last executing test programs: 3m26.143234185s ago: executing program 1 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x1, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240c0825}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000480)='0', 0x1, 0x40000, &(0x7f00000004c0)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) 3m25.267939825s ago: executing program 1 (id=301): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r1 = dup(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) 3m24.604209611s ago: executing program 1 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000004c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000600)=0x6a, 0x4) bind$inet(r1, &(0x7f0000000640)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000680)=0x1833, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto(r1, &(0x7f0000000780)="50fbdf12a30d7a4cb2c5c84948f3426077a9f0ca14af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a0000d4d39f0bbd0ed602050000000000002944de604d849a1e83a8c86f66470ae2e4c639a5", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000800)='}', 0x1) sendto$inet(r1, &(0x7f0000000840)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 3m23.672871993s ago: executing program 1 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000001df80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f000001dfc0), &(0x7f000001e000)='./file0\x00', 0x0, &(0x7f000001e040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 3m22.188499677s ago: executing program 1 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) 3m21.527998683s ago: executing program 1 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000400)=""/102392, 0x18ff8) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000019400)="ae", 0x1001, 0xffffffffffffffff) 3m21.087407004s ago: executing program 32 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000400)=""/102392, 0x18ff8) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000019400)="ae", 0x1001, 0xffffffffffffffff) 3m0.886882267s ago: executing program 4 (id=409): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m54.015791838s ago: executing program 4 (id=425): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) 2m49.963938703s ago: executing program 4 (id=434): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000080)=0x79, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x101, 0x4) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000004440)=ANY=[], 0x540) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000004480)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000004500)={0x14, 0x0, 0x40e, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000004540), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000004580), r1) 2m49.726036919s ago: executing program 4 (id=437): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000019}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 2m48.608493655s ago: executing program 4 (id=441): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) setns(0xc9, 0x10000000) ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000380)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f00000004c0)={0x28, 0x0, 0x0, @local}, 0x10) bind$vsock_stream(r3, &(0x7f0000000500)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.063096961s ago: executing program 4 (id=449): syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000014c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001540), 0x0, 0x0) read$msr(r3, &(0x7f0000001580)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 2m46.647458201s ago: executing program 33 (id=449): syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000014c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001540), 0x0, 0x0) read$msr(r3, &(0x7f0000001580)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 2m20.765879708s ago: executing program 5 (id=510): syz_io_uring_setup(0x141c, 0x0, 0x0, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit$UBLK(0x0, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x4004000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1) 2m18.5520862s ago: executing program 5 (id=515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xb8}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m16.408137261s ago: executing program 5 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)='#', 0x1}], 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) mkdir(&(0x7f0000000100)='./sys\x00', 0x191) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='01:3\'', 0x5) 2m15.470998202s ago: executing program 5 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add ', 0x4) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 2m15.16015945s ago: executing program 5 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000380)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000400)=@v2={0x2, @aes128, 0x10, '\x00', @c}) pipe2$watch_queue(&(0x7f0000000640)={0xffffffffffffffff}, 0x80) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000680)) getpid() socket$alg(0x26, 0x5, 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x80082, 0x2) write(r2, &(0x7f0000000540)='10', 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000440)={0x0, 0x7}) mkdirat(r0, &(0x7f0000000000)='./mnt\x00', 0x20) 2m13.375895842s ago: executing program 5 (id=529): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x7) syz_mount_image$nilfs2(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x40, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f00000006c0)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./bus\x00', 0x40942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000016c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001700), 0xfea7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001780)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001800), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001840), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001880)=0x6) copy_file_range(r1, &(0x7f00000018c0)=0xea7, r0, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r0, 0xc) 1m56.483820008s ago: executing program 34 (id=529): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x7) syz_mount_image$nilfs2(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x40, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f00000006c0)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./bus\x00', 0x40942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000016c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001700), 0xfea7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001780)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001800), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001840), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001880)=0x6) copy_file_range(r1, &(0x7f00000018c0)=0xea7, r0, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r0, 0xc) 40.054354581s ago: executing program 7 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4894) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000840)={'syzkaller0\x00', @random="2b0100004ec6"}) 33.537122054s ago: executing program 7 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4894) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000840)={'syzkaller0\x00', @random="2b0100004ec6"}) 25.021747223s ago: executing program 7 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4894) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000840)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.246724112s ago: executing program 6 (id=749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000a0000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcd, &(0x7f0000000340)=""/205, 0x41100}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000540)=[@increfs]}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000a40)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r5, &(0x7f0000000b00)='7', 0x1) getsockname$netlink(r5, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000b40)={0x1, 0x100000001, 0x2, 0x4000000000003, 0x4, 0x888, 0x0, 0x9}, 0x0, &(0x7f0000000b80)={0x0, 0x989680}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000005c0)=0x3, 0xac5) syz_clone3(&(0x7f0000000600)={0x23800000, &(0x7f0000000680)=0xffffffffffffffff, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x7, r6, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000800)=[@acquire]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000940)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x110a, 0x5}}, &(0x7f00000009c0)={0x0, 0x18, 0x30}}, 0x1000}]}) mkdir(0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 14.95509593s ago: executing program 2 (id=752): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f00000001c0)={[{@nobarrier}]}, 0xff, 0x49d, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fremovexattr(r1, &(0x7f0000000040)=@random={'user.', '$*$(.