last executing test programs: 8m44.055491369s ago: executing program 3 (id=132): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x207000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 8m42.818956466s ago: executing program 3 (id=139): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xfffffffffffffdd1, 0x1, [{0x70, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x176e}}]}, @action_gd=@TCA_ACT_TAB={0xffffffffffffff71, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x2, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000101c0012800b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m40.101764958s ago: executing program 3 (id=171): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000e80)={0x20, 0x17}, 0x0, 0x0, &(0x7f0000001000)={0x20, 0x81, 0x1, '^'}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) 8m39.895637964s ago: executing program 32 (id=171): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000e80)={0x20, 0x17}, 0x0, 0x0, &(0x7f0000001000)={0x20, 0x81, 0x1, '^'}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) 8m34.532483925s ago: executing program 33 (id=197): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 7m37.059024165s ago: executing program 34 (id=393): io_uring_setup(0x4ab0, &(0x7f0000000200)={0x0, 0xcb9e, 0x8, 0x0, 0x146}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) listen(r1, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)=""/35, 0x23}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) 6m4.540751909s ago: executing program 35 (id=1444): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5m47.357273376s ago: executing program 36 (id=1588): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = epoll_create1(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4m57.798152987s ago: executing program 6 (id=2149): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000000)="f6cfb23d", 0x4, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) 4m57.679045502s ago: executing program 6 (id=2151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="00000000011200000a000100"], 0x2c}}, 0x0) 4m57.593318784s ago: executing program 6 (id=2153): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4080, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x616, r1, 0x4}, 0x38) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7cf, 0x1}, 0x38) 4m57.38426564s ago: executing program 6 (id=2156): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x810c9365, 0x0) 4m57.224329975s ago: executing program 6 (id=2162): r0 = socket(0x2a, 0x2, 0x400002) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4m56.489310897s ago: executing program 6 (id=2171): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x45, 0x8000047, r2, 0x0) r3 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92\f\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\'U\xf17\x00'/747, 0x1) r4 = dup(r3) r5 = dup(r4) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000010000002003e00cd000000c9030000000000004000000000000000ea0200000000000000000100050038000f"], 0x178) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4m56.376887s ago: executing program 37 (id=2171): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x45, 0x8000047, r2, 0x0) r3 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92\f\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\'U\xf17\x00'/747, 0x1) r4 = dup(r3) r5 = dup(r4) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000010000002003e00cd000000c9030000000000004000000000000000ea0200000000000000000100050038000f"], 0x178) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4m47.539820256s ago: executing program 3 (id=2172): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x810c9365, 0x0) 4m47.352059502s ago: executing program 3 (id=2270): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4ea1, 0x3, 'nq\x00', 0x9, 0x10000004, 0x8}, 0x2c) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m44.534367417s ago: executing program 3 (id=2307): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x5d8e62daeaac3ef4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 4m44.390092721s ago: executing program 38 (id=2307): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x5d8e62daeaac3ef4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 4m14.19063545s ago: executing program 2 (id=2558): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) shutdown(r0, 0x2) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x52, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xd}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) 4m14.010002085s ago: executing program 2 (id=2562): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r0, 0xd3) syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0xfffffffffffffffe, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0xee00, 0x0, 0x2000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a52d1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0x8001}}}, 0x130) 4m13.753184283s ago: executing program 2 (id=2566): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 4m13.585011778s ago: executing program 2 (id=2568): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m13.436057913s ago: executing program 2 (id=2571): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000000040)=""/26, 0x1a, 0x2, 0x0, 0xffffffffffffffce) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m12.978274247s ago: executing program 2 (id=2579): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m12.86718749s ago: executing program 39 (id=2579): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m52.795652779s ago: executing program 0 (id=2934): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000200)={r2, 0x400}, 0x8) 2m51.255821726s ago: executing program 0 (id=2940): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x30160f8, &(0x7f0000000700)=ANY=[], 0x81, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000040)={0x0, 0x0, 0x20, 0x1, 0x1fff, r0, 0x0, 0xfe, 0x3}]) 2m50.207923877s ago: executing program 0 (id=2945): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 2m46.498669789s ago: executing program 0 (id=2963): r0 = inotify_init() r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) 2m44.686682813s ago: executing program 0 (id=2966): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x40810}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r6], 0x28}}, 0x0) 2m43.903525177s ago: executing program 0 (id=2970): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m29.587418628s ago: executing program 4 (id=3025): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mmap(&(0x7f00003c1000/0x4000)=nil, 0x4000, 0x100000c, 0x13, r0, 0xa49d3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2m25.591930048s ago: executing program 40 (id=2970): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m25.372027045s ago: executing program 4 (id=3029): write$bt_hci(0xffffffffffffffff, 0x0, 0x8) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffff}}}, 0x24}}, 0x0) 2m24.304658677s ago: executing program 4 (id=3032): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m23.21038989s ago: executing program 4 (id=3035): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) fchdir(r0) r1 = fanotify_init(0x40, 0x80000) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1008090, &(0x7f0000000100)={[{@nodots}, {@dots}, {@fat=@nfs}, {@fat=@uid}, {@dots}, {@dots}]}, 0x1, 0x11c3, &(0x7f0000001240)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) getdents64(r2, &(0x7f0000001500)=""/4080, 0xff0) 2m21.746534524s ago: executing program 4 (id=3040): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xa6043) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4) connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2m21.476777282s ago: executing program 4 (id=3042): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 2m6.171972703s ago: executing program 41 (id=3042): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 6.616150091s ago: executing program 7 (id=3559): clock_gettime(0x3, &(0x7f0000002000)) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000300)={0x2, 'bridge0\x00', 0x1}, 0x18) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000040)={0x0, 0x10}, 0x1b}, 0x20040050) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x43, 0x107, 0xfffffffe, 0x4, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4044855}, 0x8001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000040)=@l2={0x1f, 0x1, @none, 0x6, 0x1}, 0x80, &(0x7f0000000100), 0x55, &(0x7f0000000300)=[{0x50, 0x1, 0xfffffffd, "67cd52a24031482fa3a415d16a1b16a0e61425038cd38175ad377b3dcfdb271ec5edc3d4d752ebe543ca3630ffbef44bfdc21b66e827c532d8"}, {0x60, 0x10c, 0xffffeffc, "e007581c5d6545fcd6e6550b2f02030d96313eb6fbd50e31b1749873ae04309ff2cc25c62d3eac255c846c001f8bc60871de98817b6f70e054bf4865aa1a40bf37addabb03549a75fb1b25"}, {0x58, 0x10f, 0x2000, "77e0091b5327f2e8a8e7a87c5942cf71a1f3da9ba44033079fbc180f93f2960756599a90433a4cc3f040bdd51572fd20badab46391262c71f75bcfa3e2871142bf5df26bd305"}], 0x108}, 0x8805) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="0a0001"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 5.437729356s ago: executing program 7 (id=3564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x10, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.461925415s ago: executing program 7 (id=3566): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) getpgrp(0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 4.414533657s ago: executing program 5 (id=3567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2, 0x4}, {0x44, 0x1, 0x9, 0x8016}, {0x4, 0x9, 0x7, 0x5}, {0x6, 0x9, 0xd, 0x5}]}) 4.171591344s ago: executing program 1 (id=3569): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(r3, 0x0) close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x11, 0x0, &(0x7f0000000100)) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) 3.386306128s ago: executing program 5 (id=3571): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000100)={[{@shortname_winnt}, {@uni_xlateno}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@shortname_win95}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@utf8no}, {@uni_xlateno}]}, 0x81, 0x2f6, &(0x7f00000015c0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x40002, 0x0) r0 = memfd_create(&(0x7f0000000280)='-B\xd5N4:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc8<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUOMX\x164\xec\x06i\x85\x93\x87YB.e\xea2|A\x95\x05\xc3\x11\xde\xa0\x14*4\x83J\xa1\xddc\xde\x91 sO\xfb\xcc\r\xa8\x05\xa3\xab\xe6\xb5\xe4\x8b\x128\xa8\x05\xf9\f\xb4\x97\x1c\x82\xfd\x80O\x00\x00\x00\x00\x00\x00\x00', 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, 0x0, 0x0) r2 = dup(r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, 0x0, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20024080}, 0x10) write$binfmt_elf32(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.944099711s ago: executing program 7 (id=3572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) listen(r0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team0\x00', 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) 2.719450368s ago: executing program 8 (id=3573): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x10, &(0x7f0000000740)={[{@data_err_ignore}, {@nouid32}, {@data_err_ignore}]}, 0x1, 0x793, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) unlink(&(0x7f0000000400)='./file1\x00') 2.595885112s ago: executing program 5 (id=3574): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) r1 = socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x85, &(0x7f00000004c0)={r4, 0x88, "0200000000000000703fe6153c598ae93aa83725cdcff2eae49f89843a5318d5ba093aa761132bb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc58041310b18d364b87808f8a7494c5de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e725d000000000000007b2858f76d3c773b57e42e583f"}, &(0x7f0000000040)=0x90) 2.590400452s ago: executing program 7 (id=3575): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x7) mount$afs(&(0x7f0000002100)=ANY=[], 0x0, 0x0, 0x10000, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8cf811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x496d9d793d7b54ea) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2808888, &(0x7f00000001c0)={[{@uid}, {@gid}, {@type={'type', 0x3d, "ac55f109"}}, {@nodecompose}, {@gid}, {@session={'session', 0x3d, 0x6}}, {@type={'type', 0x3d, "eea74fc7"}}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file2\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x1b0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) 2.502459445s ago: executing program 1 (id=3576): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) waitid(0x1, r1, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0xc0000, 0x200100) rseq(0x0, 0x0, 0x5, 0x0) syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x68b, &(0x7f0000000a80)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f00000001c0)='./bus\x00') syz_emit_ethernet(0x73, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x7, 0x1}}, {@x25={0x805, {0x2, 0xf, 0xff, "f7386ea4ebfeeca3129a3d385824220092e4d11338c6689261ecf73d6c59b369e8f22c9d5b00185cb4844f106fcd1b49989e4d920ca646913aceda388c40f6082e0d7c33a1863037c34339c7043be486fb209b28d673dcb11755"}}}}, &(0x7f0000000100)={0x0, 0x3, [0x863, 0xf98, 0xf4b, 0x2af]}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100063d10000000000000000ff0100000000000000000000000000a76801fe800000002200000000000000004000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 2.346828359s ago: executing program 8 (id=3578): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000100)='./file2\x00', 0x1000810, &(0x7f00000018c0)=ANY=[], 0x2, 0x150a, &(0x7f0000002d40)="$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") getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) futex(0xfffffffffffffffc, 0x8, 0x2, 0x0, 0x0, 0x3) write$FUSE_WRITE(r2, &(0x7f00000000c0)={0xffffffffffffffc3}, 0xfffffdef) 2.258383502s ago: executing program 9 (id=3579): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfebd) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00030008ac0f00000000001400010024"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.64889128s ago: executing program 5 (id=3580): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.614902092s ago: executing program 8 (id=3581): syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.597964712s ago: executing program 9 (id=3582): r0 = add_key$fscrypt_provisioning(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200005f930101101192131415161718191a1b1c1d0304000000232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f4000"/72], 0x48, 0xfffffffffffffffb) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x40, r3, 0x8d61ddcfedb48df, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0x17, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x40}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x1, 0x3}) timer_settime(r1, 0x1, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x1) 1.596745812s ago: executing program 1 (id=3583): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) 1.468750696s ago: executing program 5 (id=3584): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f010203010902"], 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.155082995s ago: executing program 1 (id=3585): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x1) syz_usbip_server_init(0x1) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) r1 = socket(0x1e, 0x805, 0x0) connect$inet6(r1, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x4048000) 1.00320813s ago: executing program 9 (id=3586): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x400000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getqdisc={0x24, 0x26, 0x705, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4888e}, 0x0) 736.679048ms ago: executing program 9 (id=3587): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0xf5c, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @loopback}, 0x10) listen(r0, 0x3) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x50) 657.35672ms ago: executing program 9 (id=3588): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0xc4, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf678}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8030}, 0xc000) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) connect$nfc_raw(r0, &(0x7f0000000540)={0x27, r7, 0x1, 0x3}, 0x10) 553.837113ms ago: executing program 9 (id=3589): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r4, 0x40044104, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x4}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59527bd7020ffdbdf250a40c000", @ANYRES32=r6, @ANYBLOB="14000100fe8800000000000000000000040001010800090059"], 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8001, 