last executing test programs: 19m5.057791101s ago: executing program 1 (id=178): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 19m3.249806523s ago: executing program 1 (id=181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 19m2.632383644s ago: executing program 1 (id=186): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 19m1.109328727s ago: executing program 1 (id=191): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lc\x00', 0x5, 0x808, 0x80000074}, {@remote, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 19m1.00965592s ago: executing program 1 (id=193): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xfd, 0x60, 0xd, 0x5}, 'syz1\x00', 0x3a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200000000000000000000030000000002000000020000000000000000000000000000010500000008000002000000000200000500000000000000000100"/92, @ANYRES8], 0x0, 0x66}, 0x28) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x4, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m59.130139334s ago: executing program 1 (id=201): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300010004000000040000000a00000000000000f93eb911ead41cbbacf74f730b8227b4c39f1e6160cf9ce6a1379d4165250d3a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x20, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x5, 0x301, &(0x7f0000000080)="$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") write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) 18m42.598019829s ago: executing program 32 (id=201): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300010004000000040000000a00000000000000f93eb911ead41cbbacf74f730b8227b4c39f1e6160cf9ce6a1379d4165250d3a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x20, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f00000006c0)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d1b2c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c75746638e7314aca483e397c925170653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb3209000000000000009e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbf966c627c439a6358168d69f54739b94ec5550af56d20754c3be005251ae53ba42f726e62af5da17ae81036f897f78228159d2261d7105723fb54f7cdc92a837368b368e429c0855f3d0101d45d9e522b0d1a3b9d0ceccf6ed94fc70d63e09b579d6d9c89f2b0b93aab017caecea27cc9563bfbe4df45825b4faf5f662e282df8c9b9d35525ff45213e1b38386e2e21ca3bf0d5429fe86f922b43fceb9f53e4131cd0a470fb11"], 0x5, 0x301, &(0x7f0000000080)="$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") write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) 16m3.94267211s ago: executing program 0 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 16m2.876931116s ago: executing program 0 (id=649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x800000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x80a, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @flat=@weak_handle={0x77682a85, 0x20a, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005b00)={0x2020}, 0x2020) 16m2.807042449s ago: executing program 0 (id=650): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@utf8}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 16m1.656580128s ago: executing program 0 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 15m59.936009187s ago: executing program 0 (id=660): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x20000000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 15m58.988110729s ago: executing program 0 (id=663): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x3) umount2(&(0x7f0000000040)='.\x00', 0x2) 15m42.063619217s ago: executing program 33 (id=663): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x3) umount2(&(0x7f0000000040)='.\x00', 0x2) 12m7.690390712s ago: executing program 5 (id=1291): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 12m0.244149487s ago: executing program 5 (id=1312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r4, 0x9) recvfrom$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x100000001, 0x76dc) 11m56.738618237s ago: executing program 5 (id=1321): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) getpeername(r3, 0x0, &(0x7f0000000240)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x11}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 11m56.547722813s ago: executing program 5 (id=1325): syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x40, &(0x7f0000000780)={[{@grpquota}]}, 0x11, 0x582, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r1, &(0x7f0000008c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, &(0x7f000000d080)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x2, 0x2, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r5, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) syz_fuse_handle_req(r1, &(0x7f0000006c40)="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", 0x2000, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)={0x90, 0x0, 0xff, {0x2, 0x2, 0x742, 0x4, 0xad, 0x4, {0x5, 0x4000000000009bd, 0x2, 0x0, 0x4, 0x8000000008, 0xa, 0x2c06, 0x8, 0x4000, 0x7f, r5, 0x0, 0x3, 0x9465}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f00000007c0)=[{&(0x7f0000000740)='!@', 0x2}], 0x1, 0x4412, 0x0, 0x0) fallocate(r0, 0x3, 0x4100, 0x8000c62) 11m52.871098088s ago: executing program 5 (id=1336): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="0a6ea58d6228d8465b159e2424b8ff9911fe6cdb30318d43e279513641a27c8f0d56cb29f637becc8ed81426b052082f45a42ee732bddce4a1477de081b96cb0539b43715c711bcdd4d9a54d21d5c3af77bf119e795c6e2403df71c1f8914ca0f4f683a7d3160d9a2e416d339b81def057e0ecacc256bed81747a400110f8ec63310787c807fd4d7a57ce53527b4e578115ba08652f4d784c6dea1341b5ad51b71a68e7bb510871995756e83b25535db1b2a8a2fe936fc6de0010553", 0xbc}, {&(0x7f00000002c0)="e07f974018cbe7c03c", 0x9}], 0x2}}], 0x1, 0x20044840) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x147}], 0x1}}], 0x1, 0x2090) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11m41.871967504s ago: executing program 5 (id=1367): socket(0x10, 0x803, 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r0, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) 11m40.997896404s ago: executing program 34 (id=1367): socket(0x10, 0x803, 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r0, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) 2m15.017564787s ago: executing program 7 (id=2677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x3) r3 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x8, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000040)=""/183) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m7.749429547s ago: executing program 7 (id=2700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0xe464, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e4, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x2, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x200000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x6, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x7fffffff, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003700)=""/4100, 0x1004}], 0x0, 0x1}, 0x20) add_key(0x0, 0x0, &(0x7f0000001080)="1b", 0x1, 0xfffffffffffffffb) 2m6.706760431s ago: executing program 7 (id=2691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) epoll_pwait(r4, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x7fffffff, &(0x7f0000000380)={[0x6]}, 0x8) fcntl$setlease(r4, 0x400, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x86808, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee01}}], [{@uid_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@permit_directio}]}}) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) 2m5.509814211s ago: executing program 7 (id=2694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r3, 0x4b65, 0x8) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x149842, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x2000040) 2m1.482762434s ago: executing program 7 (id=2697): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) link(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) 1m59.929328286s ago: executing program 7 (id=2706): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m43.038417704s ago: executing program 35 (id=2706): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 21.964991754s ago: executing program 6 (id=2896): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x21dd, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000180), 0x1}, 0x20) 20.24789555s ago: executing program 4 (id=2898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 20.240149451s ago: executing program 6 (id=2899): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 18.682430852s ago: executing program 4 (id=2901): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r6, 0x4b63, 0x3) close_range(r5, 0xffffffffffffffff, 0x0) 15.488238038s ago: executing program 4 (id=2904): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 11.985720174s ago: executing program 8 (id=2916): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r6, 0x4b63, 0x3) close_range(r5, 0xffffffffffffffff, 0x0) 9.298987112s ago: executing program 8 (id=2917): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x0, 0x0, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) r3 = socket(0x28, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000ac0)={0xa, 0x4e24, 0xff, @remote}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, 0x0, 0x60008cc1) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0, 0x6430}, 0x8) sendto$inet6(r2, &(0x7f0000000180)='\x00', 0x1, 0x20044890, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 9.298717202s ago: executing program 3 (id=2918): socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x8c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)={r6, 0x6, 0x8, "6b6867fb0dd2e1ef"}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a800008100000086dd60c4980b004a2f00fbfffffffffffb000000000000000000ff020000000000000000000000000001"], 0x0) 8.74952313s ago: executing program 2 (id=2919): socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 8.332643424s ago: executing program 3 (id=2920): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000018001280080001007070"], 0x40}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x3f, 0x8}) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000280)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x2000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) socket$netlink(0x10, 0x3, 0x0) 8.236884177s ago: executing program 6 (id=2921): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket(0x2c, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.178695373s ago: executing program 3 (id=2922): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x803, 0x4) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) sendmmsg(r3, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf1952c87a38acd5773d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546bc2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4303000000000000004d93d33bd26ec072165a8902b734f282d876c68369ee54253937a3db4200ecc2f177d174aa966e1ba47e88a8ed0e71dc51d3c7bee77a186d1e5a70c47a61455f269ee53bdfdc46dd854afbba774bac401cacb3c8c411724906a2d0761634e14d092dfdb6d91167d3076870743ad908e681", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000001c0)="27a1288636", 0x5}], 0x1}}], 0x2, 0x4000) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 7.068116506s ago: executing program 2 (id=2923): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getpid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000200)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) creat(&(0x7f00000000c0)='./file1\x00', 0x142) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x2000775) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 6.812243444s ago: executing program 6 (id=2924): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xa, 0xa, 0x300) fsopen(0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, 0x0) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, 0x0) getpeername(r0, 0x0, &(0x7f0000000080)) 6.572228153s ago: executing program 8 (id=2925): socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x163042) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000040)=0x7f, 0x4) recvmmsg(r5, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002580)=""/241, 0xf1}], 0x1, &(0x7f0000002800)=""/246, 0xf6}, 0x8001}], 0x1, 0x40014102, 0x0) close(r3) 5.972423022s ago: executing program 3 (id=2926): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x400, 0xffffffffffffffff, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0xc0086202, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0xfffffffd, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 5.905628984s ago: executing program 2 (id=2927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) preadv2(r4, 0x0, 0x0, 0x9, 0x8af, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x20000000) sendmsg$unix(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x8804}, 0x880) 5.484323858s ago: executing program 6 (id=2928): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x405c0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f00000000c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100"/19], 0x7c}}, 0x0) 5.187082378s ago: executing program 3 (id=2929): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 4.884005398s ago: executing program 2 (id=2930): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6", 0x70, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce679", 0x1a}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.391454125s ago: executing program 3 (id=2931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 4.330098556s ago: executing program 6 (id=2932): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000) r1 = userfaultfd(0x80001) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) read$nci(r2, &(0x7f0000000340)=""/99, 0x63) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x4) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_setup(0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.199281681s ago: executing program 2 (id=2933): socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x1, 0x6, 0x0, 0x9, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d4, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x3500, 0x4, 0x0, 0x0, 0x0, 0x800, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) r5 = mq_open(0x0, 0x40, 0x1a2, 0x0) mq_notify(r5, 0x0) 3.856028682s ago: executing program 4 (id=2934): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9}, 0x20) socket(0x2c, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 2.968404292s ago: executing program 2 (id=2935): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x0, 0x0, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) r3 = socket(0x28, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000ac0)={0xa, 0x4e24, 0xff, @remote}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, 0x0, 0x60008cc1) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0, 0x6430}, 0x8) sendto$inet6(r2, &(0x7f0000000180)='\x00', 0x1, 0x20044890, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 2.540614086s ago: executing program 4 (id=2936): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x803, 0x4) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) sendmmsg(r3, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf1952c87a38acd5773d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546bc2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4303000000000000004d93d33bd26ec072165a8902b734f282d876c68369ee54253937a3db4200ecc2f177d174aa966e1ba47e88a8ed0e71dc51d3c7bee77a186d1e5a70c47a61455f269ee53bdfdc46dd854afbba774bac401cacb3c8c411724906a2d0761634e14d092dfdb6d91167d3076870743ad908e681", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000001c0)="27a1288636", 