^A-\x00'}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) ioperm(0x4, 0x8, 0x5) timer_gettime(0x0, &(0x7f0000000340)) socket$alg(0x26, 0x5, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x6000, 0x778) r4 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) 13.386964986s ago: executing program 7 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4894) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000840)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.520254303s ago: executing program 2 (id=756): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x9f) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) 10.460110375s ago: executing program 6 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setns(0xffffffffffffffff, 0x64000000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='hist:', 0x5) 9.549108416s ago: executing program 6 (id=759): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07daf57ebcfa3fd03477"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x10}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000480)='./bus\x00', 0x0) r4 = syz_open_dev$media(&(0x7f00000004c0), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000500)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000540), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000580)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@verity_require}, {@verity_on}]}) preadv(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x6, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000680)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000006c0)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 9.499444907s ago: executing program 2 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 9.471255188s ago: executing program 3 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) setsockopt(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 9.400846809s ago: executing program 0 (id=762): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 8.360802304s ago: executing program 2 (id=763): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x400}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 8.349557465s ago: executing program 3 (id=764): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x32, 0x0, 0x1, 0xfffffffe}, 0x28) msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004000, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) io_setup(0x8, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000198c0)='./cifs\x00', 0x1ff) mount(&(0x7f0000019900)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000019940)='./cifs\x00', &(0x7f0000019980)='cifs\x00', 0x0, &(0x7f00000199c0)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs,witness\x00') 8.006342942s ago: executing program 6 (id=765): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x4a102) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r1 = socket(0x10, 0x2, 0x0) timerfd_create(0x8, 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) clock_adjtime(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000002c0)={0x4, 0x6, 0x2, {0x1, @pix={0x0, 0x0, 0x30324c4a, 0x3, 0x2, 0x1, 0x2, 0x6}}, 0xfffffe00}) write(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x400000000000ec0, 0x2, &(0x7f0000000280)={0x77359400}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 7.113682263s ago: executing program 0 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x40003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) fanotify_init(0x200, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lstat(&(0x7f00000005c0)='./file0/file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) 6.909830318s ago: executing program 3 (id=767): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5.668452917s ago: executing program 7 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4894) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000840)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.594676599s ago: executing program 0 (id=768): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfb, 0x6b0, &(0x7f0000000380)="$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") syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000a80)='./file0\x00', 0x3000000, &(0x7f0000000ac0), 0x4, 0x524, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000001040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000010c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001140)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000011c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001240)=0x6) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001280)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x2d, 0x1001, r5, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(r6, 0x22, 0x40001017, r5, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000012c0)=0x2d99, 0x4) add_key(&(0x7f0000001300)='asymmetric\x00', 0x0, &(0x7f0000001340)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035529030c2f", 0x3c, 0xfffffffffffffffc) connect$inet6(0xffffffffffffffff, &(0x7f0000001380)={0xa, 0x4e22, 0x107, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r1, r1, 0x7, 0x0, 0x0, 0xb, 0xfe, 0x18, 0x63aa, 0x56, 0x2, 0x5, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 3.170576136s ago: executing program 0 (id=769): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) listen(r2, 0x6) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xd, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000b00)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x32, 0xfffffffffffffeb6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000400)='bridge0\x00', 0x10) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.160244046s ago: executing program 2 (id=770): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0806011886dd06000009bbbbbbbb09bb0180c200000e"], 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280fa00090000000000a84896426b0297b1e91c90a4c047fb35897173d71ed8059c0a8b23456f2cb5ca"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r3 = socket$inet6_sctp(0xa, 0x94008d1befcee113, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x4e23, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e1f, 0x4, @loopback}}}, 0x108) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x700001b, 0x148, 0xe8, 0x148, 0x198, 0x206, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0xffffffff, 0xff, 'caif0\x00', 'wg0\x00', {}, {0xff}, 0x1d, 0x0, 0x78}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r4, &(0x7f00000024c0)=[{{&(0x7f0000000500)=@generic={0x23, "41ef70a6493f96548c6772e991d2e709da2174d41450df614c7b98d688e661a1b29a8c059b706bc70885b2ff0f4ead40bdbeb46337ca989e950ae12331f19267f8f0ea634b47a8030073e1ec94e2410ce8287e5487e11994c1fa84627b0281e74be1465e31017d6986fb97fcaeda121d2d887c410e05f321a441404adf67"}, 0x80, 0x0, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x13e0}}], 0x1, 0xc881) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000) 3.151095267s ago: executing program 3 (id=771): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) 3.141027226s ago: executing program 6 (id=772): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) 1.670816051s ago: executing program 2 (id=773): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000b40)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x5, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x14, r8, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa080002"], 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000702c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890c02"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, 0x0, 0x0) 1.222708792s ago: executing program 0 (id=774): sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0x10}, 0x8000) r0 = socket$nl_generic(0x11, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000340)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x400200, 0x0) fgetxattr(r5, &(0x7f00000003c0)=@known='system.sockprotoname\x00', 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000400)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(0x0, 0x190) mount$bpf(0x0, 0x0, &(0x7f0000000480), 0x10000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xff76, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x2c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 1.221450401s ago: executing program 3 (id=775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x10000, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a00)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, 0x0, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000040)="90909090909090909090909090909090c3", 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='tracefs\x00', &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./trace\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./trace/trace\x00', 0x101001, 0x0) write$tun(r5, &(0x7f0000000740)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @rand_addr=0x64010100, @broadcast, @private=0xa010101}}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/uprobe_events\x00', 0x2, 0x0) write(r6, &(0x7f0000000240)='p:s/p ./file0:0x0\n', 0x12) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/s/p/enable\x00', 0x2, 0x0) write(r7, &(0x7f00000002c0)='1\n', 0x2) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r4, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r8, 0x80, 0x7f0000800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$cont(0x9, r8, 0x0, 0x0) wait4(r8, 0x0, 0x0, 0x0) 179.191056ms ago: executing program 0 (id=776): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x40000000000032a, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/237, 0xed, 0x4eb) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bind$inet6(r4, &(0x7f0000000700)={0xa, 0x4e23, 0x4, @mcast1, 0x2}, 0x1c) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000740)="04", 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000780)=0x237a, 0x4) sendmmsg$inet6(r4, &(0x7f00000007c0), 0x0, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12141, 0x0) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x400, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r0}}) unlinkat(r0, &(0x7f0000000940)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000080c000000140001002001000000000000000000000000000114000200fc0200000000000000000000000000ff080018004e244e246ffec4d916392a7a6e2891e8abf79233117381b5776c9578aa91f225f6996e62f558043a171ee8f0f4c57f99f5f83a0728302f222775a798ce1096801ac34e0b952f68d7f2c20f1492c656e7e7fdedf2459d9aa9e8d7767e9044c5e532ef3d52116b50f6c4accc54b3668cdb"], 0x4c}}, 0x40000) sendmsg$nl_route(r5, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000001180)='net/anycast6\x00') r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, 