): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000050019000100000008001600000001"], 0x44}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 665439][ T6192] kvm [6186]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 264.730483][ T6192] kvm [6186]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x80 [ 265.054375][ T6210] device syzkaller0 entered promiscuous mode [ 265.405291][ T6216] device syzkaller0 entered promiscuous mode [ 266.982416][ T6255] device syzkaller0 entered promiscuous mode [ 267.020158][ T6254] device syzkaller0 entered promiscuous mode [ 267.514764][ T6269] device syzkaller0 entered promiscuous mode [ 268.481530][ T6275] device syzkaller0 entered promiscuous mode [ 268.606573][ T6282] rnbd_client L599: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 268.631679][ T6282] rtrs_client L2062: : Failed to resolve address, err: -19 [ 268.639870][ T6282] rtrs_client L2614: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 273.561004][ T6325] device syzkaller0 entered promiscuous mode [ 275.087077][ T6369] loop4: detected capacity change from 0 to 256 [ 275.888235][ T6370] rnbd_client L599: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 275.905516][ T6370] rtrs_client L2062: : Failed to resolve address, err: -19 [ 275.913568][ T6370] rtrs_client L2614: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 275.952363][ T6369] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 276.008040][ T26] audit: type=1800 audit(1788799947.651:13): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.546" name="file1" dev="loop4" ino=1048593 res=0 errno=0 [ 276.049248][ T6368] attempt to access beyond end of device [ 276.049248][ T6368] loop4: rw=0, want=304, limit=256 [ 277.058152][ T6359] device syzkaller0 entered promiscuous mode [ 277.130940][ T6383] loop3: detected capacity change from 0 to 512 [ 277.172946][ T6383] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 277.349647][ T6387] device syzkaller0 entered promiscuous mode [ 278.696829][ T6424] tipc: Enabled bearer , priority 0 [ 278.737356][ T6424] device syzkaller0 entered promiscuous mode [ 278.791866][ T4193] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 278.802265][ T4193] CPU: 0 PID: 4193 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 278.809864][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.817413][ T6424] tipc: Resetting bearer [ 278.819958][ T4193] Workqueue: hci0 hci_rx_work [ 278.830410][ T4193] Call Trace: [ 278.833719][ T4193] [ 278.836682][ T4193] dump_stack_lvl+0x188/0x250 [ 278.841405][ T4193] ? show_regs_print_info+0x20/0x20 [ 278.846638][ T4193] ? load_image+0x410/0x410 [ 278.851290][ T4193] sysfs_create_dir_ns+0x26a/0x290 [ 278.856447][ T4193] ? sysfs_warn_dup+0xa0/0xa0 [ 278.861158][ T4193] ? kthread+0x42e/0x520 [ 278.867167][ T4193] ? do_raw_spin_unlock+0x11d/0x230 [ 278.867200][ T4193] kobject_add_internal+0x5ba/0xcd0 [ 278.867232][ T4193] kobject_add+0x160/0x230 [ 278.867259][ T4193] ? kobject_init+0x1c0/0x1c0 [ 278.867284][ T4193] ? __raw_spin_lock_init+0x41/0x100 [ 278.867303][ T4193] ? klist_children_get+0x50/0x50 [ 278.867324][ T4193] ? get_device_parent+0x121/0x3e0 [ 278.867347][ T4193] device_add+0x470/0x1050 [ 278.867364][ T4193] ? device_initialize+0x2a5/0x4d0 [ 278.867388][ T4193] hci_conn_add_sysfs+0xd1/0x1e0 [ 278.867413][ T4193] le_conn_complete_evt+0xc2e/0x14d0 [ 278.867446][ T4193] ? cs_le_create_conn+0x5e0/0x5e0 [ 278.867473][ T4193] ? __mutex_trylock_common+0x15c/0x260 [ 278.867503][ T4193] hci_le_meta_evt+0x285/0x3ca0 [ 278.867525][ T4193] ? hci_event_packet+0x363/0x1310 [ 278.867553][ T4193] ? __lock_acquire+0x7b50/0x7b50 [ 278.867587][ T4193] ? hci_remote_host_features_evt+0x240/0x240 [ 278.867607][ T4193] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 278.867630][ T4193] ? mark_lock+0x94/0x320 [ 278.867657][ T4193] ? mutex_unlock+0x10/0x10 [ 278.867679][ T4193] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 278.867705][ T4193] ? lock_chain_count+0x20/0x20 [ 278.867726][ T4193] ? __rwlock_init+0x140/0x140 [ 278.867750][ T4193] hci_event_packet+0xe0b/0x1310 [ 278.867778][ T4193] ? _raw_spin_unlock+0x40/0x40 [ 278.867797][ T4193] ? rcu_lock_release+0x20/0x20 [ 278.867826][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 278.867851][ T4193] hci_rx_work+0x255/0xa10 [ 278.867886][ T4193] process_one_work+0x867/0xff0 [ 278.867922][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 278.867942][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 278.867969][ T4193] ? _raw_spin_lock_irq+0xb7/0xf0 [ 278.867989][ T4193] ? _raw_spin_lock_irqsave+0x100/0x100 [ 278.868011][ T4193] ? wq_worker_running+0x97/0x170 [ 278.868034][ T4193] worker_thread+0xad7/0x12a0 [ 278.868083][ T4193] kthread+0x42e/0x520 [ 278.868101][ T4193] ? rcu_lock_release+0x20/0x20 [ 278.868121][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 278.868142][ T4193] ret_from_fork+0x1f/0x30 [ 278.868177][ T4193] [ 278.868637][ T4193] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 278.868676][ T4193] Bluetooth: hci0: failed to register connection device [ 278.921200][ T6423] tipc: Resetting bearer [ 279.008483][ T6423] tipc: Disabling bearer [ 279.273227][ T6435] device syzkaller0 entered promiscuous mode [ 279.296669][ T6439] loop2: detected capacity change from 0 to 512 [ 279.545999][ T6439] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 280.338729][ T6444] loop1: detected capacity change from 0 to 512 [ 280.429997][ T6444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 280.520056][ T6444] System zones: 1-12 [ 280.553285][ T6444] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.567: missing EA_INODE flag [ 280.647489][ T6444] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.567: error while reading EA inode 12 err=-117 [ 280.672379][ T6444] EXT4-fs (loop1): 1 orphan inode deleted [ 280.724657][ T6444] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 280.966024][ T6456] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 280.974408][ T6456] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 280.982974][ T6456] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 282.924710][ T6488] tipc: Started in network mode [ 282.969667][ T6488] tipc: Node identity 2007ff, cluster identity 4711 [ 283.004446][ T6479] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 283.007005][ T6488] tipc: Node number set to 2099199 [ 283.048482][ T6479] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 283.063774][ T6491] loop3: detected capacity change from 0 to 512 [ 283.081572][ T6494] loop1: detected capacity change from 0 to 512 [ 283.123467][ T6487] loop4: detected capacity change from 0 to 4096 [ 283.135934][ T6491] EXT4-fs (loop3): Test dummy encryption mode enabled [ 283.169759][ T6491] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 283.205533][ T6494] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 283.285554][ T6487] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 283.345197][ T6491] EXT4-fs (loop3): 1 truncate cleaned up [ 283.350921][ T6491] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 285.177211][ T4319] Bluetooth: hci0: command 0x0406 tx timeout [ 286.144236][ T6517] device syzkaller0 entered promiscuous mode [ 286.218336][ T6524] device syzkaller0 entered promiscuous mode [ 286.428894][ T6533] loop2: detected capacity change from 0 to 512 [ 286.490731][ T6535] loop3: detected capacity change from 0 to 2048 [ 286.521169][ T6533] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 286.780207][ T6535] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noload,,errors=continue. Quota mode: none. [ 287.844584][ T6546] device syzkaller0 entered promiscuous mode [ 288.124962][ T6548] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 288.605686][ T6550] device syzkaller0 entered promiscuous mode [ 288.866408][ T6561] tipc: Enabled bearer , priority 0 [ 289.159439][ T6559] device syzkaller0 entered promiscuous mode [ 289.757298][ T6562] tipc: Resetting bearer [ 289.966040][ T6558] tipc: Resetting bearer [ 290.348588][ T6558] tipc: Disabling bearer [ 290.700897][ T5575] tipc: Node number set to 1481525234 [ 293.563487][ T6593] loop1: detected capacity change from 0 to 512 [ 293.659315][ T6593] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 294.925868][ T6605] using random self ethernet address [ 294.942486][ T6605] using random host ethernet address [ 296.508157][ T6617] block device autoloading is deprecated and will be removed. [ 296.859624][ T26] audit: type=1800 audit(1788799968.501:14): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.619" name="zoned" dev="configfs" ino=44814 res=0 errno=0 [ 296.915503][ T26] audit: type=1800 audit(1788799968.501:15): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.619" name="zone_nr_conv" dev="configfs" ino=44815 res=0 errno=0 [ 296.971207][ T26] audit: type=1800 audit(1788799968.501:16): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.619" name="power" dev="configfs" ino=44816 res=0 errno=0 [ 297.006299][ T26] audit: type=1800 audit(1788799968.601:17): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.619" name="zoned" dev="configfs" ino=44818 res=0 errno=0 [ 297.036138][ T26] audit: type=1800 audit(1788799968.601:18): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.619" name="power" dev="configfs" ino=44819 res=0 errno=0 [ 298.909871][ T6670] loop3: detected capacity change from 0 to 164 [ 299.721534][ T6675] loop3: detected capacity change from 0 to 512 [ 299.749339][ T6675] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 299.773323][ T6673] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 299.797750][ T6677] device syzkaller0 entered promiscuous mode [ 300.920622][ T6705] loop3: detected capacity change from 0 to 32768 [ 301.147080][ T6715] device syzkaller0 entered promiscuous mode [ 301.171104][ T6705] XFS (loop3): Mounting V5 Filesystem [ 301.328940][ T6705] XFS (loop3): Ending clean mount [ 301.337470][ T6705] XFS (loop3): Quotacheck needed: Please wait. [ 301.431529][ T6705] XFS (loop3): Quotacheck: Done. [ 302.176783][ T6738] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 302.461053][ T26] audit: type=1800 audit(1788799973.541:19): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.638" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 302.552198][ T6738] team0: Device veth1_vlan failed to register rx_handler [ 302.809028][ T6741] device syzkaller0 entered promiscuous mode [ 304.228802][ T4199] XFS (loop3): Unmounting Filesystem [ 305.075619][ T6773] loop2: detected capacity change from 0 to 512 [ 305.137743][ T6773] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 306.381698][ T6801] netlink: 'syz.4.661': attribute type 10 has an invalid length. [ 306.621094][ T6803] loop3: detected capacity change from 0 to 1024 [ 306.687334][ T6801] team0: Device veth1_vlan failed to register rx_handler [ 306.705708][ T6803] EXT4-fs (loop3): Ignoring removed bh option [ 306.725226][ T6803] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 306.902283][ T6803] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,nogrpid,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 307.749172][ T26] audit: type=1800 audit(1788799979.301:20): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.662" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 310.218922][ T6864] loop2: detected capacity change from 0 to 64 [ 310.279588][ T6864] netlink: 156 bytes leftover after parsing attributes in process `syz.2.676'. [ 310.671801][ T6878] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 310.767087][ T6878] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 312.209362][ T6907] netlink: 80 bytes leftover after parsing attributes in process `syz.2.687'. [ 316.242349][ T6940] i2c i2c-0: Failed to register i2c client tahvo at 0x02 (-16) [ 316.949776][ T6936] device syzkaller0 entered promiscuous mode [ 317.140078][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.146796][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.002919][ T6973] loop4: detected capacity change from 0 to 8 [ 320.991768][ T6993] device syzkaller0 entered promiscuous mode [ 321.250944][ T6996] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 321.269018][ T7000] tipc: Started in network mode [ 321.285908][ T6996] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 321.297624][ T7000] tipc: Node identity 0e12a3f46a28, cluster identity 4711 [ 321.330872][ T7000] tipc: Enabled bearer , priority 0 [ 321.384153][ T7002] tipc: Resetting bearer [ 321.593603][ T7006] device syzkaller0 entered promiscuous mode [ 321.611300][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 321.670755][ T6999] tipc: Resetting bearer [ 321.752372][ T6999] tipc: Disabling bearer [ 321.839163][ T7017] device syzkaller0 entered promiscuous mode [ 322.382852][ T7035] loop4: detected capacity change from 0 to 512 [ 322.465393][ T7035] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 323.902119][ T7066] loop3: detected capacity change from 0 to 512 [ 323.951722][ T7063] loop1: detected capacity change from 0 to 8 [ 324.016629][ T7066] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 326.860227][ T7111] loop2: detected capacity change from 0 to 512 [ 326.949877][ T7111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 327.011655][ T7111] System zones: 1-12 [ 327.083074][ T7111] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.744: missing EA_INODE flag [ 327.116506][ T7111] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.744: error while reading EA inode 12 err=-117 [ 327.173960][ T7111] EXT4-fs (loop2): 1 orphan inode deleted [ 327.203943][ T7111] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 328.427236][ T7128] loop3: detected capacity change from 0 to 512 [ 328.437025][ T7123] device syzkaller0 entered promiscuous mode [ 328.539431][ T7128] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 329.121302][ T7135] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 329.197005][ T7135] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 329.443623][ T7148] loop2: detected capacity change from 0 to 512 [ 329.492829][ T7148] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 331.882241][ T7230] device syzkaller0 entered promiscuous mode [ 331.991208][ T7215] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 332.057979][ T7215] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 332.084457][ T7236] loop2: detected capacity change from 0 to 512 [ 332.159779][ T7236] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 332.262136][ T7241] device bridge1 entered promiscuous mode [ 332.285896][ T7241] team0: Port device bridge1 added [ 333.514175][ T7253] loop4: detected capacity change from 0 to 512 [ 333.579851][ T7253] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 333.785817][ T7241] bridge0: port 3(team0) entered blocking state [ 333.836804][ T7241] bridge0: port 3(team0) entered disabled state [ 335.668092][ T7269] netlink: 84 bytes leftover after parsing attributes in process `syz.2.776'. [ 335.694188][ T7269] netlink: 'syz.2.776': attribute type 1 has an invalid length. [ 337.440132][ T7287] loop1: detected capacity change from 0 to 512 [ 337.477441][ T7284] device syzkaller0 entered promiscuous mode [ 337.506483][ T7292] tipc: Enabled bearer , priority 0 [ 337.523040][ T7292] device syzkaller0 entered promiscuous mode [ 337.601334][ T7287] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 337.622800][ T7296] tipc: Resetting bearer [ 337.750179][ T7298] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 337.777609][ T7291] tipc: Resetting bearer [ 337.882780][ T7291] tipc: Disabling bearer [ 337.923548][ T7304] loop1: detected capacity change from 0 to 256 [ 337.994058][ T7304] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.235192][ T7316] MTRR 1 not used [ 338.862347][ T7322] loop3: detected capacity change from 0 to 512 [ 339.004970][ T7322] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 339.665368][ T7346] loop2: detected capacity change from 0 to 256 [ 340.238369][ T7346] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 340.361459][ T26] audit: type=1800 audit(1788800011.971:21): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.797" name="file1" dev="loop2" ino=1048595 res=0 errno=0 [ 344.947444][ T7401] loop4: detected capacity change from 0 to 128 [ 345.001528][ T7392] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 345.047700][ T7392] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 345.199992][ T7401] attempt to access beyond end of device [ 345.199992][ T7401] loop4: rw=2049, want=1041, limit=128 [ 345.299819][ T7410] attempt to access beyond end of device [ 345.299819][ T7410] loop4: rw=524288, want=369, limit=128 [ 345.341989][ T7401] attempt to access beyond end of device [ 345.341989][ T7401] loop4: rw=0, want=151, limit=128 [ 345.422695][ T7410] attempt to access beyond end of device [ 345.422695][ T7410] loop4: rw=0, want=146, limit=128 [ 345.435218][ T7422] loop3: detected capacity change from 0 to 512 [ 345.466019][ T7410] Buffer I/O error on dev loop4, logical block 145, async page read [ 345.488234][ T7422] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 345.491442][ T7410] attempt to access beyond end of device [ 345.491442][ T7410] loop4: rw=0, want=147, limit=128 [ 345.600709][ T7410] Buffer I/O error on dev loop4, logical block 146, async page read [ 345.748089][ T7410] attempt to access beyond end of device [ 345.748089][ T7410] loop4: rw=0, want=148, limit=128 [ 346.003308][ T7410] Buffer I/O error on dev loop4, logical block 147, async page read [ 346.110307][ T7410] attempt to access beyond end of device [ 346.110307][ T7410] loop4: rw=0, want=149, limit=128 [ 346.227956][ T7410] Buffer I/O error on dev loop4, logical block 148, async page read [ 346.317056][ T7410] attempt to access beyond end of device [ 346.317056][ T7410] loop4: rw=0, want=150, limit=128 [ 346.420981][ T7410] Buffer I/O error on dev loop4, logical block 149, async page read [ 346.520890][ T7410] attempt to access beyond end of device [ 346.520890][ T7410] loop4: rw=0, want=151, limit=128 [ 346.614104][ T7410] Buffer I/O error on dev loop4, logical block 150, async page read [ 346.622946][ T7410] attempt to access beyond end of device [ 346.622946][ T7410] loop4: rw=0, want=152, limit=128 [ 346.633879][ T7410] Buffer I/O error on dev loop4, logical block 151, async page read [ 346.642879][ T7410] Buffer I/O error on dev loop4, logical block 152, async page read [ 346.712441][ T7431] loop2: detected capacity change from 0 to 512 [ 347.078283][ T7431] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 349.181344][ T7454] loop2: detected capacity change from 0 to 8 [ 350.432535][ T7476] tipc: Enabled bearer , priority 0 [ 350.489724][ T7476] device syzkaller0 entered promiscuous mode [ 350.575775][ T7479] tipc: Resetting bearer [ 350.617157][ T7475] tipc: Resetting bearer [ 350.659270][ T7475] tipc: Disabling bearer [ 351.078526][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.850788][ T7506] loop4: detected capacity change from 0 to 512 [ 351.864238][ T7506] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 353.390242][ T7525] loop4: detected capacity change from 0 to 1024 [ 354.018008][ T7531] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 354.612093][ T7525] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 354.785094][ T7535] device syzkaller0 entered promiscuous mode [ 354.906143][ T7535] 0: reclassify loop, rule prio 0, protocol 700 [ 354.997195][ T7525] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 355.250695][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 355.991099][ T7561] netlink: 64 bytes leftover after parsing attributes in process `syz.2.866'. [ 356.570661][ T7568] jffs2: notice: (7568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 356.842694][ T7567] loop4: detected capacity change from 0 to 1024 [ 356.866342][ T7568] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 356.875386][ T7568] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 356.905032][ T7568] loop3: detected capacity change from 0 to 1024 [ 356.964772][ T7567] EXT4-fs (loop4): Ignoring removed bh option [ 356.975786][ T7567] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.034964][ T7568] hfsplus: unable to load nls mapping "cp43" [ 357.042120][ T7568] hfsplus: unable to parse mount options [ 357.074826][ T7567] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,nogrpid,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 357.287789][ T7579] device syzkaller0 entered promiscuous mode [ 357.674097][ T26] audit: type=1800 audit(1788800029.311:22): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.862" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 358.960127][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 358.990910][ T7606] loop3: detected capacity change from 0 to 512 [ 359.055538][ T7606] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 359.160534][ T7599] tipc: Started in network mode [ 359.167656][ T7599] tipc: Node identity ac1414aa, cluster identity 4711 [ 359.175973][ T7599] tipc: New replicast peer: 172.20.20.187 [ 359.185760][ T7599] tipc: Enabled bearer , priority 10 [ 360.314033][ T4258] tipc: Node number set to 2886997162 [ 360.535895][ T7614] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 360.535950][ T7614] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 361.193685][ T7644] loop2: detected capacity change from 0 to 512 [ 361.266646][ T7644] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 363.859792][ T7673] No such timeout policy "syz1" [ 363.976843][ T7682] capability: warning: `syz.0.901' uses 32-bit capabilities (legacy support in use) [ 364.132273][ T7677] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 364.190909][ T7677] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 365.412884][ T7698] loop3: detected capacity change from 0 to 512 [ 365.451049][ T7697] device syzkaller0 entered promiscuous mode [ 365.525192][ T7698] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 366.214297][ T7721] team0: Port device bridge0 removed [ 366.330655][ T7721] device bridge_slave_0 left promiscuous mode [ 366.391144][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.543851][ T7721] device bridge_slave_1 left promiscuous mode [ 366.555334][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.600744][ T7721] bond0: (slave bond_slave_0): Releasing backup interface [ 366.673493][ T7721] bond0: (slave bond_slave_1): Releasing backup interface [ 366.795105][ T7721] team0: Port device team_slave_0 removed [ 366.837280][ T7721] team0: Port device team_slave_1 removed [ 366.868700][ T7721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.885269][ T7721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.898555][ T7721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.920789][ T7741] loop2: detected capacity change from 0 to 4096 [ 366.950171][ T7721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.112865][ T7741] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 367.319594][ T7750] device syzkaller0 entered promiscuous mode [ 368.494067][ T7756] ntfs3: loop2: failed to convert "0000" to iso8859-2 [ 368.519405][ T7756] ntfs3: loop2: failed to convert name for inode 1e. [ 369.939320][ T7775] loop4: detected capacity change from 0 to 512 [ 369.973070][ T7777] loop2: detected capacity change from 0 to 512 [ 370.113488][ T7777] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 370.123744][ T7775] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 371.300597][ T7802] loop2: detected capacity change from 0 to 512 [ 371.385397][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.460092][ T7802] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 371.738342][ T7809] device syzkaller0 entered promiscuous mode [ 376.769726][ T7856] loop3: detected capacity change from 0 to 128 [ 377.041110][ T7856] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 377.195225][ T7856] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 378.589901][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.596732][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.859933][ T7916] loop3: detected capacity change from 0 to 512 [ 382.001168][ T7916] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 382.785248][ T7949] loop4: detected capacity change from 0 to 1024 [ 382.850614][ T7949] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 382.860828][ T7949] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 382.874155][ T7949] EXT4-fs error (device loop4): ext4_get_journal_inode:5187: inode #5: comm syz.4.970: unexpected bad inode w/o EXT4_IGET_BAD [ 382.888816][ T7949] EXT4-fs (loop4): no journal found [ 384.257566][ T7949] syz.4.970 (7949) used greatest stack depth: 17360 bytes left [ 384.344593][ T7970] loop4: detected capacity change from 0 to 512 [ 384.503580][ T7970] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 385.667422][ T4187] Bluetooth: hci4: command 0x0405 tx timeout [ 387.106025][ T7992] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 387.113985][ T7992] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 388.272608][ T8012] loop4: detected capacity change from 0 to 512 [ 388.296541][ T7996] kvm [7995]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x8e, nop [ 388.498792][ T8012] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 389.526037][ T8010] device syzkaller0 entered promiscuous mode [ 389.836555][ T8024] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 389.845461][ T8024] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 390.118767][ T8031] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 390.135664][ T8031] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 390.458435][ T8052] loop4: detected capacity change from 0 to 512 [ 390.496120][ T8052] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 394.779445][ T8096] device syzkaller0 entered promiscuous mode [ 395.999687][ T8104] device syzkaller0 entered promiscuous mode [ 396.240869][ T8107] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 396.285253][ T8107] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 396.678000][ T8115] loop4: detected capacity change from 0 to 512 [ 396.801820][ T8115] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 398.398469][ T8134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'. [ 398.414729][ T8134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'. [ 399.804759][ T8147] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 399.845164][ T8147] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 399.913713][ T8158] loop4: detected capacity change from 0 to 512 [ 399.917669][ T8156] syz.2.1025 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 399.993593][ T8158] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 400.035104][ T8156] CPU: 1 PID: 8156 Comm: syz.2.1025 Not tainted syzkaller #0 [ 400.042557][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.052679][ T8156] Call Trace: [ 400.056145][ T8156] [ 400.059167][ T8156] dump_stack_lvl+0x188/0x250 [ 400.063982][ T8156] ? show_regs_print_info+0x20/0x20 [ 400.069282][ T8156] ? load_image+0x410/0x410 [ 400.073991][ T8156] ? local_lock_release+0x170/0x170 [ 400.079295][ T8156] ? __rwlock_init+0x140/0x140 [ 400.084181][ T8156] dump_header+0xd9/0x780 [ 400.088554][ T8156] oom_kill_process+0x20e/0x3d0 [ 400.093536][ T8156] out_of_memory+0xdb2/0x1190 [ 400.098241][ T8156] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 400.103995][ T8156] ? mutex_lock_io_nested+0x60/0x60 [ 400.109298][ T8156] ? unregister_oom_notifier+0x20/0x20 [ 400.114803][ T8156] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 400.120378][ T8156] ? mem_cgroup_oom_trylock+0x210/0x210 [ 400.125960][ T8156] ? do_raw_spin_unlock+0x11d/0x230 [ 400.131308][ T8156] try_charge_memcg+0x1075/0x15b0 [ 400.136411][ T8156] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 400.142274][ T8156] ? rcu_lock_acquire+0x30/0x30 [ 400.147174][ T8156] obj_cgroup_charge_pages+0x87/0x190 [ 400.152577][ T8156] ? __memcg_kmem_charge_page+0x380/0x380 [ 400.158346][ T8156] __memcg_kmem_charge_page+0x2fe/0x380 [ 400.163966][ T8156] __alloc_pages+0x222/0x480 [ 400.168684][ T8156] ? zone_statistics+0x170/0x170 [ 400.173688][ T8156] ? alloc_pages+0x452/0x560 [ 400.178428][ T8156] pte_alloc_one+0x7b/0x310 [ 400.183026][ T8156] ? rcu_lock_release+0x20/0x20 [ 400.187917][ T8156] __pte_alloc+0x21/0x150 [ 400.192331][ T8156] ? walk_to_pmd+0x19c/0x240 [ 400.196952][ T8156] vm_insert_pages+0x604/0x700 [ 400.201758][ T8156] tcp_zerocopy_vm_insert_batch+0xc0/0x1f0 [ 400.207643][ T8156] ? __lock_acquire+0x13dc/0x7b50 [ 400.212859][ T8156] ? skb_advance_to_frag+0x240/0x240 [ 400.218177][ T8156] tcp_zerocopy_receive+0x113c/0x1fa0 [ 400.223588][ T8156] ? tcp_enable_tx_delay+0x70/0x70 [ 400.228733][ T8156] ? mark_lock+0x94/0x320 [ 400.233103][ T8156] ? _local_bh_enable+0xa0/0xa0 [ 400.238052][ T8156] tcp_getsockopt+0x1d5c/0x2530 [ 400.242928][ T8156] ? tcp_bpf_bypass_getsockopt+0x40/0x40 [ 400.248598][ T8156] ? aa_label_sk_perm+0x3e6/0x540 [ 400.253726][ T8156] ? aa_sk_perm+0x910/0x910 [ 400.258271][ T8156] ? __might_sleep+0xf0/0xf0 [ 400.263005][ T8156] ? rcu_lock_release+0x9/0x20 [ 400.267818][ T8156] ? __lock_acquire+0x7b50/0x7b50 [ 400.272974][ T8156] ? aa_sk_perm+0x7dc/0x910 [ 400.277507][ T8156] ? aa_af_perm+0x340/0x340 [ 400.282044][ T8156] ? aa_sock_opt_perm+0x74/0x100 [ 400.287005][ T8156] ? sock_common_getsockopt+0x29/0xa0 [ 400.292623][ T8156] ? sock_recv_errqueue+0x580/0x580 [ 400.297844][ T8156] __sys_getsockopt+0x1b0/0x230 [ 400.302794][ T8156] __x64_sys_getsockopt+0xb1/0xc0 [ 400.307846][ T8156] do_syscall_64+0x4c/0xa0 [ 400.312535][ T8156] ? clear_bhb_loop+0x30/0x80 [ 400.317290][ T8156] ? clear_bhb_loop+0x30/0x80 [ 400.322003][ T8156] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.327943][ T8156] RIP: 0033:0x7fa70fd05159 [ 400.332434][ T8156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.352130][ T8156] RSP: 002b:00007fa70df5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 400.360568][ T8156] RAX: ffffffffffffffda RBX: 00007fa70ff8cfa0 RCX: 00007fa70fd05159 [ 400.368559][ T8156] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 400.376545][ T8156] RBP: 00007fa70fd9c024 R08: 00002000000000c0 R09: 0000000000000000 [ 400.384548][ T8156] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 400.392545][ T8156] R13: 00007fa70ff8d038 R14: 00007fa70ff8cfa0 R15: 00007ffd8f6aec98 [ 400.400562][ T8156] [ 401.165178][ T8156] memory: usage 0kB, limit 0kB, failcnt 19 [ 401.171210][ T8156] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 401.189567][ T8156] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 401.205381][ T8156] Memory cgroup stats for /syz2/test: [ 401.205712][ T8156] anon 0 [ 401.205712][ T8156] file 0 [ 401.205712][ T8156] kernel_stack 0 [ 401.205712][ T8156] pagetables 0 [ 401.205712][ T8156] percpu 0 [ 401.205712][ T8156] sock 0 [ 401.205712][ T8156] shmem 0 [ 401.205712][ T8156] file_mapped 0 [ 401.205712][ T8156] file_dirty 0 [ 401.205712][ T8156] file_writeback 0 [ 401.205712][ T8156] swapcached 0 [ 401.205712][ T8156] anon_thp 0 [ 401.205712][ T8156] file_thp 0 [ 401.205712][ T8156] shmem_thp 0 [ 401.205712][ T8156] inactive_anon 0 [ 401.205712][ T8156] active_anon 0 [ 401.205712][ T8156] inactive_file 0 [ 401.205712][ T8156] active_file 0 [ 401.205712][ T8156] unevictable 0 [ 401.205712][ T8156] slab_reclaimable 0 [ 401.205712][ T8156] slab_unreclaimable 0 [ 401.205712][ T8156] slab 0 [ 401.205712][ T8156] workingset_refault_anon 0 [ 401.205712][ T8156] workingset_refault_file 0 [ 401.205712][ T8156] workingset_activate_anon 0 [ 401.205712][ T8156] workingset_activate_file 0 [ 401.306588][ T8172] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 401.405174][ T8172] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 401.507063][ T8156] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1025,pid=8155,uid=0 [ 401.523555][ T8156] Memory cgroup out of memory: Killed process 8156 (syz.2.1025) total-vm:104292kB, anon-rss:1436kB, file-rss:22768kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 405.250720][ T8213] mmap: syz.2.1043 (8213) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 405.479528][ T8209] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 405.486897][ T8209] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 405.753039][ T8211] jffs2: notice: (8211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 406.272944][ T8209] vhci_hcd vhci_hcd.0: Device attached [ 406.395228][ T21] vhci_hcd: vhci_device speed not set [ 406.475202][ T21] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 407.893350][ T8212] vhci_hcd: connection reset by peer [ 407.905902][ T7195] vhci_hcd: stop threads [ 407.910277][ T7195] vhci_hcd: release socket [ 407.974914][ T7195] vhci_hcd: disconnect device [ 409.059742][ T8227] syz.3.1047 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 409.123807][ T8227] CPU: 1 PID: 8227 Comm: syz.3.1047 Not tainted syzkaller #0 [ 409.131394][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.141496][ T8227] Call Trace: [ 409.144814][ T8227] [ 409.147963][ T8227] dump_stack_lvl+0x188/0x250 [ 409.152700][ T8227] ? show_regs_print_info+0x20/0x20 [ 409.157991][ T8227] ? load_image+0x410/0x410 [ 409.162550][ T8227] ? local_lock_release+0x170/0x170 [ 409.167839][ T8227] ? __rwlock_init+0x140/0x140 [ 409.172748][ T8227] dump_header+0xd9/0x780 [ 409.177129][ T8227] oom_kill_process+0x20e/0x3d0 [ 409.182027][ T8227] out_of_memory+0xdb2/0x1190 [ 409.186757][ T8227] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 409.192450][ T8227] ? mutex_lock_io_nested+0x60/0x60 [ 409.197708][ T8227] ? unregister_oom_notifier+0x20/0x20 [ 409.203319][ T8227] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 409.209025][ T8227] ? mem_cgroup_oom_trylock+0x210/0x210 [ 409.214736][ T8227] ? do_raw_spin_unlock+0x11d/0x230 [ 409.219991][ T8227] try_charge_memcg+0x1075/0x15b0 [ 409.225209][ T8227] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 409.231086][ T8227] ? rcu_lock_acquire+0x30/0x30 [ 409.236020][ T8227] obj_cgroup_charge_pages+0x87/0x190 [ 409.241559][ T8227] ? __memcg_kmem_charge_page+0x380/0x380 [ 409.247355][ T8227] __memcg_kmem_charge_page+0x2fe/0x380 [ 409.252963][ T8227] __alloc_pages+0x222/0x480 [ 409.257629][ T8227] ? zone_statistics+0x170/0x170 [ 409.262630][ T8227] ? alloc_pages+0x452/0x560 [ 409.267379][ T8227] pte_alloc_one+0x7b/0x310 [ 409.271928][ T8227] ? rcu_lock_release+0x20/0x20 [ 409.276829][ T8227] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 409.282522][ T8227] ? lockdep_hardirqs_on+0x94/0x140 [ 409.287957][ T8227] __pte_alloc+0x21/0x150 [ 409.292336][ T8227] ? walk_to_pmd+0x19c/0x240 [ 409.297105][ T8227] vm_insert_pages+0x604/0x700 [ 409.301939][ T8227] ? lock_acquire+0x208/0x400 [ 409.306682][ T8227] tcp_zerocopy_vm_insert_batch+0xc0/0x1f0 [ 409.312638][ T8227] ? __lock_acquire+0x13dc/0x7b50 [ 409.317721][ T8227] ? skb_advance_to_frag+0x240/0x240 [ 409.323075][ T8227] tcp_zerocopy_receive+0x113c/0x1fa0 [ 409.328531][ T8227] ? tcp_enable_tx_delay+0x70/0x70 [ 409.333684][ T8227] ? lockdep_hardirqs_on+0x94/0x140 [ 409.338937][ T8227] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 409.344622][ T8227] ? mark_lock+0x94/0x320 [ 409.349033][ T8227] ? _local_bh_enable+0xa0/0xa0 [ 409.353982][ T8227] tcp_getsockopt+0x1d5c/0x2530 [ 409.358979][ T8227] ? tcp_bpf_bypass_getsockopt+0x40/0x40 [ 409.364656][ T8227] ? aa_label_sk_perm+0x3e6/0x540 [ 409.369745][ T8227] ? aa_sk_perm+0x910/0x910 [ 409.374310][ T8227] ? __might_sleep+0xf0/0xf0 [ 409.378958][ T8227] ? rcu_lock_release+0x9/0x20 [ 409.383798][ T8227] ? __lock_acquire+0x7b50/0x7b50 [ 409.388878][ T8227] ? preempt_schedule_irq+0xe6/0x160 [ 409.394400][ T8227] ? aa_sk_perm+0x7dc/0x910 [ 409.398967][ T8227] ? aa_af_perm+0x340/0x340 [ 409.403531][ T8227] ? aa_sock_opt_perm+0x74/0x100 [ 409.408604][ T8227] ? sock_common_getsockopt+0x29/0xa0 [ 409.414151][ T8227] ? sock_recv_errqueue+0x580/0x580 [ 409.419574][ T8227] __sys_getsockopt+0x1b0/0x230 [ 409.424536][ T8227] __x64_sys_getsockopt+0xb1/0xc0 [ 409.429609][ T8227] do_syscall_64+0x4c/0xa0 [ 409.434076][ T8227] ? clear_bhb_loop+0x30/0x80 [ 409.438829][ T8227] ? clear_bhb_loop+0x30/0x80 [ 409.443579][ T8227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 409.449520][ T8227] RIP: 0033:0x7f7172fe8159 [ 409.453982][ T8227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.473629][ T8227] RSP: 002b:00007f7171240028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 409.482098][ T8227] RAX: ffffffffffffffda RBX: 00007f717326ffa0 RCX: 00007f7172fe8159 [ 409.490120][ T8227] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 409.498144][ T8227] RBP: 00007f717307f024 R08: 00002000000000c0 R09: 0000000000000000 [ 409.506161][ T8227] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 409.514180][ T8227] R13: 00007f7173270038 R14: 00007f717326ffa0 R15: 00007ffd11249038 [ 409.522224][ T8227] [ 410.445149][ T8227] memory: usage 0kB, limit 0kB, failcnt 19 [ 410.458655][ T8227] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 410.467361][ T8227] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 410.501564][ T8227] Memory cgroup stats for /syz3/test: [ 410.501792][ T8227] anon 0 [ 410.501792][ T8227] file 0 [ 410.501792][ T8227] kernel_stack 0 [ 410.501792][ T8227] pagetables 0 [ 410.501792][ T8227] percpu 0 [ 410.501792][ T8227] sock 0 [ 410.501792][ T8227] shmem 0 [ 410.501792][ T8227] file_mapped 0 [ 410.501792][ T8227] file_dirty 0 [ 410.501792][ T8227] file_writeback 0 [ 410.501792][ T8227] swapcached 0 [ 410.501792][ T8227] anon_thp 0 [ 410.501792][ T8227] file_thp 0 [ 410.501792][ T8227] shmem_thp 0 [ 410.501792][ T8227] inactive_anon 0 [ 410.501792][ T8227] active_anon 0 [ 410.501792][ T8227] inactive_file 0 [ 410.501792][ T8227] active_file 0 [ 410.501792][ T8227] unevictable 0 [ 410.501792][ T8227] slab_reclaimable 0 [ 410.501792][ T8227] slab_unreclaimable 0 [ 410.501792][ T8227] slab 0 [ 410.501792][ T8227] workingset_refault_anon 0 [ 410.501792][ T8227] workingset_refault_file 0 [ 410.501792][ T8227] workingset_activate_anon 0 [ 410.501792][ T8227] workingset_activate_file 0 [ 410.655377][ T8227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1047,pid=8226,uid=0 [ 410.673214][ T8227] Memory cgroup out of memory: Killed process 8226 (syz.3.1047) total-vm:104292kB, anon-rss:1420kB, file-rss:22668kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 410.696125][ T8240] jffs2: notice: (8240) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 410.777468][ T8243] loop2: detected capacity change from 0 to 512 [ 410.879414][ T8243] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 412.069947][ T8265] loop4: detected capacity change from 0 to 512 [ 412.685377][ T21] vhci_hcd: vhci_device speed not set [ 413.709636][ T8265] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 413.858477][ T8271] loop2: detected capacity change from 0 to 128 [ 413.959178][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 414.035259][ T8274] bond0: option arp_all_targets: invalid value (183) [ 414.107622][ T8271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 414.132873][ T8280] device syzkaller0 entered promiscuous mode [ 414.151940][ T8271] System zones: 1-3, 19-19, 35-36 [ 414.175998][ T8271] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 414.246214][ T8271] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 417.404006][ T8305] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 417.509326][ T8317] device syzkaller0 entered promiscuous mode [ 417.551856][ T8305] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 419.007239][ T8333] process 'syz.2.1080' launched './file2' with NULL argv: empty string added [ 419.018367][ T8336] loop4: detected capacity change from 0 to 128 [ 419.084764][ T8336] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 419.177336][ T8336] System zones: 1-3, 19-19, 35-36 [ 419.322560][ T8336] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 420.255413][ T8336] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 420.338134][ T8346] loop3: detected capacity change from 0 to 128 [ 420.484057][ T8350] loop2: detected capacity change from 0 to 512 [ 420.583555][ T8350] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 420.902895][ T8346] handle_bad_sector: 1 callbacks suppressed [ 420.902948][ T8346] attempt to access beyond end of device [ 420.902948][ T8346] loop3: rw=2049, want=505, limit=128 [ 421.437985][ T4316] attempt to access beyond end of device [ 421.437985][ T4316] loop3: rw=1, want=151, limit=128 [ 421.468642][ T4316] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 421.605493][ T8362] loop3: detected capacity change from 0 to 512 [ 421.686954][ T8362] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 423.077962][ T8373] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 423.095558][ T8373] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 425.363085][ T8395] team0: Port device bridge0 removed [ 427.048006][ T4264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.189449][ T4264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.274351][ T4264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.409135][ T4264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.199815][ T8450] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1110'. [ 429.703559][ T4258] Bluetooth: hci4: command 0x0409 tx timeout [ 429.712049][ T8468] team0: Port device bridge0 removed [ 429.771667][ T8468] device bridge_slave_0 left promiscuous mode [ 429.801958][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.857994][ T8468] device bridge_slave_1 left promiscuous mode [ 429.891445][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.049945][ T8468] bond0: (slave bond_slave_0): Releasing backup interface [ 430.275461][ T8468] bond0: (slave bond_slave_1): Releasing backup interface [ 430.461662][ T8468] team0: Port device team_slave_0 removed [ 430.556744][ T8468] team0: Port device team_slave_1 removed [ 430.563679][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.636781][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.656612][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.684853][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.775566][ T8468] team0: Port device macvlan2 removed [ 430.796005][ T8468] team0: Port device bridge1 removed [ 431.064774][ T4264] tipc: Left network mode [ 431.153235][ T8485] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 431.199193][ T8485] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 431.221324][ T8445] chnl_net:caif_netlink_parms(): no params data found [ 431.661674][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.857105][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.906109][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 431.914468][ T8445] device bridge_slave_0 entered promiscuous mode [ 431.946744][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.954829][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.326103][ T8445] device bridge_slave_1 entered promiscuous mode [ 432.758605][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.791735][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.901286][ T8546] loop4: detected capacity change from 0 to 512 [ 433.300919][ T8445] team0: Port device team_slave_0 added [ 433.405373][ T8445] team0: Port device team_slave_1 added [ 433.481007][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.488351][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.536779][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.593519][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.623016][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.705571][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.725622][ T8546] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 433.951000][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 434.174076][ T8445] device hsr_slave_0 entered promiscuous mode [ 434.211263][ T8445] device hsr_slave_1 entered promiscuous mode [ 434.230041][ T8445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.253129][ T8445] Cannot create hsr debugfs directory [ 434.944550][ T8598] loop2: detected capacity change from 0 to 256 [ 435.630153][ T8603] udc-core: couldn't find an available UDC or it's busy [ 435.649478][ T8603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 435.866575][ T4264] device hsr_slave_0 left promiscuous mode [ 435.876849][ T4264] device hsr_slave_1 left promiscuous mode [ 435.894807][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.903922][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.928004][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.936968][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.953815][ T4264] device bridge_slave_1 left promiscuous mode [ 435.967851][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.993188][ T4264] device bridge_slave_0 left promiscuous mode [ 436.010078][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.015738][ T4258] Bluetooth: hci4: command 0x0419 tx timeout [ 436.057750][ T4264] device veth1_macvtap left promiscuous mode [ 436.074287][ T4264] device veth0_macvtap left promiscuous mode [ 436.085646][ T4264] device veth1_vlan left promiscuous mode [ 436.101032][ T4264] device veth0_vlan left promiscuous mode [ 436.815474][ T8631] crypto_alloc_aead failed rc=-4 [ 438.876049][ T4264] team0 (unregistering): Port device team_slave_1 removed [ 439.560472][ T4264] team0 (unregistering): Port device team_slave_0 removed [ 439.582867][ T4264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.640027][ T4264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.806191][ T4264] team0 (unregistering): Port device bridge0 removed [ 439.846872][ T4264] bond0 (unregistering): Released all slaves [ 440.018213][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.024568][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.194179][ T8653] netdevsim netdevsim2: loading /lib/firmware// failed with error -22 [ 440.202845][ T8653] netdevsim netdevsim2: Direct firmware load for / failed with error -22 [ 440.211545][ T8653] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 441.829068][ T8700] overlayfs: failed to clone upperpath [ 442.663483][ T8703] loop4: detected capacity change from 0 to 512 [ 442.762103][ T8703] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 443.472302][ T8445] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 443.526819][ T8445] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 443.567085][ T8445] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 443.637475][ T8445] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.850381][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.946198][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.009312][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.233431][ T8445] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.201553][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 448.262419][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.305655][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.316696][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.410141][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 448.440978][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.495608][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.503692][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.581224][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 448.616684][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 448.761390][ T8445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 448.816931][ T8783] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 448.832782][ T8783] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 448.842264][ T8445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.050711][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 449.091671][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 449.428576][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.694151][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 449.833387][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.916027][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.989834][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.155713][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.216987][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.022705][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 451.073663][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 451.229915][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.287638][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.320858][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.401918][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 451.429126][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.461025][ T8826] loop4: detected capacity change from 0 to 512 [ 451.512251][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 451.532715][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.578840][ T8826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 451.590091][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.614777][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.659967][ T8826] EXT4-fs (loop4): 1 truncate cleaned up [ 451.672928][ T8826] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,quota,lazytime,errors=remount-ro,quota,quota,. Quota mode: writeback. [ 451.714183][ T8445] device veth0_vlan entered promiscuous mode [ 451.936916][ T8445] device veth1_vlan entered promiscuous mode [ 452.059069][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 452.493152][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 452.531621][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 452.637907][ T8445] device veth0_macvtap entered promiscuous mode [ 452.660699][ T8445] device veth1_macvtap entered promiscuous mode [ 452.868813][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.932319][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 452.961559][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 453.652561][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 453.748320][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.781761][ T8863] loop4: detected capacity change from 0 to 128 [ 453.859079][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.875831][ T8863] EXT4-fs (loop4): Ignoring removed oldalloc option [ 453.882750][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 453.961498][ T8863] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodelalloc,oldalloc,grpjquota=,,errors=continue. Quota mode: none. [ 453.976643][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 454.005210][ T8863] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.046182][ T8445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.115108][ T8445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.160871][ T8445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.230169][ T8445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.612272][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.636868][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.778627][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.788174][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.978874][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 456.020073][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 456.279460][ T8897] loop3: detected capacity change from 0 to 512 [ 456.338740][ T8897] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 456.780171][ T26] audit: type=1804 audit(1788800128.421:23): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1192" name="/newroot/214/file0/file0" dev="loop4" ino=12 res=1 errno=0 [ 457.692458][ T8929] loop2: detected capacity change from 0 to 4096 [ 457.902777][ T8929] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 458.398720][ T8950] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 458.704052][ T8958] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 458.725597][ T8958] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 459.030026][ T8975] tmpfs: Bad value for 'mpol' [ 459.566196][ T8990] tc action pedit offset must be on 32 bit boundaries [ 459.573147][ T8990] tc action pedit offset must be on 32 bit boundaries [ 459.580050][ T8990] tc action pedit offset must be on 32 bit boundaries [ 459.587001][ T8990] tc action pedit offset must be on 32 bit boundaries [ 459.593909][ T8990] tc action pedit offset must be on 32 bit boundaries [ 459.601059][ T8990] tc action pedit offset must be on 32 bit boundaries [ 459.608181][ T8990] tc action pedit offset must be on 32 bit boundaries [ 459.615226][ T8990] tc action pedit offset must be on 32 bit boundaries [ 459.622252][ T8990] tc action pedit offset must be on 32 bit boundaries [ 459.629589][ T8990] tc action pedit offset must be on 32 bit boundaries [ 459.636482][ T8990] 0: reclassify loop, rule prio 0, protocol 800 [ 461.985428][ T9013] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 462.006951][ T9013] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 462.240233][ T9027] loop4: detected capacity change from 0 to 512 [ 462.285998][ T9027] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 462.646092][ T9025] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 462.655104][ T9025] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 466.740049][ T9078] capability: warning: `syz.0.1248' uses deprecated v2 capabilities in a way that may be insecure [ 468.091665][ T9087] MTRR 1 not used [ 469.442187][ T9096] loop2: detected capacity change from 0 to 1024 [ 469.636825][ T9096] hfsplus: request for non-existent node 33423360 in B*Tree [ 469.702195][ T9096] hfsplus: request for non-existent node 33423360 in B*Tree [ 469.995590][ T9102] hfsplus: request for non-existent node 33423360 in B*Tree [ 470.002953][ T9102] hfsplus: request for non-existent node 33423360 in B*Tree [ 470.178349][ T9096] hfsplus: request for non-existent node 33423360 in B*Tree [ 470.192377][ T9096] hfsplus: request for non-existent node 33423360 in B*Tree [ 470.221679][ T9096] hfsplus: request for non-existent node 33423360 in B*Tree [ 470.254143][ T9096] hfsplus: request for non-existent node 33423360 in B*Tree [ 470.791196][ T9102] hfsplus: request for non-existent node 33423360 in B*Tree [ 471.018553][ T9102] hfsplus: request for non-existent node 33423360 in B*Tree [ 471.131223][ T9109] hfsplus: request for non-existent node 33423360 in B*Tree [ 471.153697][ T9109] hfsplus: request for non-existent node 33423360 in B*Tree [ 471.178728][ T9096] hfsplus: request for non-existent node 33423360 in B*Tree [ 471.192599][ T9096] hfsplus: request for non-existent node 33423360 in B*Tree [ 472.328436][ T9129] syz.3.1263 uses obsolete (PF_INET,SOCK_PACKET) [ 482.453418][ T9209] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 482.491409][ T9209] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 482.623472][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 486.315401][ T9234] loop2: detected capacity change from 0 to 32768 [ 486.825597][ T9234] XFS (loop2): Mounting V5 Filesystem [ 487.441824][ T9234] XFS (loop2): Ending clean mount [ 487.578299][ T9251] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 488.415354][ T4196] XFS (loop2): Unmounting Filesystem [ 492.165012][ T9296] jffs2: notice: (9296) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 492.200696][ T9296] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 492.210434][ T9296] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 492.239943][ T9297] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 492.247348][ T9297] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 492.321353][ T9297] vhci_hcd vhci_hcd.0: Device attached [ 492.351732][ T9302] jffs2: notice: (9302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 492.479924][ T9299] vhci_hcd: connection closed [ 492.482072][ T4316] vhci_hcd: stop threads [ 492.509636][ T4316] vhci_hcd: release socket [ 492.515327][ T1111] vhci_hcd: vhci_device speed not set [ 492.535517][ T4316] vhci_hcd: disconnect device [ 492.585908][ T1111] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 492.604900][ T1111] usb 41-1: enqueue for inactive port 0 [ 492.705654][ T9306] overlayfs: failed to clone upperpath [ 492.712359][ T1111] vhci_hcd: vhci_device speed not set [ 493.839801][ T9313] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 493.859319][ T9313] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 499.030999][ T9366] jffs2: notice: (9366) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 499.210568][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 499.221219][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1329'. [ 499.267278][ T9372] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.277763][ T9372] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.287485][ T9372] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.296705][ T9372] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.933465][ T9362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 499.940289][ T9362] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 500.335255][ T9364] vhci_hcd: connection closed [ 500.341485][ T9362] vhci_hcd vhci_hcd.0: Device attached [ 500.426641][ T4264] vhci_hcd: stop threads [ 500.431018][ T4264] vhci_hcd: release socket [ 500.462879][ T4264] vhci_hcd: disconnect device [ 500.545933][ T4227] vhci_hcd: vhci_device speed not set [ 500.579681][ T9383] device syzkaller0 entered promiscuous mode [ 501.878493][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.885121][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.426365][ T9409] loop4: detected capacity change from 0 to 4096 [ 505.350181][ T9409] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 512.442542][ T4187] Bluetooth: hci4: command 0x0407 tx timeout [ 514.088063][ T9484] device syzkaller0 entered promiscuous mode [ 516.048118][ T9494] kAFS: No cell specified [ 519.770236][ T9514] overlayfs: failed to clone upperpath [ 521.328736][ T9523] loop4: detected capacity change from 0 to 512 [ 521.569323][ T9523] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 521.619124][ T9523] EXT4-fs (loop4): Unrecognized mount option "fscontext=system_u" or missing value [ 521.673821][ T9528] jffs2: notice: (9528) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 523.614552][ T9547] loop2: detected capacity change from 0 to 40427 [ 523.743736][ T9547] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 523.842182][ T9547] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 523.850387][ T9547] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 524.240411][ T9559] xt_connbytes: Forcing CT accounting to be enabled [ 524.247636][ T9559] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 526.557725][ T9576] loop3: detected capacity change from 0 to 512 [ 526.698239][ T9576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 526.707706][ T9577] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 526.795182][ T9577] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 526.805558][ T9576] System zones: 1-12 [ 526.864547][ T9576] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1378: missing EA_INODE flag [ 526.892923][ T9576] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1378: error while reading EA inode 12 err=-117 [ 526.935333][ T9576] EXT4-fs (loop3): 1 orphan inode deleted [ 526.963061][ T9576] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 530.690023][ T9606] jffs2: notice: (9606) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 531.258325][ T4319] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 531.571356][ T9611] ceph: No mds server is up or the cluster is laggy [ 536.365594][ T9657] 0x646e732f00000007-0x646ee5946d697436 : "" [ 536.372447][ T9657] mtd: partition "" is out of reach -- disabled [ 536.417169][ T9657] ftl_cs: FTL header not found. [ 541.985403][ T9679] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 542.005436][ T9679] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 542.144430][ T9681] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 542.165358][ T9681] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 542.441677][ T9687] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 542.465139][ T9687] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 550.943332][ T9754] Cannot find add_set index 4 as target [ 553.358316][ T9776] tipc: Enabling of bearer rejected, failed to enable media [ 554.088092][ T9782] loop3: detected capacity change from 0 to 32768 [ 555.579825][ T9782] XFS (loop3): Mounting V5 Filesystem [ 555.764887][ T9782] XFS (loop3): Ending clean mount [ 556.888684][ T8445] XFS (loop3): Unmounting Filesystem [ 557.550601][ T9829] loop4: detected capacity change from 0 to 1024 [ 558.198497][ T9829] EXT4-fs (loop4): Ignoring removed orlov option [ 559.446320][ T9829] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 561.371389][ T9872] tipc: Enabling of bearer rejected, failed to enable media [ 561.644332][ T9882] loop2: detected capacity change from 0 to 512 [ 562.034396][ T9882] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.1458: iget: bad i_size value: 38620345925642 [ 562.221272][ T9882] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1458: couldn't read orphan inode 15 (err -117) [ 562.253366][ T9882] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 563.030710][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.037173][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.045017][ T9891] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 563.106405][ T9903] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1458: bg 0: block 5: invalid block bitmap [ 563.191058][ T9903] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 772 with error 117 [ 563.212986][ T9903] EXT4-fs (loop2): This should not happen!! Data will be lost [ 563.212986][ T9903] [ 563.355011][ T26] audit: type=1800 audit(1788800234.991:24): pid=9894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1446" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0 [ 565.431943][ T9922] loop3: detected capacity change from 0 to 512 [ 565.495655][ T9922] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 569.632595][ T9965] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 11 (only 8 groups) [ 571.536111][ T9976] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 571.672585][ T9976] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 576.284780][T10013] device syzkaller0 entered promiscuous mode [ 576.667825][T10019] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 582.701447][T10067] kernel profiling enabled (shift: 7) [ 583.740217][T10081] loop2: detected capacity change from 0 to 1024 [ 588.777415][T10122] tipc: Enabled bearer , priority 0 [ 588.792323][T10122] device syzkaller0 entered promiscuous mode [ 589.925657][T10122] tipc: Resetting bearer [ 590.035829][ T1108] tipc: Node number set to 1681564660 [ 590.392723][T10114] tipc: Resetting bearer [ 591.860823][T10114] tipc: Disabling bearer [ 592.132182][T10132] device bridge1 entered promiscuous mode [ 592.397708][T10132] team0: Port device bridge1 added [ 592.619993][T10135] bridge0: port 3(team0) entered blocking state [ 592.653297][T10135] bridge0: port 3(team0) entered disabled state [ 592.857334][T10135] device team0 entered promiscuous mode [ 592.943925][T10135] device team_slave_0 entered promiscuous mode [ 593.027556][T10135] device team_slave_1 entered promiscuous mode [ 593.258410][T10135] bridge0: port 3(team0) entered blocking state [ 593.267157][T10135] bridge0: port 3(team0) entered forwarding state [ 593.472869][T10173] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.484466][T10173] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.495312][T10173] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.507189][T10173] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.145288][T10221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1552'. [ 600.031337][T10273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1564'. [ 600.076844][T10270] tc action pedit 'at' offset 164 out of bounds [ 602.994764][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1578'. [ 603.210897][T10308] device syzkaller0 entered promiscuous mode [ 609.400732][T10362] tipc: Enabling of bearer rejected, failed to enable media [ 609.441859][T10364] device syzkaller0 entered promiscuous mode [ 610.401032][T10394] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 613.146578][T10433] device syzkaller0 entered promiscuous mode [ 613.333741][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1617'. [ 613.409190][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1617'. [ 614.247057][T10456] tcf_pedit_act: 7 callbacks suppressed [ 614.247149][T10456] tc action pedit offset must be on 32 bit boundaries [ 614.259733][T10456] tc action pedit offset must be on 32 bit boundaries [ 614.266689][T10456] tc action pedit offset must be on 32 bit boundaries [ 614.273671][T10456] tc action pedit offset must be on 32 bit boundaries [ 614.280537][T10456] tc action pedit offset must be on 32 bit boundaries [ 614.287457][T10456] tc action pedit offset must be on 32 bit boundaries [ 614.294329][T10456] tc action pedit offset must be on 32 bit boundaries [ 614.301391][T10456] tc action pedit offset must be on 32 bit boundaries [ 614.308714][T10456] tc action pedit offset must be on 32 bit boundaries [ 614.315569][T10456] tc action pedit offset must be on 32 bit boundaries [ 614.322467][T10456] 0: reclassify loop, rule prio 0, protocol 800 [ 614.764541][T10464] device syzkaller0 entered promiscuous mode [ 615.477724][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1625'. [ 620.351957][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1640'. [ 621.799636][T10535] device syzkaller0 entered promiscuous mode [ 624.345226][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.352849][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.857596][T10557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 625.969259][T10557] device bond1 entered promiscuous mode [ 626.230520][T10557] team0: Failed to send port change of device bond1 via netlink (err -105) [ 626.283878][T10557] team0: Failed to send options change via netlink (err -105) [ 626.487927][T10557] team0: Port device bond1 added [ 626.522072][ T5850] team0: Failed to send port change of device bond1 via netlink (err -105) [ 627.582608][T10581] hub 7-0:1.0: USB hub found [ 627.587936][T10581] hub 7-0:1.0: 1 port detected [ 628.696679][T10596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1656'. [ 629.617629][T10605] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 631.635792][T10623] device syzkaller0 entered promiscuous mode [ 634.502952][T10654] device syzkaller0 entered promiscuous mode [ 639.717694][T10708] device syzkaller0 entered promiscuous mode [ 640.271862][T10713] tipc: Enabled bearer , priority 0 [ 640.303033][T10712] device syzkaller0 entered promiscuous mode [ 640.369221][T10712] tipc: Resetting bearer [ 640.409530][T10711] tipc: Resetting bearer [ 640.507624][T10711] tipc: Disabling bearer [ 643.462112][T10757] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 644.169440][T10757] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 644.885139][T10767] 0x000000000000-0x000000020000 : "" [ 644.993625][T10767] ftl_cs: FTL header not found. [ 645.914671][T10791] device syzkaller0 entered promiscuous mode [ 646.243057][T10795] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 11 (only 8 groups) [ 650.060100][T10815] device syzkaller0 entered promiscuous mode [ 653.173189][T10822] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.182221][T10822] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.191771][T10822] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.201040][T10822] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.348464][T10822] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.357527][T10822] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.366880][T10822] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.375951][T10822] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.397228][T10825] netlink: 'syz.4.1723': attribute type 1 has an invalid length. [ 654.672666][T10854] chnl_net:caif_netlink_parms(): no params data found [ 654.709038][T10875] device syzkaller0 entered promiscuous mode [ 655.311712][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 655.773139][T10854] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.798904][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.816739][T10854] device bridge_slave_0 entered promiscuous mode [ 657.332617][T10854] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.365734][T10854] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.379460][ T4227] Bluetooth: hci5: command 0x041b tx timeout [ 657.392722][T10854] device bridge_slave_1 entered promiscuous mode [ 657.469891][T10854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.495700][T10854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.537959][T10854] team0: Port device team_slave_0 added [ 657.544729][T10900] device syzkaller0 entered promiscuous mode [ 657.574731][T10854] team0: Port device team_slave_1 added [ 657.677104][T10854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.724221][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.761400][T10854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.820994][T10854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.860039][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.941372][T10854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.998854][T10907] device syzkaller0 entered promiscuous mode [ 658.085317][T10854] device hsr_slave_0 entered promiscuous mode [ 658.115476][T10854] device hsr_slave_1 entered promiscuous mode [ 658.300180][T10910] UBIFS error (pid: 10910): cannot open "(null)", error -22 [ 659.153392][T10912] tcf_pedit_act: 7 callbacks suppressed [ 659.153415][T10912] tc action pedit offset must be on 32 bit boundaries [ 659.173439][T10912] tc action pedit offset must be on 32 bit boundaries [ 659.180272][T10912] tc action pedit offset must be on 32 bit boundaries [ 659.187104][T10912] tc action pedit offset must be on 32 bit boundaries [ 659.193904][T10912] tc action pedit offset must be on 32 bit boundaries [ 659.200736][T10912] tc action pedit offset must be on 32 bit boundaries [ 