last executing test programs: 11m4.28281659s ago: executing program 32 (id=76): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x280440e, &(0x7f0000000140)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@noinit_itable}, {@nombcache}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@oldalloc}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x83, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x4, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m38.253657207s ago: executing program 3 (id=552): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcbc}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 7m38.003648063s ago: executing program 3 (id=553): socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f000000c2c0)='./file1\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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") chdir(&(0x7f0000000400)='./file0\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) 7m37.755446749s ago: executing program 3 (id=556): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m37.665605271s ago: executing program 3 (id=558): futex(0x0, 0x85, 0x3, 0x0, 0x0, 0xc6000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) syz_open_procfs$userns(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbfa, {0xa, 0x8, 0x1, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r4}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') read$FUSE(r5, &(0x7f0000004800)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000001540), &(0x7f0000001580)=ANY=[], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003100000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/172], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 7m35.23928418s ago: executing program 3 (id=563): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000600), 0x10}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x81, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0x7, 0x0, 0x1, 0x7fd, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0x3, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028005000100"], 0xc3}, 0x1, 0x100000000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x28) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 7m34.600080816s ago: executing program 3 (id=567): r0 = syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_clone3(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create(0xfffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x4f6, &(0x7f0000000cc0)="$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") r5 = creat(&(0x7f00000000c0)='./file1\x00', 0xde) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000000)={0x9, 0x8, 0x7f, 0x8, 0x409}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0xdd) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000021c0)=0x7c, 0x4) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd, 0xb0, 0x81, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xa, 0x80, 0x3}}}}}]}}]}}, 0x0) 7m18.262423845s ago: executing program 33 (id=569): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) epoll_create(0xfffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m17.888746985s ago: executing program 34 (id=567): r0 = syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_clone3(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create(0xfffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x4f6, &(0x7f0000000cc0)="$eJzs3cFvI1cZAPBvJnGSpmmTQqUCArqUwoJWayfeNqp6KhcQqiohKk4c0pB4oyh2HMVOacJKTf4HJCpxQHDizAGJQ6WeOCK4wa2XckAqsAI1SByMxh5ns7t2kmUTG+zfTxrNvHmz871na97zfkn8Ahhb1yLiMCKmIuKtiJjPzyf5Fq91tuy6T+7eWTu+e2ctiVbrzb8l7frsXJz6N5kn83vORMR3vxXxg6zi3fvjNvYPtlar1cpuXi41azulxv7Bzc3a6kZlo7JdLi8vLS++cuvl8qX19fnarz7+5ubr33v/N1/46A+HX/9R1qy5vO50Py5T5zUpnMTJTEbE61cRbAgm8v5M5Xv+v6QR8amIeKH9/M/HxCO8i8mVtgwAuCqt1ny05k+XAYBRl7ZzYElazHMBc5GmxWInh/dszKbVeqN543Z9b3u9kytbiEJ6e7NaWcxzhQtRSLLy0rvZ8b1yOe4v34qIZyLix9NPtMvFNdkiABiWJx+Y//853Zn/AYARN3PeBSuDaQcAMDjnzv8AwMgx/wPA+DH/A8D4Mf8DwPgx/wPAuPmwO/9PDLslAMBAfOeNN7KtdZx///X62/t7W/W3b65XGlvF2t5aca2+u1PcqNc3qpXiWr123v2q9frO0kux906pWWk0S439g5VafW+7udL+Xu+VSmEgvQIAzvLM8x/8KYmIw1efaG+Rr+UQ7VUrgFGWDrsBwNDI+cP48i3cML78Hx84by3Pvr8i/N5/E8zKofC/4Ppn5f9hXMn/w/iS/4fxJf8P46vVSvqt+Z+eXAIAjBQ5fmCgP/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAETHX3hZOldO0WIx4KiIWopDc3qxWFiPi6Yj443RhOisvDbXFAMDjS/+S5Ot/XZ9/ce7B2qnkX+1zUxHxw5+++ZN3VpvN3aXs/N+nu+eb7+Xny8NoPwBwnu483Z3Huz65e2etuw2yPR9/o7O4aBb3ON86NZMxme1+PxOFiJj9R9Ip57LPKxOXEP/wKCI+06v/STs3spCvfPpg/Cz2UwONn94XP23XdfbZa/Hph+483TfmeWu9wrj4IBt/Xuv1/KVxrb2f6bn48Ux7hHp83fHv+KHxr/u8z7THml7j37WLxnjpt9/uW3cU8bnJXvGTk/hJn/gvXjD+h5//4gv96lo/j7geveOfjlVq1nZKjf2Dm5u11Y3KRmW7XF5eWl585dbL5VI7R13qZqof9tdXbzzdt/+/jJjtE3/mnP5/5cxet04G4F/8+63vf6lf/KOIr3259/v/7Bnxsznxq2fGv2d19td9l+/O4q93+n/0qO//jQvG/+jPB+sXvBQAGIDG/sHWarVa2b3Ug0Jc8g1PHSRX1GYHI36QfR5/3Ps8l6fMel7zu5+9/1xWOfSeXsrBkAcm4Mrde+iH3RIAAAAAAAAAAAAAAKCfK/9zonTYPQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCU/ScAAP//WXPKOw==") r5 = creat(&(0x7f00000000c0)='./file1\x00', 0xde) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000000)={0x9, 0x8, 0x7f, 0x8, 0x409}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0xdd) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000021c0)=0x7c, 0x4) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd, 0xb0, 0x81, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xa, 0x80, 0x3}}}}}]}}]}}, 0x0) 6m28.143463001s ago: executing program 4 (id=701): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) 6m24.796255482s ago: executing program 4 (id=705): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 6m24.265785285s ago: executing program 4 (id=707): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write(r0, &(0x7f0000001300)="cfda", 0x2) 6m23.876354665s ago: executing program 4 (id=711): personality(0x8) uname(&(0x7f0000000180)=""/224) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='msdos\x00', 0x0, 0x0) lseek(r3, 0x289e0cb5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x80, 0x1, 0x73df, 0x7, {{0x7, 0x4, 0x0, 0x5, 0x1c, 0x65, 0x0, 0x9b, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@end, @timestamp_prespec={0x44, 0x4, 0x52}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func_proto, @fwd={0x1}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000001480)=""/132, 0x34, 0x84, 0x1}, 0x28) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 6m20.462804508s ago: executing program 4 (id=720): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000ac0)="cc", 0x1, 0xc804, &(0x7f0000000200)={0xa, 0x4e22, 0x487000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000040)) 6m19.243291318s ago: executing program 4 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0xfffffc4d}], 0x1, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}], 0x18, 0x200400d1}, 0x8860) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) io_setup(0x443, &(0x7f0000001100)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x8, 0x0, r4, 0x0, 0x0, 0x81, 0x0, 0x6}]) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYRES32=0x0, @ANYBLOB="3ccc02984ec464417323afe3a38e923a920aa75b4ca4c8cff2b2efe84268584146149ab75dca38f0b6b8cea74e3f09f401738b7fce48e36a86c6abd5d79cbfd2d60c3e7527073e97f898cc3f2bef9baa2832dae95feb46fbf32c1f1ceb52688d6795c41090030878088e842990ebeca8294a3c5760e385d86a23", @ANYRES8, @ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES64=r0, @ANYBLOB="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"], 0xfb, 0x20f, &(0x7f0000000d40)="$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") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000280)=0x13) 6m3.923320423s ago: executing program 35 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0xfffffc4d}], 0x1, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}], 0x18, 0x200400d1}, 0x8860) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) io_setup(0x443, &(0x7f0000001100)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x8, 0x0, r4, 0x0, 0x0, 0x81, 0x0, 0x6}]) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYRES32=0x0, @ANYBLOB="3ccc02984ec464417323afe3a38e923a920aa75b4ca4c8cff2b2efe84268584146149ab75dca38f0b6b8cea74e3f09f401738b7fce48e36a86c6abd5d79cbfd2d60c3e7527073e97f898cc3f2bef9baa2832dae95feb46fbf32c1f1ceb52688d6795c41090030878088e842990ebeca8294a3c5760e385d86a23", @ANYRES8, @ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES64=r0, @ANYBLOB="9ab5cac9219b9742064142415951540c137a2136299e432f6f1f489ca7a201662eaab1752ef8119d8509a4c1086f5d50fa7a92b841710a7d2729031db4063cd27068a970066d19a2910d399baf54c94d232f617a49be6251e94a1b06171ad72ecd5c2f37060d8a57dbe808118b937d266bfbc9d78362227362ccd8f7ddaf8816bd82a12773edb6dc0da3f2564e669257db80db24f433b5cddcc0d9c36785320eb2454e3290020de993a43389a2b0079591052dcd4d7d6a1718e19c6a1e407eca696fc6b67b9cb3f0c13922c1e98c1f621b1b1267f475bc986fdd36ee674df0191ae00288b1dcd481be855431168c78ed2af9e632aa316a78472ae17b18d509fe6640c4d74294db270eafe48e1d1e50c6054a694b2c549699e30913e357a81bcdaa18bd2485402fc5f02ea551dfddb45f43cf7cc64885e25c81530911ee9343c9bb3f0131a044c31313527363c07565b40a5f393b0b40e87a87a0cba5c0439fde2e79f69834a4801933d57de13004f21ed2eb2cc698322db97f832ddedb924a4b75fb6d43293158877b565dcfeaf57b2015428f08e3b75107fef28ab6fc6f9b997d7f280acbbd3f6072413c07a6674c7219bb22e7ddda75c89ad0eb54e12c4b3e3694fd6fd13d73a43123c7e75dd80297809c3a414ca33f59ccb0958e873c14f0f8a60d23ba9c21ef4a16f02ac2f71e73cc341196a7c47f4dff3acc199698f171c0ea2d024605c9f6976aba6f3d23837c23abfe082b1a9fdfd97dc605909f2946ab219cfd9e2fb88b70723e1952f7a37cd40bf0167b124e04f71895105231d59db73d12873c008b3c39365a18841291ac70cd47e6c479"], 0xfb, 0x20f, &(0x7f0000000d40)="$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") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000280)=0x13) 5m22.895051436s ago: executing program 2 (id=859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x2400, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000000000000000258c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0xc050) 5m22.71999996s ago: executing program 2 (id=861): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 5m21.341656494s ago: executing program 2 (id=865): socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r3, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14) 5m20.150697363s ago: executing program 2 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe58, 0x44800, 0x0, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) socket(0x10, 0x3, 0x0) r6 = socket(0x2d, 0x2, 0x0) setsockopt(r6, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4) ioctl(r6, 0x89e2, &(0x7f0000000600)='\x00\x00\b\x00') sendmsg(r6, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "000000000000080019000000000000000200"}, 0x34, &(0x7f0000000900)=[{&(0x7f0000000a00)="01020304", 0x4}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 5m18.415284285s ago: executing program 2 (id=875): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x48, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x3, 0x9]}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000040)={0x5, 0x15, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) 5m17.579325675s ago: executing program 2 (id=878): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000021c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, '\'*s', 0x44, 0x2f, 0x1, @local, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x3, 0x3, 0x0, 0x1, 0x4, 0x16}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x5, 0x3, 0x1, 0x0, 0x7, 0x5}, 0x2, {0x4d, 0x84f, 0x2, 0x6, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 5m17.031959519s ago: executing program 36 (id=878): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000021c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, '\'*s', 0x44, 0x2f, 0x1, @local, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x3, 0x3, 0x0, 0x1, 0x4, 0x16}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x5, 0x3, 0x1, 0x0, 0x7, 0x5}, 0x2, {0x4d, 0x84f, 0x2, 0x6, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3m45.719177901s ago: executing program 6 (id=1249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0x5, 0x6, 0x8, 0x30, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 3m44.819623193s ago: executing program 6 (id=1251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c0010800800014000000000080002"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) timer_create(0x0, 0x0, &(0x7f00000004c0)) 3m43.811998528s ago: executing program 6 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010004000000fbdbdf250a404000030000080800000014000200fc020000000000000000000000000000140001002001000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x169) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) 3m42.790418793s ago: executing program 6 (id=1259): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x70bd29, 0x25dfdc02, {0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3m42.621816237s ago: executing program 6 (id=1261): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000002300)={[{@nombcache}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_async_commit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}], [{@smackfsroot={'smackfsroot', 0x3d, '/g&[%$['}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0x0, 0x587, &(0x7f0000004480)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) 3m40.635488986s ago: executing program 6 (id=1265): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7c, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x46, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x3]}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0x15, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) 3m25.117349855s ago: executing program 37 (id=1265): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7c, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x46, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x3]}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0x15, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) 2m48.199166708s ago: executing program 8 (id=1406): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r4, 0x1, 0x9, &(0x7f0000000480)=""/168, &(0x7f0000000180)=0xa8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000092700000000000001000000850000009a00000077510800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x1e00}, 0x94) mkdirat(r3, &(0x7f0000000240)='\x00', 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r5) creat(&(0x7f0000000140)='./file1\x00', 0x57) socket(0x29, 0x80000, 0x7) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) 2m47.871567946s ago: executing program 8 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x9, 0x0, 0x0, {[@mptcp=@generic={0xac, 0x2}]}}}}}}}}, 0x0) 2m47.776804598s ago: executing program 8 (id=1408): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) 2m46.767732263s ago: executing program 8 (id=1411): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x1f, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) 2m45.942029923s ago: executing program 8 (id=1414): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) 2m44.379265041s ago: executing program 8 (id=1419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0x8001, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x2, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x3, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) 2m44.000438201s ago: executing program 38 (id=1419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0x8001, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x2, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x3, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) 49.301818214s ago: executing program 1 (id=2170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x68, r1, 0x5, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x2}}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1000}, @void, @val={0x25, 0x3, {0x1, 0x80, 0xa}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb2, 0xe}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r6, 0xffff) r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xffffffffffffffa5}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r9, 0x4008586f, 0x0) 48.232271671s ago: executing program 1 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000940)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5b1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1df1400000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x494}}, 0x8800) 47.734885513s ago: executing program 1 (id=2177): setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000006640), 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) 46.286004618s ago: executing program 1 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) 44.202451359s ago: executing program 1 (id=2189): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='file net/sctp/* +p', 0x12) 43.735518071s ago: executing program 1 (id=2190): uname(&(0x7f0000000180)=""/224) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='msdos\x00', 0x0, 0x0) lseek(r3, 0x289e0cb5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x80, 0x1, 0x73df, 0x7, {{0x7, 