0x0) 158.372946ms ago: executing program 6 (id=777): r0 = getpid() r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000940)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@resuid={'resuid', 0x3d, r2}}, {@bsdgroups}, {@nombcache}, {@nojournal_checksum}, {@dax_never}, {@grpid}]}, 0x1, 0x440, &(0x7f0000000d40)="$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") umount2(&(0x7f0000000a00)='./file0\x00', 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r4 = accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r5, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r8, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x14014) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x34, r5, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0xa}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x4}]}, 0x34}}, 0x4000811) connect(r4, &(0x7f0000000880)=@pptp={0x18, 0x2, {0x1, @private=0xa010101}}, 0x80) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r8, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000041}, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 55.366519ms ago: executing program 7 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4894) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000840)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=778): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x9f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0xee01) kernel console output (not intermixed with test programs): :50:50 [ 75.430020][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.437740][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.444377][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.452978][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.480047][ T4282] device veth0_vlan entered promiscuous mode [ 75.505727][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.517217][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.535400][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.552204][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.562119][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.573386][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.586556][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.598236][ T4282] device veth1_vlan entered promiscuous mode [ 75.612951][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.623499][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.636876][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.646036][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.656513][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.666960][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.676141][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.685289][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.694182][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.707410][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.722142][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.748872][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.784046][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 75.790102][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 75.796944][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 75.804666][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 75.804700][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 75.817898][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.828043][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.836909][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.842977][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.858963][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.877682][ T4282] device veth0_macvtap entered promiscuous mode [ 75.909812][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.912805][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.933182][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.942565][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.971955][ T4282] device veth1_macvtap entered promiscuous mode [ 75.995392][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.050771][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.053680][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.082496][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.093698][ T26] audit: type=1326 audit(1792515791.681:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.3.4" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc38239f559 code=0x0 [ 76.134371][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.150634][ T4411] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.158863][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.218524][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.229774][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.247039][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.259128][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.276712][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.292564][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.311191][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.329546][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.338725][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.376672][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.397439][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.413235][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.430195][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.440446][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.451440][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.462097][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.477341][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.491231][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.504269][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.516321][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.541985][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.555998][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.571741][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.601366][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.622886][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.655836][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.669690][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.777806][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.800207][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.818823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.861281][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.871511][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.889231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.072722][ T4433] FAULT_INJECTION: forcing a failure. [ 77.072722][ T4433] name failslab, interval 1, probability 0, space 0, times 1 [ 77.098881][ T4433] CPU: 0 PID: 4433 Comm: syz.3.8 Not tainted syzkaller #0 [ 77.106146][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.116245][ T4433] Call Trace: [ 77.119549][ T4433] [ 77.122517][ T4433] dump_stack_lvl+0x188/0x24e [ 77.127252][ T4433] ? show_regs_print_info+0x12/0x12 [ 77.132484][ T4433] ? load_image+0x410/0x410 [ 77.137012][ T4433] ? __might_sleep+0xd0/0xd0 [ 77.141625][ T4433] ? __lock_acquire+0x7ea0/0x7ea0 [ 77.146683][ T4433] should_fail_ex+0x390/0x4c0 [ 77.151394][ T4433] should_failslab+0x5/0x20 [ 77.155921][ T4433] slab_pre_alloc_hook+0x59/0x300 [ 77.160987][ T4433] ? snd_pcm_open+0x3e9/0x600 [ 77.165709][ T4433] __kmem_cache_alloc_node+0x4f/0x270 [ 77.171167][ T4433] ? snd_pcm_open+0x3e9/0x600 [ 77.175881][ T4433] kmalloc_trace+0x26/0xe0 [ 77.180322][ T4433] snd_pcm_open+0x3e9/0x600 [ 77.184873][ T4433] ? snd_pcm_mmap_control_fault+0x270/0x270 [ 77.190800][ T4433] ? do_task_dead+0xd0/0xd0 [ 77.195359][ T4433] snd_pcm_capture_open+0x6e/0xd0 [ 77.200415][ T4433] chrdev_open+0x585/0x5f0 [ 77.204864][ T4433] ? cd_forget+0x160/0x160 [ 77.209315][ T4433] ? fsnotify_perm+0x39b/0x550 [ 77.214114][ T4433] ? cd_forget+0x160/0x160 [ 77.218561][ T4433] do_dentry_open+0x7dd/0x10b0 [ 77.223371][ T4433] path_openat+0x2674/0x2f10 [ 77.228007][ T4433] ? kasan_set_track+0x60/0x70 [ 77.232808][ T4433] ? verify_lock_unused+0x140/0x140 [ 77.238041][ T4433] ? do_sys_openat2+0xdd/0x4f0 [ 77.242864][ T4433] ? do_filp_open+0x420/0x420 [ 77.247600][ T4433] do_filp_open+0x1ee/0x420 [ 77.252176][ T4433] ? vfs_tmpfile+0x470/0x470 [ 77.256820][ T4433] ? _raw_spin_unlock+0x24/0x40 [ 77.261700][ T4433] ? alloc_fd+0x590/0x640 [ 77.266080][ T4433] do_sys_openat2+0x14b/0x4f0 [ 77.270877][ T4433] ? do_sys_open+0xe0/0xe0 [ 77.275323][ T4433] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.281337][ T4433] ? lock_chain_count+0x20/0x20 [ 77.286236][ T4433] __x64_sys_openat+0x135/0x160 [ 77.291142][ T4433] do_syscall_64+0x4c/0xa0 [ 77.295862][ T4433] ? clear_bhb_loop+0x60/0xb0 [ 77.300594][ T4433] ? clear_bhb_loop+0x60/0xb0 [ 77.305307][ T4433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.311314][ T4433] RIP: 0033:0x7fc38235fd8e [ 77.315761][ T4433] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.335393][ T4433] RSP: 002b:00007fc3832ebb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.343837][ T4433] RAX: ffffffffffffffda RBX: 00007fc3832ec6c0 RCX: 00007fc38235fd8e [ 77.351845][ T4433] RDX: 0000000000000002 RSI: 00007fc3832ebc00 RDI: ffffffffffffff9c [ 77.359866][ T4433] RBP: 00007fc3832ebc00 R08: 0000000000000000 R09: 0000000000000000 [ 77.367870][ T4433] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 77.375959][ T4433] R13: 00007fc382626038 R14: 00007fc382625fa0 R15: 00007fff1551a6c8 [ 77.384237][ T4433] [ 77.531280][ T4437] kvm: emulating exchange as write [ 77.541638][ T4441] loop2: detected capacity change