0x5}], 0x1}}], 0x2, 0x4000) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 2.428029699s ago: executing program 8 (id=2937): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getpid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000200)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94) creat(&(0x7f00000000c0)='./file1\x00', 0x142) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x2000775) close(r1) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1.155235741s ago: executing program 8 (id=2938): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xd02, &(0x7f0000002900)={0x0, 0x10f24e, 0x0, 0x1, 0x290}, &(0x7f0000000440)=0x0, &(0x7f0000001080)=0x0, &(0x7f0000001040)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10021) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000280)={0x0, 0x4000, &(0x7f00000002c0)={&(0x7f0000000080)={0x4c, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008894}, 0x40000) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 549.246641ms ago: executing program 4 (id=2939): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x100) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r0, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r3, r0, 0x36, 0x0, 0x0, @void, @value=r0, @void, @void, r6}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 8 (id=2940): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x400, 0xffffffffffffffff, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0xc0086202, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0xfffffffd, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) kernel console output (not intermixed with test programs): change from 0 to 764 [ 328.273634][ T6760] device syzkaller0 entered promiscuous mode [ 328.292255][ T6760] tipc: Started in network mode [ 328.316565][ T6760] tipc: Node identity ca92a421f489, cluster identity 4711 [ 328.324204][ T6760] tipc: Enabled bearer , priority 0 [ 328.364009][ T6757] tipc: Resetting bearer [ 328.377090][ T6764] loop4: detected capacity change from 0 to 2048 [ 328.420658][ T6757] tipc: Disabling bearer [ 328.518645][ T6764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.621898][ T6773] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 328.913407][ T1326] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 329.010761][ T6773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.305807][ T1326] usb 3-1: Using ep0 maxpacket: 16 [ 329.355456][ T6782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.383984][ T6782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.422448][ T6782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.437499][ T1326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.459037][ T1326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.483000][ T6782] bond1: (slave geneve2): making interface the new active one [ 329.533009][ T6782] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 329.541991][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 329.567894][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.574359][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.629767][ T1326] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.661798][ T1326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.683112][ T1326] usb 3-1: Product: syz [ 329.687371][ T1326] usb 3-1: Manufacturer: syz [ 329.691996][ T1326] usb 3-1: SerialNumber: syz [ 332.601814][ T1326] usb 3-1: 0:2 : does not exist [ 333.642357][ T1326] usb 3-1: USB disconnect, device number 3 [ 334.037560][ T6728] udevd[6728]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.166970][ T6812] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 335.618589][ T6823] loop5: detected capacity change from 0 to 256 [ 335.810240][ T6823] exfat: Deprecated parameter 'namecase' [ 335.828687][ T6823] exfat: Deprecated parameter 'namecase' [ 336.005454][ T6830] netlink: 'syz.4.717': attribute type 12 has an invalid length. [ 336.045677][ T6823] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf9ff927, utbl_chksum : 0xe619d30d) [ 336.555463][ T6832] loop2: detected capacity change from 0 to 1024 [ 336.703196][ T6823] device syzkaller0 entered promiscuous mode [ 336.813994][ T6836] device syzkaller0 entered promiscuous mode [ 336.903682][ T6832] EXT4-fs (loop2): Test dummy encryption mode enabled [ 336.928915][ T6832] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 337.057098][ T6845] ipt_REJECT: TCP_RESET invalid for non-tcp [ 337.107288][ T6551] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.145445][ T6847] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 337.234623][ T6551] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.268992][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 337.305512][ T4233] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 337.456015][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.463296][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.472240][ T6826] device bridge_slave_0 entered promiscuous mode [ 337.599883][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.660030][ T4233] usb 6-1: Using ep0 maxpacket: 32 [ 337.696007][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.819593][ T4233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.868137][ T6826] device bridge_slave_1 entered promiscuous mode [ 338.004518][ T4233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.177605][ T4233] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 338.223688][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.250329][ T6551] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.277552][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.291810][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.326866][ T5050] Bluetooth: hci3: command 0x0409 tx timeout [ 338.349181][ T4233] usb 6-1: config 0 descriptor?? [ 338.408507][ T6826] team0: Port device team_slave_0 added [ 338.431762][ T6826] team0: Port device team_slave_1 added [ 338.460520][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.467648][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.495831][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.510549][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.534910][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.166563][ T4233] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 339.302321][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.709581][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 346.733955][ T6551] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.995760][ T23] usb 6-1: USB disconnect, device number 4 [ 347.124034][ T6885] ODEBUG: Out of memory. ODEBUG disabled [ 348.254667][ T6881] fido_id[6881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 348.379193][ T6826] device hsr_slave_0 entered promiscuous mode [ 348.409295][ T6826] device hsr_slave_1 entered promiscuous mode [ 348.475937][ T6826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.514654][ T6893] loop2: detected capacity change from 0 to 4096 [ 348.534228][ T6826] Cannot create hsr debugfs directory [ 348.539818][ T6893] EXT4-fs (loop2): Test dummy encryption mode enabled [ 348.910415][ T6893] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,noauto_da_alloc,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 349.395398][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 350.925876][ T6917] No such timeout policy "syz1" [ 351.128918][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 351.128938][ T26] audit: type=1800 audit(2000000169.288:130): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.739" name="/" dev="fuse" ino=1 res=0 errno=0 [ 351.664421][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 351.827603][ T6826] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 352.601354][ T6826] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 352.758398][ T6826] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 353.877519][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 354.097691][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 354.323316][ T6944] bridge0: port 3(team0) entered disabled state [ 354.329900][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.337289][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.448785][ T6826] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 354.465651][ T6969] binder: 6968:6969 ioctl c0306201 200000000080 returned -14 [ 354.530427][ T6969] binder: 6968:6969 ioctl c0306201 2000000003c0 returned -14 [ 354.723484][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.941748][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.033804][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.092575][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.443041][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.516596][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.579679][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.586956][ T6521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.789092][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.071466][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.410254][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.474281][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.481626][ T6521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.633603][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.776427][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.993463][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.070420][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.123923][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.177868][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.237410][ T6826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.307572][ T6826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.393305][ T4235] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 357.537227][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.549565][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.558606][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.567528][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.721487][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.991616][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.087519][ T7019] binder_alloc: 7018: pid 7018 spamming oneway? 2 buffers allocated for a total size of 5120 [ 358.468189][ T7019] binder_alloc: 7018: pid 7018 spamming oneway? 3 buffers allocated for a total size of 5128 [ 358.505065][ T4235] usb 6-1: Using ep0 maxpacket: 32 [ 358.633479][ T4235] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.667845][ T4235] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.478222][ T4235] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.655130][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.662841][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.749259][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.837960][ T4235] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.910495][ T4235] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 360.931913][ T4235] usb 6-1: can't read configurations, error -71 [ 361.937492][ T6551] device hsr_slave_0 left promiscuous mode [ 362.007093][ T6551] device hsr_slave_1 left promiscuous mode [ 362.028908][ T6551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.053076][ T6551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.087453][ T6551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.095118][ T6551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.158051][ T6551] device team0 left promiscuous mode [ 362.180377][ T6551] device team_slave_0 left promiscuous mode [ 362.187384][ T6551] device team_slave_1 left promiscuous mode [ 362.195987][ T6551] bridge0: port 3(team0) entered disabled state [ 362.216695][ T6551] device bridge_slave_1 left promiscuous mode [ 362.224760][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.281874][ T6551] device bridge_slave_0 left promiscuous mode [ 362.343573][ T7076] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5129] was attempted by " [ 362.602099][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.029947][ T6551] device veth1_macvtap left promiscuous mode [ 363.043685][ T6551] device veth0_macvtap left promiscuous mode [ 363.065062][ T6551] device veth1_vlan left promiscuous mode [ 363.099577][ T6551] device veth0_vlan left promiscuous mode [ 363.309836][ T6551] team0 (unregistering): Port device bridge2 removed [ 363.373067][ T6551] team0 (unregistering): Port device bridge1 removed [ 363.510333][ T6551] team0 (unregistering): Port device team_slave_1 removed [ 363.524967][ T6551] team0 (unregistering): Port device team_slave_0 removed [ 363.537376][ T6551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.556068][ T6551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.625330][ T6551] bond0 (unregistering): Released all slaves [ 364.670218][ T26] audit: type=1326 audit(2000000181.916:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f92dd6e59 code=0x7ffc0000 [ 365.544316][ T26] audit: type=1326 audit(2000000181.916:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f92dd6e59 code=0x7ffc0000 [ 365.597534][ T26] audit: type=1326 audit(2000000181.963:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f92dd6e59 code=0x7ffc0000 [ 365.919347][ T26] audit: type=1326 audit(2000000181.963:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f92dd6e59 code=0x7ffc0000 [ 366.017703][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.080662][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.287163][ T26] audit: type=1326 audit(2000000181.963:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f92dd6e59 code=0x7ffc0000 [ 366.415429][ T26] audit: type=1326 audit(2000000181.963:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3f92dd6e59 code=0x7ffc0000 [ 366.420466][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.440343][ T26] audit: type=1326 audit(2000000181.963:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f92dd6bc2 code=0x7ffc0000 [ 366.479384][ T26] audit: type=1326 audit(2000000181.972:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f92dd6bc2 code=0x7ffc0000 [ 366.508322][ T26] audit: type=1326 audit(2000000181.972:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f92dd6e59 code=0x7ffc0000 [ 366.525434][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.534449][ T26] audit: type=1326 audit(2000000181.972:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.775" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f92dd6e59 code=0x7ffc0000 [ 366.605617][ T6826] device veth0_vlan entered promiscuous mode [ 367.677962][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.686562][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 368.199216][ T7124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.529660][ T7139] netlink: 'syz.5.781': attribute type 2 has an invalid length. [ 369.021386][ T7124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.060011][ T6826] device veth1_vlan entered promiscuous mode [ 369.114099][ T7124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.199866][ T7152] device syzkaller0 entered promiscuous mode [ 369.373727][ T7124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.003167][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.054621][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.230591][ T6826] device veth0_macvtap entered promiscuous mode [ 370.275570][ T6826] device veth1_macvtap entered promiscuous mode [ 