0xd) 541.324684ms ago: executing program 7 (id=3590): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 456.021567ms ago: executing program 8 (id=3591): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) 409.624998ms ago: executing program 1 (id=3592): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfe, {0x2, 0x18, 0x20, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 286.421411ms ago: executing program 8 (id=3593): r0 = socket$inet(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x10002, 0x0) 279.026761ms ago: executing program 1 (id=3594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) 186.901144ms ago: executing program 8 (id=3595): unshare(0x64000600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) fsmount(0xffffffffffffffff, 0x0, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=iso8859-15,dmask=00000000000000100077157,namecase=1,iocharset=iso8859-6,namecase=1,errors=remount-ro,errors=continue,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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") open(0x0, 0x8000, 0x121) mknod(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x247) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80c, &(0x7f0000010000)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@fmask={'fmask', 0x3d, 0x1}}, {@namecase}, {@errors_continue}, {@errors_remount}, {@namecase}, {@errors_continue}, {@discard}]}, 0x1, 0x1539, &(0x7f0000002c00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/228, 0xe4) 0s ago: executing program 5 (id=3596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x2d, 0x0, &(0x7f0000000180)="8b3a21d8f2a2fc5fe0a1aff0dcc907eed9a0513246ca6ec13f8ddb9a79f474aec29a224b0e61c5e1e845578fff", 0x0, 0x5, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3}, 0x50) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000400851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) kernel console output (not intermixed with test programs): tivated: batadv_slave_0 [ 289.764834][T11439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.063928][T11439] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.073123][T11439] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.082383][T11439] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.091416][T11439] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.174317][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2055'. [ 290.201694][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2057'. [ 290.218962][T11454] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.227287][T11454] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.235523][T11454] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.243976][T11454] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.265780][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2057'. [ 290.677837][T11473] loop6: detected capacity change from 0 to 32768 [ 290.837117][T11473] JBD2: Ignoring recovery information on journal [ 290.936453][T11473] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 291.206703][ T1227] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 291.207495][ T4822] ocfs2: Unmounting device (7,6) on (node local) [ 291.614617][T11530] fuse: Bad value for 'fd' [ 291.681876][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2084'. [ 291.759700][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2086'. [ 291.804826][T11545] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.884756][T11545] device bond5 entered promiscuous mode [ 291.904073][T11545] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.924608][T11545] team0: Port device bond5 added [ 292.073128][T11551] netlink: 'syz.6.2088': attribute type 2 has an invalid length. [ 292.102018][T11551] netlink: 119 bytes leftover after parsing attributes in process `syz.6.2088'. [ 293.153135][T11593] loop9: detected capacity change from 0 to 256 [ 293.826991][T11618] loop9: detected capacity change from 0 to 1024 [ 293.853919][T11618] EXT4-fs (loop9): test_dummy_encryption requires encrypt feature [ 293.980087][T11622] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2115'. [ 295.230313][T11649] netlink: 'syz.0.2126': attribute type 10 has an invalid length. [ 295.322120][T11649] team0: Port device netdevsim0 added [ 296.069920][T11673] netlink: 'syz.9.2137': attribute type 13 has an invalid length. [ 296.105572][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2137'. [ 296.161873][T11673] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.170704][T11673] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.179482][T11673] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.188346][T11673] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.236220][T11673] netlink: 'syz.9.2137': attribute type 13 has an invalid length. [ 296.246096][T11654] loop6: detected capacity change from 0 to 32768 [ 296.253160][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2137'. [ 296.457088][T11654] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 296.752250][ T4822] ocfs2: Unmounting device (7,6) on (node local) [ 297.090505][T11698] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2146'. [ 297.264641][T11708] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.358131][T11712] loop6: detected capacity change from 0 to 128 [ 297.436991][T11712] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.479394][T11712] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.632099][ T4241] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 297.882092][ T4241] usb 10-1: Using ep0 maxpacket: 8 [ 297.988786][T11745] netlink: 'syz.0.2166': attribute type 1 has an invalid length. [ 298.002365][ T4241] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.023829][ T4241] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 298.059184][T11745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.067670][ T4241] usb 10-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 298.098936][ T4241] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.146018][ T4241] usb 10-1: config 0 descriptor?? [ 298.185618][T11748] bond2: (slave geneve2): making interface the new active one [ 298.216139][T11748] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 298.285341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 298.300206][T11748] syz.0.2166 (11748) used greatest stack depth: 19544 bytes left [ 298.311083][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2167'. [ 298.441451][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.459887][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.537788][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.569751][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.627407][T11713] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2152'. [ 298.642703][T11713] device gretap0 entered promiscuous mode [ 298.668632][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.696956][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.726821][T11713] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2152'. [ 298.729001][ T4241] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 298.747389][T11713] 0ªî{X¹¦: renamed from gretap0 [ 298.784529][ T4241] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 298.797755][T11713] device 30ªî{X¹¦ left promiscuous mode [ 298.811501][T11713] IPv6: ADDRCONF(NETDEV_CHANGE): 30ªî{X¹¦: link becomes ready [ 298.817783][ T4241] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 298.832932][T11713] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 298.877102][ T4241] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 298.906277][ T4241] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 298.918464][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.935058][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.937404][ T4241] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 299.031723][ T4241] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 299.081195][ T4241] logitech-djreceiver 0003:046D:C534.0005: unknown main item tag 0x0 [ 299.158099][ T4241] logitech-djreceiver 0003:046D:C534.0005: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.9-1/input0 [ 299.228635][ T154] tipc: Disabling bearer [ 299.240511][ T154] tipc: Left network mode [ 299.251897][ T4241] usb 10-1: USB disconnect, device number 3 [ 299.430374][T11774] fido_id[11774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 299.588425][T11767] chnl_net:caif_netlink_parms(): no params data found [ 299.910809][T11767] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.945623][T11767] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.026540][T11767] device bridge_slave_0 entered promiscuous mode [ 300.093462][T11767] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.100556][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.134277][T11767] device bridge_slave_1 entered promiscuous mode [ 300.258168][T11767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.289132][T11767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.452924][T11767] team0: Port device team_slave_0 added [ 300.483147][T11823] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2189'. [ 300.518903][T11823] device gretap0 entered promiscuous mode [ 300.527022][T11767] team0: Port device team_slave_1 added [ 300.588940][T11823] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2189'. [ 300.604066][T11823] 0ªî{X¹¦: renamed from gretap0 [ 300.620490][T11823] device 30ªî{X¹¦ left promiscuous mode [ 300.638527][T11823] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 300.741155][T11767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.762222][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.799485][T11767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.841060][T11767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.857469][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.888077][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 300.921977][T11767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.115388][T11767] device hsr_slave_0 entered promiscuous mode [ 301.131051][T11767] device hsr_slave_1 entered promiscuous mode [ 301.165856][T11767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.181976][T11767] Cannot create hsr debugfs directory [ 301.401571][T11853] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2193'. [ 302.036699][ T154] device hsr_slave_0 left promiscuous mode [ 302.052380][ T154] device hsr_slave_1 left promiscuous mode [ 302.059423][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.069686][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.091289][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.111615][ T154] device veth1_macvtap left promiscuous mode [ 302.123568][ T154] device veth0_macvtap left promiscuous mode [ 302.130100][ T154] device veth1_vlan left promiscuous mode [ 302.140527][ T154] device veth0_vlan left promiscuous mode [ 302.382879][ T154] bond5 (unregistering): Released all slaves [ 302.509997][ T154] bond3 (unregistering): (slave bond4): Releasing backup interface [ 302.530397][ T154] bond4 (unregistering): Released all slaves [ 302.563020][ T154] bond3 (unregistering): Released all slaves [ 302.591032][ T154] bond2 (unregistering): Released all slaves [ 302.608500][ T154] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 302.626983][ T154] device bridge0 left promiscuous mode [ 302.688434][ T154] bond1 (unregistering): Released all slaves [ 302.874156][ T154] team0 (unregistering): Port device team_slave_1 removed [ 302.900237][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.927468][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.969170][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 303.048880][ T154] bond0 (unregistering): Released all slaves [ 303.093722][T11837] bond0: (slave wlan1): Releasing backup interface [ 303.567521][T11904] device vlan4 entered promiscuous mode [ 303.952777][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2214'. [ 304.274233][T11767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.317537][T11767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.358942][T11767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.403028][T11767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.646537][T11767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.705079][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.743242][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.799267][T11767] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.825005][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.842399][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.856905][ T5364] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.864064][ T5364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.926491][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.932038][ T4234] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 304.953416][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.992672][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.029055][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.036177][ T5364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.044520][ T9817] Bluetooth: hci3: command 0x040f tx timeout [ 305.087402][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.107950][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.181035][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.230916][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.250196][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.284666][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.317960][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.323577][ T4234] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.348313][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.361829][ T4234] usb 10-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 305.367280][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.381636][ T4234] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.400088][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.423737][ T4234] usb 10-1: config 0 descriptor?? [ 305.434241][T11767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.476988][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.498413][ T4234] rndis_wlan 10-1:0.0: skipping garbage [ 305.510482][ T4234] usb 10-1: bad CDC descriptors [ 305.559052][ T4234] rndis_host 10-1:0.0: skipping garbage [ 305.592103][ T4234] usb 10-1: bad CDC descriptors [ 305.788816][ T4234] usb 10-1: USB disconnect, device number 4 [ 305.806842][ T25] kauditd_printk_skb: 838 callbacks suppressed [ 305.806854][ T25] audit: type=1326 audit(1779890043.957:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.0.2242" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ca2b30e59 code=0x0 [ 305.860600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.876987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.892702][T11767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.912145][ T25] audit: type=1326 audit(1779890044.057:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.4.2244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f2b40e59 code=0x7ffc0000 [ 305.950504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.961348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.991803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.005400][ T25] audit: type=1326 audit(1779890044.057:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.4.2244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f2b40e59 code=0x7ffc0000 [ 306.037270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.048340][T11767] device veth0_vlan entered promiscuous mode [ 306.056657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.065283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.077738][ T25] audit: type=1326 audit(1779890044.077:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.4.2244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29f2b40e59 code=0x7ffc0000 [ 306.118002][T11767] device veth1_vlan entered promiscuous mode [ 306.151497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.161146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.170049][ T25] audit: type=1326 audit(1779890044.077:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.4.2244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f2b40e59 code=0x7ffc0000 [ 306.196842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.209233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.224174][ T25] audit: type=1326 audit(1779890044.077:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.4.2244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f2b40e59 code=0x7ffc0000 [ 306.264111][T11767] device veth0_macvtap entered promiscuous mode [ 306.278559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.295924][T11767] device veth1_macvtap entered promiscuous mode [ 