from 0 to 1024 [ 77.749219][ T4443] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.048072][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 78.143801][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.358034][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.376378][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.397305][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.439567][ T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.455605][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.470627][ T14] usb 3-1: Product: syz [ 78.479428][ T14] usb 3-1: Manufacturer: syz [ 78.495245][ T14] usb 3-1: SerialNumber: syz [ 78.541082][ T14] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 78.560320][ T14] cdc_ncm 3-1:1.0: bind() failure [ 78.780289][ T14] usb 3-1: USB disconnect, device number 2 [ 78.843753][ T27] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.852580][ T4471] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET) [ 79.068246][ T27] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 79.084984][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.099691][ T27] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.109744][ T27] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 79.118161][ T27] usb 5-1: Product: syz [ 79.122533][ T27] usb 5-1: Manufacturer: syz [ 79.130896][ T27] usb 5-1: SerialNumber: syz [ 79.146689][ T27] usb 5-1: config 0 descriptor?? [ 79.165132][ T27] usb 5-1: selecting invalid altsetting 0 [ 79.441800][ T4461] binder: 4460:4461 ioctl c0306201 0 returned -14 [ 79.492445][ T14] usb 5-1: USB disconnect, device number 2 [ 79.615326][ T4478] loop3: detected capacity change from 0 to 1024 [ 79.691911][ T4478] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 79.747866][ T4478] EXT4-fs (loop3): invalid journal inode [ 79.764498][ T4478] EXT4-fs (loop3): can't get journal size [ 79.790977][ T4478] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.849363][ T4484] tipc: Started in network mode [ 79.862381][ T4484] tipc: Node identity 1276d3a24877, cluster identity 4711 [ 79.868862][ T4478] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 64: comm syz.3.24: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=0, inode=11, rec_len=12, size=1024 fake=0 [ 79.886927][ T4484] tipc: Enabled bearer , priority 0 [ 79.903246][ T4478] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 73: comm syz.3.24: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=83886080, rec_len=0, size=1024 fake=0 [ 79.972154][ T4484] syzkaller0: MTU too low for tipc bearer [ 79.992353][ T4484] tipc: Disabling bearer [ 79.998689][ T4286] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 80.152577][ T4488] Disabled LAPIC found during irq injection [ 80.203002][ T4491] input: syz0 as /devices/virtual/input/input5 [ 80.522941][ T4500] loop2: detected capacity change from 0 to 64 [ 80.698768][ T4500] hfs: node 4:3 still has 1 user(s)! [ 80.939376][ T4510] loop4: detected capacity change from 0 to 512 [ 80.972123][ T4510] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.074837][ T4510] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.38: corrupted in-inode xattr [ 81.111777][ T4510] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.38: couldn't read orphan inode 15 (err -117) [ 81.163809][ T4510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.310548][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 81.374018][ T4363] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.392519][ T4535] loop4: detected capacity change from 0 to 2048 [ 81.459139][ T4535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.575892][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.594002][ T4363] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.603846][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.619903][ T4363] usb 2-1: config 0 descriptor?? [ 81.838840][ T4363] usbhid 2-1:0.0: can't add hid device: -71 [ 81.852220][ T4363] usbhid: probe of 2-1:0.0 failed with error -71 [ 81.867982][ T4363] usb 2-1: USB disconnect, device number 2 [ 82.036798][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 82.454673][ T4363] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.541949][ T4557] loop4: detected capacity change from 0 to 32768 [ 82.575135][ T4557] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.50 (4557) [ 82.661079][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.685877][ T4557] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.704800][ T4557] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 82.706398][ T4363] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 82.723210][ T4557] BTRFS info (device loop4): using free space tree [ 82.752478][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.795521][ T4363] usb 2-1: config 0 descriptor?? [ 82.929767][ T4557] BTRFS info (device loop4): enabling ssd optimizations [ 83.631228][ T4363] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 83.660425][ T4363] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 83.743673][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.122815][ T14] usb 2-1: USB disconnect, device number 3 [ 84.122972][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 84.349026][ T4282] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.522665][ T4659] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 85.546160][ T4659] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 85.897579][ T4674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 85.964913][ T4657] loop0: detected capacity change from 0 to 32768 [ 86.210753][ T4680] ======================================================= [ 86.210753][ T4680] WARNING: The mand mount option has been deprecated and [ 86.210753][ T4680] and is ignored by this kernel. Remove the mand [ 86.210753][ T4680] option from the mount to silence this warning. [ 86.210753][ T4680] ======================================================= [ 86.685087][ T4694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 86.749117][ T1182] cfg80211: failed to load regulatory.db [ 87.122886][ T4707] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.084385][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 88.137423][ T4736] loop4: detected capacity change from 0 to 164 [ 88.381840][ T4740] loop1: detected capacity change from 0 to 2048 [ 88.396667][ T4734] team0: Port device team_slave_0 removed [ 88.428077][ T4740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.447747][ T4742] Illegal XDP return value 4294967294 on prog (id 7) dev syz_tun, expect packet loss! [ 88.455501][ T4744] fuse: Bad value for 'fd' [ 88.582909][ T4740] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.642592][ T4756] 9pnet_fd: Insufficient options for proto=fd [ 88.722332][ T4759] loop5: detected capacity change from 0 to 7 [ 88.733134][ T4523] Dev loop5: unable to read RDB block 7 [ 88.753706][ T4523] loop5: AHDI p1 p2 p3 [ 88.757975][ T4523] loop5: partition table partially beyond EOD, truncated [ 88.797153][ T4523] loop5: p1 start 1818582900 is beyond EOD, truncated [ 88.817248][ T4523] loop5: p3 start 335544320 is beyond EOD, truncated [ 88.843785][ T4759] Dev loop5: unable to read RDB block 7 [ 88.863875][ T4759] loop5: AHDI p1 p2 p3 [ 88.884161][ T4759] loop5: partition table partially beyond EOD, truncated [ 88.905492][ T4759] loop5: p1 start 1818582900 is beyond EOD, truncated [ 88.919279][ T4759] loop5: p3 start 335544320 is beyond EOD, truncated [ 88.926436][ T4634] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.958280][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 89.113726][ T4634] usb 2-1: Using ep0 maxpacket: 16 [ 89.123238][ T4634] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.161892][ T4634] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 89.203609][ T4634] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 89.223700][ T4634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.245430][ T4634] usb 2-1: Product: syz [ 89.249673][ T4634] usb 2-1: Manufacturer: syz [ 89.259681][ T4634] usb 2-1: SerialNumber: syz [ 89.480366][ T4634] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 89.500127][ T4789] Zero length message leads to an empty skb [ 89.512931][ T4634] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 89.810643][ T4801] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 89.810643][ T4801] program syz.3.121 not setting count and/or reply_len properly [ 89.896283][ T4634] usb 2-1: 2:1 : can't get Cluster Descriptor [ 92.699956][ T4634] usb 2-1: USB disconnect, device number 4 [ 92.885028][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 92.912039][ T4828] fuse: Bad value for 'fd' [ 92.965383][ T4521] udevd[4521]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.218486][ T4840] ip_tables: iptables: counters copy to user failed while replacing table [ 93.265157][ T4840] device syzkaller1 entered promiscuous mode [ 93.653194][ T26] audit: type=1800 audit(1792515809.241:3): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.138" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 93.730961][ T4846] EXT4-fs (loop3): unmounting filesystem. [ 95.112217][ T4893] loop0: detected capacity change from 0 to 2048 [ 95.176593][ T4893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.060761][ T4906] loop0: detected capacity change from 0 to 256 [ 96.198224][ T4906] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 96.889740][ T4918] loop1: detected capacity change from 0 to 1024 [ 96.994388][ T4918] EXT4-fs: Ignoring removed bh option [ 97.054068][ T4918] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.164016][ T4918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.189599][ T4918] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.452348][ T4930] kvm: pic: non byte