370.375479][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.404917][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.041895][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.171394][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.483096][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.493853][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.531401][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.575861][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.627287][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.686634][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.756423][ T6826] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.797695][ T6826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.837364][ T6826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.864409][ T6826] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.886036][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.916717][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.946051][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.978845][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 373.002697][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.083507][ T7124] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.111182][ T7124] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.133993][ T7124] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.158604][ T7124] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.383973][ T7193] loop4: detected capacity change from 0 to 256 [ 375.196844][ T6520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.214477][ T6520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.130712][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 376.202416][ T6521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.267052][ T6521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.294744][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.608332][ T7248] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 379.262258][ T7267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.809'. [ 379.473339][ T7267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.809'. [ 383.421709][ T7304] loop4: detected capacity change from 0 to 32768 [ 385.979299][ T7304] XFS (loop4): Mounting V5 Filesystem [ 386.016157][ T7304] XFS (loop4): log mount failed [ 388.823758][ T7369] No such timeout policy "syz1" [ 388.936429][ T7369] loop5: detected capacity change from 0 to 512 [ 389.105210][ T7369] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 391.083407][ T7391] loop2: detected capacity change from 0 to 32768 [ 392.227511][ T7391] XFS (loop2): Mounting V5 Filesystem [ 392.267364][ T7413] device syzkaller0 entered promiscuous mode [ 392.455551][ T7417] loop5: detected capacity change from 0 to 4096 [ 392.471405][ T7417] __ntfs_error: 7 callbacks suppressed [ 392.471423][ T7417] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 392.487855][ T7391] XFS (loop2): Ending clean mount [ 392.541273][ T7391] XFS (loop2): Quotacheck needed: Please wait. [ 392.595225][ T7417] ntfs: volume version 3.1. [ 392.680255][ T7391] XFS (loop2): Quotacheck: Done. [ 393.731481][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 394.321576][ T4198] XFS (loop2): Unmounting Filesystem [ 395.623203][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.629809][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.211674][ T7477] netlink: 'syz.4.854': attribute type 5 has an invalid length. [ 396.959197][ T7484] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 397.934755][ T7484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.974747][ T4263] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 398.295424][ T4263] usb 6-1: Using ep0 maxpacket: 32 [ 398.863980][ T7498] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.959098][ T4263] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 398.971072][ T4263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.949979][ T4263] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 399.978480][ T7498] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.325368][ T7518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 400.341843][ T7518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.352667][ T7518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.409439][ T7518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.419671][ T7518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.429373][ T7518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.000683][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.857'. [ 401.002187][ T4263] gspca_nw80x: reg_r err -110 [ 401.024387][ T4263] nw80x: probe of 6-1:3.0 failed with error -110 [ 402.037381][ T7498] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.119698][ T7498] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.126528][ T4235] usb 6-1: USB disconnect, device number 7 [ 402.429288][ T7522] loop4: detected capacity change from 0 to 40427 [ 402.462242][ T7522] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 402.718967][ T7498] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.809727][ T7538] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 402.836011][ T7538] CIFS mount error: No usable UNC path provided in device string! [ 402.836011][ T7538] [ 402.846489][ T7538] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 403.481487][ T7498] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.626903][ T7498] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.717019][ T7498] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.997943][ T7569] loop6: detected capacity change from 0 to 2048 [ 408.139423][ T7574] netlink: 'syz.2.878': attribute type 12 has an invalid length. [ 408.184228][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 408.202753][ T7574] bond0: option primary_reselect: invalid value (17) [ 408.237133][ T7569] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,user_xattr,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 408.261324][ T7578] netlink: 14 bytes leftover after parsing attributes in process `syz.3.879'. [ 408.347492][ T7578] batman_adv: batadv0: Interface deactivated: dummy0 [ 410.330668][ T7578] batman_adv: batadv0: Removing interface: dummy0 [ 415.979706][ T7693] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 418.122721][ T26] audit: type=1326 audit(2000000230.389:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.6.907" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d90d43e59 code=0x7ffc0000 [ 418.202247][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 418.768598][ T26] audit: type=1326 audit(2000000230.389:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.6.907" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d90d43e59 code=0x7ffc0000 [ 418.771812][ T7702] sock: sock_set_timeout: `syz.3.912' (pid 7702) tries to set negative timeout [ 418.824601][ T26] audit: type=1326 audit(2000000230.510:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.6.907" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d90d43e59 code=0x7ffc0000 [ 418.849018][ T26] audit: type=1326 audit(2000000230.510:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.6.907" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d90d43e59 code=0x7ffc0000 [ 418.930497][ T26] audit: type=1326 audit(2000000230.510:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.6.907" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d90d43e59 code=0x7ffc0000 [ 419.025886][ T7718] netlink: 44 bytes leftover after parsing attributes in process `syz.2.915'. [ 419.060261][ T26] audit: type=1326 audit(2000000230.632:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.6.907" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2d90d43e59 code=0x7ffc0000 [ 419.170218][ T26] audit: type=1326 audit(2000000230.632:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.6.907" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d90d43bc2 code=0x7ffc0000 [ 419.237902][ T26] audit: type=1326 audit(2000000230.632:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.6.907" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d90d43bc2 code=0x7ffc0000 [ 419.297758][ T26] audit: type=1326 audit(2000000230.641:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.6.907" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d90d43e59 code=0x7ffc0000 [ 419.344616][ T26] audit: type=1326 audit(2000000230.641:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.6.907" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d90d43e59 code=0x7ffc0000 [ 420.842019][ T7740] vivid-001: disconnect [ 421.291349][ T7733] vivid-001: reconnect [ 421.489424][ T7755] bridge0: port 4(erspan0) entered blocking state [ 421.504268][ T7755] bridge0: port 4(erspan0) entered disabled state [ 421.514406][ T7755] device erspan0 entered promiscuous mode [ 421.550431][ T7755] device erspan0 left promiscuous mode [ 421.556545][ T7755] bridge0: port 4(erspan0) entered disabled state [ 423.639365][ T7778] device syzkaller0 entered promiscuous mode [ 423.719414][ T7790] loop2: detected capacity change from 0 to 1024 [ 425.538977][ T7790] attempt to access beyond end of device [ 425.538977][ T7790] loop2: rw=0, want=393348, limit=1024 [ 425.788920][ T7814] netlink: 'syz.4.933': attribute type 3 has an invalid length. [ 426.677584][ T7790] attempt to access beyond end of device [ 426.677584][ T7790] loop2: rw=2049, want=393222, limit=1024 [ 426.691787][ T7790] Buffer I/O error on dev loop2, logical block 196610, lost async page write [ 426.757462][ T7815] attempt to access beyond end of device [ 426.757462][ T7815] loop2: rw=0, want=5780, limit=1024 [ 426.841610][ T7790] attempt to access beyond end of device [ 426.841610][ T7790] loop2: rw=0, want=5780, limit=1024 [ 426.889397][ T7826] netlink: 80 bytes leftover after parsing attributes in process `syz.5.938'. [ 426.928755][ T7826] netlink: 'syz.5.938': attribute type 12 has an invalid length. [ 430.928641][ T7857] loop6: detected capacity change from 0 to 512 [ 431.261612][ T7857] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 431.318429][ T7863] loop4: detected capacity change from 0 to 2048 [ 431.328238][ T7857] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 431.470868][ T7875] netlink: 'syz.3.948': attribute type 12 has an invalid length. [ 431.485457][ T7863] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 431.497508][ T7857] EXT4-fs (loop6): 1 truncate cleaned up [ 431.514149][ T7875] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 431.573007][ T7857] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 433.039557][ T7894] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 434.782010][ T7918] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 434.790464][ T7915] IPVS: stopping master sync thread 7918 ... [ 434.931006][ T7925] device syzkaller0 entered promiscuous mode [ 434.993041][ T7925] tipc: Enabled bearer , priority 0 [ 435.030848][ T7923] tipc: Resetting bearer [ 435.135702][ T7923] tipc: Disabling bearer [ 436.718066][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 436.743874][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.098003][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.133124][ T7989] device team0 left promiscuous mode [ 438.182146][ T7989] device team_slave_0 left promiscuous mode [ 438.234377][ T7989] device team_slave_1 left promiscuous mode [ 438.257511][ T7989] bridge0: port 3(team0) entered disabled state [ 438.396337][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.404085][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.471424][ T7989] device bridge_slave_0 left promiscuous mode [ 438.537635][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.011557][ T7989] device bridge_slave_1 left promiscuous mode [ 440.018372][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.129558][ T7989] bond0: (slave bond_slave_0): Releasing backup interface [ 440.853657][ T7989] bond0: (slave bond_slave_1): Releasing backup interface [ 440.942861][ T7989] team0: Port device team_slave_0 removed [ 440.970462][ T7989] team0: Port device team_slave_1 removed [ 440.995143][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.006019][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.026868][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.035134][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.062505][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.072020][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.080224][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.104816][ T7989] team0: Port device bridge1 removed [ 441.117777][ T7989] team0: Port device bridge2 removed [ 441.132829][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.979'. [ 442.817169][ T8064] netlink: 79 bytes leftover after parsing attributes in process `syz.3.988'. [ 442.886492][ T8062] loop2: detected capacity change from 0 to 2048 [ 442.905748][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 442.919247][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 442.935689][ T8064] netlink: 'syz.3.988': attribute type 11 has an invalid length. [ 442.948846][ T8068] netlink: 'syz.5.992': attribute type 1 has an invalid length. [ 443.033350][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'. [ 443.043952][ T8068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.179279][ T8077] bond2: (slave geneve2): making interface the new active one [ 443.249820][ T5053] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 443.265320][ T8077] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 443.295310][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 443.396384][ T8090] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 443.493114][ T8090] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 443.528416][ T8093] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 443.559950][ T5053] usb 7-1: Using ep0 maxpacket: 16 [ 443.715081][ T5053] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 444.643234][ T5053] usb 7-1: config 0 has no interface number 0 [ 444.649412][ T5053] usb 7-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 444.896096][ T5053] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 444.905524][ T5053] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.941201][ T5053] usb 7-1: Product: syz [ 444.949547][ T5053] usb 7-1: Manufacturer: syz [ 444.954246][ T5053] usb 7-1: SerialNumber: syz [ 444.963519][ T5053] usb 7-1: config 0 descriptor?? [ 444.984554][ T8063] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 445.245960][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 445.245997][ T26] audit: type=1326 audit(2000000258.354:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.5.1004" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3c43e59 code=0x0 [ 445.535638][ T8063] loop6: detected capacity change from 0 to 512 [ 445.569570][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 445.899648][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 446.020334][ T8131] loop2: detected capacity change from 0 to 256 [ 446.039882][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.067807][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.106531][ T5053] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 446.138360][ T5053] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 446.162357][ T5053] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 446.190482][ T5053] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 446.271925][ T5053] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 446.313480][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.328547][ T5053] usb 7-1: USB disconnect, device number 2 [ 446.363388][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.970438][ T5053] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 447.494605][ T23] usb 5-1: Product: syz [ 447.499001][ T23] usb 5-1: Manufacturer: syz [ 447.503788][ T8153] netlink: 'syz.6.1009': attribute type 1 has an invalid length. [ 