0x4, 0x0, 0x5, 0x1c, 0x65, 0x0, 0x9b, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@end, @timestamp_prespec={0x44, 0x4, 0x52}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r5, 0x0, 0x0, 0xf0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func_proto, @fwd={0x1}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000001480)=""/132, 0x34, 0x84, 0x1}, 0x28) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 28.62005259s ago: executing program 39 (id=2190): uname(&(0x7f0000000180)=""/224) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='msdos\x00', 0x0, 0x0) lseek(r3, 0x289e0cb5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x80, 0x1, 0x73df, 0x7, {{0x7, 0x4, 0x0, 0x5, 0x1c, 0x65, 0x0, 0x9b, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@end, @timestamp_prespec={0x44, 0x4, 0x52}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r5, 0x0, 0x0, 0xf0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func_proto, @fwd={0x1}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000001480)=""/132, 0x34, 0x84, 0x1}, 0x28) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 2.248130475s ago: executing program 9 (id=2349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.103470959s ago: executing program 0 (id=2351): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x80000000, 0x9, 0x5, 0x5, 0x1, 0x0, 0x2}]}) 2.013514071s ago: executing program 9 (id=2353): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x0) lseek(r0, 0x80000000008, 0x3) 1.943512642s ago: executing program 7 (id=2354): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/fail_page_alloc/min-order\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='0\n\x00', 0x2) 1.895661094s ago: executing program 0 (id=2355): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r4, 0x1, 0x9, &(0x7f0000000480)=""/168, &(0x7f0000000180)=0xa8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x1e00}, 0x94) mkdirat(r3, &(0x7f0000000240)='\x00', 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r5) creat(&(0x7f0000000140)='./file1\x00', 0x57) socket(0x29, 0x80000, 0x7) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.834527765s ago: executing program 5 (id=2356): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faff", 0x11, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.775619256s ago: executing program 7 (id=2357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.769353947s ago: executing program 9 (id=2358): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x169) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x20084884) 1.667946179s ago: executing program 5 (id=2359): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000000)={0x70000, 0x14000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0x6, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.583070481s ago: executing program 7 (id=2360): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x200001, 0x5, 0x3, 0x0, 'syz0\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x10001, 'syz0\x00', 0x0}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x8}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9, 0x0, {0x0, 0x2}}) 1.550745002s ago: executing program 0 (id=2361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.395598136s ago: executing program 5 (id=2362): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x88c4) r0 = io_uring_setup(0x2f93, &(0x7f00000003c0)={0x0, 0x1, 0x1, 0x3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 1.350080807s ago: executing program 0 (id=2363): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 1.333272817s ago: executing program 7 (id=2364): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) readv(r0, &(0x7f0000002a80)=[{&(0x7f00000017c0)=""/214, 0xd6}], 0x1) 652.099484ms ago: executing program 0 (id=2365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@cipso={0x86, 0x9, 0x3, [{0x1, 0x3, "ff"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x1, 0x4, 0x0, 0x1c, {[@timestamp={0x5, 0xa}]}}}}}}, 0x4e) 587.337806ms ago: executing program 9 (id=2366): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x0) lseek(r0, 0x80000000008, 0x3) 507.551158ms ago: executing program 5 (id=2367): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 422.02642ms ago: executing program 7 (id=2368): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)={0x20, 0x140f, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x20}}, 0x4c084) 363.106311ms ago: executing program 9 (id=2369): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r4, 0x1, 0x9, &(0x7f0000000480)=""/168, &(0x7f0000000180)=0xa8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x1e00}, 0x94) mkdirat(r3, &(0x7f0000000240)='\x00', 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r5) creat(&(0x7f0000000140)='./file1\x00', 0x57) socket(0x29, 0x80000, 0x7) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 271.588673ms ago: executing program 7 (id=2370): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 223.981705ms ago: executing program 5 (id=2371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 163.619846ms ago: executing program 0 (id=2372): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='username\x00', &(0x7f00000002c0)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='password\x00', &(0x7f0000000340)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.53628ms ago: executing program 5 (id=2373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x68, r1, 0x5, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x2}}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x2}, @void, @val={0x6, 0x2, 0x1000}, @void, @val={0x25, 0x3, {0x1, 0x80, 0xa}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb2, 0xe}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r6, 0xffff) r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xffffffffffffffa5}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r9, 0x4008586f, 0x0) 0s ago: executing program 9 (id=2374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x169) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20084884) kernel console output (not intermixed with test programs): preconfigured BSSID 50:50:50:50:50:50 [ 377.154065][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.427930][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.483739][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.636737][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.706398][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.886235][ T8462] loop5: detected capacity change from 0 to 512 [ 378.711833][ T8198] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 379.252760][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.261333][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.450500][ T8475] loop6: detected capacity change from 0 to 512 [ 379.495368][ T8475] ext2: Unknown parameter 'obj_type' [ 379.667261][ T8025] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 382.671089][ T8514] loop6: detected capacity change from 0 to 16 [ 384.253018][ T8330] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 384.707350][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 384.810653][ T8526] loop2: detected capacity change from 0 to 256 [ 384.908387][ T8526] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 385.520421][ T8534] loop4: detected capacity change from 0 to 512 [ 385.539047][ T8535] loop6: detected capacity change from 0 to 256 [ 385.577166][ T8534] ext2: Unknown parameter 'obj_type' [ 385.618086][ T8535] FAT-fs (loop6): Unrecognized mount option "utg8=0" or missing value [ 386.539578][ T8025] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 386.554854][ T36] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 389.656354][ T8563] syzkaller0: entered promiscuous mode [ 389.706368][ T8563] syzkaller0: entered allmulticast mode [ 390.024280][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.676'. [ 390.264982][ T8581] loop5: detected capacity change from 0 to 16 [ 390.338322][ T8330] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 390.476049][ T8587] loop2: detected capacity change from 0 to 512 [ 390.517803][ T8587] ext2: Unknown parameter 'obj_type' [ 393.560161][ T8620] loop6: detected capacity change from 0 to 128 [ 393.777154][ T8198] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 394.373394][ T8629] syzkaller0: entered promiscuous mode [ 394.427645][ T8629] syzkaller0: entered allmulticast mode [ 394.590283][ T8636] loop2: detected capacity change from 0 to 512 [ 394.626983][ T8636] ext2: Unknown parameter 'obj_type' [ 395.731533][ T8645] syzkaller0: entered promiscuous mode [ 395.738466][ T8645] syzkaller0: entered allmulticast mode [ 397.030177][ T8673] loop2: detected capacity change from 0 to 8192 [ 400.463666][ T8696] loop6: detected capacity change from 0 to 512 [ 400.515093][ T8696] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 400.695178][ T8696] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.703: bad orphan inode 131072 [ 400.735627][ T8696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.909525][ T8163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.330872][ T8720] loop6: detected capacity change from 0 to 256 [ 401.343731][ T8720] FAT-fs (loop6): Unrecognized mount option "utg8=0" or missing value [ 402.238577][ T8727] loop6: detected capacity change from 0 to 128 [ 402.279249][ T8727] EXT4-fs (loop6): Test dummy encryption mode enabled [ 402.307141][ T8727] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.336434][ T8727] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 402.377695][ T8731] autofs4:pid:8731:autofs_fill_super: called with bogus options [ 403.391884][ T8727] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 404.398533][ T8163] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.716002][ T8768] loop5: detected capacity change from 0 to 256 [ 405.757205][ T8768] FAT-fs (loop5): Unrecognized mount option "utg8=0" or missing value [ 406.150899][ T8773] autofs4:pid:8773:autofs_fill_super: called with bogus options [ 406.889004][ T8784] loop2: detected capacity change from 0 to 256 [ 407.051208][ T8787] loop4: detected capacity change from 0 to 16 [ 408.748948][ T5788] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 408.759173][ T5788] Bluetooth: hci4: Injecting HCI hardware error event [ 409.428682][ T5788] Bluetooth: hci4: hardware error 0x00 [ 409.671405][ T8812] loop6: detected capacity change from 0 to 256 [ 409.740748][ T8812] FAT-fs (loop6): Unrecognized mount option "utg8=0" or missing value [ 409.833258][ T8330] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.844877][ T8819] autofs4:pid:8819:autofs_fill_super: called with bogus options [ 411.546924][ T5788] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 412.547069][ T5788] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 412.556201][ T5788] Bluetooth: hci1: Injecting HCI hardware error event [ 412.566254][ T5788] Bluetooth: hci1: hardware error 0x00 [ 413.242807][ T8838] loop2: detected capacity change from 0 to 512 [ 413.309394][ T8838] EXT4-fs: Ignoring removed i_version option [ 413.351088][ T8838] ext4: Unknown parameter 'smackfsfloor' [ 413.482371][ T8330] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 414.105844][ T8846] sctp: failed to load transform for md5: -2 [ 415.546882][ T5788] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 417.264249][ T8881] loop5: detected capacity change from 0 to 2048 [ 420.400339][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.749'. [ 421.726843][ T8912] IPv4: Oversized IP packet from 172.20.20.24 [ 421.737062][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 421.745759][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 421.768281][ T8911] loop5: detected capacity change from 0 to 128 [ 421.840688][ T8330] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 423.692332][ T28] audit: type=1326 audit(1785242329.439:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd581f9de99 code=0x7ffc0000 [ 423.817462][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.840936][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.851188][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.867281][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.875482][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 423.883867][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.974143][ T28] audit: type=1326 audit(1785242329.439:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd581f9de99 code=0x7ffc0000 [ 424.188378][ T28] audit: type=1326 audit(1785242329.479:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd581f9de99 code=0x7ffc0000 [ 424.295319][ T28] audit: type=1326 audit(1785242329.499:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7fd581f9de99 code=0x7ffc0000 [ 424.364738][ T28] audit: type=1326 audit(1785242329.499:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd581f9de99 code=0x7ffc0000 [ 424.452881][ T28] audit: type=1326 audit(1785242329.499:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd581f9de99 code=0x7ffc0000 [ 424.911808][ T28] audit: type=1326 audit(1785242329.499:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd581f9de99 code=0x7ffc0000 [ 425.233914][ T28] audit: type=1326 audit(1785242329.499:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd581f9de99 code=0x7ffc0000 [ 425.258675][ T28] audit: type=1326 audit(1785242329.499:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.2.758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd581f9de99 code=0x7ffc0000 [ 425.919773][ T8960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.762'. [ 425.929587][ T8960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.762'. [ 426.008188][ T5783] Bluetooth: hci2: command tx timeout [ 426.959034][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 427.623252][ T8938] chnl_net:caif_netlink_parms(): no params data found [ 428.079026][ T5783] Bluetooth: hci2: command tx timeout [ 428.754751][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.830395][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.098972][ T8938] bridge_slave_0: entered allmulticast mode [ 429.569468][ T8938] bridge_slave_0: entered promiscuous mode [ 430.051565][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.126877][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.137210][ T5783] Bluetooth: hci2: command tx timeout [ 430.190987][ T8938] bridge_slave_1: entered allmulticast mode [ 430.255554][ T8938] bridge_slave_1: entered promiscuous mode [ 430.401665][ T8938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.467965][ T8938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.628914][ T8938] team0: Port device team_slave_0 added [ 430.667010][ T8938] team0: Port device team_slave_1 added [ 431.394858][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.402009][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.500230][ T8938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.540322][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.547773][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.574597][ T8938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.890528][ T8938] hsr_slave_0: entered promiscuous mode [ 431.952188][ T8938] hsr_slave_1: entered promiscuous mode [ 432.197612][ T5783] Bluetooth: hci2: command tx timeout [ 435.041542][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.097247][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.780'. [ 435.106299][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.780'. [ 435.126495][ T8938] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 435.149452][ T9046] netlink: 'syz.6.782': attribute type 1 has an invalid length. [ 435.164544][ T9046] netlink: 'syz.6.782': attribute type 4 has an invalid length. [ 435.203551][ T9046] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.782'. [ 435.237769][ T8938] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 435.260942][ T8938] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 435.350415][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.381765][ T8938] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 435.565749][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.784588][ T9052] loop2: detected capacity change from 0 to 2048 [ 435.973103][ T9052] EXT4-fs: Ignoring removed oldalloc option [ 436.145949][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.199999][ T9052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.555735][ T8938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.687653][ T8938] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.315247][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.387750][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.395363][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.513933][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.521572][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.541951][ T9071] loop6: detected capacity change from 0 to 128 [ 437.618052][ T8330] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 437.916232][ T8938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 438.057460][ T8938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.785231][ T9084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.790'. [ 438.799166][ T9084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.790'. [ 439.030481][ T12] tipc: Left network mode [ 439.082110][ T9098] process 'syz.5.794' launched './file2' with NULL argv: empty string added [ 439.675319][ T8938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.671155][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.684379][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.021595][ T8938] veth0_vlan: entered promiscuous mode [ 441.089329][ T8938] veth1_vlan: entered promiscuous mode [ 441.211609][ T8938] veth0_macvtap: entered promiscuous mode [ 441.254770][ T8938] veth1_macvtap: entered promiscuous mode [ 441.334701][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.374933][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.415715][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.446718][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.498300][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.526746][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.554584][ T8938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.592292][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.637072][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.656661][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.686651][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.707246][ T8938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.726729][ T8938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.748389][ T8938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.764980][ T12] hsr_slave_0: left promiscuous mode [ 441.771562][ T12] hsr_slave_1: left promiscuous mode [ 441.790777][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.806759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.815748][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.836741][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.847463][ T12] bridge_slave_1: left allmulticast mode [ 441.866744][ T12] bridge_slave_1: left promiscuous mode [ 441.872564][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.918698][ T12] bridge_slave_0: left allmulticast mode [ 441.924817][ T12] bridge_slave_0: left promiscuous mode [ 441.937031][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.991658][ T12] bond_slave_0: left promiscuous mode [ 441.997551][ T12] bond_slave_1: left promiscuous mode [ 442.011961][ T12] veth1_macvtap: left promiscuous mode [ 442.026989][ T12] veth0_macvtap: left promiscuous mode [ 442.033108][ T12] veth1_vlan: left promiscuous mode [ 442.049949][ T12] veth0_vlan: left promiscuous mode [ 442.209905][ T12] infiniband syz2: set down [ 442.314794][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 442.335749][ T12] bond1 (unregistering): (slave macvlan3): Releasing active interface [ 442.370838][ T12] bond1 (unregistering): Released all slaves [ 442.569911][ T9161] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.114007][ T12] team0 (unregistering): Port device team_slave_1 removed [ 445.508877][ T12] team0 (unregistering): Port device team_slave_0 removed [ 445.625616][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.710928][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.734679][ T48] smc: removing ib device syz2 [ 446.201946][ T12] bond0 (unregistering): Released all slaves [ 446.315933][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.6.801'. [ 446.325056][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.6.801'. [ 446.350891][ T8938] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.372827][ T8938] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.407694][ T8938] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.440106][ T8938] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.446654][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.812'. [ 447.147232][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.155433][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.548265][ T9197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.556555][ T9197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.978543][ T9228] netlink: 48 bytes leftover after parsing attributes in process `syz.2.822'. [ 451.440974][ T9244] netlink: 'syz.5.827': attribute type 13 has an invalid length. [ 451.934904][ T9249] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 451.984806][ T9249] syzkaller0: entered promiscuous mode [ 452.036651][ T9249] syzkaller0: entered allmulticast mode [ 453.594368][ T9270] loop2: detected capacity change from 0 to 256 [ 453.845045][ T9274] netlink: 256 bytes leftover after parsing attributes in process `syz.7.831'. [ 458.252929][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.832'. [ 458.262131][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.832'. [ 458.582017][ T9306] tipc: Enabling of bearer rejected, failed to enable media [ 459.166324][ T9323] binder: 9322:9323 ioctl c0306201 200000000080 returned -14 [ 459.193169][ T9323] binder: 9322:9323 ioctl c0306201 2000000003c0 returned -14 [ 459.431966][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 460.014703][ T9346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.850'. [ 460.024057][ T9346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.850'. [ 461.641961][ T9358] loop6: detected capacity change from 0 to 512 [ 461.784370][ T8330] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 462.002629][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.854'. [ 462.176812][ T9373] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 462.314330][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 462.348298][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.858'. [ 462.698442][ T9386] loop5: detected capacity change from 0 to 2048 [ 464.065055][ T9407] loop7: detected capacity change from 0 to 256 [ 464.081991][ T9407] FAT-fs (loop7): Unrecognized mount option "åÿŒƒ¤ˆ¥ˆúlˆ°shortname=winnt" or missing value [ 464.104451][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.866'. [ 464.168705][ T9409] syzkaller0: entered promiscuous mode [ 464.172882][ T9413] loop6: detected capacity change from 0 to 256 [ 464.200964][ T9409] syzkaller0: entered allmulticast mode [ 464.208894][ T8330] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 464.240722][ T9413] FAT-fs (loop6): Unrecognized mount option "utg8=0" or missing value [ 464.555209][ T9416] loop5: detected capacity change from 0 to 512 [ 464.704472][ T9416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.768516][ T9416] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.918363][ T8161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.979720][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.6.869'. [ 465.084531][ T9425] loop7: detected capacity change from 0 to 2048 [ 465.223134][ T9428] loop6: detected capacity change from 0 to 128 [ 465.266143][ T9428] EXT4-fs (loop6): Test dummy encryption mode enabled [ 466.454205][ T9428] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.807588][ T9428] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 467.349910][ T8163] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.553145][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.6.876'. [ 467.720923][ T9467] loop6: detected capacity change from 0 to 256 [ 467.777090][ T9467] FAT-fs (loop6): Unrecognized mount option "utg8=0" or missing value [ 467.825134][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.143912][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.274889][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.661542][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.150764][ T12] tipc: Left network mode [ 469.270848][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.285108][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.319633][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.332282][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.349103][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 469.364627][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 470.018252][ T9511] loop7: detected capacity change from 0 to 512 [ 470.050799][ T9511] EXT4-fs: Ignoring removed nobh option [ 470.168974][ T9511] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.888: corrupted inode contents [ 470.201865][ T9511] EXT4-fs (loop7): Remounting filesystem read-only [ 470.211436][ T9511] Quota error (device loop7): write_blk: dquota write failed [ 470.221319][ T9511] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 470.232546][ T9511] EXT4-fs (loop7): 1 truncate cleaned up [ 470.240656][ T9511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.253952][ T9511] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.408441][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.882267][ T9491] chnl_net:caif_netlink_parms(): no params data found [ 471.467049][ T5788] Bluetooth: hci0: command tx timeout [ 471.832606][ T9556] loop7: detected capacity change from 0 to 128 [ 472.647280][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.672764][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.728316][ T9491] bridge_slave_0: entered allmulticast mode [ 472.744767][ T9491] bridge_slave_0: entered promiscuous mode [ 472.778845][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.804333][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.861842][ T9491] bridge_slave_1: entered allmulticast mode [ 472.883307][ T9491] bridge_slave_1: entered promiscuous mode [ 473.271481][ T9573] syz.7.902 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 473.380788][ T12] hsr_slave_0: left promiscuous mode [ 473.546796][ T5788] Bluetooth: hci0: command tx timeout [ 473.552605][ T12] hsr_slave_1: left promiscuous mode [ 473.588661][ T9580] IPv4: Oversized IP packet from 172.20.20.24 [ 473.595412][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 473.601842][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 473.614027][ T12] bridge_slave_1: left allmulticast mode [ 473.626638][ T12] bridge_slave_1: left promiscuous mode [ 473.634470][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.713964][ T12] bridge_slave_0: left allmulticast mode [ 473.732066][ T12] bridge_slave_0: left promiscuous mode [ 473.748074][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.868087][ T12] veth1_macvtap: left promiscuous mode [ 473.874087][ T12] veth0_macvtap: left promiscuous mode [ 473.882758][ T12] veth1_vlan: left promiscuous mode [ 473.892689][ T12] veth0_vlan: left promiscuous mode [ 474.855251][ T12] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 475.294454][ T9599] autofs4:pid:9599:autofs_fill_super: called with bogus options [ 475.322714][ T9599] loop7: detected capacity change from 0 to 128 [ 475.380433][ T12] bond5 (unregistering): Released all slaves [ 475.403118][ T8330] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 475.449975][ T12] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 475.527284][ T12] bond4 (unregistering): Released all slaves [ 475.626733][ T5788] Bluetooth: hci0: command tx timeout [ 475.658116][ T12] bond3 (unregistering): Released all slaves [ 475.726442][ T12] bond2 (unregistering): Released all slaves [ 475.770004][ T12] bond1 (unregistering): Released all slaves [ 476.823679][ T12] team0 (unregistering): Port device team_slave_1 removed [ 476.895963][ T12] team0 (unregistering): Port device team_slave_0 removed [ 476.964614][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.034659][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.528709][ T12] bond0 (unregistering): Released all slaves [ 477.648581][ T9491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.662019][ T9491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.716688][ T5788] Bluetooth: hci0: command tx timeout [ 478.030010][ T9491] team0: Port device team_slave_0 added [ 478.079623][ T9491] team0: Port device team_slave_1 added [ 478.197756][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.237051][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.240379][ T9629] fuse: Unknown parameter 'grou00000000000000000000' [ 478.308842][ T9491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.553221][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.564151][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.755093][ T9491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.404971][ T9491] hsr_slave_0: entered promiscuous mode [ 479.448148][ T9491] hsr_slave_1: entered promiscuous mode [ 479.506935][ T9491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.514736][ T9491] Cannot create hsr debugfs directory [ 480.082445][ T9645] syzkaller0: entered promiscuous mode [ 480.106909][ T9645] syzkaller0: entered allmulticast mode [ 480.266960][ T9654] syzkaller0: entered promiscuous mode [ 480.280348][ T9654] syzkaller0: entered allmulticast mode [ 480.610318][ T9491] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 480.663207][ T9491] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 480.733156][ T9491] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 480.759090][ T9670] fuse: Unknown parameter 'grou00000000000000000000' [ 480.774948][ T9491] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 480.960292][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 480.967236][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 480.974063][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 480.996196][ T9675] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 481.111961][ T9491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.213065][ T9491] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.254014][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.261270][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.449315][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.456686][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.571987][ T9688] syzkaller0: entered promiscuous mode [ 481.585826][ T9688] syzkaller0: entered allmulticast mode [ 482.607851][ T9708] netlink: 'syz.7.934': attribute type 1 has an invalid length. [ 482.829215][ T9714] fuse: Unknown parameter 'grou00000000000000000000' [ 482.972151][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.934'. [ 483.050358][ T9712] bridge1: entered promiscuous mode [ 483.062064][ T9712] bond1: (slave bridge1): making interface the new active one [ 483.073651][ T9712] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 483.133874][ T9722] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 483.332993][ T9727] IPv4: Oversized IP packet from 172.20.20.24 [ 483.340726][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 483.399544][ T9491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.728303][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.939'. [ 484.889493][ T9757] fuse: Unknown parameter 'group_i00000000000000000000' [ 485.067665][ T9764] netlink: 'syz.7.946': attribute type 1 has an invalid length. [ 485.515834][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.946'. [ 485.600546][ T9764] bridge2: entered promiscuous mode [ 485.624424][ T9764] bond3: (slave bridge2): making interface the new active one [ 485.636488][ T9764] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 485.653358][ T9772] syzkaller0: entered promiscuous mode [ 485.659538][ T9772] syzkaller0: entered allmulticast mode [ 485.769602][ T9782] tipc: Enabling of bearer rejected, failed to enable media [ 486.546063][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.948'. [ 486.643764][ T9491] veth0_vlan: entered promiscuous mode [ 486.720722][ T9491] veth1_vlan: entered promiscuous mode [ 486.975556][ T9491] veth0_macvtap: entered promiscuous mode [ 487.013484][ T9789] loop5: detected capacity change from 0 to 2048 [ 487.026914][ T9491] veth1_macvtap: entered promiscuous mode [ 487.053086][ T9790] syzkaller0: entered promiscuous mode [ 487.064428][ T9790] syzkaller0: entered allmulticast mode [ 487.101820][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.121009][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.132767][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.152009][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.165873][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.186389][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.214580][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.275776][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.337123][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.356472][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.377472][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.389791][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.402198][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.545694][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.875815][ T9491] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.908250][ T9491] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.947978][ T9491] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.026256][ T9491] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.112177][ T9799] fuse: Unknown parameter 'group_i00000000000000000000' [ 488.204700][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.953'. [ 488.268923][ T9802] netlink: 144 bytes leftover after parsing attributes in process `syz.5.953'. [ 488.279856][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.310198][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.331697][ T9806] loop7: detected capacity change from 0 to 128 [ 488.406393][ T9806] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 488.430400][ T9806] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 488.503271][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.557209][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.641893][ T9806] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 488.684714][ T9806] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 488.852532][ T8938] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 488.896747][ T9817] loop8: detected capacity change from 0 to 256 [ 489.066310][ T9823] syzkaller0: entered promiscuous mode [ 489.073784][ T9823] syzkaller0: entered allmulticast mode [ 489.188751][ T9823] tipc: Enabling of bearer rejected, failed to enable media [ 489.599281][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'. [ 490.225840][ T9835] syzkaller0: entered promiscuous mode [ 490.240278][ T9835] syzkaller0: entered allmulticast mode [ 490.423329][ T9840] loop8: detected capacity change from 0 to 2048 [ 495.157805][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.971'. [ 496.216387][ T9882] syzkaller0: entered promiscuous mode [ 496.255715][ T9882] syzkaller0: entered allmulticast mode [ 496.950491][ T9890] tty tty32: ldisc open failed (-12), clearing slot 31 [ 497.020249][ T9886] tipc: Enabling of bearer rejected, failed to enable media [ 497.073987][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 497.329491][ T9896] loop6: detected capacity change from 0 to 2048 [ 499.566445][ T9913] overlayfs: failed to clone upperpath [ 500.376001][ T9931] loop6: detected capacity change from 0 to 256 [ 500.418436][ T9927] syzkaller0: entered promiscuous mode [ 500.454713][ T9927] syzkaller0: entered allmulticast mode [ 500.534013][ T9933] syzkaller0: entered promiscuous mode [ 500.565677][ T9933] syzkaller0: entered allmulticast mode [ 500.696796][ T9933] tipc: Enabling of bearer rejected, failed to enable media [ 500.833439][ T9938] loop6: detected capacity change from 0 to 1024 [ 500.847985][ T9938] EXT4-fs: Ignoring removed bh option [ 501.066867][ T9938] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.130956][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.987'. [ 501.203085][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 501.778313][ T8163] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 501.833807][ T8163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.129404][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.151499][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.998052][ T9977] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.343225][ T9983] syzkaller0: entered promiscuous mode [ 503.361252][ T9983] syzkaller0: entered allmulticast mode [ 503.529396][ T9983] tipc: Enabling of bearer rejected, failed to enable media [ 503.765972][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1001'. [ 504.457016][ T9996] loop8: detected capacity change from 0 to 512 [ 504.533769][ T9996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.625268][T10006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 504.777925][ T9491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.005291][T10012] syzkaller0: entered promiscuous mode [ 505.024768][T10012] syzkaller0: entered allmulticast mode [ 505.037938][T10015] loop8: detected capacity change from 0 to 512 [ 505.053344][T10015] EXT4-fs: Ignoring removed i_version option [ 505.071411][T10015] EXT4-fs: Ignoring removed bh option [ 505.146520][T10015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.185762][T10015] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.389478][ T9491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.596085][T10037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 505.617044][T10034] syzkaller0: entered promiscuous mode [ 505.622812][T10034] syzkaller0: entered allmulticast mode [ 505.702146][T10034] tipc: Enabling of bearer rejected, failed to enable media [ 505.967626][T10052] loop8: detected capacity change from 0 to 512 [ 506.634547][T10073] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 506.860639][T10082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 507.041972][T10087] syzkaller0: entered promiscuous mode [ 507.070167][T10087] syzkaller0: entered allmulticast mode [ 507.169561][T10094] loop6: detected capacity change from 0 to 512 [ 507.197561][T10087] tipc: Enabling of bearer rejected, failed to enable media [ 507.203589][T10094] EXT4-fs: Ignoring removed i_version option [ 507.223319][T10094] ext4: Unknown parameter 'smackfsfloor' [ 508.073930][T10115] loop6: detected capacity change from 0 to 2048 [ 508.096166][T10115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.162524][T10115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.370183][ T8163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.593857][T10131] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 508.663727][T10133] syzkaller0: entered promiscuous mode [ 508.683408][T10133] syzkaller0: entered allmulticast mode [ 508.793473][T10133] tipc: Enabling of bearer rejected, failed to enable media [ 508.927493][T10146] loop7: detected capacity change from 0 to 512 [ 508.941584][T10146] EXT4-fs: Ignoring removed i_version option [ 508.949950][T10146] ext4: Unknown parameter 'smackfsfloor' [ 509.049347][T10148] loop6: detected capacity change from 0 to 1024 [ 509.216055][T10152] syzkaller0: entered promiscuous mode [ 509.226776][T10152] syzkaller0: entered allmulticast mode [ 509.239583][ T8330] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 512.236281][T10176] loop8: detected capacity change from 0 to 256 [ 512.291319][T10176] FAT-fs (loop8): Unrecognized mount option "utg8=0" or missing value [ 512.405271][T10176] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.1053'. [ 512.607285][T10185] tipc: Enabling of bearer rejected, failed to enable media [ 513.120231][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1056'. [ 513.853441][T10195] syzkaller0: entered promiscuous mode [ 513.876649][T10195] syzkaller0: entered allmulticast mode [ 514.490511][T10219] loop8: detected capacity change from 0 to 256 [ 514.964809][T10219] FAT-fs (loop8): Unrecognized mount option "utg8=0" or missing value [ 515.011631][T10219] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.1065'. [ 515.661669][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1067'. [ 515.952355][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1069'. [ 515.961971][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1069'. [ 516.336151][T10244] overlayfs: failed to clone upperpath [ 516.522616][T10252] loop7: detected capacity change from 0 to 512 [ 516.554826][T10252] EXT4-fs: Ignoring removed i_version option [ 516.597461][T10252] ext4: Unknown parameter 'smackfsfloor' [ 516.685555][T10259] netlink: set zone limit has 8 unknown bytes [ 516.917456][T10265] loop8: detected capacity change from 0 to 256 [ 516.942435][T10265] FAT-fs (loop8): Unrecognized mount option "utg8=0" or missing value [ 517.266046][T10273] syzkaller0: entered promiscuous mode [ 517.337184][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1079'. [ 517.367110][T10273] syzkaller0: entered allmulticast mode [ 518.422327][T10289] loop6: detected capacity change from 0 to 4096 [ 518.557392][T10289] EXT4-fs (loop6): Test dummy encryption mode enabled [ 518.667530][T10289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.704619][T10289] Quota error (device loop6): do_check_range: Getting block 150994949 out of range 1-5 [ 518.716501][T10289] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 518.727323][T10289] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1086: Failed to acquire dquot type 0 [ 518.829913][T10309] fuse: Bad value for 'fd' [ 518.843344][T10309] loop7: detected capacity change from 0 to 512 [ 518.850725][T10309] EXT4-fs: Ignoring removed mblk_io_submit option [ 518.918354][T10289] EXT4-fs (loop6): Remounting filesystem read-only [ 518.955172][T10309] EXT4-fs (loop7): orphan cleanup on readonly fs [ 518.981187][T10309] Quota error (device loop7): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 518.992557][T10309] EXT4-fs warning (device loop7): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 519.034063][T10309] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 519.090382][T10309] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.1083: bad orphan inode 14 [ 519.101327][T10309] ext4_test_bit(bit=13, block=18) = 1 [ 519.109391][T10309] is_bad_inode(inode)=0 [ 519.113922][T10309] NEXT_ORPHAN(inode)=0 [ 519.121018][T10309] max_ino=32 [ 519.124352][T10309] i_nlink=1 [ 519.130153][T10309] EXT4-fs (loop7): 1 truncate cleaned up [ 519.137943][T10309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 519.309924][ T8163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.870986][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1092'. [ 520.462473][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.697650][T10339] syzkaller0: entered promiscuous mode [ 520.728707][T10339] syzkaller0: entered allmulticast mode [ 520.918251][T10354] loop8: detected capacity change from 0 to 256 [ 520.938373][T10354] FAT-fs (loop8): Unrecognized mount option "utg8=0" or missing value [ 521.727999][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1104'. [ 522.107849][T10372] tc action pedit unable to extract header offset for header type (0x4) [ 522.117070][T10372] tc action pedit unable to extract header offset for header type (0x4) [ 522.125521][T10372] tc action pedit unable to extract header offset for header type (0x4) [ 522.134333][T10372] tc action pedit unable to extract header offset for header type (0x4) [ 522.142765][T10372] tc action pedit unable to extract header offset for header type (0x4) [ 522.151162][T10372] tc action pedit unable to extract header offset for header type (0x4) [ 522.159830][T10372] tc action pedit unable to extract header offset for header type (0x4) [ 522.168281][T10372] tc action pedit unable to extract header offset for header type (0x4) [ 522.176932][T10372] tc action pedit unable to extract header offset for header type (0x4) [ 522.185410][T10372] tc action pedit unable to extract header offset for header type (0x4) [ 522.194091][T10372] 0: reclassify loop, rule prio 0, protocol 800 [ 522.654824][T10388] syzkaller0: entered promiscuous mode [ 522.673761][T10388] syzkaller0: entered allmulticast mode [ 523.847580][T10412] lo: Caught tx_queue_len zero misconfig [ 523.880666][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1115'. [ 524.863738][T10437] netlink: 'syz.8.1124': attribute type 1 has an invalid length. [ 524.927532][T10436] syzkaller0: entered promiscuous mode [ 524.936646][T10436] syzkaller0: entered allmulticast mode [ 525.287786][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1124'. [ 525.366225][T10450] bridge1: entered promiscuous mode [ 525.388973][T10450] bond1: (slave bridge1): making interface the new active one [ 525.400286][T10450] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 526.077449][T10480] loop7: detected capacity change from 0 to 128 [ 526.156256][T10480] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 526.261675][T10480] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.107265][T10500] syz_tun: entered allmulticast mode [ 527.127943][T10499] syz_tun: left allmulticast mode [ 527.428072][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1137'. [ 527.585620][T10508] netlink: 'syz.6.1136': attribute type 1 has an invalid length. [ 528.251837][T10520] overlayfs: failed to clone upperpath [ 528.354135][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1136'. [ 528.469836][T10515] bridge1: entered promiscuous mode [ 529.342442][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1146'. [ 530.199349][T10555] overlayfs: failed to clone upperpath [ 530.622468][T10565] netlink: 'syz.6.1149': attribute type 1 has an invalid length. [ 530.910736][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1149'. [ 530.953977][T10565] bridge1: entered promiscuous mode [ 531.071445][T10565] bond4: (slave bridge1): making interface the new active one [ 531.087954][T10565] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 533.033549][T10618] netlink: 'syz.6.1162': attribute type 1 has an invalid length. [ 533.323590][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1162'. [ 533.393275][T10630] bridge2: entered promiscuous mode [ 534.837240][T10650] syzkaller0: entered promiscuous mode [ 534.866691][T10650] syzkaller0: entered allmulticast mode [ 534.957697][ T8938] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.125067][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1170'. [ 535.134618][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1170'. [ 537.411338][T10689] loop8: detected capacity change from 0 to 1024 [ 537.732188][T10689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 537.817016][T10689] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.053964][T10699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1182'. [ 538.063059][T10699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1182'. [ 538.362730][ T9491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 538.994814][T10725] loop7: detected capacity change from 0 to 4096 [ 540.709108][T10725] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 543.399965][T10759] loop7: detected capacity change from 0 to 256 [ 543.476128][T10759] FAT-fs (loop7): Unrecognized mount option "utg8=0" or missing value [ 543.801013][T10769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1196'. [ 543.810504][T10769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1196'. [ 546.745414][T10780] fuse: Bad value for 'rootmode' [ 546.793138][T10781] loop7: detected capacity change from 0 to 1024 [ 547.603302][T10798] loop8: detected capacity change from 0 to 256 [ 548.697241][T10811] loop8: detected capacity change from 0 to 1024 [ 548.735905][T10818] fuse: Bad value for 'rootmode' [ 548.782517][T10811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 548.897036][T10811] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.150798][ T5783] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 549.399328][ T9491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 550.305476][T10874] fuse: Bad value for 'rootmode' [ 550.427249][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 553.230037][T10914] loop7: detected capacity change from 0 to 512 [ 553.249772][T10914] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 553.289979][T10914] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 553.410512][T10914] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 553.447062][T10914] Quota error (device loop7): write_blk: dquota write failed [ 553.466475][T10914] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 553.766847][T10914] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.1230: Failed to acquire dquot type 0 [ 554.067049][T10914] EXT4-fs (loop7): 1 truncate cleaned up [ 554.135522][T10914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.208764][T10922] loop6: detected capacity change from 0 to 512 [ 554.290613][T10922] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 554.484153][T10922] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 554.529911][T10922] EXT4-fs (loop6): mount failed [ 555.137190][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.237707][T10958] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1236'. [ 559.910798][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1248'. [ 559.920783][T11028] bridge_slave_1: left allmulticast mode [ 559.926713][T11028] bridge_slave_1: left promiscuous mode [ 559.933550][T11028] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.097415][T11028] bridge_slave_0: left allmulticast mode [ 560.103352][T11028] bridge_slave_0: left promiscuous mode [ 560.110506][T11028] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.763462][T11035] netlink: set zone limit has 8 unknown bytes [ 560.829000][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1251'. [ 561.400108][T11035] netlink: 'syz.7.1252': attribute type 10 has an invalid length. [ 561.532296][T11035] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.631869][T11035] bridge_slave_1: left allmulticast mode [ 561.660072][T11035] bridge_slave_1: left promiscuous mode [ 561.677257][T11035] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.744823][T11081] loop6: detected capacity change from 0 to 1024 [ 562.961134][ T8330] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 