write [ 97.461635][ T4930] kvm: pic: non byte write [ 97.474090][ T4930] kvm: pic: non byte write [ 97.500337][ T4930] kvm: pic: non byte write [ 97.514170][ T4930] kvm: pic: non byte write [ 97.608989][ T4935] fuse: Bad value for 'fd' [ 97.974122][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 98.123123][ T4948] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 98.131138][ T4946] event trace: Could not enable event p1 [ 98.188244][ T4948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.235191][ T4950] bond1: (slave ip6gretap1): making interface the new active one [ 98.277694][ T4950] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 98.295169][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 99.646585][ T5001] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.173283][ T4996] loop0: detected capacity change from 0 to 40427 [ 100.208350][ T4996] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 100.237332][ T4996] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.268729][ T4996] F2FS-fs (loop0): invalid crc value [ 100.277971][ T5023] process 'syz.1.195' launched './file0' with NULL argv: empty string added [ 100.307602][ T4996] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.320343][ T5026] bridge_slave_1: default FDB implementation only supports local addresses [ 100.445053][ T4996] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.461012][ T4996] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.014558][ T5042] ip_tables: iptables: counters copy to user failed while replacing table [ 101.345314][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 101.355322][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 101.362906][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.373420][ T4286] Workqueue: hci0 hci_rx_work [ 101.378136][ T4286] Call Trace: [ 101.381441][ T4286] [ 101.384397][ T4286] dump_stack_lvl+0x188/0x24e [ 101.389111][ T4286] ? show_regs_print_info+0x12/0x12 [ 101.394342][ T4286] ? load_image+0x410/0x410 [ 101.398885][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 101.404042][ T4286] ? __lock_acquire+0x7ea0/0x7ea0 [ 101.409105][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 101.413833][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 101.419072][ T4286] kobject_add_internal+0x617/0xca0 [ 101.424312][ T4286] kobject_add+0x160/0x230 [ 101.428769][ T4286] ? kobject_init+0x1c0/0x1c0 [ 101.433473][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 101.438763][ T4286] ? klist_children_get+0x50/0x50 [ 101.443820][ T4286] ? get_device_parent+0x121/0x3e0 [ 101.448939][ T4286] device_add+0x470/0x1050 [ 101.453373][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 101.458314][ T4286] hci_sync_conn_complete_evt+0x707/0xab0 [ 101.464072][ T4286] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 101.470101][ T4286] hci_event_packet+0x806/0x1290 [ 101.475079][ T4286] ? lock_chain_count+0x20/0x20 [ 101.480026][ T4286] ? bis_list+0x280/0x280 [ 101.484445][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 101.490364][ T4286] ? kcov_remote_start+0x50f/0x810 [ 101.495476][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 101.500711][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 101.505910][ T4286] hci_rx_work+0x3eb/0xd40 [ 101.510409][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 101.515266][ T4286] ? process_one_work+0x7b4/0x1160 [ 101.520375][ T4286] process_one_work+0x8ab/0x1160 [ 101.525319][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 101.530972][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 101.535994][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 101.541546][ T4286] ? wq_worker_running+0x97/0x190 [ 101.546588][ T4286] worker_thread+0xaf5/0x12a0 [ 101.551325][ T4286] kthread+0x29d/0x330 [ 101.555390][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 101.560412][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 101.565007][ T4286] ret_from_fork+0x1f/0x30 [ 101.569454][ T4286] [ 101.578156][ T4286] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 101.592470][ T4286] Bluetooth: hci0: failed to register connection device [ 101.897657][ T5058] FAULT_INJECTION: forcing a failure. [ 101.897657][ T5058] name failslab, interval 1, probability 0, space 0, times 0 [ 101.927482][ T5058] CPU: 0 PID: 5058 Comm: syz.0.199 Not tainted syzkaller #0 [ 101.934856][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.944908][ T5058] Call Trace: [ 101.948177][ T5058] [ 101.951095][ T5058] dump_stack_lvl+0x188/0x24e [ 101.955859][ T5058] ? show_regs_print_info+0x12/0x12 [ 101.961071][ T5058] ? load_image+0x410/0x410 [ 101.965567][ T5058] ? __might_sleep+0xd0/0xd0 [ 101.970151][ T5058] ? __lock_acquire+0x7ea0/0x7ea0 [ 101.975179][ T5058] should_fail_ex+0x390/0x4c0 [ 101.979856][ T5058] should_failslab+0x5/0x20 [ 101.984350][ T5058] slab_pre_alloc_hook+0x59/0x300 [ 101.989389][ T5058] ? ucma_alloc_ctx+0x4e/0x2d0 [ 101.994179][ T5058] __kmem_cache_alloc_node+0x4f/0x270 [ 101.999583][ T5058] ? ucma_alloc_ctx+0x4e/0x2d0 [ 102.004350][ T5058] kmalloc_trace+0x26/0xe0 [ 102.008763][ T5058] ucma_alloc_ctx+0x4e/0x2d0 [ 102.013354][ T5058] ucma_create_id+0x1dc/0x370 [ 102.018115][ T5058] ? __lock_acquire+0x7ea0/0x7ea0 [ 102.023160][ T5058] ? ucma_close+0x170/0x170 [ 102.027684][ T5058] ? __might_fault+0xa6/0x120 [ 102.032393][ T5058] ? __might_fault+0xc2/0x120 [ 102.037073][ T5058] ? __might_fault+0xa6/0x120 [ 102.041763][ T5058] ucma_write+0x24e/0x2f0 [ 102.046097][ T5058] ? ucma_get_global_nl_info+0x70/0x70 [ 102.051555][ T5058] ? common_file_perm+0x171/0x1c0 [ 102.056576][ T5058] ? fsnotify_perm+0x5a/0x550 [ 102.061241][ T5058] ? security_file_permission+0x75/0xa0 [ 102.066777][ T5058] ? ucma_get_global_nl_info+0x70/0x70 [ 102.072357][ T5058] vfs_write+0x2dc/0x9a0 [ 102.076598][ T5058] ? file_end_write+0x250/0x250 [ 102.081443][ T5058] ? __fget_files+0x28/0x460 [ 102.086027][ T5058] ? __fget_files+0x3fc/0x460 [ 102.090698][ T5058] ? __fdget_pos+0x1d4/0x360 [ 102.095328][ T5058] ? ksys_write+0x70/0x260 [ 102.099751][ T5058] ksys_write+0x14d/0x260 [ 102.104078][ T5058] ? __ia32_sys_read+0x80/0x80 [ 102.108845][ T5058] ? lockdep_hardirqs_on+0x94/0x140 [ 102.114040][ T5058] do_syscall_64+0x4c/0xa0 [ 102.118449][ T5058] ? clear_bhb_loop+0x60/0xb0 [ 102.123119][ T5058] ? clear_bhb_loop+0x60/0xb0 [ 102.127810][ T5058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.133704][ T5058] RIP: 0033:0x7fca0159f559 [ 102.138130][ T5058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.158255][ T5058] RSP: 002b:00007fca0246b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.166660][ T5058] RAX: ffffffffffffffda RBX: 00007fca01825fa0 RCX: 00007fca0159f559 [ 102.174733][ T5058] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000003 [ 102.182798][ T5058] RBP: 00007fca01636b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.190768][ T5058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.198738][ T5058] R13: 00007fca01826038 R14: 00007fca01825fa0 R15: 00007ffddb7e53b8 [ 102.206711][ T5058] [ 102.299912][ T5062] device-mapper: table: 248:0: mirror: Gap in table (-EINVAL) [ 102.323571][ T5062] device-mapper: ioctl: error adding target to table [ 102.713661][ T5082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 102.722863][ T5082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 102.735564][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 102.752766][ T5082] Unknown metaid 166 dlen 4 [ 104.130091][ T5089] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.141523][ T5089] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.154912][ T5089] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.163449][ T5089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.169505][ T5089] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.177821][ T5089] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.185630][ T5089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.191659][ T5089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.202218][ T5089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.209564][ T5089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.215723][ T5089] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.222863][ T5089] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.232154][ T5089] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.238263][ T5089] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.245331][ T5089] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.683574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.693583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 104.703569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 104.713554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 104.723554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 104.733549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 104.743552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 104.753547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 104.763550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 104.773549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 105.090314][ T5101] netlink: 'syz.0.216': attribute type 39 has an invalid length. [ 105.368309][ T5114] FAULT_INJECTION: forcing a failure. [ 105.368309][ T5114] name failslab, interval 1, probability 0, space 0, times 0 [ 105.401654][ T5114] CPU: 1 PID: 5114 Comm: syz.4.220 Not tainted syzkaller #0 [ 105.409007][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.419087][ T5114] Call Trace: [ 105.422388][ T5114] [ 105.425447][ T5114] dump_stack_lvl+0x188/0x24e [ 105.430155][ T5114] ? show_regs_print_info+0x12/0x12 [ 105.435386][ T5114] ? load_image+0x410/0x410 [ 105.439927][ T5114] ? __might_sleep+0xd0/0xd0 [ 105.444549][ T5114] ? __lock_acquire+0x7ea0/0x7ea0 [ 