659.207590][T10912] tc action pedit offset must be on 32 bit boundaries [ 659.214387][T10912] tc action pedit offset must be on 32 bit boundaries [ 659.221218][T10912] tc action pedit offset must be on 32 bit boundaries [ 659.228234][T10912] tc action pedit offset must be on 32 bit boundaries [ 659.235071][T10912] 0: reclassify loop, rule prio 0, protocol 800 [ 659.303730][T10854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 659.347034][T10854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 660.159654][ T4319] Bluetooth: hci5: command 0x040f tx timeout [ 660.216950][T10854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 660.238257][T10854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 661.423948][T10854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.441000][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 661.463580][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 661.475726][T10854] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.498821][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 661.511849][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 661.521705][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.529837][ T7203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.607051][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.490862][ T5520] Bluetooth: hci5: command 0x0419 tx timeout [ 662.569802][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 662.588464][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.621883][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.629528][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.789197][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.916531][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.946194][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.966734][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 663.092023][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 663.786915][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 663.805857][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 663.830675][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 663.846729][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.875196][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1757'. [ 663.883290][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 663.899062][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 663.944083][T10854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 664.253420][T10968] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 664.268418][T10968] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 664.406773][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 664.414395][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 664.471357][T10854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.225445][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 665.256410][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 665.304007][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 665.330664][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 665.350601][T10854] device veth0_vlan entered promiscuous mode [ 665.368192][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 666.311652][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 666.417781][T10854] device veth1_vlan entered promiscuous mode [ 666.526247][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 666.536020][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 666.698194][T10854] device veth0_macvtap entered promiscuous mode [ 666.738594][T10854] device veth1_macvtap entered promiscuous mode [ 667.375284][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 667.506356][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 667.563832][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.609332][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.622762][T10854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.636830][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.647889][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.662899][T10854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.671121][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 667.692512][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 667.723743][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 667.760279][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 667.840228][T10854] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.870796][T10854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.931889][T10854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.944788][T11017] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 667.976235][T10854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.995437][T11017] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 668.247494][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.273558][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.408849][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 668.565347][ T7195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.589761][ T7195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.666553][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 675.250963][T11098] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 675.291165][T11098] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 676.851618][T11123] loop4: detected capacity change from 0 to 16 [ 678.657826][T11123] erofs: (device loop4): mounted with root inode @ nid 36. [ 679.250156][T11139] 0x646e732f00000007-0x646ee5946d697436 : "" [ 679.257716][T11139] mtd: partition "" is out of reach -- disabled [ 679.315290][T11139] ftl_cs: FTL header not found. [ 680.702459][T11156] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 680.716438][T11156] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 685.087744][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1809'. [ 685.777555][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.784467][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.172908][T11198] device syzkaller0 entered promiscuous mode [ 686.377657][T11198] tipc: Enabled bearer , priority 0 [ 687.152172][T11198] tipc: Resetting bearer [ 687.285588][T11206] Console: switching to colour VGA+ 80x25 [ 688.295300][T11197] tipc: Resetting bearer [ 688.416212][T11197] tipc: Disabling bearer [ 688.813262][T11224] loop3: detected capacity change from 0 to 256 [ 688.828794][T11223] device syzkaller0 entered promiscuous mode [ 692.298265][T11245] device syzkaller0 entered promiscuous mode [ 692.477230][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 692.771553][T11264] device syzkaller0 entered promiscuous mode [ 693.058812][T11267] device syzkaller0 entered promiscuous mode [ 697.170776][T11298] loop5: detected capacity change from 0 to 256 [ 698.964198][T11305] device syzkaller0 entered promiscuous mode [ 701.213827][T11341] loop4: detected capacity change from 0 to 131072 [ 703.042680][T11341] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24) [ 703.050919][T11341] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 703.060141][T11341] F2FS-fs (loop4): Test dummy encryption mode enabled [ 703.069212][T11341] F2FS-fs (loop4): invalid crc value [ 703.494339][T11341] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 705.217996][T11373] device syzkaller0 entered promiscuous mode [ 708.099711][T11413] syz.2.1866 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 708.281922][T11413] CPU: 1 PID: 11413 Comm: syz.2.1866 Not tainted syzkaller #0 [ 708.289554][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.299624][T11413] Call Trace: [ 708.302916][T11413] [ 708.305887][T11413] dump_stack_lvl+0x188/0x250 [ 708.310588][T11413] ? show_regs_print_info+0x20/0x20 [ 708.315805][T11413] ? load_image+0x410/0x410 [ 708.320323][T11413] ? local_lock_release+0x170/0x170 [ 708.325657][T11413] ? __rwlock_init+0x140/0x140 [ 708.330475][T11413] dump_header+0xd9/0x780 [ 708.334864][T11413] oom_kill_process+0x20e/0x3d0 [ 708.339753][T11413] out_of_memory+0xdb2/0x1190 [ 708.344526][T11413] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 708.350192][T11413] ? mutex_lock_io_nested+0x60/0x60 [ 708.355422][T11413] ? unregister_oom_notifier+0x20/0x20 [ 708.360930][T11413] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 708.366574][T11413] ? mem_cgroup_oom_trylock+0x210/0x210 [ 708.372137][T11413] ? do_raw_spin_unlock+0x11d/0x230 [ 708.377353][T11413] try_charge_memcg+0x1075/0x15b0 [ 708.382416][T11413] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 708.388246][T11413] ? rcu_lock_acquire+0x30/0x30 [ 708.393162][T11413] obj_cgroup_charge_pages+0x87/0x190 [ 708.398564][T11413] ? __memcg_kmem_charge_page+0x380/0x380 [ 708.404296][T11413] ? rcu_lock_acquire+0x30/0x30 [ 708.409158][T11413] obj_cgroup_charge+0x19f/0x320 [ 708.414111][T11413] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 708.419252][T11413] slab_pre_alloc_hook+0x9d/0xc0 [ 708.424244][T11413] ? sockfs_init_fs_context+0xa0/0xa0 [ 708.429660][T11413] ? sock_alloc_inode+0x17/0xb0 [ 708.434531][T11413] kmem_cache_alloc+0x3d/0x280 [ 708.439314][T11413] ? sockfs_init_fs_context+0xa0/0xa0 [ 708.444715][T11413] sock_alloc_inode+0x17/0xb0 [ 708.449439][T11413] ? sockfs_init_fs_context+0xa0/0xa0 [ 708.454869][T11413] new_inode_pseudo+0x5f/0x210 [ 708.459767][T11413] __sock_create+0x128/0x910 [ 708.464394][T11413] __sys_socket+0xe2/0x170 [ 708.468833][T11413] __x64_sys_socket+0x76/0x80 [ 708.473555][T11413] do_syscall_64+0x4c/0xa0 [ 708.478009][T11413] ? clear_bhb_loop+0x30/0x80 [ 708.482717][T11413] ? clear_bhb_loop+0x30/0x80 [ 708.487423][T11413] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 708.493359][T11413] RIP: 0033:0x7fa70fd05159 [ 708.497803][T11413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.517483][T11413] RSP: 002b:00007fa70df5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 708.525938][T11413] RAX: ffffffffffffffda RBX: 00007fa70ff8cfa0 RCX: 00007fa70fd05159 [ 708.533941][T11413] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 708.541956][T11413] RBP: 00007fa70fd9c024 R08: 0000000000000000 R09: 0000000000000000 [ 708.549958][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.557972][T11413] R13: 00007fa70ff8d038 R14: 00007fa70ff8cfa0 R15: 00007ffd8f6aec98 [ 708.565981][T11413] [ 708.576220][ T4188] Bluetooth: Wrong link type (-22) [ 708.595396][T11413] memory: usage 0kB, limit 0kB, failcnt 55 [ 708.601269][T11413] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 708.609302][T11413] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 708.624686][T11413] Memory cgroup stats for /syz2/test: [ 708.628758][T11413] anon 0 [ 708.628758][T11413] file 0 [ 708.628758][T11413] kernel_stack 0 [ 708.628758][T11413] pagetables 0 [ 708.628758][T11413] percpu 0 [ 708.628758][T11413] sock 0 [ 708.628758][T11413] shmem 0 [ 708.628758][T11413] file_mapped 0 [ 708.628758][T11413] file_dirty 0 [ 708.628758][T11413] file_writeback 0 [ 708.628758][T11413] swapcached 0 [ 708.628758][T11413] anon_thp 0 [ 708.628758][T11413] file_thp 0 [ 708.628758][T11413] shmem_thp 0 [ 708.628758][T11413] inactive_anon 0 [ 708.628758][T11413] active_anon 0 [ 708.628758][T11413] inactive_file 0 [ 708.628758][T11413] active_file 0 [ 708.628758][T11413] unevictable 0 [ 708.628758][T11413] slab_reclaimable 0 [ 708.628758][T11413] slab_unreclaimable 0 [ 708.628758][T11413] slab 0 [ 708.628758][T11413] workingset_refault_anon 0 [ 708.628758][T11413] workingset_refault_file 0 [ 708.628758][T11413] workingset_activate_anon 0 [ 708.628758][T11413] workingset_activate_file 0 [ 708.787410][T11413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1866,pid=11412,uid=0 [ 708.842253][T11413] Memory cgroup out of memory: Killed process 11412 (syz.2.1866) total-vm:104424kB, anon-rss:1420kB, file-rss:21632kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 708.876355][T11413] socket: no more sockets [ 709.567346][T11428] loop4: detected capacity change from 0 to 256 [ 711.494928][T11436] loop2: detected capacity change from 0 to 512 [ 711.877768][T11436] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 711.952802][T11436] EXT4-fs (loop2): 1 truncate cleaned up [ 711.972715][T11441] device syzkaller0 entered promiscuous mode [ 711.993689][T11436] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 717.523087][T11509] device syzkaller0 entered promiscuous mode [ 722.944543][T11542] tc action pedit 'at' offset 164 out of bounds [ 724.354089][T11552] device syzkaller0 entered promiscuous mode [ 729.145629][T11603] device syzkaller0 entered promiscuous mode [ 729.329824][T11607] loop3: detected capacity change from 0 to 256 [ 729.425490][T11607] exfat: Deprecated parameter 'utf8' [ 730.751762][T11607] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 731.756775][T11630] infiniband syz2: set active [ 731.762062][T11630] infiniband syz2: added team_slave_1 [ 731.847378][T11630] RDS/IB: syz2: added [ 731.853242][T11630] smc: adding ib device syz2 with port count 1 [ 731.862602][T11630] smc: ib device syz2 port 1 has pnetid [ 732.628842][T11641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1922'. [ 738.029517][T11683] 0x646e732f00000007-0x646ee5946d697436 : "" [ 738.035698][T11683] mtd: partition "" is out of reach -- disabled [ 738.056749][T11683] ftl_cs: FTL header not found. [ 741.953534][T11708] loop5: detected capacity change from 0 to 1024 [ 742.243689][T11708] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 742.476441][T11723] device syzkaller0 entered promiscuous mode [ 745.358376][ T4193] Bluetooth: Wrong link type (-22) [ 746.213986][T11779] SET target dimension over the limit! [ 747.031392][T11784] device syzkaller0 entered promiscuous mode [ 747.100816][T11786] device syzkaller0 entered promiscuous mode [ 747.228376][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.234881][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.444272][T11802] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1959'. [ 749.497285][T11802] netlink: 'syz.3.1959': attribute type 1 has an invalid length. [ 749.520818][T11805] device syzkaller0 entered