563.697848][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.704208][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.010615][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1262'. [ 565.116806][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1267'. [ 565.147009][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1267'. [ 567.201126][T11153] loop8: detected capacity change from 0 to 512 [ 567.241798][T11153] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 567.294277][T11153] EXT4-fs (loop8): 1 truncate cleaned up [ 567.301989][T11153] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.437058][ T28] audit: type=1326 audit(1785242473.169:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.8.1274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93cbd9de99 code=0x0 [ 567.461214][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.229607][ T9491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.589599][T11172] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 568.626654][T11172] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 568.635612][T11172] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 568.689771][T11172] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 568.707224][T11172] geneve2: entered promiscuous mode [ 568.712936][T11172] geneve2: entered allmulticast mode [ 568.810242][T11174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.028627][T11183] loop8: detected capacity change from 0 to 256 [ 569.056340][T11183] FAT-fs (loop8): Unrecognized mount option "utg8=0" or missing value [ 570.330290][T11221] loop8: detected capacity change from 0 to 256 [ 570.358517][T11221] FAT-fs (loop8): Unrecognized mount option "utg8=0" or missing value [ 571.607367][T11245] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 571.864351][T11248] loop7: detected capacity change from 0 to 1024 [ 572.959762][T11266] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1293'. [ 572.982860][T11267] loop7: detected capacity change from 0 to 1024 [ 573.016197][T11267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.113023][T11267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.183306][T11267] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.310814][T11267] syzkaller0: entered promiscuous mode [ 573.316738][T11267] syzkaller0: entered allmulticast mode [ 573.524252][T11282] loop8: detected capacity change from 0 to 256 [ 573.535797][T11282] FAT-fs (loop8): Unrecognized mount option "utg8=0" or missing value [ 573.784312][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 574.130794][T11296] rt1711h 0-0004: check vid/pid fail [ 574.138848][T11296] rt1711h: probe of 0-0004 failed with error -5 [ 574.147902][T11296] i2c i2c-0: new_device: Instantiated device rt1711h at 0x04 [ 576.465329][T11336] loop8: detected capacity change from 0 to 256 [ 576.491993][T11336] FAT-fs (loop8): Unrecognized mount option "utg8=0" or missing value [ 579.429750][T11364] loop7: detected capacity change from 0 to 512 [ 579.462464][T11364] EXT4-fs: Ignoring removed i_version option [ 579.513889][T11364] ext4: Unknown parameter 'smackfsfloor' [ 580.492632][T11374] loop7: detected capacity change from 0 to 8192 [ 580.568544][T11374] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 581.276522][T11391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.377647][T11391] batadv_slave_1: entered promiscuous mode [ 582.396507][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 582.415545][T11402] loop7: detected capacity change from 0 to 1024 [ 582.422392][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 582.442907][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 582.456872][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 582.465801][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 582.473628][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 584.494184][ T2923] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.592279][ T5788] Bluetooth: hci1: command tx timeout [ 585.170212][T11432] i2c i2c-0: Failed to register i2c client rt1711h at 0x04 (-16) [ 585.340123][ T2923] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.649410][ T2923] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.711719][ T5788] Bluetooth: hci1: command tx timeout [ 587.250281][ T2923] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.310871][T11447] warning: `syz.7.1330' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 587.383585][T11451] loop8: detected capacity change from 0 to 512 [ 587.391150][T11451] EXT4-fs: Ignoring removed i_version option [ 587.398722][T11451] ext4: Unknown parameter 'smackfsfloor' [ 587.459325][ T8330] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 587.866385][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 588.059884][T11460] i2c i2c-0: Failed to register i2c client rt1711h at 0x04 (-16) [ 588.201641][T11399] chnl_net:caif_netlink_parms(): no params data found [ 588.915664][ T5788] Bluetooth: hci1: command tx timeout [ 590.951342][T11487] fuse: Unknown parameter '0x0000000000000003' [ 590.987379][ T5788] Bluetooth: hci1: command tx timeout [ 592.103883][T11502] loop7: detected capacity change from 0 to 512 [ 592.169482][T11502] EXT4-fs: Ignoring removed i_version option [ 592.175790][T11502] ext4: Unknown parameter 'smackfsfloor' [ 592.217945][T11399] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.255798][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.507345][T11399] bridge_slave_0: entered allmulticast mode [ 592.561225][T11399] bridge_slave_0: entered promiscuous mode [ 592.629785][T11399] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.896893][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.015065][T11399] bridge_slave_1: entered allmulticast mode [ 593.068398][T11399] bridge_slave_1: entered promiscuous mode [ 594.689151][T11399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.765841][T11399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.133700][T11530] fuse: Unknown parameter '0x0000000000000003' [ 596.250277][T11399] team0: Port device team_slave_0 added [ 596.299097][T11399] team0: Port device team_slave_1 added [ 596.430358][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 596.695168][T11399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.745953][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.840340][T11399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.853949][T11399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.862535][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.898924][T11399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.078180][T11399] hsr_slave_0: entered promiscuous mode [ 598.109590][T11399] hsr_slave_1: entered promiscuous mode [ 598.253883][T11399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.299130][T11399] Cannot create hsr debugfs directory [ 599.324931][ T2923] hsr_slave_0: left promiscuous mode [ 599.364380][ T2923] hsr_slave_1: left promiscuous mode [ 599.400487][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.424628][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.458855][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.492259][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.530041][ T2923] bridge_slave_1: left allmulticast mode [ 599.557642][ T2923] bridge_slave_1: left promiscuous mode [ 599.584453][ T2923] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.624130][ T2923] bridge_slave_0: left allmulticast mode [ 599.664134][ T2923] bridge_slave_0: left promiscuous mode [ 599.686649][ T2923] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.866464][ T2923] veth1_macvtap: left promiscuous mode [ 599.897054][ T2923] veth0_macvtap: left promiscuous mode [ 599.905154][ T2923] veth1_vlan: left promiscuous mode [ 599.920449][ T2923] veth0_vlan: left promiscuous mode [ 600.126864][T11586] loop7: detected capacity change from 0 to 8192 [ 600.224983][T11586] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 600.329271][T11592] 9pnet_fd: Insufficient options for proto=fd [ 600.338433][T11592] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 600.497881][ T5818] IPVS: starting estimator thread 0... [ 600.708434][T11593] IPVS: using max 17 ests per chain, 40800 per kthread [ 601.094149][T11597] loop7: detected capacity change from 0 to 512 [ 601.103496][ T2923] bond7 (unregistering): Released all slaves [ 601.111015][T11597] EXT4-fs: Ignoring removed i_version option [ 601.139611][T11597] ext4: Unknown parameter 'smackfsfloor' [ 601.165608][ T2923] bond6 (unregistering): Released all slaves [ 601.236736][ T2923] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 601.321643][ T2923] bond5 (unregistering): Released all slaves [ 601.397965][ T2923] bond4 (unregistering): Released all slaves [ 601.436686][ T2923] bond3 (unregistering): Released all slaves [ 601.462096][ T2923] bond2 (unregistering): Released all slaves [ 601.500848][ T2923] bond1 (unregistering): Released all slaves [ 603.704976][ T2923] team0 (unregistering): Port device team_slave_1 removed [ 603.828105][ T2923] team0 (unregistering): Port device team_slave_0 removed [ 603.945947][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.059466][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.757757][ T2923] bond0 (unregistering): Released all slaves [ 605.469434][T11399] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 605.610981][T11399] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 606.234831][T11623] loop7: detected capacity change from 0 to 2048 [ 606.275926][T11399] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 606.646472][T11399] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 607.604097][T11399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.635551][T11399] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.729931][T11645] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1377'. [ 607.860421][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.867871][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.060033][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.067381][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.513603][T11660] loop8: detected capacity change from 0 to 128 [ 608.963114][ T2930] tipc: Left network mode [ 610.110004][T11399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.469275][ T5820] IPVS: starting estimator thread 0... [ 610.566958][T11681] IPVS: using max 26 ests per chain, 62400 per kthread [ 610.924152][T11695] loop8: detected capacity change from 0 to 2048 [ 611.045044][T11695] loop8: p1 < > p4 [ 611.068560][T11695] loop8: p4 size 8388608 extends beyond EOD, truncated [ 611.233087][T11706] loop7: detected capacity change from 0 to 2048 [ 611.358426][T11706] loop7: detected capacity change from 0 to 1024 [ 611.722962][ T8025] udevd[8025]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 611.761170][ T8198] udevd[8198]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 611.845110][ T8198] udevd[8198]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 611.849349][ T8330] udevd[8330]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 611.921175][T11399] veth0_vlan: entered promiscuous mode [ 611.978704][T11399] veth1_vlan: entered promiscuous mode [ 612.222848][T11399] veth0_macvtap: entered promiscuous mode [ 612.322533][T11399] veth1_macvtap: entered promiscuous mode [ 612.410320][ T5820] IPVS: starting estimator thread 0... [ 612.527098][T11722] IPVS: using max 18 ests per chain, 43200 per kthread [ 612.878543][ T2930] hsr_slave_0: left promiscuous mode [ 612.908532][ T2930] hsr_slave_1: left promiscuous mode [ 612.947065][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.988851][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.087431][ T2930] bridge_slave_1: left allmulticast mode [ 613.093419][ T2930] bridge_slave_1: left promiscuous mode [ 613.101164][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.111133][ T2930] bridge_slave_0: left allmulticast mode [ 613.118733][ T2930] bridge_slave_0: left promiscuous mode [ 613.129905][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.169626][ T2930] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 613.297540][ T2930] bond4 (unregistering): Released all slaves [ 613.550614][ T2930] bond3 (unregistering): Released all slaves [ 614.127792][ T2930] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 614.193743][ T2930] bond2 (unregistering): Released all slaves [ 614.232613][ T2930] bond1 (unregistering): Released all slaves [ 614.857351][T11736] loop7: detected capacity change from 0 to 2048 [ 614.962317][T11736] loop7: p1 < > p4 [ 614.995932][T11736] loop7: p4 size 8388608 extends beyond EOD, truncated [ 616.443165][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 616.541253][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 616.615039][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.716050][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.754323][T11759] mmap: syz.8.1404 (11759) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 616.990064][T11762] loop8: detected capacity change from 0 to 256 [ 616.998765][T11762] FAT-fs (loop8): Unrecognized mount option "utg8=0" or missing value [ 617.563250][ T2930] bond0 (unregistering): Released all slaves [ 617.755573][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.766387][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.777216][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.788028][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.798105][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.809166][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.838539][T11399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.847688][T11746] netlink: 'syz.7.1400': attribute type 1 has an invalid length. [ 617.873495][T11746] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 617.907145][T11747] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 618.022997][T11748] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 618.246334][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1400'. [ 618.372134][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.385808][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.396729][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.420039][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.478278][T11399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.521942][T11399] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.533304][T11399] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.542184][T11399] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.551091][T11399] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.684317][T11785] loop8: detected capacity change from 0 to 256 [ 618.809904][T11785] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 619.019741][T11791] loop7: detected capacity change from 0 to 256 [ 619.032932][T11791] FAT-fs (loop7): Unrecognized mount option "utg8=0" or missing value [ 619.034469][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.120571][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.300899][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.349815][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.449109][ T9491] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 619.475350][ T9491] FAT-fs (loop8): Filesystem has been set read-only [ 619.510768][ T9491] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 619.871666][T11807] netlink: 'syz.7.1417': attribute type 1 has an invalid length. [ 620.990193][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1417'. [ 621.183759][ T2974] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.215762][ T2974] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.369193][ T2974] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.411321][ T2974] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.621527][ T2974] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.666440][ T2974] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.878560][ T2974] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.899606][ T2974] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 622.290270][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 622.301478][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 622.311204][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 622.320136][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 622.350187][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 622.357904][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 624.087412][T11869] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 624.386135][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1430'. [ 624.426769][ T5783] Bluetooth: hci0: command tx timeout [ 624.515381][T11849] chnl_net:caif_netlink_parms(): no params data found [ 624.995887][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.005857][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.084801][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1433'. [ 