306.334482][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.366795][ T25] audit: type=1326 audit(1779890044.087:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.4.2244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f29f2b40e59 code=0x7ffc0000 [ 306.374699][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.431281][T12059] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2249'. [ 306.434718][T11767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.462673][ T25] audit: type=1326 audit(1779890044.087:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.4.2244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f2b40e59 code=0x7ffc0000 [ 306.462757][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2248'. [ 306.550369][ T25] audit: type=1326 audit(1779890044.087:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.4.2244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f2b40e59 code=0x7ffc0000 [ 306.579736][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.593154][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.626426][T12068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.633698][T12068] IPv6: NLM_F_CREATE should be set when creating new route [ 306.640934][T12068] IPv6: NLM_F_CREATE should be set when creating new route [ 306.666494][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.670979][ T25] audit: type=1326 audit(1779890044.087:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.4.2244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f29f2b40e59 code=0x7ffc0000 [ 306.715578][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.747785][T11767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.770037][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.782449][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.807759][T11767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.847178][T11767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.871280][T11767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.889831][T11767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.914150][T12079] netlink: 'syz.7.2256': attribute type 12 has an invalid length. [ 307.080290][ T5364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.122594][ T4247] Bluetooth: hci3: command 0x0419 tx timeout [ 307.142331][ T5364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.157376][T12094] overlayfs: failed to clone upperpath [ 307.189785][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.262365][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.270221][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.313333][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.200164][T12165] netlink: 'syz.4.2280': attribute type 1 has an invalid length. [ 308.270055][T12165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.284330][T12165] bond2: (slave bond3): making interface the new active one [ 308.295860][T12165] bond2: (slave bond3): Enslaving as an active interface with an up link [ 308.318971][T12174] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 308.551651][T12190] netlink: 'syz.4.2288': attribute type 12 has an invalid length. [ 309.826703][T12248] device macvlan2 entered promiscuous mode [ 309.835693][T12248] bond3: (slave macvlan2): Opening slave failed [ 310.158123][T12266] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 310.329854][T12278] device vti0 entered promiscuous mode [ 310.420529][T12284] netlink: 63 bytes leftover after parsing attributes in process `syz.9.2302'. [ 310.714935][T12300] device syzkaller1 entered promiscuous mode [ 310.992335][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2315'. [ 311.123175][T12318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.164499][T12318] bond1: (slave bond2): making interface the new active one [ 311.192875][T12318] bond1: (slave bond2): Enslaving as an active interface with an up link [ 311.331119][T12326] netlink: 'syz.9.2318': attribute type 21 has an invalid length. [ 311.396923][T12326] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.427018][T12326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.434290][T12326] IPv6: NLM_F_CREATE should be set when creating new route [ 311.441533][T12326] IPv6: NLM_F_CREATE should be set when creating new route [ 311.448792][T12326] IPv6: NLM_F_CREATE should be set when creating new route [ 311.522609][T12328] netlink: 'syz.9.2318': attribute type 21 has an invalid length. [ 311.531607][T12328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.811535][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'. [ 311.921293][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'. [ 312.425773][T12308] chnl_net:caif_netlink_parms(): no params data found [ 312.487321][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2325'. [ 312.813291][T12308] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.882045][T12308] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.918356][T12308] device bridge_slave_0 entered promiscuous mode [ 312.962226][ T4247] Bluetooth: hci3: command 0x0409 tx timeout [ 312.976650][T12308] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.992067][T12308] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.017203][T12308] device bridge_slave_1 entered promiscuous mode [ 313.029088][T12382] loop9: detected capacity change from 0 to 4096 [ 313.035029][T12393] netlink: 'syz.7.2334': attribute type 4 has an invalid length. [ 313.098085][T12308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.160580][T12308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.290536][T12308] team0: Port device team_slave_0 added [ 313.331856][T12308] team0: Port device team_slave_1 added [ 313.394155][T12308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.418218][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.534505][T12308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.587061][T12308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.610605][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.666931][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.778636][T12308] device hsr_slave_0 entered promiscuous mode [ 313.819516][T12308] device hsr_slave_1 entered promiscuous mode [ 313.868488][T12308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.885502][T12308] Cannot create hsr debugfs directory [ 314.069611][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.150901][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.229375][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.307922][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.047550][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 315.621041][ T154] device hsr_slave_0 left promiscuous mode [ 315.627789][ T154] device hsr_slave_1 left promiscuous mode [ 315.635420][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.643316][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.651188][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.658955][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.672397][ T154] device bridge_slave_1 left promiscuous mode [ 315.678820][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.697519][ T154] device bridge_slave_0 left promiscuous mode [ 315.705891][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.724605][ T154] device veth1_macvtap left promiscuous mode [ 315.730730][ T154] device veth0_macvtap left promiscuous mode [ 315.737112][ T154] device veth1_vlan left promiscuous mode [ 315.743047][ T154] device veth0_vlan left promiscuous mode [ 315.791545][T12375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.941181][ T154] team0 (unregistering): Port device team_slave_1 removed [ 315.958290][ T154] team0 (unregistering): Port device team_slave_0 removed [ 315.970564][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.985428][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.039139][ T154] bond0 (unregistering): Released all slaves [ 317.050883][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.057229][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.141982][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 318.026592][T12308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.039501][T12308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.050013][T12308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 318.064313][T12308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.140118][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.157048][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.170335][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.181335][T12308] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.196856][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.209819][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.220161][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.227264][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.259197][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.268352][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.281752][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.291311][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.298413][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.312059][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.320911][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.335151][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.347879][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.365288][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.375605][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.386024][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.399971][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.410923][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.422985][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.431513][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.446876][T12308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.576813][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.589127][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.601828][T12308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.621405][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.633612][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.660802][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.670235][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.682622][T12308] device veth0_vlan entered promiscuous mode [ 318.689422][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.698569][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.714745][T12308] device veth1_vlan entered promiscuous mode [ 318.741634][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.753010][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.761132][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.770361][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.781370][T12308] device veth0_macvtap entered promiscuous mode [ 318.791438][T12308] device veth1_macvtap entered promiscuous mode [ 318.808097][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.818900][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.830484][T12308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.840895][T12308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.854848][T12308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.866144][T12308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.877006][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.887736][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.899829][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.909122][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.917805][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.926463][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.937559][T12308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.946410][T12308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.957892][T12308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.966822][T12308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.028034][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.043002][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.053407][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.084008][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.091846][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.105869][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 319.214309][ T9819] Bluetooth: hci3: command 0x0419 tx timeout [ 319.238141][ T4236] kernel write not supported for file [eventfd] (pid: 4236 comm: kworker/1:6) [ 319.470856][T12654] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2343'. [ 319.518591][T12654] device gretap0 entered promiscuous mode [ 319.665066][T12668] fuse: Bad value for 'fd' [ 320.274648][T12693] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 320.287228][T12693] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 320.763735][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2361'. [ 321.157501][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2366'. [ 321.872081][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 322.262118][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 322.418620][T12785] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.432373][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 322.440717][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 322.440794][T12785] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.460419][T12785] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.470352][T12785] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.479853][T12785] device geneve2 entered promiscuous mode [ 322.491188][T12784] netlink: 'syz.0.2376': attribute type 4 has an invalid length. [ 322.508337][T12790] netlink: 'syz.0.2376': attribute type 4 has an invalid length. [ 322.512467][ T21] usb 3-1: config 1 has an invalid interface number: 237 but max is 0 [ 322.534575][ T21] usb 3-1: config 1 has no interface number 0 [ 322.551390][ T21] usb 3-1: config 1 interface 237 has no altsetting 0 [ 322.626958][T12785] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.657184][T12785] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.687871][T12785] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 322.822226][ T21] usb 3-1: string descriptor 0 read error: -22 [ 322.828625][ T21] usb 3-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 322.844626][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.861230][T12785] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.875647][T12785] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.885836][T12785] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 322.933744][ T21] ipaq 3-1:1.237: PocketPC PDA converter detected [ 322.973859][T12785] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.003809][T12785] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.018203][T12785] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 323.502230][T12785] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.606976][ T21] usb 3-1: PocketPC PDA converter now attached to ttyUSB0 [ 323.618151][T12785] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.642645][T12785] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 323.887300][ T4234] usb 3-1: USB disconnect, device number 5 [ 323.915372][ T4234] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 323.928218][T12785] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.941461][ T4234] ipaq 3-1:1.237: device disconnected [ 323.969943][T12785] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.979427][T12785] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.999862][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 324.028662][T12785] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.043608][T12785] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 324.052624][T12785] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.072513][T12785] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.081542][T12785] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 324.100716][T12785] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.143640][T12785] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.156329][T12785] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 324.165941][T12785] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.351039][T12851] "syz.7.2392" (12851) uses obsolete ecb(arc4) skcipher [ 324.667313][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2397'. [ 324.693198][T12871] team0: Port device team_slave_0 removed [ 324.801970][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 324.938596][T12881] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 324.938596][T12881] Q&|xùX [ 325.118309][T12892] tipc: Failed to remove unknown binding: 66,1,1/0:1507705688/1507705690 [ 