promiscuous mode [ 749.832591][T11820] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 749.879121][T11820] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 751.344268][T11855] device syzkaller0 entered promiscuous mode [ 751.440132][T11858] 0x646e732f00000007-0x646ee5946d697436 : "" [ 751.446284][T11858] mtd: partition "" is out of reach -- disabled [ 751.456021][T11858] ftl_cs: FTL header not found. [ 753.119758][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1973'. [ 753.139557][T11876] device syzkaller0 entered promiscuous mode [ 753.255405][T11879] device syzkaller0 entered promiscuous mode [ 753.562240][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 753.571494][T11883] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 753.571514][T11883] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 755.276983][T11927] device syzkaller0 entered promiscuous mode [ 755.342640][T11927] tipc: Enabled bearer , priority 0 [ 755.413522][T11927] tipc: Resetting bearer [ 755.456002][T11923] tipc: Resetting bearer [ 756.397838][T11923] tipc: Disabling bearer [ 756.423648][T11941] 0x646e732f00000007-0x646ee5946d697436 : "" [ 756.429999][T11941] mtd: partition "" is out of reach -- disabled [ 756.438079][T11941] ftl_cs: FTL header not found. [ 756.511704][T11944] device syzkaller0 entered promiscuous mode [ 757.765710][T11959] device syzkaller0 entered promiscuous mode [ 758.210559][T11972] FAULT_INJECTION: forcing a failure. [ 758.210559][T11972] name failslab, interval 1, probability 0, space 0, times 1 [ 758.224555][T11972] CPU: 1 PID: 11972 Comm: syz.3.2005 Not tainted syzkaller #0 [ 758.232077][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 758.242187][T11972] Call Trace: [ 758.245510][T11972] [ 758.248487][T11972] dump_stack_lvl+0x188/0x250 [ 758.253218][T11972] ? show_regs_print_info+0x20/0x20 [ 758.258475][T11972] ? load_image+0x410/0x410 [ 758.263045][T11972] ? __lock_acquire+0x7b50/0x7b50 [ 758.268125][T11972] ? memset+0x1e/0x40 [ 758.272232][T11972] ? lockdep_init_map_type+0x98/0x900 [ 758.277670][T11972] should_fail+0x383/0x4b0 [ 758.282217][T11972] should_failslab+0x5/0x20 [ 758.286811][T11972] slab_pre_alloc_hook+0x51/0xc0 [ 758.291804][T11972] ? security_inode_alloc+0x30/0x110 [ 758.297199][T11972] kmem_cache_alloc+0x3d/0x280 [ 758.302181][T11972] security_inode_alloc+0x30/0x110 [ 758.307327][T11972] inode_init_always+0x8e5/0xc90 [ 758.312289][T11972] new_inode_pseudo+0x8e/0x210 [ 758.317089][T11972] new_inode+0x25/0x1d0 [ 758.321261][T11972] mqueue_get_inode+0x27/0xbe0 [ 758.326165][T11972] ? do_raw_spin_unlock+0x11d/0x230 [ 758.331438][T11972] mqueue_create_attr+0x212/0x410 [ 758.336490][T11972] vfs_mkobj+0x343/0x520 [ 758.340843][T11972] ? do_mq_open+0x750/0x750 [ 758.345355][T11972] do_mq_open+0x5fc/0x750 [ 758.349698][T11972] ? mq_put_mnt+0x40/0x40 [ 758.354057][T11972] ? __context_tracking_exit+0x4c/0x80 [ 758.359549][T11972] __x64_sys_mq_open+0x182/0x1e0 [ 758.364521][T11972] ? proc_ipc_sem_dointvec+0x330/0x330 [ 758.370030][T11972] ? lockdep_hardirqs_on+0x94/0x140 [ 758.375281][T11972] do_syscall_64+0x4c/0xa0 [ 758.379728][T11972] ? clear_bhb_loop+0x30/0x80 [ 758.384429][T11972] ? clear_bhb_loop+0x30/0x80 [ 758.389116][T11972] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 758.395042][T11972] RIP: 0033:0x7fe2df604159 [ 758.399464][T11972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.419100][T11972] RSP: 002b:00007fe2dd85c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 758.427527][T11972] RAX: ffffffffffffffda RBX: 00007fe2df88bfa0 RCX: 00007fe2df604159 [ 758.435510][T11972] RDX: 00000000000001d0 RSI: 0000000000000040 RDI: 0000200000000180 [ 758.443511][T11972] RBP: 00007fe2df69b024 R08: 0000000000000000 R09: 0000000000000000 [ 758.451619][T11972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.459603][T11972] R13: 00007fe2df88c038 R14: 00007fe2df88bfa0 R15: 00007ffc94a5bc28 [ 758.467595][T11972] [ 758.668104][T11979] device syzkaller0 entered promiscuous mode [ 759.717438][T11997] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 759.769246][T11997] netlink: 'syz.3.2012': attribute type 2 has an invalid length. [ 759.942450][T11999] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 759.963498][T11998] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 759.985211][T11998] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 759.998733][T11999] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 760.061704][T12000] loop3: detected capacity change from 0 to 4096 [ 760.265747][T12000] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 760.471399][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 760.887730][T12028] UBIFS error (pid: 12028): cannot open "(null)", error -22 [ 761.044209][T12026] device syzkaller0 entered promiscuous mode [ 762.714883][T12043] loop2: detected capacity change from 0 to 4096 [ 762.953634][T12052] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 764.359661][T12063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.438479][T12063] team0: Port device bond1 added [ 764.625987][T12078] device syzkaller0 entered promiscuous mode [ 764.891521][T12088] loop4: detected capacity change from 0 to 512 [ 765.045085][T12088] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 765.053052][T12088] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 765.109824][T12092] UBIFS error (pid: 12092): cannot open "(null)", error -22 [ 766.353348][T12102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2037'. [ 766.516470][T12102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2037'. [ 766.800239][T12112] 0x646e732f00000007-0x646ee5946d697436 : "" [ 766.806509][T12112] mtd: partition "" is out of reach -- disabled [ 766.815462][T12112] ftl_cs: FTL header not found. [ 767.867543][ T5520] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 767.885002][ T5520] Bluetooth: hci1: Injecting HCI hardware error event [ 767.906557][ T4193] Bluetooth: hci1: hardware error 0x00 [ 769.022950][T12144] loop4: detected capacity change from 0 to 256 [ 769.175037][T12144] FAT-fs (loop4): Directory bread(block 64) failed [ 769.202517][T12144] FAT-fs (loop4): Directory bread(block 65) failed [ 769.237547][T12144] FAT-fs (loop4): Directory bread(block 66) failed [ 769.357754][T12144] FAT-fs (loop4): Directory bread(block 67) failed [ 769.364450][T12144] FAT-fs (loop4): Directory bread(block 68) failed [ 770.258514][T12144] FAT-fs (loop4): Directory bread(block 69) failed [ 770.344953][T12144] FAT-fs (loop4): Directory bread(block 70) failed [ 770.354271][T12144] FAT-fs (loop4): Directory bread(block 71) failed [ 770.396918][T12144] FAT-fs (loop4): Directory bread(block 72) failed [ 770.403521][T12144] FAT-fs (loop4): Directory bread(block 73) failed [ 770.435955][T12164] device syzkaller0 entered promiscuous mode [ 771.443242][T12171] device syzkaller0 entered promiscuous mode [ 772.847324][T12198] 0x646e732f00000007-0x646ee5946d697436 : "" [ 772.853518][T12198] mtd: partition "" is out of reach -- disabled [ 772.863191][T12198] ftl_cs: FTL header not found. [ 774.509665][T12207] netlink: 'syz.4.2064': attribute type 15 has an invalid length. [ 774.522686][T12209] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2065'. [ 774.539461][T12207] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 774.548374][T12207] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 774.557863][T12207] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 774.566797][T12207] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 774.836814][T12207] netlink: 'syz.4.2064': attribute type 15 has an invalid length. [ 774.878768][T12213] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 774.967072][T12220] UBIFS error (pid: 12220): cannot open "(null)", error -22 [ 775.446532][T12213] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 777.249620][T12250] loop2: detected capacity change from 0 to 16 [ 777.313458][T12250] erofs: (device loop2): mounted with root inode @ nid 36. [ 777.365751][T12244] device syzkaller0 entered promiscuous mode [ 779.937675][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2077'. [ 779.953813][T12261] bond0: option lp_interval: invalid value (0) [ 780.025310][ T1111] Bluetooth: hci5: command 0x0406 tx timeout [ 780.098062][T12261] bond0: option lp_interval: allowed values 1 - 2147483647 [ 784.310181][T12293] device syzkaller0 entered promiscuous mode [ 786.475831][T12328] xt_cgroup: path and classid specified [ 786.704555][T12329] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 786.712824][T12329] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 787.679433][T12345] loop2: detected capacity change from 0 to 512 [ 787.747011][T12345] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 787.773622][T12341] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 787.808475][T12341] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 789.653741][T12363] loop2: detected capacity change from 0 to 1024 [ 789.715599][T12363] hfsplus: unable to parse mount options [ 789.830297][T12363] e1000e: probe of 0000:00:00.0 failed with error -5 [ 790.203962][T12366] device syzkaller0 entered promiscuous mode [ 792.308961][T12389] loop4: detected capacity change from 0 to 256 [ 792.395658][T12389] exfat: Deprecated parameter 'utf8' [ 792.474585][T12389] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 792.536469][T12393] device syzkaller0 entered promiscuous mode [ 792.548628][T12399] loop3: detected capacity change from 0 to 512 [ 792.795446][T12399] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 792.862913][T12405] rdma_rxe: rxe_register_device failed with error -23 [ 792.871324][T12405] rdma_rxe: failed to add team_slave_1 [ 794.350495][T12412] device syzkaller0 entered promiscuous mode [ 799.185005][T12463] 0x646e732f7665642f-0x646ee594e3ced85e : "" [ 799.205121][T12463] mtd: partition "" is out of reach -- disabled [ 799.292559][T12463] ftl_cs: FTL header not found. [ 799.919577][T12467] device syzkaller0 entered promiscuous mode [ 799.994477][T12480] loop5: detected capacity change from 0 to 16 [ 800.030408][T12480] erofs: (device loop5): mounted with root inode @ nid 36. [ 802.681415][T12502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2137'. [ 803.881724][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 804.620845][T12511] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 804.658207][T12511] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 805.212860][T12529] 0x646e732f7665642f-0x646ee594e3ced85e : "" [ 805.808419][T12529] mtd: partition "" is out of reach -- disabled [ 805.857120][T12529] ftl_cs: FTL header not found. [ 807.005722][T12542] 0x646e732f7665642f-0x646ee594e3ced85e : "" [ 807.015011][T12542] mtd: partition "" is out of reach -- disabled [ 807.790164][T12542] ftl_cs: FTL header not found. [ 808.352931][T12564] syz.2.2156 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 808.939895][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.140293][T12581] loop3: detected capacity change from 0 to 128 [ 812.356182][T12581] nfs: Unknown parameter 'úxé­§^zóRè¡J§ÌüP“jcbjý~@æ!ïû̼o^žw ³wýÙýRÁÖ FMÂq%!‘}‘”„¥!Ã^“vkò÷؇7¿_½qór&›™Wj6³ðOZ)51ùòÁ£DÐm{TvS·÷Þ§ßíþ¼ûëÞç…{E[mU®Ô”¡+okÆ¢eª|Ñ.éJÍY¦a›ªX¶ÍªßX¦*X•ååº2ÊùñärÕ´me”ëªdÖU­¢jÕº2îŲÒu]'ÇÉmÌÏ™“—ú< Hµš1FD$q¤%·1”' [ 813.552133][T12607] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 813.650832][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 813.674992][T12607] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 823.901008][T12734] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 825.699982][T12734] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 831.138535][T12803] loop4: detected capacity change from 0 to 256 [ 831.513404][T12803] tipc: Enabled bearer , priority 10 [ 831.803971][T12802] 0x646e732f00000007-0x646ee5946d697436 : "" [ 831.810649][T12802] mtd: partition "" is out of reach -- disabled [ 832.049529][T12802] ftl_cs: FTL header not found. [ 834.735974][T12839] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 834.871236][T12839] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 837.348522][T12868] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 837.378627][T12868] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 838.283509][T12880] 0x646e732f00000007-0x646ee5946d697436 : "" [ 838.289634][T12880] mtd: partition "" is out of reach -- disabled [ 838.297953][T12880] ftl_cs: FTL header not found. [ 839.069664][T12890] loop3: detected capacity change from 0 to 128 [ 839.191652][T12890] FAT-fs (loop3): Directory bread(block 1048) failed [ 839.219565][T12890] FAT-fs (loop3): Directory bread(block 1049) failed [ 839.261865][T12890] FAT-fs (loop3): Directory bread(block 1050) failed [ 839.313984][T12890] FAT-fs (loop3): Directory bread(block 1051) failed [ 839.351826][T12890] FAT-fs (loop3): Directory bread(block 1052) failed [ 839.392447][T12890] FAT-fs (loop3): Directory bread(block 1053) failed [ 839.421455][T12890] FAT-fs (loop3): Directory bread(block 1054) failed [ 839.438745][T12890] FAT-fs (loop3): Directory bread(block 1055) failed [ 841.462853][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 841.545729][T12911] device veth0 entered promiscuous mode [ 841.556083][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 842.920359][T12924] 0x646e732f00000007-0x646ee5946d697436 : "" [ 842.946712][T12924] mtd: partition "" is out of reach -- disabled [ 843.087693][T12924] ftl_cs: FTL header not found. [ 843.759349][T12932] overlayfs: missing 'lowerdir' [ 843.797977][T12932] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 843.927890][T12934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2253'. [ 845.307683][T12941] 0x646e732f00000007-0x646ee5946d697436 : "" [ 845.313699][T12941] mtd: partition "" is out of reach -- disabled [ 845.322048][T12941] ftl_cs: FTL header not found. [ 845.810766][T12956] UBIFS error (pid: 12956): cannot open "(null)", error -22 [ 851.461669][T12978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2264'. [ 851.879060][T12995] device syzkaller0 entered promiscuous mode [ 852.866284][T13008] 0x646e732f00000007-0x646ee5946d697436 : "" [ 852.872384][T13008] mtd: partition "" is out of reach -- disabled [ 852.880722][T13008] ftl_cs: FTL header not found. [ 855.711492][T13024] xt_cgroup: path and classid specified [ 860.561781][T13071] 0x646e732f00000007-0x646ee5946d697436 : "" [ 860.567875][T13071] mtd: partition "" is out of reach -- disabled [ 860.576356][T13071] ftl_cs: FTL header not found. [ 860.768507][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2292'. [ 860.802982][T13078] device bridge_slave_1 left promiscuous mode [ 860.814630][T13078] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.864304][T13078] device bridge_slave_0 left promiscuous mode [ 860.873184][T13078] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.029755][T13094] 0x646e732f00000007-0x646ee5946d697436 : "" [ 862.036290][T13094] mtd: partition "" is out of reach -- disabled [ 862.053061][T13094] ftl_cs: FTL header not found. [ 864.310864][T13119] loop5: detected capacity change from 0 to 16 [ 864.395809][T13119] erofs: Unknown parameter 'pim6reg0' [ 866.853678][T13157] 0x646e732f00000007-0x646ee5946d697436 : "" [ 866.860320][T13157] mtd: partition "" is out of reach -- disabled [ 866.877780][T13157] ftl_cs: FTL header not found. [ 867.337658][T13164] device syzkaller0 entered promiscuous mode [ 867.371032][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2316'. [ 867.381464][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2316'. [ 870.651683][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.922705][T13216] 0x646e732f00000007-0x646ee5946d697436 : "" [ 872.700831][T13216] mtd: partition "" is out of reach -- disabled [ 873.104096][T13216] ftl_cs: FTL header not found. [ 874.552936][T13248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2335'. [ 879.154254][T13295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2347'. [ 879.722771][T13303] loop3: detected capacity change from 0 to 256 [ 879.964512][T13303] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 882.785167][T13330] device syzkaller0 entered promiscuous mode [ 885.831382][T13363] 0x646e732f00000007-0x646ee5946d697436 : "" [ 885.837570][T13363] mtd: partition "" is out of reach -- disabled [ 885.855720][T13363] ftl_cs: FTL header not found. [ 891.937568][T13396] device syzkaller0 entered promiscuous mode [ 891.973525][T13399] tipc: Enabling of bearer rejected, failed to enable media [ 892.102073][T13403] device syzkaller0 entered promiscuous mode [ 894.201231][T13426] loop4: detected capacity change from 0 to 32768 [ 895.563525][T13438] 0x646e732f00000007-0x646ee5946d697436 : "" [ 895.569711][T13438] mtd: partition "" is out of reach -- disabled [ 895.587450][T13438] ftl_cs: FTL header not found. [ 898.030588][T13451] device syzkaller0 entered promiscuous mode [ 898.918189][T13467] tipc: Enabling of bearer rejected, failed to enable media [ 903.858717][T13523] 0x646e732f00000007-0x646ee5946d697436 : "" [ 903.864980][T13523] mtd: partition "" is out of reach -- disabled [ 903.897214][T13523] ftl_cs: FTL header not found. [ 907.551719][T13551] loop2: detected capacity change from 0 to 131072 [ 907.628195][T13551] F2FS-fs (loop2): invalid crc value [ 907.675384][T13551] F2FS-fs (loop2): Found nat_bits in checkpoint [ 907.852849][T13551] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 908.098701][T13551] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 909.782736][T13578] loop4: detected capacity change from 0 to 8192 [ 910.350758][T13578] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 910.455270][T13578] REISERFS (device loop4): using ordered data mode [ 910.461844][T13578] reiserfs: using flush barriers [ 911.706486][T13578] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 911.828043][T13578] REISERFS (device loop4): checking transaction log (loop4) [ 911.891695][T13578] REISERFS (device loop4): Using r5 hash to sort names [ 911.929195][T13578] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 917.180897][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2431'. [ 918.351536][T13678] 0x646e732f00000007-0x646ee5946d697436 : "" [ 918.358041][T13678] mtd: partition "" is out of reach -- disabled [ 918.374909][T13678] ftl_cs: FTL header not found. [ 922.358177][ T4319] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 923.405681][ T4319] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 923.573759][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2425'. [ 924.186030][T13692] fido_id[13692]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 924.188728][T13694] device team0 left promiscuous mode [ 924.223282][T13694] device team_slave_0 left promiscuous mode [ 924.229728][T13694] device team_slave_1 left promiscuous mode [ 924.236086][T13694] device bond1 left promiscuous mode [ 924.241779][T13694] bridge0: port 3(team0) entered disabled state [ 924.278115][T13694] device bridge_slave_1 left promiscuous mode [ 924.290382][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.335351][T13694] device bridge_slave_0 left promiscuous mode [ 924.361920][T13694] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.077379][T13746] 0x646e732f00000007-0x646ee5946d697436 : "" [ 929.083512][T13746] mtd: partition "" is out of reach -- disabled [ 929.142315][T13748] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 929.946739][T13746] ftl_cs: FTL header not found. [ 931.547263][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.457103][ T4316] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.752281][ T4316] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.083028][ T4316] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.298332][ T4316] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.938906][T13794] loop4: detected capacity change from 0 to 1024 [ 938.632105][T13810] o2cb: This node has not been configured. [ 938.690877][T13810] o2cb: Cluster check failed. Fix errors before retrying. [ 938.699308][T13810] (syz.3.2453,13810,1):user_dlm_register:675 ERROR: status = -22 [ 938.711629][T13810] (syz.3.2453,13810,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain1" [ 945.777033][T13879] loop3: detected capacity change from 0 to 1024 [ 948.597293][T13908] 0x646e732f00000007-0x646ee5946d697436 : "" [ 948.603396][T13908] mtd: partition "" is out of reach -- disabled [ 948.656217][T13908] ftl_cs: FTL header not found. [ 948.712060][ T4316] device hsr_slave_0 left promiscuous mode [ 949.137816][ T4316] device hsr_slave_1 left promiscuous mode [ 949.156844][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.188071][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.220766][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.250363][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.286955][ T4316] device veth1_macvtap left promiscuous mode [ 949.295539][ T4316] device veth0_macvtap left promiscuous mode [ 949.302957][ T4316] device veth1_vlan left promiscuous mode [ 949.309440][ T4316] device veth0_vlan left promiscuous mode [ 950.911811][ T4316] team0 (unregistering): Port device bond1 removed [ 950.966865][ T4316] bond1 (unregistering): Released all slaves [ 951.106272][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 951.121304][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 951.136909][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.153552][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.331797][ T4316] bond0 (unregistering): Released all slaves [ 951.653532][T13911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.675601][T13911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 952.842735][T13962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2484'. [ 953.482603][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 957.491825][T14002] loop3: detected capacity change from 0 to 128 [ 959.333540][T14019] loop3: detected capacity change from 0 to 128 [ 959.480990][T14019] EXT4-fs (loop3): Test dummy encryption mode enabled [ 959.672293][T14019] EXT4-fs (loop3): Test dummy encryption mode enabled [ 959.773246][T14019] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 961.190041][T14019] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 961.287967][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 961.300763][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 961.722118][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 963.358675][T14064] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 963.562445][T14062] 0x646e732f00000007-0x646ee5946d697436 : "" [ 963.568573][T14062] mtd: partition "" is out of reach -- disabled [ 963.585427][T14062] ftl_cs: FTL header not found. [ 966.727935][T14104] futex_wake_op: syz.4.2514 tries to shift op by 144; fix this program [ 969.768727][T14140] kAFS: bad VL server IP address [ 973.964850][T14185] loop3: detected capacity change from 0 to 32768 [ 974.844937][T14185] XFS (loop3): Mounting V5 Filesystem [ 975.369865][T14206] loop2: detected capacity change from 0 to 1024 [ 975.398241][T14185] XFS (loop3): Ending clean mount [ 975.412153][T14185] XFS (loop3): Quotacheck needed: Please wait. [ 975.672681][T14206] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 975.683976][T14185] XFS (loop3): Quotacheck: Done. [ 975.704321][T14206] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 976.430985][T14206] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 976.474398][T14206] System zones: 0-1, 3-36 [ 976.572767][T14206] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 976.815132][ T26] audit: type=1800 audit(2000000354.506:25): pid=14204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2533" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 977.182158][ T8445] XFS (loop3): Unmounting Filesystem [ 979.710507][T14252] 0x646e732f00000007-0x646ee5946d697436 : "" [ 979.716881][T14252] mtd: partition "" is out of reach -- disabled [ 979.735305][T14252] ftl_cs: FTL header not found. [ 985.856434][T14295] 0x646e732f00000007-0x646ee5946d697436 : "" [ 985.862773][T14295] mtd: partition "" is out of reach -- disabled [ 985.877763][T14295] ftl_cs: FTL header not found. [ 991.419046][T14378] 0x646e732f00000007-0x646ee5946d697436 : "" [ 991.425689][T14378] mtd: partition "" is out of reach -- disabled [ 991.443716][T14378] ftl_cs: FTL header not found. [ 992.978699][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.504290][T14568] 0x646e732f00000007-0x646ee5946d697436 : "" [ 1004.510516][T14568] mtd: partition "" is out of reach -- disabled [ 1004.526598][T14568] ftl_cs: FTL header not found. [ 1005.684145][T14580] 0x646e732f00000007-0x646ee5946d697436 : "" [ 1005.690437][T14580] mtd: partition "" is out of reach -- disabled [ 1005.725773][T14580] ftl_cs: FTL header not found. [ 1014.972396][T14692] 0x646e732f00000007-0x646ee5946d697436 : "" [ 1014.978531][T14692] mtd: partition "" is out of reach -- disabled [ 1015.572370][T14692] ftl_cs: FTL header not found. [ 1020.477847][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 1024.866624][T14771] 0x646e732f00000007-0x646ee5946d697436 : "" [ 1024.872893][T14771] mtd: partition "" is out of reach -- disabled [ 1024.890597][T14771] ftl_cs: FTL header not found. [ 1035.793619][T14850] 0x646e732f00000007-0x646ee5946d697436 : "" [ 1035.801557][T14850] mtd: partition "" is out of reach -- disabled [ 1035.837702][T14850] ftl_cs: FTL header not found. [ 1037.357788][ T4258] Bluetooth: hci2: command 0x0409 tx timeout [ 1041.925656][T14886] tcf_pedit_act: 7 callbacks suppressed [ 1041.925675][T14886] tc action pedit offset must be on 32 bit boundaries SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=2451 state=3 status=67 (errno 9: Bad file descriptor) [ 1050.668194][ T4258] infiniband syz1: ib_query_port failed (-19) [ 1051.157600][T13859] tipc: Left network mode [ 1052.004267][T13859] device hsr_slave_0 left promiscuous mode [ 1052.010951][T13859] device hsr_slave_1 left promiscuous mode [ 1052.318793][T13859] bond0 (unregistering): Released all slaves [ 1054.324051][T13859] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.381213][T13859] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.417833][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.444625][T13859] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.531733][T13859] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.461335][T13859] device hsr_slave_0 left promiscuous mode [ 1055.467975][T13859] device hsr_slave_1 left promiscuous mode [ 1055.474497][T13859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.482562][T13859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.496839][T13859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.504309][T13859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.513548][T13859] rdma_rxe: ignoring netdev event = 10 for team_slave_1 [ 1055.524210][T13859] device veth1_macvtap left promiscuous mode [ 1055.533479][T13859] device veth0_macvtap left promiscuous mode [ 1055.539708][T13859] device veth1_vlan left promiscuous mode [ 1055.546589][T13859] device veth0_vlan left promiscuous mode [ 1055.615750][T13859] rdma_rxe: ignoring netdev event = 27 for team_slave_1 [ 1055.628735][T13859] infiniband syz2: set down [ 1055.710042][T13859] team0 (unregistering): Port device bond1 removed [ 1055.720008][T13859] bond1 (unregistering): Released all slaves [ 1055.738186][T13859] team0 (unregistering): Port device bridge1 removed [ 1055.875205][T13859] rdma_rxe: ignoring netdev event = 27 for team_slave_1 [ 1055.882308][T13859] rdma_rxe: ignoring netdev event = 26 for team_slave_1 [ 1055.892105][T13859] rdma_rxe: ignoring netdev event = 21 for team_slave_1 [ 1055.902255][T13859] rdma_rxe: ignoring netdev event = 9 for team_slave_1 [ 1055.913144][T13859] rdma_rxe: ignoring netdev event = 8 for team_slave_1 [ 1055.921058][T13859] team0 (unregistering): Port device team_slave_1 removed [ 1055.930109][T11624] smc: removing ib device syz2 [ 1055.942248][T13859] team0 (unregistering): Port device team_slave_0 removed [ 1055.957348][T13859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.972500][T13859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.046807][T13859] bond0 (unregistering): Released all slaves