625.178256][T11849] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.187699][T11849] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.200694][T11849] bridge_slave_0: entered allmulticast mode [ 625.221333][T11849] bridge_slave_0: entered promiscuous mode [ 625.486953][T11849] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.494138][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.508605][T11849] bridge_slave_1: entered allmulticast mode [ 625.516041][T11849] bridge_slave_1: entered promiscuous mode [ 625.637802][T11849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.696891][T11849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.907663][T11849] team0: Port device team_slave_0 added [ 625.916547][T11849] team0: Port device team_slave_1 added [ 625.969518][ T2974] hsr_slave_0: left promiscuous mode [ 625.990440][ T2974] hsr_slave_1: left promiscuous mode [ 626.010206][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.027088][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.047743][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.055393][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.072837][ T2974] bridge_slave_1: left allmulticast mode [ 626.087013][ T2974] bridge_slave_1: left promiscuous mode [ 626.098487][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.203387][ T2974] bridge_slave_0: left allmulticast mode [ 626.226708][ T2974] bridge_slave_0: left promiscuous mode [ 626.232642][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.310364][ T2974] veth1_macvtap: left promiscuous mode [ 626.316263][ T2974] veth0_macvtap: left promiscuous mode [ 626.332418][ T2974] veth1_vlan: left promiscuous mode [ 626.340359][ T2974] veth0_vlan: left promiscuous mode [ 626.516932][ T5783] Bluetooth: hci0: command tx timeout [ 626.765869][ T2974] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 626.852601][ T2974] bond3 (unregistering): Released all slaves [ 626.909949][ T2974] bond2 (unregistering): Released all slaves [ 626.952389][ T2974] bond1 (unregistering): Released all slaves [ 628.588693][ T5783] Bluetooth: hci0: command tx timeout [ 628.691680][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 628.790456][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 628.893824][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.998949][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.335050][T11937] loop7: detected capacity change from 0 to 512 [ 630.403381][ T2974] bond0 (unregistering): Released all slaves [ 630.683761][ T5783] Bluetooth: hci0: command tx timeout [ 630.807914][T11849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.815254][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.841753][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.871991][T11849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.907830][T11849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.915151][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.941194][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.982663][T11849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.042872][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1449'. [ 631.052210][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1449'. [ 631.171733][T11962] overlayfs: failed to clone upperpath [ 631.259959][T11849] hsr_slave_0: entered promiscuous mode [ 631.297358][T11849] hsr_slave_1: entered promiscuous mode [ 631.336175][T11849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.354551][T11849] Cannot create hsr debugfs directory [ 632.161893][ T2974] IPVS: stop unused estimator thread 0... [ 634.426363][T11996] loop9: detected capacity change from 0 to 128 [ 635.139195][T11849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 635.160818][T11849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 635.175736][T11849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 635.200834][T11849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 636.203465][T11849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.226374][T11849] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.275920][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.283192][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.372269][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.379674][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.504533][T11849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.096248][T12044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1466'. [ 637.105701][T12044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1466'. [ 637.115623][T12043] netlink: 'syz.9.1470': attribute type 1 has an invalid length. [ 637.285115][T11849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.293943][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1470'. [ 637.468705][T11849] veth0_vlan: entered promiscuous mode [ 637.516053][T11849] veth1_vlan: entered promiscuous mode [ 637.623375][T11849] veth0_macvtap: entered promiscuous mode [ 637.665514][T11849] veth1_macvtap: entered promiscuous mode [ 637.722689][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.750140][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.781161][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.813365][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.833863][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.863460][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.896416][T11849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.932918][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.961058][T12058] loop9: detected capacity change from 0 to 2048 [ 637.976747][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.997280][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.026706][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.048308][T11849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.075363][T11849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.091862][T12058] loop9: p1 < > p4 [ 638.124488][T11849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.135140][T12058] loop9: p4 size 8388608 extends beyond EOD, truncated [ 638.155808][T11849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.177776][T11849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.475429][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.507614][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.525817][ T8330] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 638.605143][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.620785][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.660793][ T8198] udevd[8198]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 638.697355][ T8330] udevd[8330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 638.725722][T12067] loop9: detected capacity change from 0 to 512 [ 639.838665][T12084] netlink: 'syz.9.1478': attribute type 1 has an invalid length. [ 640.023726][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1478'. [ 640.381975][T12099] loop9: detected capacity change from 0 to 128 [ 641.086060][T12113] loop1: detected capacity change from 0 to 512 [ 641.197014][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1481'. [ 641.206490][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1481'. [ 641.583793][ T8198] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 642.345888][T12130] netlink: 'syz.5.1490': attribute type 1 has an invalid length. [ 642.754255][T12145] loop7: detected capacity change from 0 to 128 [ 642.789171][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1490'. [ 643.210592][T12160] loop9: detected capacity change from 0 to 512 [ 644.393317][T12175] netlink: 'syz.9.1504': attribute type 1 has an invalid length. [ 644.685998][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1497'. [ 644.745353][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1497'. [ 644.781817][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1504'. [ 646.041412][T12219] overlayfs: failed to clone upperpath [ 646.132000][T12222] i2c i2c-0: new_device: Missing parameters [ 647.687914][T12259] i2c i2c-0: new_device: Missing parameters [ 648.389457][T12286] loop9: detected capacity change from 0 to 512 [ 648.427650][T12291] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 648.904147][T12306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1537'. [ 648.935699][T12306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1537'. [ 650.328670][T12332] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 650.487038][T12332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1549'. [ 650.763154][T12345] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 651.372513][T12366] netlink: 'syz.9.1559': attribute type 1 has an invalid length. [ 651.478936][T12366] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1559'. [ 651.766072][T12378] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1558'. [ 651.796916][T12378] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1558'. [ 651.887394][T12383] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 652.048802][T12387] tmpfs: Bad value for 'mpol' [ 652.303925][T12398] netlink: 'syz.9.1568': attribute type 1 has an invalid length. [ 652.567836][T12398] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1568'. [ 653.077640][T12422] loop1: detected capacity change from 0 to 128 [ 653.085382][T12422] FAT-fs (loop1): Unrecognized mount option "dis#ícard" or missing value [ 653.144061][ T8330] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 653.219621][ T28] audit: type=1326 audit(1785242558.979:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12424 comm="syz.9.1575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6c39de99 code=0x7ffc0000 [ 653.280296][ T28] audit: type=1326 audit(1785242558.979:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12424 comm="syz.9.1575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6c39de99 code=0x7ffc0000 [ 653.331891][ T28] audit: type=1326 audit(1785242558.979:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12424 comm="syz.9.1575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6c39de99 code=0x7ffc0000 [ 653.386733][ T28] audit: type=1326 audit(1785242558.979:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12424 comm="syz.9.1575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6c39de99 code=0x7ffc0000 [ 653.487935][ T28] audit: type=1326 audit(1785242558.979:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12424 comm="syz.9.1575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b6c39de99 code=0x7ffc0000 [ 653.492741][T12434] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1578'. [ 653.512423][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.564947][T12437] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1579'. [ 653.578451][ T28] audit: type=1326 audit(1785242558.979:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12424 comm="syz.9.1575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6c39de99 code=0x7ffc0000 [ 653.654237][ T28] audit: type=1326 audit(1785242558.979:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12424 comm="syz.9.1575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6c39de99 code=0x7ffc0000 [ 653.747004][ T28] audit: type=1326 audit(1785242558.979:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12424 comm="syz.9.1575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6c39de99 code=0x7ffc0000 [ 653.799061][ T28] audit: type=1326 audit(1785242558.979:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12424 comm="syz.9.1575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6c39de99 code=0x7ffc0000 [ 653.872971][ T28] audit: type=1326 audit(1785242558.979:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12424 comm="syz.9.1575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9b6c39de99 code=0x7ffc0000 [ 653.898435][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.906193][T12448] netlink: 'syz.5.1582': attribute type 1 has an invalid length. [ 654.349413][T12449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 654.358752][T12449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 654.374470][T12463] 9pnet_fd: Insufficient options for proto=fd [ 654.574487][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1582'. [ 654.966960][T12474] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1589'. [ 655.009557][T12476] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1590'. [ 655.072794][T12480] loop1: detected capacity change from 0 to 128 [ 655.268564][T12487] netlink: 'syz.9.1595': attribute type 1 has an invalid length. [ 655.685442][T12487] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1595'. [ 656.080772][T12505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 656.090495][T12505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 656.099719][T12504] 9pnet_fd: Insufficient options for proto=fd [ 656.476939][T12514] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1601'. [ 656.505980][T12519] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1603'. [ 657.082423][T12539] netlink: 'syz.7.1608': attribute type 1 has an invalid length. [ 657.547111][T12558] 9pnet_fd: Insufficient options for proto=fd [ 657.653189][T11882] IPVS: starting estimator thread 0... [ 657.848469][T12559] IPVS: using max 17 ests per chain, 40800 per kthread [ 658.346077][T12571] loop1: detected capacity change from 0 to 512 [ 658.401992][T12571] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 658.469357][T12571] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 658.488969][T12571] EXT4-fs (loop1): mount failed [ 658.842683][T12588] netlink: 'syz.7.1621': attribute type 1 has an invalid length. [ 659.536796][T12615] 9pnet_fd: Insufficient options for proto=fd [ 659.545215][T12615] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 659.591611][ T23] IPVS: starting estimator thread 0... [ 659.699332][T12616] IPVS: using max 17 ests per chain, 40800 per kthread [ 660.473864][T12628] netlink: 'syz.9.1633': attribute type 1 has an invalid length. [ 660.662313][T12628] __nla_validate_parse: 3 callbacks suppressed [ 660.662366][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1633'. [ 660.951021][T12645] kvm: kvm [12644]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 660.971053][T12645] kvm: kvm [12644]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 661.233475][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1642'. [ 661.652554][T12675] netlink: 'syz.7.1645': attribute type 1 has an invalid length. [ 661.832972][T12689] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1645'. [ 661.896495][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1652'. [ 663.218110][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1661'. [ 663.377955][T12747] netlink: 'syz.9.1664': attribute type 1 has an invalid length. [ 663.661948][T12747] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1664'. [ 664.312848][T12778] tmpfs: Bad value for 'mpol' [ 664.375637][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1672'. [ 665.064792][T12815] fuse: Bad value for 'fd' [ 665.325368][T12822] tmpfs: Bad value for 'mpol' [ 665.590175][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1685'. [ 666.324034][T12858] tmpfs: Bad value for 'mpol' [ 666.743171][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1692'. [ 667.153185][T12865] netlink: 'syz.5.1694': attribute type 1 has an invalid length. [ 667.463208][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1696'. [ 667.500250][T12875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1694'. [ 667.672664][T12892] tmpfs: Bad value for 'mpol' [ 668.403836][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1705'. [ 669.388267][T12928] netlink: 'syz.9.1711': attribute type 1 has an invalid length. [ 669.453120][T12932] tmpfs: Bad value for 'mpol' [ 669.550302][T12928] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1711'. [ 670.159153][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1717'. [ 670.982055][T12979] netlink: 'syz.1.1724': attribute type 1 has an invalid length. [ 671.013188][T12981] loop7: detected capacity change from 0 to 256 [ 671.353364][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1724'. [ 671.998901][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 672.521696][T13014] loop9: detected capacity change from 0 to 128 [ 672.893235][T13030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.121607][T13038] netlink: 'syz.7.1738': attribute type 1 has an invalid length. [ 673.305035][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1738'. [ 673.595322][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1742'. [ 674.379104][T13063] loop9: detected capacity change from 0 to 128 [ 675.450960][T13095] netlink: 'syz.7.1752': attribute type 1 has an invalid length. [ 675.772209][T13095] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1752'. [ 675.858292][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1753'. [ 676.811777][T13131] loop7: detected capacity change from 0 to 128 [ 678.923681][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1765'. [ 681.748501][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1788'. [ 