325.153983][T12892] tipc: Failed to remove unknown binding: 66,1,1/0:1507705688/1507705690 [ 325.192230][T12892] tipc: Failed to remove unknown binding: 66,1,1/0:1507705688/1507705690 [ 326.154895][T12938] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.2412'. [ 326.198424][T12938] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2412'. [ 326.328669][T12945] device bridge1 entered promiscuous mode [ 328.100599][T12996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2426'. [ 328.367998][T13008] tipc: Failed to remove unknown binding: 66,0,0/0:127927842/127927843 [ 328.383975][T13008] tipc: Failed to remove unknown binding: 66,0,0/0:127927842/127927843 [ 328.624480][T13023] overlayfs: upper fs is r/o, try multi-lower layers mount [ 328.810839][T13035] sctp: [Deprecated]: syz.0.2435 (pid 13035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.810839][T13035] Use struct sctp_sack_info instead [ 329.105045][T13057] fuse: Bad value for 'fd' [ 330.495565][T13041] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.507500][T13041] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.526146][T13041] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.536118][T13041] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.556219][T13096] loop2: detected capacity change from 0 to 4096 [ 330.606905][T13041] tipc: Resetting bearer [ 330.639571][T13096] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 330.686050][T13096] ntfs3: loop2: failed to convert "0000" to iso8859-7 [ 330.704476][T13096] ntfs3: loop2: failed to convert name for inode 1e. [ 330.720267][T13096] ntfs3: loop2: failed to convert "0000" to iso8859-7 [ 330.727427][T13096] ntfs3: loop2: failed to convert name for inode 1e. [ 330.877796][T13041] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.886312][T13041] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.894920][T13041] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.903306][T13041] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.925673][T13041] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.934309][T13041] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.943414][T13041] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.952280][T13041] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 331.320077][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 331.358574][T13129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2457'. [ 331.382754][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 331.422288][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 331.796840][T13152] overlayfs: failed to clone upperpath [ 332.175230][T13171] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2471'. [ 332.217686][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2471'. [ 332.310876][T13174] netlink: 'syz.4.2472': attribute type 1 has an invalid length. [ 332.350875][T13174] device bond4 entered promiscuous mode [ 332.357380][T13174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.365845][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2472'. [ 332.393012][T13180] bond4 (unregistering): Released all slaves [ 332.613156][T13194] VFS: Mount too revealing [ 332.836173][T13196] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.851336][T13196] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.898918][T13196] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.910661][T13196] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.038248][T13277] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2496'. [ 336.728800][T13319] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.737800][T13319] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.746864][T13319] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.755784][T13319] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.837443][T13319] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.846401][T13319] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.855916][T13319] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.864856][T13319] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.888644][T13333] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2511'. [ 336.932036][T13333] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.939275][T13333] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.962063][T13336] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2511'. [ 336.971705][T13336] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.978835][T13336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.986258][T13336] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.993359][T13336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.003858][T13336] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2511'. [ 337.023699][T13336] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.030845][T13336] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.057230][T13372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2518'. [ 337.496351][T13405] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 338.051215][T13430] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2535'. [ 338.140018][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2536'. [ 339.588791][T13444] overlayfs: upper fs is r/o, try multi-lower layers mount [ 339.919144][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2545'. [ 339.956333][T13468] loop2: detected capacity change from 0 to 1024 [ 340.066372][T13468] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 340.201290][T13484] binder: 13483:13484 ioctl c0306201 200000000080 returned -14 [ 340.214507][T13484] binder: 13483:13484 ioctl c0306201 2000000003c0 returned -14 [ 340.233125][T13486] netlink: 'syz.7.2549': attribute type 1 has an invalid length. [ 340.287103][T13486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.306330][T13490] fuse: Bad value for 'fd' [ 340.328326][T13488] bond6: (slave veth19): Enslaving as an active interface with a down link [ 340.407120][T13486] device veth0_virt_wifi entered promiscuous mode [ 340.418210][T13486] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 340.452441][T13486] bond6: (slave veth0_virt_wifi): Releasing active interface [ 340.582508][T13506] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2554'. [ 340.604915][T13499] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 340.934286][T13523] overlayfs: failed to clone upperpath [ 341.661395][T13565] loop9: detected capacity change from 0 to 512 [ 341.811646][T13565] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 342.036291][ T4260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.200937][ T4260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.299052][ T4260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.346540][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 342.397197][ T4260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.213961][T13596] chnl_net:caif_netlink_parms(): no params data found [ 343.322108][ T4236] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 343.572035][ T4236] usb 10-1: Using ep0 maxpacket: 32 [ 343.658258][T13596] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.678107][T13596] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.692287][ T4236] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 343.759837][T13596] device bridge_slave_0 entered promiscuous mode [ 343.842660][T13596] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.872195][ T4236] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 343.894889][T13596] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.907460][ T4236] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 343.936347][T13596] device bridge_slave_1 entered promiscuous mode [ 343.943267][ T4236] usb 10-1: Product: syz [ 343.962043][ T4236] usb 10-1: Manufacturer: syz [ 343.966756][ T4236] usb 10-1: SerialNumber: syz [ 344.037711][ T4236] usb 10-1: config 0 descriptor?? [ 344.059543][T13596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.092394][T13620] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 344.112782][ T4236] hub 10-1:0.0: bad descriptor, ignoring hub [ 344.118809][ T4236] hub: probe of 10-1:0.0 failed with error -5 [ 344.361958][ C0] hrtimer: interrupt took 31130 ns [ 344.379850][T13596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.492631][ T9817] Bluetooth: hci3: command 0x0409 tx timeout [ 344.534276][T13596] team0: Port device team_slave_0 added [ 344.558621][T13596] team0: Port device team_slave_1 added [ 344.679035][T13596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.700740][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.822309][T13596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.889169][ T4260] device hsr_slave_0 left promiscuous mode [ 344.909707][ T4260] device hsr_slave_1 left promiscuous mode [ 344.940618][ T4260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.978871][ T4260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.044281][ T4233] usb 10-1: USB disconnect, device number 5 [ 345.121835][ T4260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.139723][ T4260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.176594][ T4260] device bridge_slave_1 left promiscuous mode [ 345.211106][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.256111][ T4260] device bridge_slave_0 left promiscuous mode [ 345.281097][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.343047][ T4260] device veth1_macvtap left promiscuous mode [ 345.360540][ T4260] device veth0_macvtap left promiscuous mode [ 345.367206][ T4260] device veth1_vlan left promiscuous mode [ 345.378908][ T4260] device veth0_vlan left promiscuous mode [ 346.120592][ T4260] team0 (unregistering): Port device team_slave_1 removed [ 346.167539][ T4260] team0 (unregistering): Port device team_slave_0 removed [ 346.272526][ T4260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.315781][ T4260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.562164][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 346.640171][ T4260] bond0 (unregistering): Released all slaves [ 347.069306][T13596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.078316][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.110500][T13596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.315082][T13596] device hsr_slave_0 entered promiscuous mode [ 347.332239][T13596] device hsr_slave_1 entered promiscuous mode [ 347.355207][T13596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.379530][T13596] Cannot create hsr debugfs directory [ 347.517949][T13726] loop9: detected capacity change from 0 to 8 [ 348.264111][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2619'. [ 348.306733][T13736] device lo entered promiscuous mode [ 348.338408][T13736] device tunl0 entered promiscuous mode [ 348.373632][T13736] device gre0 entered promiscuous mode [ 348.399281][T13736] device gretap0 entered promiscuous mode [ 348.427205][T13736] device erspan0 entered promiscuous mode [ 348.455028][T13736] device ip_vti0 entered promiscuous mode [ 348.475536][T13736] device ip6_vti0 entered promiscuous mode [ 348.496549][T13736] device sit0 entered promiscuous mode [ 348.521639][T13736] device ip6tnl0 entered promiscuous mode [ 348.547888][T13736] device ip6gre0 entered promiscuous mode [ 348.569017][T13736] device syz_tun entered promiscuous mode [ 348.590134][T13736] device bridge0 entered promiscuous mode [ 348.613471][T13736] device vcan0 entered promiscuous mode [ 348.630010][T13736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.642132][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 348.660138][T13736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.685472][T13736] device team0 entered promiscuous mode [ 348.699811][T13736] device netdevsim0 entered promiscuous mode [ 348.718927][T13736] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.745604][T13736] device dummy0 entered promiscuous mode [ 348.768843][T13736] device nlmon0 entered promiscuous mode [ 348.789775][T13736] device caif0 entered promiscuous mode [ 348.807568][T13736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.861566][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 348.942501][T13737] device netdevsim0 left promiscuous mode [ 348.986961][T13737] team0 (unregistering): Port device netdevsim0 removed [ 350.521877][T13596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.722165][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 351.186872][T13596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.236557][T13596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.286460][T13596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.624011][T13596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.719751][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.738210][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.773888][T13596] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.826307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.856074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.889017][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.896180][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.991043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.029911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.081585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.139647][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.146989][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.214743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.260377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.329813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.392303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.451405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.493078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.536645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.570580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.615808][T13596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.654221][T13596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 352.690891][T13774] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2633'. [ 352.787097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.801362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.846044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.163118][T13789] loop9: detected capacity change from 0 to 1024 [ 353.469105][ T470] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.596442][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.609623][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.661351][T13596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.827120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.847865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.899928][T13596] device veth0_vlan entered promiscuous mode [ 353.949732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.958767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.006466][T13596] device veth1_vlan entered promiscuous mode [ 354.042455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.063053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.104524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 354.209730][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 354.219080][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.248399][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.283233][T13596] device veth0_macvtap entered promiscuous mode [ 354.318342][T13596] device veth1_macvtap entered promiscuous mode [ 354.411850][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.480171][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.548080][T13596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.588750][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 354.625239][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 354.666638][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.705934][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.738911][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.764796][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.806865][T13596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.837120][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.856307][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.978095][T13596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.010130][T13596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.047339][T13596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.097979][T13596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.985359][T12107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.091571][T12107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.259395][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 