447.513034][ T5053] keyspan 7-1:0.133: device disconnected [ 447.527351][ T23] usb 5-1: SerialNumber: syz [ 447.566155][ T8153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.684492][ T8150] bond1: (slave geneve2): making interface the new active one [ 447.695149][ T8150] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 447.704476][ T13] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 447.712223][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 448.547912][ T8168] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1013'. [ 448.723273][ T13] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.100504][ T23] usb 5-1: 0:2 : does not exist [ 449.121134][ T13] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.215211][ T13] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 449.460683][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 449.482983][ T23] usb 5-1: USB disconnect, device number 11 [ 450.124570][ T6728] udevd[6728]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.241367][ T13] usb 6-1: SerialNumber: syz [ 450.559468][ T8206] input: syz1 as /devices/virtual/input/input5 [ 450.685063][ T13] usb 6-1: 0:2 : does not exist [ 450.958374][ T13] usb 6-1: USB disconnect, device number 8 [ 452.619508][ T6728] udevd[6728]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.034144][ T8225] loop4: detected capacity change from 0 to 32768 [ 453.189362][ T8234] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 453.286821][ T8234] overlayfs: failed to look up (tracing) for ino (-66) [ 453.357376][ T8225] XFS (loop4): Mounting V5 Filesystem [ 455.721140][ T8225] XFS (loop4): Ending clean mount [ 455.730038][ T8225] XFS (loop4): Quotacheck needed: Please wait. [ 458.477450][ T8225] XFS (loop4): Quotacheck: Done. [ 458.501919][ T4188] XFS (loop4): Unmounting Filesystem [ 458.827165][ T8267] loop6: detected capacity change from 0 to 40427 [ 458.885518][ T8275] futex_wake_op: syz.2.1037 tries to shift op by 144; fix this program [ 459.072654][ T8267] F2FS-fs (loop6): Invalid segment count (0) [ 459.079076][ T8267] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 459.112830][ T8267] F2FS-fs (loop6): invalid crc value [ 459.351184][ T8267] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 459.415325][ T8267] F2FS-fs (loop6): Inconsistent i_blocks, ino:3, iblocks:0, sectors:8 [ 460.850879][ T8296] overlayfs: missing 'lowerdir' [ 460.936355][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.942867][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.108263][ T8329] loop2: detected capacity change from 0 to 2048 [ 464.732734][ T8329] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 464.787591][ T8329] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.110984][ T8355] loop4: detected capacity change from 0 to 512 [ 465.130368][ T8354] netlink: 'syz.5.1049': attribute type 1 has an invalid length. [ 465.980651][ T8354] device bond3 entered promiscuous mode [ 465.987097][ T8354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.001718][ T8358] bond3: (slave erspan1): making interface the new active one [ 466.010037][ T8358] device erspan1 entered promiscuous mode [ 466.018851][ T8358] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 466.080389][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 466.208971][ T8370] device bridge3 entered promiscuous mode [ 466.231620][ T8370] team0: Port device bridge3 added [ 467.441426][ T8390] loop5: detected capacity change from 0 to 256 [ 467.507217][ T8390] exfat: Bad value for 'gid' [ 467.599697][ T8362] loop6: detected capacity change from 0 to 32768 [ 467.642584][ T8390] loop5: detected capacity change from 0 to 1024 [ 467.678129][ T8390] hfsplus: unable to parse mount options [ 467.721508][ T8362] XFS (loop6): Mounting V5 Filesystem [ 467.915659][ T8404] loop2: detected capacity change from 0 to 512 [ 467.961528][ T8404] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 467.992336][ T8404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 468.004470][ T8404] EXT4-fs (loop2): orphan cleanup on readonly fs [ 468.028238][ T8362] XFS (loop6): Ending clean mount [ 468.063499][ T8404] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.1068: bad orphan inode 267 [ 468.089683][ T8404] EXT4-fs (loop2): Remounting filesystem read-only [ 468.110777][ T26] audit: type=1800 audit(2000000279.737:211): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1050" name="file1" dev="loop6" ino=6154 res=0 errno=0 [ 468.119631][ T8404] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 468.154095][ T5048] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 468.425929][ T5048] usb 5-1: Using ep0 maxpacket: 32 [ 468.588679][ T5048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 188, changing to 11 [ 468.823170][ T5048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59135, setting to 1024 [ 468.896342][ T5048] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 1.40 [ 468.906426][ T8404] ip6t_srh: unknown srh invflags 4000 [ 468.916760][ T5048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.965202][ T6826] XFS (loop6): Unmounting Filesystem [ 468.972686][ T8413] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1068: dx entry: limit 0 != root limit 125 [ 468.997717][ T5048] usb 5-1: config 0 descriptor?? [ 469.003462][ T8413] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1068: Corrupt directory, running e2fsck is recommended [ 469.025646][ T8401] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 469.050131][ T5048] hub 5-1:0.0: USB hub found [ 469.305697][ T5048] hub 5-1:0.0: 1 port detected [ 469.598926][ T8424] __sock_release: fasync list not empty! [ 470.558958][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1069'. [ 470.774163][ T8448] loop5: detected capacity change from 0 to 64 [ 470.900965][ T4230] usb 5-1: USB disconnect, device number 12 [ 470.904120][ T8451] loop6: detected capacity change from 0 to 512 [ 471.064818][ T8451] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 471.098759][ T8451] System zones: 0-2, 18-18, 34-34 [ 471.115811][ T8451] EXT4-fs (loop6): orphan cleanup on readonly fs [ 471.142600][ T8451] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #15: comm syz.6.1073: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 471.217545][ T8451] EXT4-fs error (device loop6): ext4_quota_enable:6447: comm syz.6.1073: Bad quota inode: 15, type: 2 [ 471.229352][ T8451] EXT4-fs warning (device loop6): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 471.290338][ T8451] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 471.298068][ T8451] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,noquota,min_batch_time=0x000000000000082f,journal_ioprio=0x0000000000000003,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 474.590200][ T8497] loop6: detected capacity change from 0 to 1024 [ 474.691975][ T8497] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 474.691975][ T8497] [ 475.681602][ T8497] loop6: detected capacity change from 0 to 16 [ 475.949498][ T8497] erofs: (device loop6): mounted with root inode @ nid 36. [ 477.045143][ T8526] device syzkaller0 entered promiscuous mode [ 480.472649][ T4232] Bluetooth: hci3: command 0x0405 tx timeout [ 487.091661][ T5473] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 490.817363][ T8615] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1113'. [ 493.314677][ T8649] loop2: detected capacity change from 0 to 128 [ 493.464503][ T8649] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 494.612854][ T8649] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 495.528935][ T6521] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 500.266184][ T8725] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1144'. [ 501.279713][ T8737] device syzkaller0 entered promiscuous mode [ 501.372323][ T8737] tipc: Enabled bearer , priority 0 [ 501.418529][ T8736] tipc: Resetting bearer [ 501.535524][ T8736] tipc: Disabling bearer [ 501.562969][ T8750] batman_adv: batadv0: Adding interface: dummy0 [ 501.575422][ T8750] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.748612][ T8750] batman_adv: batadv0: Interface activated: dummy0 [ 501.929197][ T8753] batadv0: mtu less than device minimum [ 502.105712][ T8753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 502.119459][ T8753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 502.132389][ T8753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 502.145228][ T8753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 502.158391][ T8753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 502.171539][ T8753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 502.184628][ T8753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 502.197637][ T8753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 502.210769][ T8753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 503.131249][ T8764] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8765] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8764] [ 504.298716][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1162'. [ 506.386333][ T8795] loop6: detected capacity change from 0 to 128 [ 506.438041][ T8795] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 507.740147][ T8795] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 507.789151][ T8795] ext2 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.116778][ T8824] batman_adv: batadv0: Adding interface: dummy0 [ 508.140495][ T8824] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.171690][ T8824] batman_adv: batadv0: Interface activated: dummy0 [ 509.125980][ T8825] net_ratelimit: 10 callbacks suppressed [ 509.126001][ T8825] batadv0: mtu less than device minimum [ 509.187167][ T8828] loop6: detected capacity change from 0 to 256 [ 509.285381][ T8828] FAT-fs (loop6): Directory bread(block 1285) failed [ 509.308692][ T8825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.321753][ T8825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.334832][ T8825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.347906][ T8825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.361100][ T8825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.374524][ T8825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.387461][ T8825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.400487][ T8825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.413178][ T8825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.452248][ T13] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 515.624857][ T13] usb 6-1: Using ep0 maxpacket: 8 [ 515.683030][ T4230] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 515.836038][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.870075][ T13] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 515.946022][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.972923][ T13] usb 6-1: config 0 descriptor?? [ 516.427069][ T8897] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 516.851004][ T4230] usb 7-1: Using ep0 maxpacket: 32 [ 516.888288][ T13] usb 6-1: can't set config #0, error -71 [ 517.001158][ T13] usb 6-1: USB disconnect, device number 10 [ 517.204380][ T4230] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 517.392916][ T4230] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.475693][ T4230] usb 7-1: config 0 descriptor?? [ 517.619776][ T4230] gspca_main: sq930x-2.14.0 probing 041e:403c [ 517.838204][ T4230] gspca_sq930x: reg_r 001f failed -71 [ 517.844478][ T4230] sq930x: probe of 7-1:0.0 failed with error -71 [ 518.266561][ T4230] usb 7-1: USB disconnect, device number 3 [ 519.603742][ T8928] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1202'. [ 522.367844][ T8939] device syzkaller0 entered promiscuous mode [ 524.482536][ T8971] loop5: detected capacity change from 0 to 256 [ 526.585093][ T8996] loop5: detected capacity change from 0 to 512 [ 526.618182][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.624804][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.807465][ T8996] EXT4-fs (loop5): Ignoring removed orlov option [ 526.850045][ T8996] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 526.876056][ T8998] device gretap1 entered promiscuous mode [ 526.950636][ T8996] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1223: corrupted in-inode xattr [ 527.082899][ T8996] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1223: couldn't read orphan inode 15 (err -117) [ 527.120165][ T8996] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 527.368980][ T9015] device syzkaller0 entered promiscuous mode [ 527.679708][ T9022] device syzkaller0 entered promiscuous mode [ 527.696654][ T9022] tipc: Started in network mode [ 527.702471][ T9022] tipc: Node identity be32d22c06b9, cluster identity 4711 [ 527.730436][ T9022] tipc: Enabled bearer , priority 0 [ 527.774330][ T9021] tipc: Resetting bearer [ 527.815714][ T9021] tipc: Disabling bearer [ 528.119423][ T9026] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1234'. [ 529.629238][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1236'. [ 531.424996][ T9061] loop5: detected capacity change from 0 to 1024 [ 531.807718][ T9061] attempt to access beyond end of device [ 531.807718][ T9061] loop5: rw=0, want=393348, limit=1024 [ 531.828203][ T9069] netlink: 'syz.3.1246': attribute type 1 has an invalid length. [ 532.087556][ T9061] attempt to access beyond end of device [ 532.087556][ T9061] loop5: rw=2049, want=393222, limit=1024 [ 532.099807][ T9061] Buffer I/O error on dev loop5, logical block 196610, lost async page write [ 532.128924][ T9070] attempt to access beyond end of device [ 532.128924][ T9070] loop5: rw=0, want=5780, limit=1024 [ 533.213540][ T5048] Bluetooth: hci3: command 0x0405 tx timeout [ 533.272218][ T9082] attempt to access beyond end of device [ 533.272218][ T9082] loop5: rw=0, want=5780, limit=1024 [ 533.333465][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 534.476582][ T9098] device bond0 entered promiscuous mode [ 534.541226][ T9108] device gretap1 entered promiscuous mode [ 535.373561][ T9127] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 536.322472][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'. [ 536.369879][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 537.256403][ T9128] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 537.275704][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 537.301665][ T9136] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 537.320408][ T9136] bond3 (unregistering): Released all slaves [ 539.090790][ T4235] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 539.323967][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061493400: rx timeout, send abort [ 539.858605][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f07a400: rx timeout, send abort [ 542.407113][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061493400: abort rx timeout. Force session deactivation [ 542.420278][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f07a400: abort rx timeout. Force session deactivation [ 542.904518][ T9180] netlink: 'syz.6.1278': attribute type 4 has an invalid length. [ 543.112010][ T9188] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1279'. [ 546.768926][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 548.458824][ T9238] netlink: 'syz.3.1292': attribute type 3 has an invalid length. [ 550.189631][ T9244] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1295'. [ 550.232783][ T9246] netlink: 'syz.2.1296': attribute type 2 has an invalid length. [ 550.512407][ T9253] loop4: detected capacity change from 0 to 1024 [ 551.141303][ T9261] netlink: 'syz.2.1301': attribute type 10 has an invalid length. [ 551.256706][ T9253] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 551.612678][ T9261] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.702422][ T9261] bond0: (slave team0): Enslaving as an active interface with an up link [ 551.749489][ T9269] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 554.235938][ T9291] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1310'. [ 554.965448][ T9303] device syzkaller0 entered promiscuous mode [ 557.077434][ T9321] netlink: 'syz.4.1320': attribute type 1 has an invalid length. [ 557.982332][ T9330] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1321'. [ 557.993311][ T9330] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1321'. [ 558.136763][ T9339] loop5: detected capacity change from 0 to 1024 [ 558.187938][ T9331] loop6: detected capacity change from 0 to 4096 [ 558.262849][ T9339] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 558.278877][ T9331] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 558.367448][ T9339] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.402208][ T9339] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1325: inode has both inline data and extents flags [ 561.708189][ T5129] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /207/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 562.017723][ T5129] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /207/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 562.382551][ T5129] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 562.464400][ T5129] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /207/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 562.511660][ T5129] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 562.534092][ T5129] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /207/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 562.575396][ T5129] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 562.606160][ T5129] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /207/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 564.299435][ T5129] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 564.390408][ T9412] fuse: Bad value for 'fd' [ 564.391082][ T5129] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /207/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 564.466287][ T5129] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 564.509759][ T5129] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /207/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 564.562017][ T5129] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 564.617290][ T5129] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /207/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 564.640670][ T5129] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 564.671490][ T5129] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /207/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 565.438274][ T9427] loop4: detected capacity change from 0 to 8 [ 566.190345][ T5129] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 566.213495][ T9427] squashfs: Unknown parameter 'erurs' [ 566.220950][ T5129] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /207/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 568.175746][ T9453] loop4: detected capacity change from 0 to 64 [ 569.759737][ T9462] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.419555][ T9462] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.859311][ T9462] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.012705][ T9462] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.193356][ T9462] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.214169][ T9462] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.235786][ T9462] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.257570][ T9462] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.868358][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1368'. [ 573.963866][ T9498] device team1 entered promiscuous mode [ 573.996815][ T9498] 8021q: adding VLAN 0 to HW filter on device team1 [ 574.027110][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1368'. [ 574.087926][ T9501] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 574.112699][ T9501] device team2 entered promiscuous mode [ 574.142155][ T9501] 8021q: adding VLAN 0 to HW filter on device team2 [ 575.360484][ T9509] device bridge3 entered promiscuous mode [ 575.370056][ T26] audit: type=1326 audit(2000000380.077:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.3.1371" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f92dd6e59 code=0x7fc00000 [ 577.359550][ T4232] Bluetooth: hci5: command 0x0409 tx timeout [ 579.207598][ T9545] 9pnet: Insufficient options for proto=fd [ 579.376498][ T9543] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1381'. [ 579.498395][ T9511] chnl_net:caif_netlink_parms(): no params data found [ 579.555218][ T4232] Bluetooth: hci5: command 0x041b tx timeout [ 580.603970][ T9511] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.611248][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.619955][ T9511] device bridge_slave_0 entered promiscuous mode [ 580.629280][ T9511] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.641883][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.650817][ T9511] device bridge_slave_1 entered promiscuous mode [ 580.716006][ T9511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.755076][ T9511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.944974][ T5053] Bluetooth: hci5: command 0x040f tx timeout [ 581.960404][ T9511] team0: Port device team_slave_0 added [ 581.969376][ T9580] loop4: detected capacity change from 0 to 2048 [ 582.520764][ T9511] team0: Port device team_slave_1 added [ 582.608623][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'. [ 582.624994][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.632173][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.665075][ T9511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.671864][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.679172][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.705740][ T9511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.801907][ T9511] device hsr_slave_0 entered promiscuous mode [ 583.808986][ T9511] device hsr_slave_1 entered promiscuous mode [ 583.829870][ T9511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.845357][ T9511] Cannot create hsr debugfs directory [ 584.824084][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 584.887792][ T9600] loop6: detected capacity change from 0 to 256 [ 585.238835][ T9511] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 585.259917][ T9511] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 585.292559][ T9511] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 585.323289][ T9511] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 586.507493][ T9511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.524756][ T9511] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.539894][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 586.558083][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 586.576710][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 586.688357][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.794115][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.801277][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.958470][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 587.066204][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 587.141469][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.148615][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.382046][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 587.390341][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 587.422702][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 587.454532][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 587.473787][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 587.483346][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 587.494456][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 587.505402][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 587.551028][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 587.662944][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 587.678289][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 587.853413][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 588.115260][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 588.406033][ T9645] loop6: detected capacity change from 0 to 256 [ 588.844237][ T9511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.885603][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 588.905158][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 589.334565][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 589.353295][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 589.379765][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 589.398291][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 589.409493][ T9511] device veth0_vlan entered promiscuous mode [ 589.427000][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 589.442373][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 589.456991][ T9511] device veth1_vlan entered promiscuous mode [ 589.505916][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 589.515022][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 589.523717][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 589.533642][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 589.544708][ T9511] device veth0_macvtap entered promiscuous mode [ 589.557548][ T9511] device veth1_macvtap entered promiscuous mode [ 589.576233][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.587392][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.597922][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.608754][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.621631][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.631795][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 589.641387][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 589.651926][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.663943][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.675359][ T9511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.686550][ T9511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.697806][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.708114][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.717380][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.733187][ T9511] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.742014][ T9511] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.751443][ T9511] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.761165][ T9511] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.844418][ T6528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.861510][ T6528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.883275][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 589.897421][ T6520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.907246][ T6520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.915885][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 590.560109][ T9678] loop7: detected capacity change from 0 to 40427 [ 591.337792][ T9678] F2FS-fs (loop7): Unrecognized mount option "age_extent_cache" or missing value [ 591.681977][ T9685] CIFS mount error: No usable UNC path provided in device string! [ 591.681977][ T9685] [ 591.692560][ T9685] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 592.312028][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.318878][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.550312][ T9692] device syzkaller0 entered promiscuous mode [ 593.800296][ T9703] loop7: detected capacity change from 0 to 2048 [ 595.099871][ T9703] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 595.129093][ T9703] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.528704][ T9731] tipc: Enabling of bearer rejected, failed to enable media [ 598.365260][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 599.280764][ T9762] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9762] [ 609.757221][ T9853] tipc: Enabled bearer , priority 0 [ 609.923107][ T9859] device syzkaller0 entered promiscuous mode [ 609.989802][ T9853] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 610.119765][ T9863] tipc: Resetting bearer [ 610.337201][ T9850] tipc: Resetting bearer [ 610.625061][ T9850] tipc: Disabling bearer [ 616.069468][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1482'. [ 616.115393][ T9917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.295757][ T9917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.404589][ T9923] device syzkaller0 entered promiscuous mode [ 616.438971][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1484'. [ 616.800809][ T9930] loop6: detected capacity change from 0 to 512 [ 616.806913][ T9934] tipc: Enabling of bearer rejected, failed to enable media [ 619.402096][ T9945] device syzkaller0 entered promiscuous mode [ 619.447149][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 619.486303][ T9948] net_ratelimit: 10 callbacks suppressed [ 619.486324][ T9948] 0: reclassify loop, rule prio 0, protocol 700 [ 619.539859][ T13] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 621.329458][ T9975] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1498'. [ 627.830613][T10012] loop4: detected capacity change from 0 to 128 [ 628.811753][T10012] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 628.936278][T10012] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 630.082673][ T6540] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 630.983812][T10044] loop7: detected capacity change from 0 to 1024 [ 632.490282][T10056] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1520'. [ 634.177544][T10075] loop6: detected capacity change from 0 to 512 [ 634.224642][T10075] EXT4-fs (loop6): Mount option "dioread_lock" incompatible with ext2 [ 634.235772][T10067] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.245344][T10067] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.253794][T10067] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.262011][T10067] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.166543][T10067] device vxlan0 entered promiscuous mode [ 635.868246][T10067] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 636.068125][T10086] tipc: Started in network mode [ 636.073163][T10086] tipc: Node identity 020f06fe70ca, cluster identity 4711 [ 636.076011][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1531'. [ 636.131682][T10090] netlink: 'syz.6.1531': attribute type 2 has an invalid length. [ 636.154888][T10086] tipc: Enabled bearer , priority 0 [ 636.175009][T10090] netlink: 'syz.6.1531': attribute type 1 has an invalid length. [ 636.203209][T10084] device syzkaller0 entered promiscuous mode [ 636.250660][T10084] tipc: Resetting bearer [ 636.367819][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'. [ 637.166821][T10083] tipc: Resetting bearer [ 637.237609][T10083] tipc: Disabling bearer [ 638.101871][T10107] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 638.168039][T10107] kvm: pic: level sensitive irq not supported [ 638.168491][T10107] kvm: pic: non byte read [ 638.190408][T10107] kvm: pic: level sensitive irq not supported [ 638.190491][T10107] kvm: pic: non byte read [ 638.204175][T10107] kvm: pic: level sensitive irq not supported [ 638.204285][T10107] kvm: pic: non byte read [ 638.216076][T10107] kvm: pic: level sensitive irq not supported [ 638.216153][T10107] kvm: pic: non byte read [ 638.261862][T10107] kvm: pic: level sensitive irq not supported [ 638.261941][T10107] kvm: pic: non byte read [ 638.511626][T10107] kvm: pic: level sensitive irq