684.674284][T13366] overlay: Unknown parameter '\' [ 684.897556][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'. [ 685.001295][T13379] netlink: 1624 bytes leftover after parsing attributes in process `syz.9.1823'. [ 685.226021][T13387] loop7: detected capacity change from 0 to 512 [ 685.272515][T13387] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 685.320055][T13387] EXT4-fs warning (device loop7): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 685.346027][T13387] EXT4-fs (loop7): mount failed [ 685.544718][ T8330] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 686.252216][T13424] Illegal XDP return value 4294967294 on prog (id 95) dev N/A, expect packet loss! [ 686.433040][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.444381][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.955918][T13453] netlink: 'syz.5.1842': attribute type 4 has an invalid length. [ 687.051724][T13453] netlink: 'syz.5.1842': attribute type 4 has an invalid length. [ 687.124781][T13459] loop9: detected capacity change from 0 to 512 [ 687.199928][T13459] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 687.295352][T13459] EXT4-fs warning (device loop9): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 687.352188][T13459] EXT4-fs (loop9): mount failed [ 688.163882][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1845'. [ 689.759919][T13521] loop9: detected capacity change from 0 to 512 [ 689.797865][T13521] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 689.932748][T13521] EXT4-fs warning (device loop9): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 689.975389][T13521] EXT4-fs (loop9): mount failed [ 690.154186][T13540] 9pnet: p9_errstr2errno: server reported unknown error ./file0/ [ 690.824556][T13564] fuse: Bad value for 'fd' [ 690.983487][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1864'. [ 691.138497][T13573] overlayfs: failed to clone upperpath [ 692.112657][T13607] loop9: detected capacity change from 0 to 512 [ 692.144844][T13607] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 692.184975][T13607] EXT4-fs warning (device loop9): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 692.232598][T13607] EXT4-fs (loop9): mount failed [ 692.452096][T13619] overlayfs: failed to clone upperpath [ 694.297757][T13676] loop7: detected capacity change from 0 to 512 [ 694.319420][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1890'. [ 694.375920][T13676] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 694.407942][T13676] EXT4-fs warning (device loop7): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 694.430360][T13676] EXT4-fs (loop7): mount failed [ 694.488049][ T8330] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 695.010444][T13701] overlayfs: failed to clone upperpath [ 695.904750][T13733] overlayfs: failed to clone upperpath [ 696.698679][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 697.423237][T13771] overlayfs: failed to clone upperpath [ 697.450969][T13776] fuse: Bad value for 'fd' [ 698.186077][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1932'. [ 698.953549][T13813] overlayfs: failed to clone upperpath [ 699.004380][T13816] team0: Port device bridge0 added [ 699.076205][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1937'. [ 699.125569][T13816] bridge_slave_0: entered promiscuous mode [ 699.328913][T13829] loop7: detected capacity change from 0 to 512 [ 699.341949][T13829] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 699.755040][T13843] program syz.7.1945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 699.817981][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'. [ 700.643803][T13851] overlayfs: failed to clone upperpath [ 702.307005][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1957'. [ 703.015121][T13892] overlayfs: failed to clone upperpath [ 704.806825][T13940] overlayfs: failed to clone upperpath [ 704.907688][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1971'. [ 705.874679][T13956] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.1979'. [ 706.164640][T13969] overlayfs: failed to clone upperpath [ 706.688913][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1985'. [ 707.455567][T13995] netlink: 1688 bytes leftover after parsing attributes in process `syz.9.1990'. [ 707.755764][T14009] overlayfs: failed to clone upperpath [ 708.039232][T14020] loop9: detected capacity change from 0 to 512 [ 708.065117][T14020] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 708.170952][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1997'. [ 708.982469][T14034] netlink: 'syz.9.2000': attribute type 72 has an invalid length. [ 708.990661][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 709.295698][T14054] overlayfs: failed to clone upperpath [ 709.655201][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2007'. [ 709.871379][T14069] netlink: 'syz.5.2012': attribute type 72 has an invalid length. [ 710.569431][T14091] overlayfs: failed to clone upperpath [ 710.819896][T14102] netlink: 'syz.5.2021': attribute type 72 has an invalid length. [ 712.016297][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'. [ 712.050109][T14123] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 712.434996][T14151] overlayfs: failed to clone upperpath [ 712.716511][T14163] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.2031'. [ 712.742579][T14165] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.779352][T14165] bridge0: entered allmulticast mode [ 712.907075][T14169] bridge_slave_0: left allmulticast mode [ 712.937315][T14169] bridge_slave_0: left promiscuous mode [ 713.030257][T14169] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.971086][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2038'. [ 714.005287][T14189] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 714.250925][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'. [ 714.614749][T14207] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2044'. [ 714.631311][T14209] sg_read: process 417 (syz.9.2045) changed security contexts after opening file descriptor, this is not allowed. [ 715.379703][T14231] loop9: detected capacity change from 0 to 512 [ 715.409854][T14231] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 715.649182][T14239] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.2054'. [ 715.828892][T14245] loop7: detected capacity change from 0 to 256 [ 717.472648][T14283] 9pnet_fd: Insufficient options for proto=fd [ 717.480473][T14283] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 718.154580][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2065'. [ 718.727061][T14321] loop9: detected capacity change from 0 to 512 [ 720.265577][T14352] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2076'. [ 720.275082][T14352] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2076'. [ 722.168748][T14392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2086'. [ 722.178355][T14392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2086'. [ 723.169622][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2087'. [ 724.098175][T14435] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2098'. [ 724.109589][T14435] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2098'. [ 725.477660][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2105'. [ 725.962470][T14477] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2112'. [ 725.972410][T14477] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2112'. [ 727.588582][T14513] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2124'. [ 727.598718][T14513] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2124'. [ 728.359022][T14521] program syz.9.2127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 729.256232][T14554] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2135'. [ 729.266161][T14554] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2135'. [ 730.452666][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2136'. [ 731.264757][T14591] loop9: detected capacity change from 0 to 512 [ 731.387003][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2147'. [ 731.396489][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2147'. [ 732.422631][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2152'. [ 734.397258][T14645] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2159'. [ 734.407183][T14645] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2159'. [ 735.562335][T14655] loop9: detected capacity change from 0 to 128 [ 735.602069][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 735.943211][T14669] loop9: detected capacity change from 0 to 512 [ 736.402573][T14678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2170'. [ 736.412647][T14678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2170'. [ 738.019002][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2174'. [ 740.098347][T14729] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2183'. [ 740.109726][T14729] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2183'. [ 741.469015][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2188'. [ 741.829083][T14753] overlayfs: failed to clone upperpath [ 742.264681][T14767] loop7: detected capacity change from 0 to 512 [ 742.564163][T14769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2193'. [ 742.573700][T14769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2193'. [ 745.362289][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 746.958945][T14815] netlink: 'syz.5.2206': attribute type 4 has an invalid length. [ 747.874291][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.888092][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.022208][T14846] loop7: detected capacity change from 0 to 2048 [ 751.354480][T14896] loop9: detected capacity change from 0 to 2048 [ 758.800462][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 758.817846][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 758.850379][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 758.872682][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 758.881392][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 758.890990][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 758.956989][T10795] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 759.151958][T15013] loop7: detected capacity change from 0 to 2048 [ 759.180339][T10795] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.209206][T10795] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.272301][T10795] usb 10-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 759.307094][T10795] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.342174][T10795] usb 10-1: Product: syz [ 759.381449][T10795] usb 10-1: Manufacturer: syz [ 759.386470][T10795] usb 10-1: SerialNumber: syz [ 759.700477][T14976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.826773][T10795] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 759.872334][T14976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.895008][T10795] usb 10-1: MIDIStreaming interface descriptor not found [ 760.052793][T15004] chnl_net:caif_netlink_parms(): no params data found [ 760.127075][T10795] usb 10-1: USB disconnect, device number 2 [ 760.395609][T14976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.628480][T14976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.730482][T15004] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.760371][T15004] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.794273][T15004] bridge_slave_0: entered allmulticast mode [ 760.815756][T15004] bridge_slave_0: entered promiscuous mode [ 760.838149][T15004] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.855759][T15004] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.863720][T15004] bridge_slave_1: entered allmulticast mode [ 760.875033][T15004] bridge_slave_1: entered promiscuous mode [ 760.914656][T10795] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 760.997221][ T5788] Bluetooth: hci3: command tx timeout [ 761.198426][T15004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.216791][T10795] usb 10-1: Using ep0 maxpacket: 16 [ 761.228266][T10795] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.243910][T15004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.257145][T10795] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.288554][T10795] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.329996][T10795] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.358980][T10795] usb 10-1: Product: syz [ 761.367034][T10795] usb 10-1: Manufacturer: syz [ 761.376445][T10795] usb 10-1: SerialNumber: syz [ 761.389661][T15004] team0: Port device team_slave_0 added [ 761.426073][T15004] team0: Port device team_slave_1 added [ 761.628751][T10795] usb 10-1: 0:2 : does not exist [ 761.653469][T10795] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 761.753187][T10795] usb 10-1: USB disconnect, device number 3 [ 761.790598][T15004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.821000][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.857835][T15004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.909815][T15004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.079706][T15004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.127540][T15004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.163646][T15004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.989875][T15004] hsr_slave_0: entered promiscuous mode [ 763.082563][T15004] hsr_slave_1: entered promiscuous mode [ 763.125465][T15004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.152775][ T5788] Bluetooth: hci3: command tx timeout [ 763.165288][T15004] Cannot create hsr debugfs directory [ 763.517674][T11775] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 763.533032][T15100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2265'. [ 763.545551][T15100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2265'. [ 763.776841][T11775] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.794950][T11775] usb 8-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 763.826680][T11775] usb 8-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 763.875896][T11775] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 763.910251][T11775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.922558][T11775] usb 8-1: Product: syz [ 763.936749][T11775] usb 8-1: Manufacturer: syz [ 763.946910][T11775] usb 8-1: SerialNumber: syz [ 763.962730][T11775] usb-storage 8-1:1.0: USB Mass Storage device detected [ 764.022356][T11775] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 764.065362][T11775] scsi host1: usb-storage 8-1:1.0 [ 764.246190][ T5820] usb 8-1: USB disconnect, device number 2 [ 764.417332][T15120] loop9: detected capacity change from 0 to 2048 [ 765.316872][ T5788] Bluetooth: hci3: command tx timeout [ 765.709965][T15133] syzkaller0: entered promiscuous mode [ 765.727146][T15133] syzkaller0: entered allmulticast mode [ 766.184357][T15156] loop7: detected capacity change from 0 to 2048 [ 766.295136][T15156] loop7: detected capacity change from 0 to 1024 [ 766.302338][T14976] hsr_slave_0: left promiscuous mode [ 766.309009][T14976] hsr_slave_1: left promiscuous mode [ 766.325250][T14976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.435447][T14976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.558195][T14976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.732516][T14976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.156281][T14976] bridge_slave_1: left allmulticast mode [ 767.170199][T14976] bridge_slave_1: left promiscuous mode [ 767.183790][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.225173][T15173] loop9: detected capacity change from 0 to 512 [ 767.241415][T14976] bridge_slave_0: left allmulticast mode [ 767.258953][T14976] bridge_slave_0: left promiscuous mode [ 767.279499][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.304566][ T8198] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 767.429521][ T5788] Bluetooth: hci3: command tx timeout [ 767.741760][T14976] veth1_macvtap: left promiscuous mode [ 767.853351][T14976] veth0_macvtap: left promiscuous mode [ 768.032334][T14976] veth1_vlan: left promiscuous mode [ 768.164876][T14976] veth0_vlan: left promiscuous mode [ 768.353622][T15187] overlayfs: failed to resolve './bus': -2 [ 768.383491][T15187] overlayfs: overlapping lowerdir path [ 768.614625][T14976] bond3 (unregistering): Released all slaves [ 768.660368][T14976] bond2 (unregistering): Released all slaves [ 768.718527][T14976] bond1 (unregistering): Released all slaves [ 768.763213][T15197] loop9: detected capacity change from 0 to 2048 [ 768.881340][ T8330] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 769.035720][T15197] loop9: detected capacity change from 0 to 1024 [ 769.155413][ T8330] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 770.247970][T15219] overlayfs: failed to resolve './bus': -2 [ 770.280385][T15219] overlayfs: overlapping lowerdir path [ 770.608826][T15229] loop7: detected capacity change from 0 to 2048 [ 