356.290351][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.315321][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.360420][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.466945][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2660'. [ 356.858850][T13887] loop1: detected capacity change from 0 to 128 [ 356.979674][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2665'. [ 358.351555][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2669'. [ 358.427531][T13909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 358.593372][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 358.599426][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 358.657458][T13926] ceph: No mds server is up or the cluster is laggy [ 358.966542][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 358.973319][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 359.396269][T13961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2683'. [ 359.406291][T13961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2683'. [ 359.411954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #104!!! [ 359.665444][T13967] overlayfs: failed to set xattr on upper [ 359.699153][T13967] overlayfs: ...falling back to index=off,metacopy=off. [ 359.740025][T13967] overlayfs: failed to clone lowerpath [ 359.889011][T13982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2690'. [ 360.241740][T13980] device wg1 entered promiscuous mode [ 360.397137][T13998] overlayfs: failed to clone upperpath [ 361.015889][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2702'. [ 361.370836][T14045] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2708'. [ 361.706955][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'. [ 361.736448][T14055] device lo entered promiscuous mode [ 361.784616][T14055] device tunl0 entered promiscuous mode [ 361.819784][T14055] device gre0 entered promiscuous mode [ 361.850940][T14055] device erspan0 entered promiscuous mode [ 361.888093][T14055] device ip_vti0 entered promiscuous mode [ 361.933580][T14055] device ip6_vti0 entered promiscuous mode [ 361.957737][T14055] device sit0 entered promiscuous mode [ 362.026220][T14055] device ip6tnl0 entered promiscuous mode [ 362.062835][T14055] device ip6gre0 entered promiscuous mode [ 362.094120][T14055] rdma_rxe: ignoring netdev event = 14 for syz_tun [ 362.151551][T14055] infiniband syz1: set active [ 362.175011][T14055] infiniband syz1: set active [ 362.181010][T14055] infiniband syz1: set active [ 362.247198][T14055] device ip6gretap0 entered promiscuous mode [ 362.270727][T14055] device team0 entered promiscuous mode [ 362.302740][T14055] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.341715][T14055] device dummy0 entered promiscuous mode [ 362.379214][T14055] device nlmon0 entered promiscuous mode [ 362.407671][T14055] device caif0 entered promiscuous mode [ 362.442600][T14055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.530306][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2720'. [ 363.244853][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2722'. [ 363.697750][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2733'. [ 364.070592][T14120] netlink: 'syz.1.2725': attribute type 1 has an invalid length. [ 364.131517][T14123] netlink: 'syz.9.2726': attribute type 4 has an invalid length. [ 364.271736][T14123] netlink: 'syz.9.2726': attribute type 17 has an invalid length. [ 364.388002][T14123] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 364.877986][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2740'. [ 366.226374][T14177] fuse: Bad value for 'fd' [ 366.589225][T14183] sctp: [Deprecated]: syz.9.2742 (pid 14183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.589225][T14183] Use struct sctp_sack_info instead [ 366.733637][T14184] sctp: [Deprecated]: syz.9.2742 (pid 14184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.733637][T14184] Use struct sctp_sack_info instead [ 369.619602][T14205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2746'. [ 371.373304][ T9815] Bluetooth: hci4: command 0x0406 tx timeout [ 372.841963][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 372.861966][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 372.881963][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 372.892556][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 373.571962][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 373.591961][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 373.601958][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 373.611953][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 375.500101][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2773'. [ 375.559861][T14307] device lo entered promiscuous mode [ 375.665779][T14307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 375.771161][T14314] fuse: Bad value for 'fd' [ 375.802952][T14307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 375.859447][T14307] device tunl0 entered promiscuous mode [ 375.904233][T14307] device gre0 entered promiscuous mode [ 375.959812][T14307] device 30ªî{X¹¦ entered promiscuous mode [ 375.994706][T14307] device erspan0 entered promiscuous mode [ 376.045563][T14307] device ip_vti0 entered promiscuous mode [ 376.066477][T14307] device ip6_vti0 entered promiscuous mode [ 376.108454][T14307] device sit0 entered promiscuous mode [ 376.145016][T14307] device ip6tnl0 entered promiscuous mode [ 376.177135][T14307] device ip6gre0 entered promiscuous mode [ 376.213154][T14307] device ip6gretap0 entered promiscuous mode [ 376.243299][T14307] device bridge0 entered promiscuous mode [ 376.293829][T14307] device bond0 entered promiscuous mode [ 376.319983][T14307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.356123][T14307] device team0 entered promiscuous mode [ 376.384208][T14307] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.409202][T14307] device dummy0 entered promiscuous mode [ 376.446666][T14307] device nlmon0 entered promiscuous mode [ 376.463114][T14307] device caif0 entered promiscuous mode [ 376.479689][T14307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.527861][T14308] netlink: 'syz.9.2774': attribute type 1 has an invalid length. [ 376.757809][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2773'. [ 376.937832][T14311] team0 (unregistering): Port device bond5 removed [ 377.753298][T14358] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 378.490367][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.497374][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.601085][T14370] loop1: detected capacity change from 0 to 4096 [ 379.448571][ T25] kauditd_printk_skb: 17 callbacks suppressed [ 379.448622][ T25] audit: type=1804 audit(1779890117.597:899): pid=14383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2788" name=2F6E6577726F6F742F32392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop1" ino=34 res=1 errno=0 [ 381.128405][T14407] Invalid ELF header type: 3 != 1 [ 381.555604][T14418] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2801'. [ 382.138827][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2805'. [ 385.238581][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 385.408027][T14485] netlink: 'syz.4.2821': attribute type 1 has an invalid length. [ 385.508040][T14485] device bond4 entered promiscuous mode [ 385.514996][T14485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 385.529906][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2822'. [ 385.825910][T14489] device veth11 entered promiscuous mode [ 385.905656][T14489] bond4: (slave veth11): Enslaving as an active interface with an up link [ 385.925881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 386.102569][T14514] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2829'. [ 386.338310][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 386.899968][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2834'. [ 387.441028][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2835'. [ 388.630858][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 389.140807][ T25] audit: type=1804 audit(1779890127.287:900): pid=14557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2840" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=67636 res=1 errno=0 [ 389.280570][ T25] audit: type=1804 audit(1779890127.287:901): pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2840" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=67636 res=1 errno=0 [ 389.782504][T14572] netlink: 'syz.1.2842': attribute type 1 has an invalid length. [ 389.962860][T14572] device bond1 entered promiscuous mode [ 389.970128][T14572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.113625][T14573] device veth3 entered promiscuous mode [ 390.121825][T14573] bond1: (slave veth3): Enslaving as an active interface with an up link [ 390.141713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 391.734423][T14594] loop1: detected capacity change from 0 to 2048 [ 391.833582][T14594] loop1: p4 < > [ 392.212784][T14261] udevd[14261]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 392.586051][T14611] unsupported nlmsg_type 40 [ 395.644024][ T25] audit: type=1326 audit(1779890133.797:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14633 comm="syz.4.2851" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29f2b40e59 code=0x0 [ 396.426901][T12107] device hsr_slave_0 left promiscuous mode [ 396.462989][T12107] device hsr_slave_1 left promiscuous mode [ 396.554605][T12107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.573215][T12107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.534273][T12107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.627800][T12107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.639409][T12107] device bridge_slave_1 left promiscuous mode [ 398.657201][T12107] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.690718][T12107] device bridge_slave_0 left promiscuous mode [ 398.769257][T12107] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.863643][T12107] device veth1_macvtap left promiscuous mode [ 398.894877][T12107] device veth1_vlan left promiscuous mode [ 398.945767][T12107] device veth0_vlan left promiscuous mode [ 398.986623][T14664] overlayfs: failed to clone upperpath [ 399.835205][T12107] bond1 (unregistering): (slave bond0): Releasing backup interface [ 399.894719][T12107] bond1 (unregistering): Released all slaves [ 400.794657][T12107] team0 (unregistering): Port device team_slave_1 removed [ 400.863401][T12107] team0 (unregistering): Port device team_slave_0 removed [ 401.023735][T12107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.846676][T12107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.175124][T12107] bond0 (unregistering): Released all slaves [ 403.326153][T14708] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2870'. [ 403.631229][T14722] netlink: 'syz.0.2875': attribute type 1 has an invalid length. [ 403.872737][T14722] device bond4 entered promiscuous mode [ 403.879494][T14722] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.916445][T14758] netlink: 'syz.0.2885': attribute type 1 has an invalid length. [ 412.474249][T14775] device bond7 entered promiscuous mode [ 412.710975][T14782] device bridge7 entered promiscuous mode [ 412.829423][T14782] bond7: (slave bridge7): making interface the new active one [ 412.934588][T14782] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 417.781912][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2913'. [ 418.748225][T14889] fuse: Bad value for 'fd' [ 419.160962][T14894] bond1: option mode: unable to set because the bond device has slaves [ 419.518406][T14894] bond1: (slave veth5): Enslaving as a backup interface with an up link [ 419.608546][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2918'. [ 419.758604][T14901] device bond1 entered promiscuous mode [ 419.857566][T14901] device bond2 entered promiscuous mode [ 419.898423][T14901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.333727][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2924'. [ 424.146599][T14976] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 424.254042][T14976] overlayfs: failed to set xattr on upper [ 424.325392][T14976] overlayfs: ...falling back to index=off,metacopy=off. [ 424.431358][T14976] overlayfs: conflicting lowerdir path [ 427.260543][T15024] tipc: Enabling of bearer rejected, failed to enable media [ 429.811470][T15045] overlayfs: failed to resolve './file0': -2 [ 430.423760][T15057] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2966'. [ 430.477393][T15059] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2966'. [ 430.591479][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2966'. [ 431.578043][T15077] netlink: 'syz.7.2973': attribute type 1 has an invalid length. [ 432.219802][T15083] bond8: (slave bridge8): making interface the new active one [ 432.284671][T15083] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 433.829840][T15124] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 439.927614][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.934600][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.436172][T15213] device ip6gre1 entered promiscuous mode [ 441.537896][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.559345][T15218] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.591206][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.678147][T10855] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.752978][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.211038][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3008'. [ 442.243143][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.260086][T15226] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 442.440084][T15231] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 443.133150][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3012'. [ 445.362202][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.557958][T15325] overlayfs: failed to clone upperpath [ 451.745181][T15334] overlayfs: failed to clone upperpath [ 452.327843][T15339] overlayfs: failed to resolve './file0': -2 [ 452.722147][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.734181][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3043'. [ 454.012518][ T9815] Bluetooth: hci5: command 0x0409 tx timeout [ 454.055786][T15380] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3047'. [ 454.147540][T15380] device ip6gre2 entered promiscuous mode [ 454.223655][T15380] netlink: 'syz.7.3047': attribute type 6 has an invalid length. [ 454.278843][T15380] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3047'. [ 454.417250][T15336] chnl_net:caif_netlink_parms(): no params data found [ 455.851814][T15336] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.042214][T15336] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.092110][ T9816] Bluetooth: hci5: command 0x041b tx timeout [ 456.101590][T15336] device bridge_slave_0 entered promiscuous mode [ 456.216861][T15336] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.262256][T15336] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.322093][T15336] device bridge_slave_1 entered promiscuous mode [ 456.534338][T15420] device macsec0 entered promiscuous mode [ 456.565328][T15336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.632934][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3054'. [ 456.696467][T15420] device macsec0 left promiscuous mode [ 456.771411][T15336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.977271][T15336] team0: Port device team_slave_0 added [ 457.064602][T15336] team0: Port device team_slave_1 added [ 457.237025][T15336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.272188][T15336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.393106][T15336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.491578][T15336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.511701][T15336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.621701][T15336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.817633][T15336] device hsr_slave_0 entered promiscuous mode [ 457.859836][T15336] device hsr_slave_1 entered promiscuous mode [ 457.881471][T15336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.892344][T15336] Cannot create hsr debugfs directory [ 458.172518][ T9816] Bluetooth: hci5: command 0x040f tx timeout [ 460.164346][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3061'. [ 460.242281][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 460.334648][T15336] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 460.543288][T15336] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 462.078711][T15336] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 462.206519][T15336] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 462.777677][T15336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.873718][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 