not supported [ 638.511738][T10107] kvm: pic: non byte read [ 638.570282][T10107] kvm: pic: level sensitive irq not supported [ 638.572536][T10107] kvm: pic: non byte read [ 639.861553][T10145] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 641.808841][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 642.130615][T10173] gfs2: gfs2 mount does not exist [ 644.545337][T10189] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1559'. [ 645.998352][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1565'. [ 649.118759][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 649.210508][T10214] device macvtap1 entered promiscuous mode [ 649.236110][T10214] device team0 entered promiscuous mode [ 649.242427][T10214] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 650.720833][T10248] device syzkaller0 entered promiscuous mode [ 657.985790][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 657.993489][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.047419][T10349] device syzkaller0 entered promiscuous mode [ 660.228948][T10354] device syzkaller0 entered promiscuous mode [ 660.287355][T10354] 0: reclassify loop, rule prio 0, protocol 700 [ 664.222491][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1616'. [ 664.480256][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079dc5c00: rx timeout, send abort [ 664.629852][T10402] loop6: detected capacity change from 0 to 256 [ 664.720472][T10402] FAT-fs (loop6): Directory bread(block 64) failed [ 664.748359][T10402] FAT-fs (loop6): Directory bread(block 65) failed [ 664.774138][T10402] FAT-fs (loop6): Directory bread(block 66) failed [ 664.789537][T10402] FAT-fs (loop6): Directory bread(block 67) failed [ 664.800353][T10402] FAT-fs (loop6): Directory bread(block 68) failed [ 664.812532][T10402] FAT-fs (loop6): Directory bread(block 69) failed [ 664.819490][T10402] FAT-fs (loop6): Directory bread(block 70) failed [ 664.829070][T10402] FAT-fs (loop6): Directory bread(block 71) failed [ 664.836688][T10402] FAT-fs (loop6): Directory bread(block 72) failed [ 664.843726][T10402] FAT-fs (loop6): Directory bread(block 73) failed [ 664.927453][T10400] attempt to access beyond end of device [ 664.927453][T10400] loop6: rw=2049, want=1236, limit=256 [ 664.950318][T10400] attempt to access beyond end of device [ 664.950318][T10400] loop6: rw=2049, want=1228, limit=256 [ 664.969753][T10400] Buffer I/O error on dev loop6, logical block 306, lost async page write [ 665.091379][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.098934][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.157956][T10410] loop6: detected capacity change from 0 to 1024 [ 665.237754][T10410] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 666.260437][T10397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.776018][T10397] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.785049][T10397] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.794586][T10397] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.803659][T10397] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.288493][T10452] gfs2: gfs2 mount does not exist [ 669.254481][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1635'. [ 669.264730][T10473] netlink: 'syz.7.1635': attribute type 2 has an invalid length. [ 669.273134][T10473] netlink: 'syz.7.1635': attribute type 1 has an invalid length. [ 674.107385][T10499] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 674.202312][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'. [ 675.905620][T10512] virtio-fs: tag not found [ 676.994628][T10530] gfs2: gfs2 mount does not exist [ 681.921774][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1662'. [ 681.955351][T10554] device macvtap1 entered promiscuous mode [ 681.970367][T10554] device bond0 entered promiscuous mode [ 681.976828][T10554] device bond_slave_0 entered promiscuous mode [ 681.993550][T10554] device bond_slave_1 entered promiscuous mode [ 682.002522][T10554] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 682.022442][T10551] netlink: 'syz.6.1659': attribute type 10 has an invalid length. [ 682.082774][T10551] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.117181][T10551] bond0: (slave team0): Enslaving as an active interface with an up link [ 684.238546][T10572] loop4: detected capacity change from 0 to 256 [ 684.345314][T10572] FAT-fs (loop4): Unrecognized mount option "shortname=winÅÙ4„“Bpxla‹e=1" or missing value [ 688.979045][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1674'. [ 691.816363][T10625] netlink: 'syz.7.1679': attribute type 10 has an invalid length. [ 691.829316][T10625] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.837640][T10625] device team0 entered promiscuous mode [ 691.843728][T10625] device team_slave_0 entered promiscuous mode [ 691.873074][T10625] device team_slave_1 entered promiscuous mode [ 691.880081][T10625] bond0: (slave team0): Enslaving as an active interface with an up link [ 693.185971][T10654] netlink: 'syz.4.1690': attribute type 4 has an invalid length. [ 693.350857][ T5053] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 693.564907][ T5053] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 693.717803][T10675] netlink: 'syz.7.1692': attribute type 2 has an invalid length. [ 694.438995][ T5053] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 696.029022][ T5053] usb 7-1: config 0 has no interfaces? [ 696.200986][ T5053] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 696.210105][ T5053] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 696.234242][ T5053] usb 7-1: SerialNumber: syz [ 696.251638][ T5053] usb 7-1: config 0 descriptor?? [ 696.896055][ T5473] usb 7-1: USB disconnect, device number 5 [ 698.734949][T10720] overlayfs: failed to clone lowerpath [ 700.444331][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 700.465204][T10734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 700.513136][T10734] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 700.690059][ T6525] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 700.703142][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 700.920835][ T4303] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 701.794050][ T6525] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.484266][ T6525] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.621273][ T6525] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.133522][T10779] tipc: Enabling of bearer rejected, failed to enable media [ 704.162297][ T6525] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.841981][T10818] syz.2.1726 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 708.823878][ T6525] tipc: Left network mode [ 710.211218][ T5053] Bluetooth: hci5: command 0x0406 tx timeout [ 711.288101][ T6525] bond3: (slave erspan1): Releasing active interface [ 711.317185][ T6525] device erspan1 left promiscuous mode [ 711.374384][T10866] tipc: Enabled bearer , priority 0 [ 711.433027][T10866] device syzkaller0 entered promiscuous mode [ 711.454700][T10866] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 711.634805][T10866] tipc: Resetting bearer [ 711.657362][T10863] tipc: Resetting bearer [ 711.689304][T10863] tipc: Disabling bearer [ 713.382318][ T6525] device hsr_slave_0 left promiscuous mode [ 714.145653][ T6525] device hsr_slave_1 left promiscuous mode [ 714.219332][ T6525] device veth1_macvtap left promiscuous mode [ 714.241743][ T6525] device veth0_macvtap left promiscuous mode [ 714.262843][ T6525] device veth1_vlan left promiscuous mode [ 714.322302][T10910] futex_wake_op: syz.4.1752 tries to shift op by 144; fix this program [ 714.424120][ T6525] device veth0_vlan left promiscuous mode [ 715.403700][ T6525] bond3 (unregistering): Released all slaves [ 715.442071][ T6525] bond2 (unregistering): (slave geneve2): Releasing active interface [ 715.471705][ T6525] bond2 (unregistering): Released all slaves [ 715.511808][ T6525] bond1 (unregistering): Released all slaves [ 715.915670][ T6525] bond0 (unregistering): Released all slaves [ 716.169320][T10914] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 716.178873][T10920] tipc: Started in network mode [ 716.184357][T10920] tipc: Node identity 080211000001, cluster identity 4711 [ 717.175851][T10920] tipc: Enabled bearer , priority 0 [ 719.122290][ T4301] tipc: Node number set to 134418688 [ 719.498420][T10957] loop6: detected capacity change from 0 to 512 [ 719.569262][T10957] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 719.925513][T10957] EXT4-fs (loop6): 1 truncate cleaned up [ 720.007376][T10957] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 722.649691][T10982] netlink: 'syz.2.1763': attribute type 2 has an invalid length. [ 723.669561][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.681138][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.381813][T11046] Device name cannot be null; rc = [-22] [ 728.993209][T11066] tipc: Enabling of bearer rejected, already enabled [ 734.714108][T11135] futex_wake_op: syz.2.1800 tries to shift op by 144; fix this program [ 737.082297][T11143] device syzkaller0 entered promiscuous mode [ 739.305933][T11178] loop6: detected capacity change from 0 to 764 [ 740.460782][ T26] audit: type=1326 audit(2000000534.502:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11208 comm="syz.2.1819" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x0 [ 740.574057][T11217] device syzkaller0 entered promiscuous mode [ 740.614805][T11221] netlink: 'syz.4.1821': attribute type 1 has an invalid length. [ 740.652470][T11221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 742.864778][T11229] bond2: (slave geneve3): making interface the new active one [ 742.909535][T11229] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 743.249715][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 745.131379][T11263] netlink: 'syz.7.1829': attribute type 1 has an invalid length. [ 746.115078][T11263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 746.175074][T11268] bond1: (slave gretap1): making interface the new active one [ 746.522746][T11268] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 746.627965][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 746.763136][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 746.986614][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 747.003240][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 747.119974][T11285] infiniband syz2: set down [ 747.125171][T11285] infiniband syz2: added vxcan1 [ 747.144660][T11285] infiniband syz2: Couldn't open port 1 [ 747.188716][T11285] RDS/IB: syz2: added [ 747.193542][T11285] smc: adding ib device syz2 with port count 1 [ 747.200047][T11285] smc: ib device syz2 port 1 has pnetid [ 747.211529][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 747.316109][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 747.389684][ T4232] vxcan1 speed is unknown, defaulting to 1000 [ 747.515645][T10422] vxcan1 speed is unknown, defaulting to 1000 [ 747.603168][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 747.717286][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 748.107703][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 748.651698][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 748.754012][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 750.811887][T11340] tipc: Enabling of bearer rejected, failed to enable media [ 753.619830][T11371] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 753.687375][T11371] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 758.714475][T11422] netlink: 292 bytes leftover after parsing attributes in process `syz.6.1861'. [ 759.829286][T11440] loop6: detected capacity change from 0 to 1024 [ 762.063969][T11464] hfsplus: b-tree write err: -5, ino 3 [ 763.868008][ T6522] hfsplus: b-tree write err: -5, ino 3 [ 775.107525][T11612] netlink: set zone limit has 8 unknown bytes [ 779.290276][T11657] device syzkaller0 entered promiscuous mode [ 780.413159][T11669] netlink: 12856 bytes leftover after parsing attributes in process `syz.4.1917'. [ 781.181683][ T26] audit: type=1326 audit(2000000572.592:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.3.1918" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f92dd6e59 code=0x0 [ 784.754244][T11714] netlink: 'syz.3.1927': attribute type 12 has an invalid length. [ 787.877951][T11714] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 788.232682][T11737] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1933'. [ 788.389358][T11737] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1933'. [ 789.411783][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 789.418132][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 789.875414][T11766] overlayfs: failed to clone upperpath [ 799.003144][T11876] PKCS7: Unknown OID: [4] 0.0 [ 799.031941][T11876] PKCS7: Only support pkcs7_signedData type [ 799.113628][T11877] netlink: 12856 bytes leftover after parsing attributes in process `syz.7.1955'. [ 800.831483][ T26] audit: type=1326 audit(2000000590.972:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.2.1957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a21f33e59 code=0x0 [ 807.953328][T11974] 9pnet_virtio: no channels available for device [ 809.264193][T11987] overlayfs: failed to clone upperpath [ 811.399026][T12007] xt_connbytes: Forcing CT accounting to be enabled [ 815.992039][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1991'. [ 816.863845][T12060] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.872487][T12060] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.880768][T12060] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.889011][T12060] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.909334][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1991'. [ 816.944363][T12067] tipc: Enabling of bearer rejected, failed to enable media [ 816.961808][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1991'. [ 821.334617][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'. [ 821.800356][T12140] overlayfs: failed to clone upperpath [ 830.082211][T12227] loop6: detected capacity change from 0 to 256 [ 831.465438][T12227] FAT-fs (loop6): Directory bread(block 64) failed [ 831.509612][T12227] FAT-fs (loop6): Directory bread(block 65) failed [ 831.792578][T12227] FAT-fs (loop6): Directory bread(block 66) failed [ 831.863818][T12227] FAT-fs (loop6): Directory bread(block 67) failed [ 831.870589][T12227] FAT-fs (loop6): Directory bread(block 68) failed [ 831.878063][T12227] FAT-fs (loop6): Directory bread(block 69) failed [ 831.884714][T12227] FAT-fs (loop6): Directory bread(block 70) failed [ 831.891662][T12227] FAT-fs (loop6): Directory bread(block 71) failed [ 832.532037][T12227] FAT-fs (loop6): Directory bread(block 72) failed [ 832.556813][T12227] FAT-fs (loop6): Directory bread(block 73) failed [ 834.309351][T12274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2034'. [ 842.670453][T12356] device bond0 entered promiscuous mode [ 842.687547][T12356] device bond_slave_0 entered promiscuous mode [ 842.745139][T12356] device bond_slave_1 entered promiscuous mode [ 842.798028][T12356] device team0 entered promiscuous mode [ 842.804160][T12356] device team_slave_0 entered promiscuous mode [ 842.810536][T12356] device team_slave_1 entered promiscuous mode [ 852.774046][T12427] device syzkaller0 entered promiscuous mode [ 854.181427][T12442] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 855.035840][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 855.042376][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 858.485213][T12466] autofs4:pid:12466:autofs_fill_super: called with bogus options [ 865.804465][T12527] loop6: detected capacity change from 0 to 1024 [ 869.537981][T12577] netlink: 