770.678855][T15229] loop7: detected capacity change from 0 to 1024 [ 770.887309][ T5818] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 770.963365][T14976] team0 (unregistering): Port device team_slave_1 removed [ 771.151637][ T5818] usb 10-1: Using ep0 maxpacket: 16 [ 771.247095][ T5818] usb 10-1: unable to get BOS descriptor or descriptor too short [ 771.355585][ T5818] usb 10-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 771.408667][ T5818] usb 10-1: config 1 interface 0 has no altsetting 0 [ 771.419130][T14976] team0 (unregistering): Port device team_slave_0 removed [ 771.439192][ T5818] usb 10-1: New USB device found, idVendor=045e, idProduct=0732, bcdDevice= 0.40 [ 771.460882][ T5818] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.500163][ T5818] usb 10-1: Product: syz [ 771.504664][ T5818] usb 10-1: Manufacturer: syz [ 771.512854][ T5818] usb 10-1: SerialNumber: syz [ 771.635785][T14976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.766736][T14976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.226285][ T5818] usbhid 10-1:1.0: can't add hid device: -71 [ 772.236063][ T5818] usbhid: probe of 10-1:1.0 failed with error -71 [ 772.257954][ T5818] usb 10-1: USB disconnect, device number 4 [ 772.431827][ T23] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 772.570239][T14976] bond0 (unregistering): Released all slaves [ 772.674547][ T23] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.685262][ T23] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 772.703859][ T23] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 772.714342][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.722914][ T23] usb 8-1: Product: syz [ 772.727290][ T23] usb 8-1: Manufacturer: syz [ 772.731943][ T23] usb 8-1: SerialNumber: syz [ 772.759393][ T23] usb-storage 8-1:1.0: USB Mass Storage device detected [ 772.781855][ T23] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 772.855442][ T23] scsi host1: usb-storage 8-1:1.0 [ 773.008735][T15167] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2282'. [ 773.021099][T15167] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2282'. [ 773.057601][ T23] usb 8-1: USB disconnect, device number 3 [ 773.475569][T15004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 773.550515][T15004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 774.257790][T15004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 774.349648][T15004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 774.424406][T14976] IPVS: stop unused estimator thread 0... [ 774.678218][T15004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.740648][T15004] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.908374][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.915823][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.012175][T14967] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.019597][T14967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.391927][T15283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2316'. [ 775.402003][T15283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2316'. [ 775.748702][T15004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 776.522937][T15004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.678916][T15004] veth0_vlan: entered promiscuous mode [ 776.730107][T15004] veth1_vlan: entered promiscuous mode [ 776.787185][T11775] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 776.829791][T15004] veth0_macvtap: entered promiscuous mode [ 776.872478][T15004] veth1_macvtap: entered promiscuous mode [ 776.940281][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.981322][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.984854][T15325] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 777.003299][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.041787][T15325] CIFS: Attempting to mount //127.0.0.1/share [ 777.055533][T15325] CIFS: VFS: Error connecting to socket. Aborting operation. [ 777.074543][T11775] usb 10-1: config 0 has no interfaces? [ 777.076730][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.084482][T11775] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 777.101833][T15325] CIFS: VFS: cifs_mount failed w/return code = -101 [ 777.107460][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.130502][T11775] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.135015][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.159297][T11775] usb 10-1: config 0 descriptor?? [ 777.192019][T15004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.240086][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.284451][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.324863][T15004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.366926][T15004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.389162][T15004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.410674][T15004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.430230][T11775] usb 10-1: USB disconnect, device number 5 [ 777.457694][T15004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.479878][T15004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.516801][T15004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.793572][T15332] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2324'. [ 777.802971][T15332] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2324'. [ 777.963348][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.053343][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.190563][T14976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.225266][T14976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.727970][T15361] scsi_dev_info_list_add_str: bad dev info string 'vendor' '' '(null)' [ 778.836756][ T23] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 779.082735][ T23] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 779.133320][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.205565][ T23] usb 10-1: Product: syz [ 779.233309][ T23] usb 10-1: Manufacturer: syz [ 779.299444][ T23] usb 10-1: SerialNumber: syz [ 779.442577][ T23] usb 10-1: config 0 descriptor?? [ 779.708490][T11882] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 779.842452][ T23] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 779.986927][ T5820] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 780.011504][T11882] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 780.026826][T11882] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 780.036011][T11882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.070323][T11882] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 780.328802][T15395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2337'. [ 780.338379][T15395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2337'. [ 780.840644][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.879996][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.920489][ T5820] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 780.966862][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.007335][ T5820] usb 1-1: config 0 descriptor?? [ 781.157800][T11882] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 781.185756][T11882] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 781.199000][T11882] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 781.223536][T11882] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 781.257037][T11882] usb 8-1: USB disconnect, device number 4 [ 781.363727][ T23] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 781.385531][ T23] usb 10-1: USB disconnect, device number 6 [ 781.470960][ T5820] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x2 [ 781.531320][ T5820] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 782.032925][ T5820] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 782.071151][ T5820] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 782.256279][ T5820] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71 [ 782.271521][ T5820] usb 1-1: USB disconnect, device number 2 [ 785.293428][T15513] CIFS: Attempting to mount //127.0.0.1/share [ 785.500656][T11882] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 785.608813][T15521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2373'. [ 785.922962][T15521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2373'. [ 786.047962][T15513] CIFS: VFS: \\127.0.0.1 Error -32 sending data on socket to server [ 786.066083][T15513] ------------[ cut here ]------------ [ 786.072525][T15513] WARNING: CPU: 0 PID: 15513 at fs/smb/client/smb2ops.c:97 smb2_add_credits+0x1365/0x2600 [ 786.078016][T11882] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 786.084273][T15513] Modules linked in: [ 786.093398][T11882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.098461][T15513] CPU: 0 PID: 15513 Comm: syz.0.2372 Not tainted syzkaller #0 [ 786.116323][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 786.129858][T15513] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 786.138667][T15513] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 55 b4 3c ff 49 8b 34 24 48 c7 c7 20 20 f7 8a e8 75 15 de 07 e9 eb f9 ff ff e8 bb 36 e4 fe <0f> 0b e9 d9 ef ff ff e8 af 36 e4 fe c6 05 0d c3 d3 0b 01 48 c7 c7 [ 786.170584][T15513] RSP: 0018:ffffc9000393f400 EFLAGS: 00010283 [ 786.179233][T15513] RAX: ffffffff82a33e15 RBX: ffff88807cd262c0 RCX: 0000000000080000 [ 786.188747][T15513] RDX: ffffc9000f92a000 RSI: 000000000003f46d RDI: 000000000003f46e [ 786.197299][T15513] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 786.205774][T15513] R10: dffffc0000000000 R11: fffff52000727e70 R12: 1ffff1100f9a4c58 [ 786.214081][T15513] R13: dffffc0000000000 R14: ffff88807cd26000 R15: 0000000000000000 [ 786.222881][T15513] FS: 00007f350c8096c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 786.233272][T15513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.240255][T15513] CR2: 00007f9b6d224ff8 CR3: 0000000024fef000 CR4: 00000000003506f0 [ 786.248479][T15513] Call Trace: [ 786.251971][T15513] [ 786.255136][T15513] compound_send_recv+0x1254/0x3040 [ 786.260563][T15513] ? cifs_pick_channel+0x320/0x320 [ 786.265835][T15513] ? lock_chain_count+0x20/0x20 [ 786.271267][T15513] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 786.277286][T15513] ? cifs_strtoUTF16+0x30e/0x3f0 [ 786.282655][T15513] ? mutex_unlock+0x10/0x10 [ 786.287484][T15513] ? cifs_mapchar+0x380/0x380 [ 786.292217][T15513] cifs_send_recv+0x40/0x50 [ 786.297116][T15513] SMB2_negotiate+0x16b5/0x4270 [ 786.302214][T15513] ? smb3_encryption_required+0x2f0/0x2f0 [ 786.308122][T15513] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 786.314911][T15513] ? lockdep_hardirqs_on+0x98/0x150 [ 786.320875][T15513] cifs_negotiate_protocol+0x27a/0x670 [ 786.326863][T15513] cifs_get_smb_ses+0x8d6/0x1b00 [ 786.332422][T15513] cifs_mount_get_session+0xef/0x440 [ 786.338161][T15513] dfs_mount_share+0x1e9/0x7b0 [ 786.343145][T15513] cifs_mount+0xbc/0x650 [ 786.349985][T15513] ? __rwlock_init+0x150/0x150 [ 786.355676][T15513] ? cifs_is_path_remote+0x6f0/0x6f0 [ 786.361599][T15513] ? do_raw_spin_unlock+0x121/0x230 [ 786.367364][T15513] ? smb3_update_mnt_flags+0x52f/0xc10 [ 786.373003][T15513] ? cifs_setup_cifs_sb+0x52f/0x840 [ 786.378728][T15513] cifs_smb3_do_mount+0x2e5/0x710 [ 786.383846][T15513] ? cifs_sb_deactive+0x80/0x80 [ 786.389115][T15513] ? __mutex_lock+0x30d/0xc80 [ 786.394132][T15513] smb3_get_tree+0x5a5/0xa90 [ 786.398970][T15513] vfs_get_tree+0x8c/0x280 [ 786.404378][T15513] vfs_cmd_create+0xe3/0x230 [ 786.409705][T15513] __se_sys_fsconfig+0x70a/0x850 [ 786.414890][T15513] ? __x64_sys_fsconfig+0xc0/0xc0 [ 786.420785][T15513] ? lockdep_hardirqs_on+0x98/0x150 [ 786.426053][T15513] ? __x64_sys_fsconfig+0x20/0xc0 [ 786.431785][T15513] do_syscall_64+0x55/0xb0 [ 786.437701][T15513] ? clear_bhb_loop+0x40/0x90 [ 786.442913][T15513] ? clear_bhb_loop+0x40/0x90 [ 786.447797][T15513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.454011][T15513] RIP: 0033:0x7f350b99de99 [ 786.458705][T15513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.479070][T15513] RSP: 002b:00007f350c809028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 786.487702][T15513] RAX: ffffffffffffffda RBX: 00007f350bc25fa0 RCX: 00007f350b99de99 [ 786.496086][T15513] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 786.504213][T15513] RBP: 00007f350ba33eaf R08: 0000000000000000 R09: 0000000000000000 [ 786.513320][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.521618][T15513] R13: 00007f350bc26038 R14: 00007f350bc25fa0 R15: 00007ffc1c71ad08 [ 786.530281][T15513] [ 786.533876][T15513] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 786.541435][T15513] CPU: 0 PID: 15513 Comm: syz.0.2372 Not tainted syzkaller #0 [ 786.548934][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 786.559635][T15513] Call Trace: [ 786.563038][T15513] [ 786.566006][T15513] dump_stack_lvl+0x18c/0x250 [ 786.570888][T15513] ? show_regs_print_info+0x20/0x20 [ 786.576312][T15513] ? load_image+0x420/0x420 [ 786.581236][T15513] panic+0x2ca/0x720 [ 786.585461][T15513] ? bpf_jit_dump+0xd0/0xd0 [ 786.590118][T15513] __warn+0x2e0/0x470 [ 786.594129][T15513] ? smb2_add_credits+0x1365/0x2600 [ 786.599434][T15513] ? smb2_add_credits+0x1365/0x2600 [ 786.604727][T15513] report_bug+0x2be/0x4f0 [ 786.609282][T15513] ? smb2_add_credits+0x1365/0x2600 [ 786.614582][T15513] ? smb2_add_credits+0x1365/0x2600 [ 786.619892][T15513] ? smb2_add_credits+0x1367/0x2600 [ 786.625208][T15513] handle_bug+0xcf/0x120 [ 786.629500][T15513] exc_invalid_op+0x1a/0x50 [ 786.634189][T15513] asm_exc_invalid_op+0x1a/0x20 [ 786.639063][T15513] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 786.645117][T15513] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 55 b4 3c ff 49 8b 34 24 48 c7 c7 20 20 f7 8a e8 75 15 de 07 e9 eb f9 ff ff e8 bb 36 e4 fe <0f> 0b e9 d9 ef ff ff e8 af 36 e4 fe c6 05 0d c3 d3 0b 01 48 c7 c7 [ 786.665802][T15513] RSP: 0018:ffffc9000393f400 EFLAGS: 00010283 [ 786.671973][T15513] RAX: ffffffff82a33e15 RBX: ffff88807cd262c0 RCX: 0000000000080000 [ 786.680152][T15513] RDX: ffffc9000f92a000 RSI: 000000000003f46d RDI: 000000000003f46e [ 786.688319][T15513] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 786.696509][T15513] R10: dffffc0000000000 R11: fffff52000727e70 R12: 1ffff1100f9a4c58 [ 786.705118][T15513] R13: dffffc0000000000 R14: ffff88807cd26000 R15: 0000000000000000 [ 786.713346][T15513] ? smb2_add_credits+0x1365/0x2600 [ 786.719196][T15513] compound_send_recv+0x1254/0x3040 [ 786.725126][T15513] ? cifs_pick_channel+0x320/0x320 [ 786.730381][T15513] ? lock_chain_count+0x20/0x20 [ 786.735260][T15513] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 786.741011][T15513] ? cifs_strtoUTF16+0x30e/0x3f0 [ 786.746664][T15513] ? mutex_unlock+0x10/0x10 [ 786.751622][T15513] ? cifs_mapchar+0x380/0x380 [ 786.756410][T15513] cifs_send_recv+0x40/0x50 [ 786.761135][T15513] SMB2_negotiate+0x16b5/0x4270 [ 786.766396][T15513] ? smb3_encryption_required+0x2f0/0x2f0 [ 786.772252][T15513] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 786.777925][T15513] ? lockdep_hardirqs_on+0x98/0x150 [ 786.783383][T15513] cifs_negotiate_protocol+0x27a/0x670 [ 786.789278][T15513] cifs_get_smb_ses+0x8d6/0x1b00 [ 786.794735][T15513] cifs_mount_get_session+0xef/0x440 [ 786.800349][T15513] dfs_mount_share+0x1e9/0x7b0 [ 786.805503][T15513] cifs_mount+0xbc/0x650 [ 786.809931][T15513] ? __rwlock_init+0x150/0x150 [ 786.814822][T15513] ? cifs_is_path_remote+0x6f0/0x6f0 [ 786.821014][T15513] ? do_raw_spin_unlock+0x121/0x230 [ 786.827549][T15513] ? smb3_update_mnt_flags+0x52f/0xc10 [ 786.833124][T15513] ? cifs_setup_cifs_sb+0x52f/0x840 [ 786.838338][T15513] cifs_smb3_do_mount+0x2e5/0x710 [ 786.843565][T15513] ? cifs_sb_deactive+0x80/0x80 [ 786.848637][T15513] ? __mutex_lock+0x30d/0xc80 [ 786.853513][T15513] smb3_get_tree+0x5a5/0xa90 [ 786.858306][T15513] vfs_get_tree+0x8c/0x280 [ 786.863117][T15513] vfs_cmd_create+0xe3/0x230 [ 786.867821][T15513] __se_sys_fsconfig+0x70a/0x850 [ 786.872892][T15513] ? __x64_sys_fsconfig+0xc0/0xc0 [ 786.878278][T15513] ? lockdep_hardirqs_on+0x98/0x150 [ 786.883588][T15513] ? __x64_sys_fsconfig+0x20/0xc0 [ 786.888695][T15513] do_syscall_64+0x55/0xb0 [ 786.893247][T15513] ? clear_bhb_loop+0x40/0x90 [ 786.898073][T15513] ? clear_bhb_loop+0x40/0x90 [ 786.902802][T15513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.908808][T15513] RIP: 0033:0x7f350b99de99 [ 786.913237][T15513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.933443][T15513] RSP: 002b:00007f350c809028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 786.941936][T15513] RAX: ffffffffffffffda RBX: 00007f350bc25fa0 RCX: 00007f350b99de99 [ 786.950359][T15513] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 786.958361][T15513] RBP: 00007f350ba33eaf R08: 0000000000000000 R09: 0000000000000000 [ 786.966357][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.974432][T15513] R13: 00007f350bc26038 R14: 00007f350bc25fa0 R15: 00007ffc1c71ad08 [ 786.982702][T15513] [ 786.986075][T15513] Kernel Offset: disabled [ 786.990519][T15513] Rebooting in 86400 seconds..