462.931688][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.975864][T15336] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.054900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.089971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.201879][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.209704][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.343797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.389220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.454450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.493517][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.501283][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.572857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 463.635085][T15492] netlink: 'syz.9.3071': attribute type 39 has an invalid length. [ 463.704950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.767460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.817864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.864228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 463.937368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 463.989678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.049680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.134347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.194802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.243892][T15499] netlink: 'syz.9.3073': attribute type 29 has an invalid length. [ 464.264597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.379204][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.394333][T15502] netlink: 'syz.9.3073': attribute type 29 has an invalid length. [ 464.439524][T15499] netlink: 'syz.9.3073': attribute type 29 has an invalid length. [ 466.801259][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.236227][T15530] netlink: 'syz.9.3080': attribute type 4 has an invalid length. [ 468.372554][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.390163][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.461697][T15530] netlink: 'syz.9.3080': attribute type 4 has an invalid length. [ 468.544506][T15336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.724669][ T4236] Bluetooth: hci3: command 0x0406 tx timeout [ 472.100606][ T9815] Bluetooth: hci6: command 0x0409 tx timeout [ 472.238229][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 472.294632][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.693658][T15336] device veth0_vlan entered promiscuous mode [ 474.378687][ T4235] Bluetooth: hci6: command 0x041b tx timeout [ 474.408188][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 474.459379][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.581520][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.620569][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.721274][T15336] device veth1_vlan entered promiscuous mode [ 475.062243][T15336] device veth0_macvtap entered promiscuous mode [ 475.164530][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.180994][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.369946][T15336] device veth1_macvtap entered promiscuous mode [ 475.390685][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 475.409328][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 475.556028][T15336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.593239][T15336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.621556][T15336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.659032][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 475.691692][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.815983][T15336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.892557][T15336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.509944][T15336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.583414][ T9817] Bluetooth: hci6: command 0x040f tx timeout [ 477.617508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.629296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.697325][T15336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.756055][T15336] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.765651][T15336] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.855793][T15336] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.738780][T15566] chnl_net:caif_netlink_parms(): no params data found [ 478.860172][T12107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.909524][T12107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.116624][T15368] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 479.167556][T15368] infiniband syz1: set down [ 479.203688][ T4235] infiniband syz1: ib_query_port failed (-19) [ 479.264074][ T144] smc: removing ib device syz1 [ 479.273540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 479.606489][ T4247] Bluetooth: hci6: command 0x0419 tx timeout [ 480.957645][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.968060][T15656] x_tables: duplicate entry at hook 1 [ 480.984902][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.164454][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 481.205850][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.295307][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.367398][T15566] device bridge_slave_0 entered promiscuous mode [ 481.442923][T15566] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.487729][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.575312][T15566] device bridge_slave_1 entered promiscuous mode [ 481.919981][T15566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.893469][T15678] netlink: 'syz.1.3110': attribute type 10 has an invalid length. [ 483.044132][T15678] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 483.117198][T15566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.391485][T15566] team0: Port device team_slave_0 added [ 483.538744][T15566] team0: Port device team_slave_1 added [ 483.934921][T15566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.983654][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.183580][T15566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.258399][T15566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.293121][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.504346][T15566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.842033][T15566] device hsr_slave_0 entered promiscuous mode [ 484.953945][T15566] device hsr_slave_1 entered promiscuous mode [ 484.984535][T15566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.036882][T15566] Cannot create hsr debugfs directory [ 487.916286][T15738] netlink: 'syz.5.3124': attribute type 1 has an invalid length. [ 488.116308][T15738] 8021q: VLANs not supported on ip6tnl0 [ 488.670407][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3133'. [ 488.736169][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3133'. [ 489.220000][T14635] device hsr_slave_0 left promiscuous mode [ 489.267333][T14635] bond4 (unregistering): Released all slaves [ 489.367727][T14635] bond3 (unregistering): Released all slaves [ 489.516282][T14635] bond2 (unregistering): (slave geneve2): Releasing active interface [ 489.618999][T14635] bond2 (unregistering): Released all slaves [ 489.867563][T14635] bond1 (unregistering): Released all slaves [ 490.022923][T14635] smc: removing net device bond0 with user defined pnetid SYZ2 [ 490.074476][T14635] bond0 (unregistering): Released all slaves [ 492.997028][T15566] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 493.060794][T15566] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 493.118837][T15566] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 493.210216][T15566] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 493.908647][T15566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.294390][T15566] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.044208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.098555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.244231][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 496.281381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.324612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.627579][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.635269][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.644747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 496.697910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.400600][T15864] netlink: 'syz.1.3156': attribute type 2 has an invalid length. [ 497.503649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.596699][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.604441][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.729450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.836804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.888793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.971423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 498.037922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 498.132507][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 498.218296][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 498.287820][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 498.332367][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.408033][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 498.438661][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.512219][T15566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 499.732458][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.766129][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.860167][T15566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.352205][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.359151][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.459023][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.527019][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.743166][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.777658][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.881216][T15566] device veth0_vlan entered promiscuous mode [ 501.948393][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.976499][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.104919][T15566] device veth1_vlan entered promiscuous mode [ 502.514241][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.528165][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 502.647646][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.824331][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.936539][T15566] device veth0_macvtap entered promiscuous mode [ 503.056744][T15566] device veth1_macvtap entered promiscuous mode [ 503.214883][T15941] kernel profiling enabled (shift: 9) [ 503.361916][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.575994][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.661116][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.728520][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.833068][T15566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.925278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 503.983710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 504.082747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 504.181765][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.264690][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.387876][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.476575][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.571993][T15566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.682926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 504.713719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 504.830742][T15566] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.883642][T15566] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.950028][T15566] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.042857][T15566] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.203386][T15970] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3177'. [ 505.291692][T15973] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3177'. [ 505.764781][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.818041][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.910208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 506.148488][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.194181][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.251276][T15985] netlink: 180 bytes leftover after parsing attributes in process `syz.9.3180'. [ 506.369570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 507.083577][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3181'. [ 507.551190][T16004] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 507.627714][T16004] team0: Port device team_slave_0 removed [ 507.955673][T16014] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3185'. [ 508.285566][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3186'. [ 508.321404][T15998] syz.8.3083 (15998): drop_caches: 2 [ 508.327454][ T25] audit: type=1326 audit(1779890246.489:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.1.3187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9e7852e59 code=0x0 [ 508.495908][ T25] audit: type=1326 audit(1779890246.549:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.1.3187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e7852e59 code=0x7ffc0000 [ 508.701182][ T25] audit: type=1326 audit(1779890246.549:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.1.3187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e7852e59 code=0x7ffc0000 [ 508.780545][ T25] audit: type=1326 audit(1779890246.549:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.1.3187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e7852e59 code=0x7ffc0000 [ 508.952503][ T25] audit: type=1326 audit(1779890246.549:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.1.3187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e7852e59 code=0x7ffc0000 [ 508.986434][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3190'. [ 509.075779][ T25] audit: type=1326 audit(1779890246.549:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.1.3187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb9e7852e59 code=0x7ffc0000 [ 510.672460][ T25] audit: type=1326 audit(1779890246.579:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.1.3187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e7852e59 code=0x7ffc0000 [ 510.840489][ T25] audit: type=1326 audit(1779890246.579:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.1.3187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e7852e59 code=0x7ffc0000 [ 511.000001][ T25] audit: type=1326 audit(1779890246.579:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.1.3187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e7852e59 code=0x7ffc0000 [ 511.195990][ T25] audit: type=1326 audit(1779890246.579:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.1.3187" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e7852e59 code=0x7ffc0000 [ 513.403100][T16050] tmpfs: Bad value for 'mpol' [ 513.491477][T16053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3197'. [ 513.819506][T14635] tipc: Disabling bearer [ 513.849660][T14635] tipc: Disabling bearer [ 513.871878][T16067] UBIFS error (pid: 16067): cannot open "c:::", error -22 [ 513.922705][T14635] tipc: Left network mode [ 514.167831][T16070] netlink: 'syz.1.3203': attribute type 1 has an invalid length. [ 514.235704][T16070] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3203'. [ 515.485587][T16091] netlink: 'syz.1.3209': attribute type 27 has an invalid length. [ 515.507398][T16091] netlink: 'syz.1.3209': attribute type 4 has an invalid length. [ 515.520177][T16091] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3209'. [ 515.538191][ T4247] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 515.845475][ T4247] usb 9-1: Using ep0 maxpacket: 32 [ 517.327559][ T4247] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 517.366569][ T4247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.462436][ T4247] usb 9-1: config 0 descriptor?? [ 517.513511][T16097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.551820][ T4247] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 517.575870][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'. [ 517.662403][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3211'. [ 517.757092][ T4247] gspca_vc032x: reg_r err -32 [ 517.762239][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.786380][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.808754][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.812445][T16099] bond2: (slave bond0): Error -16 calling set_mac_address [ 517.814576][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.839170][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.844979][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.856311][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3214'. [ 