'syz.6.2116': attribute type 8 has an invalid length. [ 877.705140][T12643] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 877.744048][T12643] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 884.649115][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2146'. [ 889.396092][T12758] loop6: detected capacity change from 0 to 2048 [ 891.713035][T12758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 896.522921][T12787] netlink: 'syz.4.2167': attribute type 20 has an invalid length. [ 903.827589][T12849] loop6: detected capacity change from 0 to 4096 [ 905.791144][T12849] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 906.008947][T12857] device bridge0 entered promiscuous mode [ 906.028488][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 906.327067][T12849] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 906.404473][T12854] device bridge0 left promiscuous mode [ 908.915098][T12910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2201'. [ 910.312509][T12916] loop6: detected capacity change from 0 to 40427 [ 910.397107][T12916] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 910.405145][T12916] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 911.519649][T12916] F2FS-fs (loop6): invalid crc value [ 911.617627][T12916] F2FS-fs (loop6): Found nat_bits in checkpoint [ 913.145701][T12916] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 913.152905][T12916] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 920.726804][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 920.733825][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 923.702117][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2227'. [ 923.720500][T13021] bond0: option lp_interval: invalid value (0) [ 923.726919][T13021] bond0: option lp_interval: allowed values 1 - 2147483647 [ 929.324035][T13083] tipc: Enabling of bearer rejected, failed to enable media [ 937.777961][T13169] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 938.422147][T13169] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 938.445806][T13169] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 940.892546][T13170] bond3: (slave gretap1): making interface the new active one [ 940.946668][T13170] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 941.662388][T13192] tipc: Enabling of bearer rejected, already enabled [ 951.088845][T13258] 9pnet: p9_fd_create_tcp (13258): problem connecting socket to 127.0.0.1 [ 951.971887][T13270] tipc: Enabling of bearer rejected, already enabled [ 959.060834][T13311] kcapi: manufacturer command 4294967295 unknown. [ 972.277988][T13408] netlink: 'syz.2.2333': attribute type 3 has an invalid length. [ 972.285926][T13408] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2333'. [ 972.751149][T13420] overlayfs: missing 'lowerdir' [ 977.882986][T13485] binder: 13483:13485 ioctl 4018620d 0 returned -22 [ 978.293071][T13488] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 982.235886][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'. [ 982.331564][T13531] vxcan1 speed is unknown, defaulting to 1000 [ 986.400786][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.407204][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.196614][T13573] rdma_rxe: rxe_register_device failed with error -23 [ 989.204938][T13573] rdma_rxe: failed to add wg2 [ 989.405760][T13575] VFS: Mount too revealing [ 990.881072][T13582] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 990.894489][T13582] Error parsing options; rc = [-22] [ 992.598894][T13596] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2379'. [ 996.904953][T13607] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2382'. [ 997.193179][T13620] netlink: 'syz.3.2385': attribute type 4 has an invalid length. [ 1013.016765][T13758] batman_adv: batadv0: Adding interface: gretap2 [ 1013.023304][T13758] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.048942][T13758] batman_adv: batadv0: Interface activated: gretap2 [ 1019.818491][T13820] loop6: detected capacity change from 0 to 2048 [ 1019.860036][T13820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1020.021686][T13818] program syz.6.2432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1021.713847][T13828] device syzkaller0 entered promiscuous mode [ 1023.210314][T13843] loop6: detected capacity change from 0 to 512 [ 1023.582644][T13843] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2437: invalid indirect mapped block 10 (level 1) [ 1023.602001][T13843] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2437: invalid indirect mapped block 8 (level 1) [ 1023.629526][T13843] EXT4-fs (loop6): 1 truncate cleaned up [ 1023.635326][T13843] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 1028.899970][T13885] No such timeout policy "syz1" [ 1038.371047][T13974] device syzkaller0 entered promiscuous mode [ 1052.912937][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1052.921655][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.068461][T14129] overlayfs: failed to clone upperpath [ 1062.488484][T14153] vxcan1 speed is unknown, defaulting to 1000 [ 1068.902264][T14195] loop6: detected capacity change from 0 to 8 [ 1075.325911][T14247] loop6: detected capacity change from 0 to 128 [ 1075.639432][T14247] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1075.662211][T14247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1078.550305][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1080.735593][T14282] hub 8-0:1.0: USB hub found [ 1080.850772][T14282] hub 8-0:1.0: 1 port detected [ 1082.241313][T14306] loop6: detected capacity change from 0 to 128 [ 1083.074248][T14306] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1083.087280][T14306] hpfs: filesystem error: improperly stopped [ 1083.093363][T14306] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1083.101109][T14306] hpfs: You really don't want any checks? You are crazy... [ 1083.127557][T14306] hpfs: hpfs_map_sector(): read error [ 1083.133182][T14306] hpfs: code page support is disabled [ 1083.141604][T14306] hpfs: hpfs_map_4sectors(): unaligned read [ 1083.148870][T14306] hpfs: hpfs_map_4sectors(): unaligned read [ 1083.154791][T14306] hpfs: filesystem error: unable to find root dir [ 1085.585827][T14327] device syzkaller0 entered promiscuous mode [ 1085.927736][T14327] TC_ACT_REPEAT abuse ? [ 1099.746700][T14429] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1099.757570][T14429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1101.665071][T14433] virtio-fs: tag not found [ 1108.364038][T14507] loop6: detected capacity change from 0 to 1024 [ 1112.792852][ T6528] hfsplus: b-tree write err: -5, ino 25 [ 1112.798636][ T6528] hfsplus: b-tree write err: -5, ino 4 [ 1112.807289][ T6528] hfsplus: b-tree write err: -5, ino 2 [ 1118.431410][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.460951][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.969115][T14585] loop6: detected capacity change from 0 to 4096 [ 1119.487437][T14600] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1133.647685][T14709] loop6: detected capacity change from 0 to 1024 [ 1134.048129][ T6528] hfsplus: b-tree write err: -5, ino 25 [ 1134.053908][ T6528] hfsplus: b-tree write err: -5, ino 4 [ 1134.092383][ T6528] hfsplus: b-tree write err: -5, ino 2 [ 1143.924972][T14789] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1143.935687][T14789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1146.857639][T14812] vxcan1 speed is unknown, defaulting to 1000 [ 1148.068230][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2691'. [ 1149.112182][T14823] overlayfs: failed to clone upperpath [ 1154.477245][T14871] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2705'. [ 1160.891633][T14902] loop6: detected capacity change from 0 to 64 [ 1161.219110][ T26] audit: type=1400 audit(1095.057:216): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 1174.880191][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2734'. [ 1174.939497][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2734'. [ 1180.267056][T15008] vxcan1 speed is unknown, defaulting to 1000 [ 1182.001961][ T4232] Bluetooth: hci6: command 0x0409 tx timeout [ 1183.467729][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.498863][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2750'. [ 1185.510830][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2750'. [ 1185.540658][ T4233] Bluetooth: hci6: command 0x041b tx timeout [ 1185.548392][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.787755][ T4233] Bluetooth: hci6: command 0x040f tx timeout [ 1189.473580][T15093] loop6: detected capacity change from 0 to 512 [ 1189.532819][T15008] chnl_net:caif_netlink_parms(): no params data found [ 1190.609343][ T23] Bluetooth: hci6: command 0x0419 tx timeout [ 1191.597002][T15008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.736535][T15008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.986468][T15008] device bridge_slave_0 entered promiscuous mode [ 1192.076621][T15008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.137316][T15008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.202038][T15008] device bridge_slave_1 entered promiscuous mode [ 1192.260796][T15008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.332596][T15008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.708935][T15134] netlink: 768 bytes leftover after parsing attributes in process `syz.6.2771'. [ 1192.987854][T15008] team0: Port device team_slave_0 added [ 1193.209447][T15008] team0: Port device team_slave_1 added [ 1193.329348][T15008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.337009][T15008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.366780][T15008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.380284][T15008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.387301][T15008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.413875][T15008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.992439][T15008] device hsr_slave_0 entered promiscuous mode [ 1194.383512][T15008] device hsr_slave_1 entered promiscuous mode [ 1194.446695][T15008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1194.462309][T15008] Cannot create hsr debugfs directory [ 1203.440496][T15008] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1203.726519][T15008] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1203.759000][T15008] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1203.975459][T15008] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1204.028568][ T1184] tipc: Left network mode [ 1205.092914][T15008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.253742][T15257] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2792'. [ 1205.351254][T15008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.364790][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1205.389149][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1205.959021][T15262] vxcan1 speed is unknown, defaulting to 1000 [ 1206.182955][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1206.217297][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1206.237982][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.245225][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.386332][T15008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1206.397510][T15008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1207.277637][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1207.293840][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1207.341338][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1207.381358][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.388606][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.440648][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1207.485756][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1208.287654][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1208.301116][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1208.310045][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1208.319359][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1208.328379][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1208.338330][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1208.361402][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1208.380207][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1208.400960][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1208.426578][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1209.353504][ T1184] bond1: (slave gretap1): Releasing active interface [ 1209.423433][ T26] audit: type=1326 audit(1140.144:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1209.492504][ T26] audit: type=1326 audit(1140.190:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1209.536105][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1209.545968][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1209.645978][T15008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.691505][ T26] audit: type=1326 audit(1140.190:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1209.781141][ T26] audit: type=1326 audit(1140.190:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1210.186052][ T26] audit: type=1326 audit(1140.190:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1212.179812][ T26] audit: type=1326 audit(1140.190:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1212.298418][ T26] audit: type=1326 audit(1140.190:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1213.265568][T15365] overlayfs: failed to clone upperpath [ 1213.676481][ T26] audit: type=1326 audit(1140.190:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1213.700813][ T26] audit: type=1326 audit(1140.190:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1214.590846][T13794] Bluetooth: hci2: command 0x0406 tx timeout [ 1214.714133][ T26] audit: type=1326 audit(1140.190:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1214.912615][ T26] audit: type=1326 audit(1140.190:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1215.005031][ T1184] device hsr_slave_0 left promiscuous mode [ 1215.084260][ T1184] device hsr_slave_1 left promiscuous mode [ 1215.307941][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.324810][ T26] audit: type=1326 audit(1140.190:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1215.465572][ T1184] device bridge_slave_1 left promiscuous mode [ 1215.548261][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.693248][ T1184] device bridge_slave_0 left promiscuous mode [ 1215.699506][ T26] audit: type=1326 audit(1140.190:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1215.734653][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.764150][ T1184] device bond0 left promiscuous mode [ 1215.785195][ T1184] device bond_slave_0 left promiscuous mode [ 1215.791274][ T1184] device bond_slave_1 left promiscuous mode [ 1215.806255][ T26] audit: type=1326 audit(1140.190:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1215.858327][ T1184] device team0 left promiscuous mode [ 1215.874899][ T1184] device team_slave_0 left promiscuous mode [ 1215.889960][ T26] audit: type=1326 audit(1140.190:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1215.890314][ T1184] device team_slave_1 left promiscuous mode [ 1215.945242][ T26] audit: type=1326 audit(1140.190:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1216.578402][ T26] audit: type=1326 audit(1140.190:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1216.602590][ T26] audit: type=1326 audit(1140.190:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1216.627580][ T26] audit: type=1326 audit(1140.190:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1216.663776][ T1184] bond1 (unregistering): Released