517.872551][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.883753][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.898160][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.904128][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.921100][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.933084][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.943556][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.955479][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.965678][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.977988][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 517.983918][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.000980][ T4247] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.013038][ T4247] gspca_vc032x: Unknown sensor... [ 518.022855][ T4247] vc032x: probe of 9-1:0.0 failed with error -22 [ 518.581472][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'. [ 519.877060][ T4247] usb 9-1: USB disconnect, device number 2 [ 520.109022][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3223'. [ 520.125986][T16133] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 520.365802][ T4236] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 520.581988][T14635] device hsr_slave_0 left promiscuous mode [ 522.725828][T14635] bond4 (unregistering): (slave veth11): Releasing backup interface [ 522.775079][ T4236] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 522.807412][ T4236] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 522.836199][T14635] device veth11 left promiscuous mode [ 522.856865][ T4236] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.890241][T14635] bond4 (unregistering): Released all slaves [ 522.904564][ T4236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.955109][T16136] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 523.154867][ T4236] usb 6-1: USB disconnect, device number 7 [ 523.439590][T14635] bond2 (unregistering): (slave bond3): Releasing backup interface [ 523.553412][T14635] bond3 (unregistering): Released all slaves [ 523.632296][ T25] kauditd_printk_skb: 58 callbacks suppressed [ 523.632347][ T25] audit: type=1326 audit(1779890261.806:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16156 comm="syz.8.3230" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef304ce59 code=0x7fc00000 [ 523.658881][T16165] udevd[16165]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.783799][T14635] bond2 (unregistering): Released all slaves [ 524.210914][T14635] smc: removing net device bond0 with user defined pnetid SYZ2 [ 524.248149][T14635] bond0 (unregistering): Released all slaves [ 524.810415][T14635] bond1 (unregistering): Released all slaves [ 525.656449][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3235'. [ 525.682774][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3242'. [ 525.724899][T16222] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3242'. [ 525.749402][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3242'. [ 525.772749][T16222] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3242'. [ 526.059345][T16238] device macvlan2 entered promiscuous mode [ 526.105537][T16238] device bond9 entered promiscuous mode [ 526.112513][T16238] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 526.137138][T16238] device bond9 left promiscuous mode [ 526.347696][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3246'. [ 527.470392][T16274] delete_channel: no stack [ 527.480614][T16274] delete_channel: no stack [ 528.785694][T16301] sch_fq: defrate 53322 ignored. [ 529.891117][T16324] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.3265'. [ 530.126301][T16334] device syzkaller0 entered promiscuous mode [ 530.602935][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3272'. [ 532.041270][T16387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.145386][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3283'. [ 532.160394][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3283'. [ 532.267932][T16394] loop8: detected capacity change from 0 to 512 [ 532.296749][T16387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.367080][T16387] bond1: (slave bond0): making interface the new active one [ 532.383674][T16394] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #15: comm syz.8.3284: inode has both inline data and extents flags [ 532.407359][T16387] bond1: (slave bond0): Enslaving as an active interface with an up link [ 532.420260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 532.473536][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3295'. [ 532.482991][T16394] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.3284: couldn't read orphan inode 15 (err -117) [ 532.496648][T16394] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 533.780464][T16435] loop8: detected capacity change from 0 to 256 [ 536.159512][T16472] delete_channel: no stack [ 536.166324][T16472] delete_channel: no stack [ 537.026087][T16493] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3315'. [ 537.106849][T16490] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 537.254204][T16501] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3316'. [ 538.434637][T16521] device macvlan2 entered promiscuous mode [ 538.472422][T16521] device bond2 entered promiscuous mode [ 538.492564][T16521] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 538.570193][T16528] delete_channel: no stack [ 538.575370][T16528] delete_channel: no stack [ 539.285540][T16521] device bond2 left promiscuous mode [ 539.991307][ T25] audit: type=1326 audit(1779890278.174:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16558 comm="syz.5.3330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7a03b9e59 code=0x0 [ 540.454271][T16576] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 540.488790][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3333'. [ 541.086304][T16587] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 541.141240][T16585] device macvlan2 entered promiscuous mode [ 541.161420][T16585] device bond1 entered promiscuous mode [ 541.182834][T16585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 541.223388][T16585] device bond1 left promiscuous mode [ 541.292973][T16594] netlink: 'syz.1.3339': attribute type 4 has an invalid length. [ 541.713323][T16610] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3343'. [ 541.774684][T16615] loop8: detected capacity change from 0 to 512 [ 541.988697][T16615] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.3345: inode #1: comm syz.8.3345: iget: illegal inode # [ 542.174661][T16615] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3345: error while reading EA inode 1 err=-117 [ 542.257199][T16615] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 542.304219][T16615] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.3345: inode #1: comm syz.8.3345: iget: illegal inode # [ 542.370336][T16615] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.3345: error while reading EA inode 1 err=-117 [ 542.385274][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3351'. [ 542.458302][T16615] EXT4-fs (loop8): 1 orphan inode deleted [ 542.473868][T16615] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,barrier,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 543.989217][T16673] netlink: 'syz.5.3359': attribute type 1 has an invalid length. [ 544.139071][T16673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.255503][T16684] bond3: (slave geneve2): making interface the new active one [ 544.269261][T16684] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 544.284247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 544.600995][T16684] syz.5.3359 (16684) used greatest stack depth: 18768 bytes left [ 545.367961][T16695] device vlan3 entered promiscuous mode [ 545.670515][ T25] audit: type=1326 audit(1779890283.856:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16706 comm="syz.5.3366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7a03b9e59 code=0x0 [ 545.789435][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3367'. [ 548.161980][T16772] MPTCP: addr_signal error, add_addr=1, echo=0 [ 548.461018][T16746] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.474717][T16746] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.758910][T16809] loop8: detected capacity change from 0 to 764 [ 549.865297][T16746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.985573][T16746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.768078][T16817] loop8: detected capacity change from 0 to 32768 [ 550.820084][T16817] (syz.8.3388,16817,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 550.839407][T16817] (syz.8.3388,16817,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 550.918339][T16817] JBD2: Ignoring recovery information on journal [ 550.973426][T16817] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 551.485622][T16746] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.495350][T16746] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.505683][T16746] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.515218][T16746] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.549094][T16811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 551.753230][T15566] ocfs2: Unmounting device (7,8) on (node local) [ 554.208579][T16866] overlayfs: failed to clone upperpath [ 554.650862][ T25] audit: type=1326 audit(1779890292.840:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16884 comm="syz.7.3409" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2816053e59 code=0x0 [ 554.788635][T16891] loop8: detected capacity change from 0 to 16 [ 554.816260][T16891] erofs: (device loop8): mounted with root inode @ nid 36. [ 554.887753][T16891] erofs: (device loop8): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 557.640126][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.012217][T16934] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3423'. [ 561.284303][ T4233] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 561.361244][ T4234] libceph: connect (1)[c::]:6789 error -101 [ 561.368548][ T4234] libceph: mon0 (1)[c::]:6789 connect error [ 561.381411][T16985] ceph: No mds server is up or the cluster is laggy [ 561.578104][ T4233] usb 6-1: Using ep0 maxpacket: 32 [ 561.697205][ T4233] usb 6-1: config 0 has no interfaces? [ 561.707957][ T4233] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 561.808276][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.864888][ T4233] usb 6-1: config 0 descriptor?? [ 561.890705][T10855] libceph: connect (1)[c::]:6789 error -101 [ 561.897408][T10855] libceph: mon0 (1)[c::]:6789 connect error [ 561.929734][T16956] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.937992][T16956] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.688951][T16956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.760231][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.766600][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.783079][T16956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.498728][T16956] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.511853][T16956] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.521398][T16956] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.535465][T16956] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.702675][T17019] netem: change failed [ 563.787798][T17022] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.796909][T17022] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.806219][T17022] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.815104][T17022] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.072192][T17022] device bond1 left promiscuous mode [ 564.088038][T17022] device bond2 left promiscuous mode [ 564.741014][T17022] device ip6gre1 left promiscuous mode [ 564.884023][T17022] device vlan3 left promiscuous mode [ 565.042413][T17040] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3453'. [ 565.335525][T17046] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9791] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[17046] [ 565.806457][ T4234] usb 6-1: USB disconnect, device number 8 [ 565.869666][T17035] autofs4:pid:17035:autofs_fill_super: called with bogus options [ 568.798584][T17091] tipc: Failed to remove unknown binding: 66,0,0/0:3902174533/3902174535 [ 568.877197][T17091] tipc: Failed to remove unknown binding: 66,0,0/0:3902174533/3902174534 [ 568.910879][T17093] tipc: Started in network mode [ 568.940522][T17093] tipc: Node identity ac14142f, cluster identity 4711 [ 568.994711][T17091] tipc: Failed to remove unknown binding: 66,0,0/0:3902174533/3902174535 [ 569.014153][T17091] tipc: Failed to remove unknown binding: 66,0,0/0:3902174533/3902174534 [ 569.026648][T17093] tipc: New replicast peer: 0.0.0.0 [ 569.087092][T17093] tipc: Enabled bearer , priority 10 [ 569.157227][T17101] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 569.708731][T17113] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3472'. [ 570.006561][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3475'. [ 570.153355][T17122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 570.194752][ T9816] tipc: Node number set to 2886997039 [ 574.388800][T17205] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 574.628319][T17205] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 574.738268][T17205] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 574.783588][T17205] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 574.915221][T17205] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 574.977471][T17205] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 575.043112][T17205] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 575.350950][ T9815] Bluetooth: hci5: command 0x0406 tx timeout [ 578.750119][ T4236] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 579.003402][ T4236] usb 6-1: Using ep0 maxpacket: 16 [ 579.866174][T17296] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 580.128969][ T4236] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.146030][ T4236] usb 6-1: config 0 interface 0 has no altsetting 0 [ 580.203320][T17312] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.257606][T17312] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.266126][T17316] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 580.319028][ T4236] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 580.346914][ T4236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.380716][ T4236] usb 6-1: Product: syz [ 580.384935][ T4236] usb 6-1: Manufacturer: syz [ 580.413105][ T4236] usb 6-1: SerialNumber: syz [ 580.462394][ T4236] usb 6-1: config 0 descriptor?? [ 580.720523][T17310] netlink: 'syz.8.3523': attribute type 16 has an invalid length. [ 580.728368][T17310] netlink: 'syz.8.3523': attribute type 17 has an invalid length. [ 580.744729][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 581.738016][ C1] sched: RT throttling activated [ 582.136806][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 582.368724][ T4236] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 582.380976][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 582.395120][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 582.432313][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 582.463669][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 582.490585][ T4236] imon:send_packet: packet tx failed (-71) [ 582.499315][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 582.508109][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 582.515866][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 582.523750][ T4236] imon 6-1:0.0: panel buttons/knobs setup failed [ 582.533445][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 582.555388][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 582.584146][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 582.627950][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 582.656748][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 582.681502][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 582.689460][ T4236] rc_core: IR keymap rc-imon-pad not found [ 582.695474][ T4236] Registered IR keymap rc-empty [ 582.713805][ T4236] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 582.736801][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 582.745102][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 582.754690][ T4236] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 582.772110][T17310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.797676][ T4236] imon:send_packet: packet tx failed (-71) [ 582.814898][T17320] netlink: 'syz.9.3525': attribute type 49 has an invalid length. [ 582.817793][ T4236] imon 6-1:0.0: remote input dev register failed [ 