all slaves [ 1216.672829][ T26] audit: type=1326 audit(1140.190:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.2.2811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8a21f33e59 code=0x7ffc0000 [ 1218.482163][T15407] overlayfs: failed to clone upperpath [ 1222.503446][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1222.571221][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1222.593376][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1222.610812][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1223.604104][ T1184] bond0 (unregistering): (slave team0): Releasing backup interface [ 1223.633648][ T1184] bond0 (unregistering): Released all slaves [ 1223.804652][T15436] device team0 left promiscuous mode [ 1223.837697][T15436] device team_slave_0 left promiscuous mode [ 1223.996892][T15436] device bridge3 left promiscuous mode [ 1224.150315][T15436] bridge0: port 3(team0) entered disabled state [ 1224.490821][T15436] device bridge_slave_0 left promiscuous mode [ 1224.497174][T15436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.537129][T15436] device bridge_slave_1 left promiscuous mode [ 1224.578008][T15436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.609251][T15436] bond0: (slave bond_slave_0): Releasing backup interface [ 1224.807401][T15436] bond0: (slave bond_slave_1): Releasing backup interface [ 1224.825902][T15436] team0: Port device team_slave_0 removed [ 1224.836358][T15436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.672711][T15436] bond0: (slave wlan1): Releasing backup interface [ 1225.769713][T15465] overlayfs: overlapping lowerdir path [ 1226.051163][T15436] team0: Port device bridge1 removed [ 1226.134269][T15436] team0: Port device bridge2 removed [ 1226.208121][T15436] bond1: (slave geneve2): Releasing active interface [ 1226.269592][T15436] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.324702][T15436] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.708062][T15436] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.748554][T15436] bond3: (slave ip6gretap1): Releasing backup interface [ 1226.756307][T15436] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 32:ab:3c:fe:76:ec - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1226.889361][T15436] bond3: (slave gretap1): Releasing backup interface [ 1226.992227][T15436] team0: Port device bridge3 removed [ 1226.998353][T15436] batman_adv: batadv0: Interface deactivated: gretap2 [ 1227.010297][T15436] batman_adv: batadv0: Removing interface: gretap2 [ 1227.201878][T11426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1227.211106][T11426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1228.490116][T11426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1228.510693][T11426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1228.814821][T11426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1228.880085][T11426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1228.936724][T15008] device veth0_vlan entered promiscuous mode [ 1228.999156][T15008] device veth1_vlan entered promiscuous mode [ 1229.249393][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1229.268550][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1229.331548][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1229.369957][T15505] overlayfs: failed to clone upperpath [ 1229.562247][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1229.850411][T15008] device veth0_macvtap entered promiscuous mode [ 1230.231376][T15008] device veth1_macvtap entered promiscuous mode [ 1231.312062][T15008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.419974][T15520] overlayfs: overlapping lowerdir path [ 1231.502426][T15008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.621225][T15008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.793723][T15008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.805072][T15008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.842377][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1231.909900][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1231.920229][T15008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.931128][T15008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.941506][T15008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.952425][T15008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.006771][T15008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.045618][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1232.075858][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1232.229160][T15008] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.263901][T15008] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.301940][T15008] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.349920][T15008] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.724878][T15539] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2855'. [ 1232.766682][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.811087][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.893029][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1232.927047][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.996715][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.004287][ T6528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1235.495210][T15564] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1235.502577][T15564] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1235.659743][T15564] vhci_hcd vhci_hcd.0: Device attached [ 1235.670444][T15565] vhci_hcd: connection closed [ 1235.676134][T11426] vhci_hcd: stop threads [ 1235.709423][T15570] overlayfs: failed to clone upperpath [ 1235.768192][T11426] vhci_hcd: release socket [ 1235.772729][T11426] vhci_hcd: disconnect device [ 1236.758253][T15596] netlink: 'syz.3.2869': attribute type 10 has an invalid length. [ 1237.389170][T15596] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1243.051816][T15655] loop8: detected capacity change from 0 to 16 [ 1243.463405][T15655] erofs: (device loop8): mounted with root inode @ nid 36. [ 1243.477556][T15655] attempt to access beyond end of device [ 1243.477556][T15655] loop8: rw=524288, want=12304, limit=16 [ 1243.493576][T15655] attempt to access beyond end of device [ 1243.493576][T15655] loop8: rw=524288, want=1072, limit=16 [ 1243.508130][T15655] attempt to access beyond end of device [ 1243.508130][T15655] loop8: rw=0, want=12304, limit=16 [ 1243.584334][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 1243.584444][ T26] audit: type=1800 audit(1172.050:288): pid=15655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2878" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 1244.897729][T15658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1249.224132][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.234833][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1258.862094][T13794] Bluetooth: hci0: command 0x0406 tx timeout [ 1259.340872][T15768] tipc: Enabling of bearer rejected, already enabled [ 1265.839008][ T4301] Bluetooth: hci6: command 0x0406 tx timeout [ 1269.127045][T15868] overlayfs: failed to clone upperpath [ 1274.666078][T15931] siw: device registration error -23 [ 1274.673573][T15931] smc: removing ib device syz2 [ 1275.061322][T15931] rdma_rxe: rxe-pd pool destroyed with unfree'd elem [ 1275.068165][T15931] rdma_rxe: rxe-mr pool destroyed with unfree'd elem [ 1275.075220][T15931] ------------[ cut here ]------------ [ 1275.080884][T15931] WARNING: CPU: 1 PID: 15931 at drivers/infiniband/core/restrack.c:52 rdma_restrack_clean+0x2a6/0x300 [ 1275.091977][T15931] Modules linked in: [ 1275.095902][T15931] CPU: 1 PID: 15931 Comm: syz.4.2939 Not tainted syzkaller #0 [ 1275.103407][T15931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1275.113516][T15931] RIP: 0010:rdma_restrack_clean+0x2a6/0x300 [ 1275.119491][T15931] Code: 10 4e 44 fa 49 81 c6 68 02 00 00 4c 89 f7 e8 31 e8 d4 fc 48 89 df 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2f d2 88 fa e8 ea 4d 44 fa <0f> 0b e9 b9 fd ff ff e8 de 4d 44 fa 0f 0b e9 f9 fd ff ff e8 d2 4d [ 1275.139349][T15931] RSP: 0018:ffffc90003197260 EFLAGS: 00010246 [ 1275.145515][T15931] RAX: ffffffff8734fb06 RBX: ffff8880421fe800 RCX: 0000000000080000 [ 1275.153521][T15931] RDX: ffffc90005cd1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1275.162197][T15931] RBP: 1ffff11004d029d9 R08: ffff888026814edb R09: 1ffff11004d029db [ 1275.170189][T15931] R10: dffffc0000000000 R11: ffffed1004d029dc R12: 1ffff11004d029ca [ 1275.178387][T15931] R13: dffffc0000000000 R14: ffff888026814ec8 R15: ffff8880421fe848 [ 1275.186504][T15931] FS: 00007f8d963a36c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1275.195593][T15931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1275.202186][T15931] CR2: 00007f8d98197540 CR3: 0000000076091000 CR4: 00000000003506e0 [ 1275.210227][T15931] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1275.218388][T15931] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1275.226483][T15931] Call Trace: [ 1275.229796][T15931] [ 1275.232812][T15931] ib_dealloc_device+0x160/0x1f0 [ 1275.237870][T15931] __ib_unregister_device+0x120/0x170 [ 1275.243291][T15931] ib_unregister_device_and_put+0xb4/0xf0 [ 1275.249174][T15931] nldev_dellink+0x281/0x310 [ 1275.253768][T15931] ? nldev_newlink+0x580/0x580 [ 1275.258556][T15931] ? __lock_acquire+0x13bc/0x7d10 [ 1275.263681][T15931] ? apparmor_capable+0x12c/0x190 [ 1275.268782][T15931] ? bpf_lsm_capable+0x5/0x10 [ 1275.273475][T15931] ? security_capable+0x85/0xb0 [ 1275.278386][T15931] ? nldev_newlink+0x580/0x580 [ 1275.283179][T15931] rdma_nl_rcv+0x6be/0x9d0 [ 1275.287971][T15931] ? rdma_nl_net_init+0x190/0x190 [ 1275.293041][T15931] ? rcu_lock_release+0x5/0x20 [ 1275.297956][T15931] netlink_unicast+0x774/0x920 [ 1275.302758][T15931] netlink_sendmsg+0x8ba/0xbe0 [ 1275.307520][T15931] ? netlink_getsockopt+0x570/0x570 [ 1275.312743][T15931] ? aa_sock_msg_perm+0x94/0x150 [ 1275.317676][T15931] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1275.322985][T15931] ? security_socket_sendmsg+0x7c/0xa0 [ 1275.328435][T15931] ? netlink_getsockopt+0x570/0x570 [ 1275.333661][T15931] ____sys_sendmsg+0x5b7/0x8f0 [ 1275.338469][T15931] ? __sys_sendmsg_sock+0x30/0x30 [ 1275.343534][T15931] ? import_iovec+0x6f/0xa0 [ 1275.348084][T15931] ___sys_sendmsg+0x236/0x2e0 [ 1275.352776][T15931] ? __sys_sendmsg+0x2a0/0x2a0 [ 1275.357621][T15931] __se_sys_sendmsg+0x1af/0x290 [ 1275.362494][T15931] ? __x64_sys_sendmsg+0x80/0x80 [ 1275.367493][T15931] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1275.373491][T15931] ? lockdep_hardirqs_on+0x94/0x140 [ 1275.378863][T15931] do_syscall_64+0x4c/0xa0 [ 1275.383372][T15931] ? clear_bhb_loop+0x30/0x80 [ 1275.388196][T15931] ? clear_bhb_loop+0x30/0x80 [ 1275.392897][T15931] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1275.398976][T15931] RIP: 0033:0x7f8d98149e59 [ 1275.403423][T15931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.423102][T15931] RSP: 002b:00007f8d963a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.431561][T15931] RAX: ffffffffffffffda RBX: 00007f8d983c2fa0 RCX: 00007f8d98149e59 [ 1275.439568][T15931] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1275.447548][T15931] RBP: 00007f8d981dfd6f R08: 0000000000000000 R09: 0000000000000000 [ 1275.455637][T15931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.463724][T15931] R13: 00007f8d983c3038 R14: 00007f8d983c2fa0 R15: 00007ffde823a3d8 [ 1275.471754][T15931] [ 1275.474780][T15931] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1275.482055][T15931] CPU: 1 PID: 15931 Comm: syz.4.2939 Not tainted syzkaller #0 [ 1275.489503][T15931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1275.499637][T15931] Call Trace: [ 1275.502913][T15931] [ 1275.505836][T15931] dump_stack_lvl+0x188/0x250 [ 1275.510551][T15931] ? show_regs_print_info+0x20/0x20 [ 1275.515930][T15931] ? load_image+0x400/0x400 [ 1275.520460][T15931] panic+0x2e5/0x810 [ 1275.524539][T15931] ? bpf_jit_dump+0xd0/0xd0 [ 1275.529254][T15931] ? rdma_restrack_clean+0x2a6/0x300 [ 1275.534539][T15931] __warn+0x248/0x2b0 [ 1275.538529][T15931] ? rdma_restrack_clean+0x2a6/0x300 [ 1275.543807][T15931] report_bug+0x1b7/0x2e0 [ 1275.548192][T15931] handle_bug+0x3a/0x70 [ 1275.552343][T15931] exc_invalid_op+0x16/0x40 [ 1275.556834][T15931] asm_exc_invalid_op+0x16/0x20 [ 1275.561681][T15931] RIP: 0010:rdma_restrack_clean+0x2a6/0x300 [ 1275.567562][T15931] Code: 10 4e 44 fa 49 81 c6 68 02 00 00 4c 89 f7 e8 31 e8 d4 fc 48 89 df 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2f d2 88 fa e8 ea 4d 44 fa <0f> 0b e9 b9 fd ff ff e8 de 4d 44 fa 0f 0b e9 f9 fd ff ff e8 d2 4d [ 1275.587285][T15931] RSP: 0018:ffffc90003197260 EFLAGS: 00010246 [ 1275.593442][T15931] RAX: ffffffff8734fb06 RBX: ffff8880421fe800 RCX: 0000000000080000 [ 1275.601405][T15931] RDX: ffffc90005cd1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1275.609364][T15931] RBP: 1ffff11004d029d9 R08: ffff888026814edb R09: 1ffff11004d029db [ 1275.617496][T15931] R10: dffffc0000000000 R11: ffffed1004d029dc R12: 1ffff11004d029ca [ 1275.625672][T15931] R13: dffffc0000000000 R14: ffff888026814ec8 R15: ffff8880421fe848 [ 1275.633658][T15931] ? rdma_restrack_clean+0x2a6/0x300 [ 1275.638958][T15931] ib_dealloc_device+0x160/0x1f0 [ 1275.643891][T15931] __ib_unregister_device+0x120/0x170 [ 1275.649260][T15931] ib_unregister_device_and_put+0xb4/0xf0 [ 1275.654978][T15931] nldev_dellink+0x281/0x310 [ 1275.659562][T15931] ? nldev_newlink+0x580/0x580 [ 1275.664317][T15931] ? __lock_acquire+0x13bc/0x7d10 [ 1275.669373][T15931] ? apparmor_capable+0x12c/0x190 [ 1275.674386][T15931] ? bpf_lsm_capable+0x5/0x10 [ 1275.679052][T15931] ? security_capable+0x85/0xb0 [ 1275.684029][T15931] ? nldev_newlink+0x580/0x580 [ 1275.688782][T15931] rdma_nl_rcv+0x6be/0x9d0 [ 1275.693204][T15931] ? rdma_nl_net_init+0x190/0x190 [ 1275.698219][T15931] ? rcu_lock_release+0x5/0x20 [ 1275.702979][T15931] netlink_unicast+0x774/0x920 [ 1275.707736][T15931] netlink_sendmsg+0x8ba/0xbe0 [ 1275.712494][T15931] ? netlink_getsockopt+0x570/0x570 [ 1275.717680][T15931] ? aa_sock_msg_perm+0x94/0x150 [ 1275.722606][T15931] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1275.727880][T15931] ? security_socket_sendmsg+0x7c/0xa0 [ 1275.733424][T15931] ? netlink_getsockopt+0x570/0x570 [ 1275.738608][T15931] ____sys_sendmsg+0x5b7/0x8f0 [ 1275.743366][T15931] ? __sys_sendmsg_sock+0x30/0x30 [ 1275.748406][T15931] ? import_iovec+0x6f/0xa0 [ 1275.752918][T15931] ___sys_sendmsg+0x236/0x2e0 [ 1275.757592][T15931] ? __sys_sendmsg+0x2a0/0x2a0 [ 1275.762364][T15931] __se_sys_sendmsg+0x1af/0x290 [ 1275.767211][T15931] ? __x64_sys_sendmsg+0x80/0x80 [ 1275.772135][T15931] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1275.778147][T15931] ? lockdep_hardirqs_on+0x94/0x140 [ 1275.783423][T15931] do_syscall_64+0x4c/0xa0 [ 1275.787830][T15931] ? clear_bhb_loop+0x30/0x80 [ 1275.792506][T15931] ? clear_bhb_loop+0x30/0x80 [ 1275.797178][T15931] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1275.803065][T15931] RIP: 0033:0x7f8d98149e59 [ 1275.807473][T15931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.827245][T15931] RSP: 002b:00007f8d963a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.835676][T15931] RAX: ffffffffffffffda RBX: 00007f8d983c2fa0 RCX: 00007f8d98149e59 [ 1275.843649][T15931] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1275.851624][T15931] RBP: 00007f8d981dfd6f R08: 0000000000000000 R09: 0000000000000000 [ 1275.859593][T15931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.867555][T15931] R13: 00007f8d983c3038 R14: 00007f8d983c2fa0 R15: 00007ffde823a3d8 [ 1275.875551][T15931] [ 1275.879223][T15931] Kernel Offset: disabled [ 1275.883918][T15931] Rebooting in 86400 seconds..