582.829426][T17341] netlink: 'syz.7.3531': attribute type 6 has an invalid length. [ 582.837155][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3531'. [ 582.856726][ T4236] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 582.866823][T17341] bond0: option use_carrier: invalid value (45) [ 582.931378][ T4236] imon 6-1:0.0: unable to initialize intf0, err 0 [ 582.962556][ T4236] imon:imon_probe: failed to initialize context! [ 582.989525][ T4236] imon 6-1:0.0: unable to register, err -19 [ 583.029258][ T4236] usb 6-1: USB disconnect, device number 9 [ 584.316949][T17005] libceph: connect (1)[c::]:6789 error -101 [ 584.323670][T17005] libceph: mon0 (1)[c::]:6789 connect error [ 584.437627][T17372] ceph: No mds server is up or the cluster is laggy [ 584.471231][ T9816] libceph: connect (1)[c::]:6789 error -101 [ 584.522043][ T9816] libceph: mon0 (1)[c::]:6789 connect error [ 584.619719][T17390] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 584.793373][T17385] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 584.825847][T17385] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 586.563152][T17430] netlink: 798 bytes leftover after parsing attributes in process `syz.9.3550'. [ 588.005995][T17447] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3554'. [ 588.110285][T17447] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 588.145922][T17456] futex_wake_op: à³OñJ÷N\ìg´é tries to shift op by 144; fix this program [ 588.157716][T17447] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 588.192948][T17447] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 588.232663][T17447] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 588.273563][T17447] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 588.405736][T17447] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 588.435974][T17447] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 588.517451][T17447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 589.032947][T17447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.087435][T17421] loop5: detected capacity change from 0 to 32768 [ 589.099975][T17475] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 589.106183][T17466] device macvtap0 entered promiscuous mode [ 589.127275][T17468] device macvtap1 entered promiscuous mode [ 589.167747][T17421] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3546 (17421) [ 589.440223][T17421] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 589.497898][T17421] BTRFS info (device loop5): force clearing of disk cache [ 589.554788][T17421] BTRFS info (device loop5): metadata ratio 0 [ 589.560906][T17421] BTRFS info (device loop5): enabling ssd optimizations [ 589.662188][T17421] BTRFS info (device loop5): using spread ssd allocation scheme [ 589.742577][T17421] BTRFS info (device loop5): using free space tree [ 589.766694][T17421] BTRFS info (device loop5): has skinny extents [ 590.235452][T17421] BTRFS error (device loop5): open_ctree failed: -12 [ 590.925277][ T25] audit: type=1326 audit(1779890329.026:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.5.3567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7a03b9e59 code=0x0 [ 591.700969][T17096] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (17096) [ 592.660906][T17574] netlink: 'syz.9.3579': attribute type 1 has an invalid length. [ 592.763710][T17571] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3576'. [ 592.805344][T17574] device bond4 entered promiscuous mode [ 592.848720][T17574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 592.937858][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3579'. [ 593.078613][T17580] bond4: (slave bridge7): making interface the new active one [ 593.102978][T17580] device bridge7 entered promiscuous mode [ 593.128284][T17580] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 593.171367][T12107] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 593.447076][T17598] netlink: 'syz.8.3581': attribute type 1 has an invalid length. [ 593.555882][T17598] device bond2 entered promiscuous mode [ 593.562767][T17598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.638668][T17602] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 593.655588][T17602] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 593.667938][T17602] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 593.765413][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3584'. [ 593.857449][T17613] tipc: Started in network mode [ 593.874785][T17613] tipc: Node identity 8, cluster identity 4711 [ 593.911526][T17613] tipc: Node number set to 8 [ 593.932804][T17524] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 594.023712][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3586'. [ 594.183899][T17524] usb 6-1: Using ep0 maxpacket: 8 [ 594.302739][T17524] usb 6-1: unable to get BOS descriptor or descriptor too short [ 594.375644][T17524] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 594.401036][T17524] usb 6-1: can't read configurations, error -71 [ 594.422026][T17633] netlink: 'syz.7.3590': attribute type 1 has an invalid length. [ 594.485667][T17633] 8021q: adding VLAN 0 to HW filter on device bond10 [ 594.661043][T17633] bond10: (slave gretap0): making interface the new active one [ 594.691851][T17633] bond10: (slave gretap0): Enslaving as an active interface with an up link [ 594.864108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 699.932277][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 699.939265][ C1] rcu: 0-...!: (6 ticks this GP) idle=397/1/0x4000000000000000 softirq=58270/58270 fqs=8 [ 699.951303][ C1] (detected by 1, t=10502 jiffies, g=78957, q=146) [ 699.957995][ C1] Sending NMI from CPU 1 to CPUs 0: [ 699.963204][ C0] NMI backtrace for cpu 0 [ 699.963218][ C0] CPU: 0 PID: 17649 Comm: syz.1.3594 Not tainted syzkaller #0 [ 699.963234][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 699.963248][ C0] RIP: 0010:mark_lock+0x66/0x320 [ 699.963268][ C0] Code: b6 47 02 24 03 3c 01 bd 09 00 00 00 83 dd 00 41 bc 01 00 00 00 89 e9 41 d3 e4 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 22 02 00 00 41 8b 07 41 89 c7 41 81 e7 ff 1f 00 00 c1 [ 699.963281][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00000806 [ 699.963294][ C0] RAX: 0000000000000000 RBX: ffff88801c283b80 RCX: 0000000000000000 [ 699.963305][ C0] RDX: 0000000000000000 RSI: ffff88801c284698 RDI: ffff88801c283b80 [ 699.963316][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff203ac19 [ 699.963326][ C0] R10: dffffc0000000000 R11: fffffbfff203ac1a R12: 0000000000000001 [ 699.963337][ C0] R13: dffffc0000000000 R14: ffff88801c284698 R15: ffff88801c2846b8 [ 699.963355][ C0] FS: 00007fb9e5a8b6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 699.963368][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.963379][ C0] CR2: 00007f1ef30ff0de CR3: 0000000020e8f000 CR4: 00000000003506f0 [ 699.963393][ C0] Call Trace: [ 699.963399][ C0] [ 699.963410][ C0] __lock_acquire+0xc20/0x7d10 [ 699.963437][ C0] ? verify_lock_unused+0x140/0x140 [ 699.963453][ C0] ? verify_lock_unused+0x140/0x140 [ 699.963473][ C0] ? __queue_work+0x9e2/0xd50 [ 699.963491][ C0] lock_acquire+0x19e/0x400 [ 699.963506][ C0] ? __hrtimer_run_queues+0x5a9/0xb70 [ 699.963528][ C0] ? read_lock_is_recursive+0x10/0x10 [ 699.963544][ C0] ? __rwlock_init+0x140/0x140 [ 699.963562][ C0] _raw_spin_lock_irq+0xab/0xf0 [ 699.963577][ C0] ? __hrtimer_run_queues+0x5a9/0xb70 [ 699.963593][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 699.963611][ C0] __hrtimer_run_queues+0x5a9/0xb70 [ 699.963633][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 699.963649][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 699.963667][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 699.963692][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 699.963708][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 699.963726][ C0] [ 699.963731][ C0] [ 699.963736][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 699.963752][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 699.963767][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 bf 2a 8c f7 65 8b 05 f0 26 3c 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 699.963779][ C0] RSP: 0018:ffffc900034af5c0 EFLAGS: 00000206 [ 699.963792][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 67497895134fce00 [ 699.963803][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3100 RDI: 0000000000000001 [ 699.963813][ C0] RBP: ffffc900034af650 R08: ffffffff901d6177 R09: 1ffffffff203ac2e [ 699.963825][ C0] R10: dffffc0000000000 R11: fffffbfff203ac2f R12: dffffc0000000000 [ 699.963835][ C0] R13: 0000000000000000 R14: ffff888059d6bec0 R15: 1ffff92000695eb8 [ 699.963853][ C0] ? _raw_spin_unlock+0x40/0x40 [ 699.963866][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 699.963886][ C0] __wake_up_sync_key+0x128/0x190 [ 699.963903][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 699.963922][ C0] ? sock_load_diag_module+0x130/0x130 [ 699.963942][ C0] __unix_dgram_recvmsg+0x4c0/0xd90 [ 699.963963][ C0] ? unix_unhash+0x10/0x10 [ 699.963977][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 699.963995][ C0] ? mark_lock+0x94/0x320 [ 699.964009][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 699.964024][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 699.964039][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 699.964061][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 699.964081][ C0] ? import_iovec+0x6f/0xa0 [ 699.964099][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 699.964117][ C0] ? __sys_recvmsg+0x280/0x280 [ 699.964140][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 699.964156][ C0] ? __might_fault+0x1c/0x110 [ 699.964173][ C0] ? __might_fault+0xb3/0x110 [ 699.964188][ C0] do_recvmmsg+0x382/0x850 [ 699.964206][ C0] ? __sys_recvmmsg+0x290/0x290 [ 699.964227][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 699.964246][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 699.964263][ C0] ? do_recvmmsg+0x850/0x850 [ 699.964280][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 699.964297][ C0] do_syscall_64+0x4c/0xa0 [ 699.964310][ C0] ? clear_bhb_loop+0x30/0x80 [ 699.964324][ C0] ? clear_bhb_loop+0x30/0x80 [ 699.964339][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 699.964359][ C0] RIP: 0033:0x7fb9e7852e59 [ 699.964377][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.964387][ C0] RSP: 002b:00007fb9e5a8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 699.964402][ C0] RAX: ffffffffffffffda RBX: 00007fb9e7acc090 RCX: 00007fb9e7852e59 [ 699.964413][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000003 [ 699.964423][ C0] RBP: 00007fb9e78e8d6f R08: 0000000000000000 R09: 0000000000000000 [ 699.964433][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 699.964442][ C0] R13: 00007fb9e7acc128 R14: 00007fb9e7acc090 R15: 00007ffe4ee80f18 [ 699.964458][ C0] [ 699.965191][ C1] rcu: rcu_preempt kthread starved for 10486 jiffies! g78957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 700.487816][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 700.497781][ C1] rcu: RCU grace-period kthread stack dump: [ 700.503659][ C1] task:rcu_preempt state:R running task stack:28016 pid: 15 ppid: 2 flags:0x00004000 [ 700.514438][ C1] Call Trace: [ 700.517714][ C1] [ 700.520654][ C1] __schedule+0x11ef/0x43c0 [ 700.525168][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 700.530635][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 700.535841][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 700.541734][ C1] ? _raw_spin_unlock+0x40/0x40 [ 700.546588][ C1] ? release_firmware_map_entry+0x190/0x190 [ 700.552483][ C1] ? __mod_timer+0x91e/0xd00 [ 700.557083][ C1] schedule+0x11b/0x1e0 [ 700.561247][ C1] schedule_timeout+0x184/0x2d0 [ 700.566094][ C1] ? console_conditional_schedule+0x40/0x40 [ 700.572067][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 700.577962][ C1] ? update_process_times+0x200/0x200 [ 700.583337][ C1] ? prepare_to_swait_event+0x331/0x350 [ 700.588893][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 700.593750][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 700.599904][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 700.604670][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 700.609871][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 700.615074][ C1] rcu_gp_kthread+0x9b/0x370 [ 700.619665][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 700.625561][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 700.630673][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 700.636568][ C1] ? __kthread_parkme+0x157/0x1b0 [ 700.641597][ C1] kthread+0x436/0x520 [ 700.645666][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 700.650873][ C1] ? kthread_blkcg+0xd0/0xd0 [ 700.655477][ C1] ret_from_fork+0x1f/0x30 [ 700.659907][ C1] [ 700.662922][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 700.669251][ C1] NMI backtrace for cpu 1 [ 700.673571][ C1] CPU: 1 PID: 17520 Comm: kworker/1:11 Not tainted syzkaller #0 [ 700.681199][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 700.691259][ C1] Workqueue: events fqdir_free_fn [ 700.696305][ C1] Call Trace: [ 700.699759][ C1] [ 700.702603][ C1] dump_stack_lvl+0x188/0x250 [ 700.707282][ C1] ? show_regs_print_info+0x20/0x20 [ 700.712481][ C1] ? load_image+0x400/0x400 [ 700.718249][ C1] ? irq_work_queue+0xbf/0x140 [ 700.723504][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 700.728459][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 700.734621][ C1] ? _printk+0xda/0x130 [ 700.738782][ C1] ? cpu_online+0x1d/0x30 [ 700.743115][ C1] ? load_image+0x400/0x400 [ 700.747708][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 700.753790][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 700.759797][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 700.765979][ C1] print_other_cpu_stall+0x1110/0x1270 [ 700.771468][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 700.776421][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 700.781819][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 700.786857][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 700.792065][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 700.796916][ C1] ? account_process_tick+0x22a/0x3a0 [ 700.802304][ C1] update_process_times+0x193/0x200 [ 700.807504][ C1] tick_sched_timer+0x37d/0x560 [ 700.812363][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 700.817910][ C1] __hrtimer_run_queues+0x4b4/0xb70 [ 700.823210][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 700.828328][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 700.834400][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 700.839374][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 700.845355][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 700.850995][ C1] [ 700.853926][ C1] [ 700.856858][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 700.862845][ C1] RIP: 0010:smp_call_function_single+0x232/0x4c0 [ 700.869179][ C1] Code: 48 44 89 f6 83 e6 01 31 ff e8 8a 78 0b 00 41 83 e6 01 49 bc 00 00 00 00 00 fc ff df 75 0a e8 15 75 0b 00 e9 a3 00 00 00 f3 90 44 24 48 01 00 00 00 0f 84 8e 00 00 00 e8 fb 74 0b 00 eb e9 e8 [ 700.888784][ C1] RSP: 0018:ffffc90004607a40 EFLAGS: 00000293 [ 700.894856][ C1] RAX: ffffffff816dc115 RBX: 0000000000000000 RCX: ffff888027fd9dc0 [ 700.902818][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 700.910781][ C1] RBP: ffffc90004607b30 R08: ffff8880b903b407 R09: 1ffff11017207680 [ 700.918748][ C1] R10: dffffc0000000000 R11: ffffed1017207681 R12: dffffc0000000000 [ 700.926715][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff920008c0f4c [ 700.934688][ C1] ? smp_call_function_single+0x245/0x4c0 [ 700.940420][ C1] ? rcu_rdp_is_offloaded+0x190/0x190 [ 700.945788][ C1] ? flush_smp_call_function_from_idle+0x240/0x240 [ 700.952293][ C1] ? rcu_rdp_is_offloaded+0x190/0x190 [ 700.957680][ C1] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 700.962972][ C1] rcu_barrier+0x25d/0x4c0 [ 700.967385][ C1] ? cond_synchronize_rcu+0x20/0x20 [ 700.972582][ C1] ? read_lock_is_recursive+0x10/0x10 [ 700.977963][ C1] fqdir_free_fn+0x2f/0x130 [ 700.982473][ C1] process_one_work+0x85f/0x1010 [ 700.987420][ C1] ? worker_detach_from_pool+0x240/0x240 [ 700.993059][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 700.998344][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 701.003364][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 701.008905][ C1] ? wq_worker_running+0x97/0x170 [ 701.013925][ C1] worker_thread+0xaa6/0x1290 [ 701.018616][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 701.027114][ C1] kthread+0x436/0x520 [ 701.031192][ C1] ? rcu_lock_release+0x20/0x20 [ 701.036132][ C1] ? kthread_blkcg+0xd0/0xd0 [ 701.040729][ C1] ret_from_fork+0x1f/0x30 [ 701.045187][ C1]