105.449613][ T5114] should_fail_ex+0x390/0x4c0 [ 105.454328][ T5114] should_failslab+0x5/0x20 [ 105.458875][ T5114] slab_pre_alloc_hook+0x59/0x300 [ 105.463982][ T5114] ? ucma_alloc_ctx+0x4e/0x2d0 [ 105.468777][ T5114] __kmem_cache_alloc_node+0x4f/0x270 [ 105.474184][ T5114] ? ucma_alloc_ctx+0x4e/0x2d0 [ 105.479149][ T5114] kmalloc_trace+0x26/0xe0 [ 105.483596][ T5114] ucma_alloc_ctx+0x4e/0x2d0 [ 105.488758][ T5114] ucma_create_id+0x1dc/0x370 [ 105.493594][ T5114] ? __lock_acquire+0x7ea0/0x7ea0 [ 105.498643][ T5114] ? ucma_close+0x170/0x170 [ 105.503153][ T5114] ? __might_fault+0xa6/0x120 [ 105.507862][ T5114] ? __might_fault+0xc2/0x120 [ 105.512600][ T5114] ? __might_fault+0xa6/0x120 [ 105.517312][ T5114] ucma_write+0x24e/0x2f0 [ 105.521795][ T5114] ? ucma_get_global_nl_info+0x70/0x70 [ 105.527387][ T5114] ? common_file_perm+0x171/0x1c0 [ 105.532440][ T5114] ? fsnotify_perm+0x5a/0x550 [ 105.537118][ T5114] ? security_file_permission+0x75/0xa0 [ 105.542700][ T5114] ? ucma_get_global_nl_info+0x70/0x70 [ 105.548178][ T5114] vfs_write+0x2dc/0x9a0 [ 105.552442][ T5114] ? file_end_write+0x250/0x250 [ 105.557472][ T5114] ? __fget_files+0x28/0x460 [ 105.562077][ T5114] ? __fget_files+0x3fc/0x460 [ 105.566858][ T5114] ? __fdget_pos+0x1d4/0x360 [ 105.571460][ T5114] ? ksys_write+0x70/0x260 [ 105.575887][ T5114] ksys_write+0x14d/0x260 [ 105.580225][ T5114] ? __ia32_sys_read+0x80/0x80 [ 105.585018][ T5114] ? lockdep_hardirqs_on+0x94/0x140 [ 105.590320][ T5114] do_syscall_64+0x4c/0xa0 [ 105.594737][ T5114] ? clear_bhb_loop+0x60/0xb0 [ 105.599419][ T5114] ? clear_bhb_loop+0x60/0xb0 [ 105.604100][ T5114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.610078][ T5114] RIP: 0033:0x7f8d1699f559 [ 105.614575][ T5114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.634186][ T5114] RSP: 002b:00007f8d17789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.642599][ T5114] RAX: ffffffffffffffda RBX: 00007f8d16c25fa0 RCX: 00007f8d1699f559 [ 105.650567][ T5114] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000003 [ 105.658541][ T5114] RBP: 00007f8d16a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 105.666511][ T5114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.674481][ T5114] R13: 00007f8d16c26038 R14: 00007f8d16c25fa0 R15: 00007ffc397d6608 [ 105.682649][ T5114] [ 105.692456][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 106.183958][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.240815][ T5143] ip_tables: iptables: counters copy to user failed while replacing table [ 106.263654][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.263907][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.269771][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.352233][ T5149] tipc: Enabling of bearer rejected, failed to enable media [ 106.474799][ T5153] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 106.562814][ T5153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.610153][ T5153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.670322][ T5153] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 106.709462][ T5153] bond0 (unregistering): Released all slaves [ 106.946933][ T5162] device wlan0 entered promiscuous mode [ 107.006737][ T5166] loop4: detected capacity change from 0 to 16 [ 107.110438][ T5166] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.242099][ T5171] loop0: detected capacity change from 0 to 512 [ 107.300606][ T5171] EXT4-fs error (device loop0): ext4_quota_enable:7045: comm syz.0.236: Bad quota inum: 1, type: 2 [ 107.325706][ T5171] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 107.347544][ T5171] EXT4-fs (loop0): mount failed [ 107.519491][ T5186] netlink: 'syz.2.240': attribute type 10 has an invalid length. [ 107.529936][ T5186] device syz_tun entered promiscuous mode [ 107.583029][ T5186] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 107.703689][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.263649][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 108.343777][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 108.349840][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 108.356231][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 108.834106][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.043645][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 109.050906][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.071411][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.092535][ T27] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 109.109550][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.130039][ T27] usb 1-1: config 0 descriptor?? [ 109.587641][ T27] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 109.784535][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 109.811033][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880736bf800: rx timeout, send abort [ 109.839137][ T5211] loop0: detected capacity change from 0 to 164 [ 109.872697][ T4634] usb 1-1: USB disconnect, device number 2 [ 110.321059][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880736bf800: abort rx timeout. Force session deactivation [ 110.344583][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 110.423685][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 110.429789][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 110.436009][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 111.487148][ T5261] device syzkaller0 entered promiscuous mode [ 111.531310][ T5261] tipc: Enabled bearer , priority 0 [ 111.563919][ T5259] tipc: Resetting bearer [ 111.635337][ T5259] tipc: Disabling bearer [ 111.835181][ T5275] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.863805][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 112.162895][ T5283] sch_tbf: burst 254 is lower than device syzkaller0 mtu (1514) ! [ 113.186053][ T5297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 114.209519][ T5304] kvm: pic: non byte write [ 114.396952][ T5324] fuse: Bad value for 'fd' [ 115.350198][ T5331] rxe_eth0 speed is unknown, defaulting to 1000 [ 115.380377][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 117.797057][ T5366] device syzkaller0 entered promiscuous mode [ 118.163744][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.433884][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 118.570793][ T14] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 118.641790][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.682943][ T14] usb 1-1: Product: syz [ 118.700569][ T14] usb 1-1: Manufacturer: syz [ 118.715003][ T14] usb 1-1: SerialNumber: syz [ 118.735871][ T14] usb 1-1: config 0 descriptor?? [ 118.765236][ T26] audit: type=1326 audit(1792515834.361:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.3.303" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc38239f559 code=0x0 [ 118.911139][ T5390] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 118.938416][ T5390] kvm: pic: level sensitive irq not supported [ 118.938989][ T5390] kvm: pic: non byte read [ 118.950760][ T5390] kvm: pic: level sensitive irq not supported [ 118.950826][ T5390] kvm: pic: non byte read [ 118.962965][ T5390] kvm: pic: level sensitive irq not supported [ 118.963179][ T5390] kvm: pic: non byte read [ 118.974857][ T5390] kvm: pic: level sensitive irq not supported [ 118.975052][ T5390] kvm: pic: non byte read [ 118.986466][ T5390] kvm: pic: level sensitive irq not supported [ 118.986566][ T5390] kvm: pic: non byte read [ 119.007672][ T5390] kvm: pic: level sensitive irq not supported [ 119.007802][ T5390] kvm: pic: non byte read [ 119.019846][ T5390] kvm: pic: level sensitive irq not supported [ 119.020002][ T5390] kvm: pic: non byte read [ 119.032821][ T14] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 119.050233][ T5390] kvm: pic: level sensitive irq not supported [ 119.050351][ T5390] kvm: pic: non byte read [ 119.081242][ T27] libceph: connect (1)[c::]:6789 error -101 [ 119.096374][ T5390] kvm: pic: level sensitive irq not supported [ 119.096443][ T5390] kvm: pic: non byte read [ 119.111839][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 119.142640][ T27] libceph: connect (1)[c::]:6789 error -101 [ 119.162841][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 119.446258][ T27] libceph: connect (1)[c::]:6789 error -101 [ 119.461841][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 119.704453][ T5392] ceph: No mds server is up or the cluster is laggy [ 120.462800][ T14] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 120.567132][ T14] usb 1-1: USB disconnect, device number 3 [ 120.752635][ T5416] jffs2: notice: (5416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.572354][ T5436] tipc: Enabling of bearer rejected, failed to enable media [ 121.875349][ T4805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.923862][ T5445] netlink: 'syz.3.320': attribute type 10 has an invalid length. [ 121.947260][ T5445] device syz_tun entered promiscuous mode [ 121.991379][ T5445] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 122.097977][ T4805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.290411][ T4805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.317603][ T5450] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 122.959628][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.977919][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.987250][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.996671][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.004712][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.012190][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.343536][ C0] sched: RT throttling activated [ 123.368934][ T4805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.469092][ T5466] rxe_eth0 speed is unknown, defaulting to 1000 [ 123.680219][ T5482] device syzkaller0 entered promiscuous mode [ 123.722480][ T5482] tipc: Started in network mode [ 123.750180][ T5482] tipc: Node identity c29371b65dbe, cluster identity 4711 [ 123.793484][ T5482] tipc: Enabled bearer , priority 0 [ 123.800648][ T4805] tipc: Left network mode [ 123.865535][ T5481] tipc: Resetting bearer [ 123.955327][ T5481] tipc: Disabling bearer [ 124.765812][ T5466] chnl_net:caif_netlink_parms(): no params data found [ 125.064120][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 125.340155][ T5466] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.363696][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.382234][ T5466] device bridge_slave_0 entered promiscuous mode [ 125.461160][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.485478][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.514008][ T5466] device bridge_slave_1 entered promiscuous mode [ 125.780347][ T5549] device syzkaller0 entered promiscuous mode [ 125.796643][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 126.027345][ T5466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.128404][ T5466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.467468][ T5466] team0: Port device team_slave_0 added [ 126.513409][ T5466] team0: Port device team_slave_1 added [ 126.625093][ T5466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.652775][ T5466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.770866][ T5466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.992509][ T4805] device hsr_slave_0 left promiscuous mode [ 127.121693][ T4805] device hsr_slave_1 left promiscuous mode [ 127.153654][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 127.291260][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.384061][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.500879][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.514710][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.522591][ T4805] device bridge_slave_1 left promiscuous mode [ 127.544662][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.606181][ T4805] device bridge_slave_0 left promiscuous mode [ 127.635698][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.721689][ T5593] jffs2: notice: (5593) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.747050][ T4805] device veth1_macvtap left promiscuous mode [ 127.777501][ T4805] device veth0_macvtap left promiscuous mode [ 127.802926][ T4805] device veth1_vlan left promiscuous mode [ 127.841604][ T4805] device veth0_vlan left promiscuous mode [ 129.159370][ T4805] team0 (unregistering): Port device team_slave_1 removed [ 129.227510][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 129.255093][ T4805] team0 (unregistering): Port device team_slave_0 removed [ 129.350397][ T4805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.554526][ T4805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.799539][ T26] audit: type=1326 audit(1792515845.391:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.2.364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f365b9992d7 code=0x0 [ 130.391534][ T4805] bond0 (unregistering): Released all slaves [ 130.555967][ T5466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.566170][ T5466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.658145][ T5466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.805009][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.885262][ T5466] device hsr_slave_0 entered promiscuous mode [ 130.909407][ T5466] device hsr_slave_1 entered promiscuous mode [ 130.925212][ T5466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.952424][ T5466] Cannot create hsr debugfs directory [ 131.367190][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 132.619878][ T5466] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.667288][ T5466] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.695573][ T5466] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.721950][ T5466] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.827573][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.834633][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.948788][ T5466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.997394][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.026282][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.074585][ T5466] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.145101][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.182047][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.251464][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.258646][ T4806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.348788][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.402271][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.442879][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.504319][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.511445][ T4822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.554138][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.585775][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.621289][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.660050][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.692163][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.745397][ T5466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.793159][ T5466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.823581][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.856099][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.899068][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.925282][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.953138][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.990169][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.039529][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.140282][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 134.933716][ T5733] loop0: detected capacity change from 0 to 512 [ 134.990229][ T5733] EXT4-fs (loop0): invalid journal inode [ 134.997736][ T5737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.387'. [ 135.094269][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.101763][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.127588][ T5733] EXT4-fs (loop0): can't get journal size [ 135.140827][ T5466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.217156][ T5733] EXT4-fs (loop0): 1 truncate cleaned up [ 135.353817][ T5733] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.780653][ T26] audit: type=1800 audit(1792515851.371:6): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.385" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 136.043710][ T5763] loop0: detected capacity change from 512 to 64 [ 136.106672][ T5733] syz.0.385: attempt to access beyond end of device [ 136.106672][ T5733] loop0: rw=14337, sector=96, nr_sectors = 2 limit=64 [ 136.189479][ T5733] Buffer I/O error on dev loop0, logical block 48, lost sync page write [ 136.204452][ T5733] EXT4-fs error (device loop0): ext4_splice_branch:472: inode #15: block 48: comm syz.0.385: IO error syncing itable block [ 136.284554][ T5733] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.385: Error while async write back metadata [ 136.311282][ T5733] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 15: block 216:freeing already freed block (bit 215); block bitmap corrupt. [ 136.329243][ T5733] EXT4-fs (loop0): pa ffff888074b9e460: logic 0, phys. 193, len 32 [ 136.337301][ T5733] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 25, pa_free 24 [ 136.354292][ T5733] syz.0.385: attempt to access beyond end of device [ 136.354292][ T5733] loop0: rw=14337, sector=96, nr_sectors = 2 limit=64 [ 136.470359][ T5733] Buffer I/O error on dev loop0, logical block 48, lost sync page write [ 136.529701][ T5733] EXT4-fs error (device loop0): ext4_free_data:985: inode #15: block 48: comm syz.0.385: IO error syncing itable block [ 136.544641][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.563347][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.583819][ T5742] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm ext4lazyinit: Error while async write back metadata [ 136.625126][ T5733] syz.0.385: attempt to access beyond end of device [ 136.625126][ T5733] loop0: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 136.633971][ T5466] device veth0_vlan entered promiscuous mode [ 136.692198][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.700217][ T5733] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 36) [ 136.714433][ T5733] Buffer I/O error on device loop0, logical block 36 [ 136.721658][ T5733] Buffer I/O error on device loop0, logical block 37 [ 136.728322][ T5733] Buffer I/O error on device loop0, logical block 38 [ 136.735117][ T5733] Buffer I/O error on device loop0, logical block 39 [ 136.745966][ T5733] Buffer I/O error on device loop0, logical block 40 [ 136.752686][ T5733] Buffer I/O error on device loop0, logical block 41 [ 136.759352][ T5733] Buffer I/O error on device loop0, logical block 42 [ 136.766105][ T5733] Buffer I/O error on device loop0, logical block 43 [ 136.776947][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.797789][ T5466] device veth1_vlan entered promiscuous mode [ 136.812947][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.832032][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.842940][ T5733] Buffer I/O error on device loop0, logical block 44 [ 136.849638][ T5733] Buffer I/O error on device loop0, logical block 45 [ 136.863459][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.897534][ T5733] syz.0.385: attempt to access beyond end of device [ 136.897534][ T5733] loop0: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 136.939736][ T5733] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 49) [ 136.982763][ T5733] syz.0.385: attempt to access beyond end of device [ 136.982763][ T5733] loop0: rw=2049, sector=418, nr_sectors = 8 limit=64 [ 137.017587][ T5733] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 209) [ 137.033057][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.051034][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.079414][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.130324][ T5466] device veth0_macvtap entered promiscuous mode [ 137.197098][ T5466] device veth1_macvtap entered promiscuous mode [ 137.209657][ T4273] syz-executor: attempt to access beyond end of device [ 137.209657][ T4273] loop0: rw=14337, sector=96, nr_sectors = 2 limit=64 [ 137.267186][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.273703][ T4273] Buffer I/O error on dev loop0, logical block 48, lost sync page write [ 137.288270][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.298619][ T4273] EXT4-fs error (device loop0): ext4_free_data:985: inode #15: block 48: comm syz-executor: IO error syncing itable block [ 137.343589][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.373484][ T4273] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz-executor: Error while async write back metadata [ 137.403671][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.443686][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.586296][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.606538][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.373587][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.385220][ T5466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.389811][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 138.430245][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.455681][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.464612][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.540860][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.578402][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.611646][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.648402][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.681373][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.709107][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.753278][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.788978][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.826353][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.871330][ T5466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.916317][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.942848][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.977066][ T5466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.009384][ T5466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.040847][ T5466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.074667][ T5466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.305138][ T4804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.320829][ T4804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.341089][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.404417][ T4822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.417211][ T4822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.446509][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.859670][ T26] audit: type=1326 audit(1792515855.451:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 139.941944][ T26] audit: type=1326 audit(1792515855.451:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 139.995284][ T5825] ip_tables: iptables: counters copy to user failed while replacing table [ 140.220020][ T26] audit: type=1326 audit(1792515855.451:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 140.253646][ T26] audit: type=1326 audit(1792515855.451:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 140.378222][ T26] audit: type=1326 audit(1792515855.451:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 140.722558][ T26] audit: type=1326 audit(1792515855.451:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 141.051501][ T26] audit: type=1326 audit(1792515855.451:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 141.402902][ T26] audit: type=1326 audit(1792515855.451:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 141.555475][ T26] audit: type=1326 audit(1792515855.451:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 142.320149][ T26] audit: type=1326 audit(1792515855.451:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 142.384340][ T5846] loop0: detected capacity change from 0 to 8 [ 142.486150][ T5846] squashfs: Unknown parameter '0x00000000000000000x00000000000000000xffffffffffffffff01777777777777777777777' [ 142.506184][ T4286] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 142.515264][ T4286] Bluetooth: hci4: Injecting HCI hardware error event [ 142.515365][ T26] audit: type=1326 audit(1792515855.451:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 142.526805][ T49] Bluetooth: hci4: hardware error 0x00 [ 142.666213][ T26] audit: type=1326 audit(1792515855.451:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 142.710634][ T26] audit: type=1326 audit(1792515855.451:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 142.762337][ T26] audit: type=1326 audit(1792515855.451:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 142.773645][ T4366] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.830909][ T26] audit: type=1326 audit(1792515855.451:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 143.542025][ T26] audit: type=1326 audit(1792515855.451:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.2.399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 143.574428][ T4366] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 143.603374][ T4366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.681869][ T4366] usb 5-1: config 0 descriptor?? [ 143.725267][ T4366] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 144.981918][ T49] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 146.072055][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 146.072068][ T26] audit: type=1326 audit(1792515861.661:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 146.185752][ T26] audit: type=1326 audit(1792515861.691:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 146.303264][ T26] audit: type=1326 audit(1792515861.701:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 146.459639][ T26] audit: type=1326 audit(1792515861.701:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 146.564158][ T26] audit: type=1326 audit(1792515861.701:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 146.671578][ T26] audit: type=1326 audit(1792515861.701:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 146.802661][ T26] audit: type=1326 audit(1792515861.701:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 146.933649][ T26] audit: type=1326 audit(1792515861.701:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 147.043956][ T26] audit: type=1326 audit(1792515861.701:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 147.173862][ T26] audit: type=1326 audit(1792515861.701:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.2.417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 149.181800][ T4363] usb 5-1: USB disconnect, device number 3 [ 153.591771][ T5962] loop0: detected capacity change from 0 to 16 [ 153.674816][ T5962] erofs: (device loop0): mounted with root inode @ nid 36. [ 153.730695][ T5962] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 153.768046][ T5971] loop4: detected capacity change from 0 to 512 [ 153.819581][ T5971] EXT4-fs: inline encryption not supported [ 153.876116][ T5971] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.913438][ T5971] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 154.018020][ T5971] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.111784][ T5971] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.437: bad orphan inode 131083 [ 154.254615][ T5971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.982419][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.440'. [ 156.126120][ T5993] EXT4-fs (loop4): unmounting filesystem. [ 156.259524][ T4822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.963585][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.084239][ T4822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.094976][ T1182] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 157.123263][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.142333][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.156908][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.169219][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.179130][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.194374][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.201674][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.201688][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.250387][ T14] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.303124][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.313046][ T1182] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.333778][ T1182] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.362392][ T14] usb 1-1: SerialNumber: syz [ 157.379772][ T1182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.430143][ T1182] usb 6-1: config 0 descriptor?? [ 157.452858][ T1182] pwc: Askey VC010 type 2 USB webcam detected. [ 157.464517][ T4822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.543017][ T6048] rxe_eth0 speed is unknown, defaulting to 1000 [ 157.598098][ T6040] loop0: detected capacity change from 0 to 512 [ 157.674560][ T4822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.714595][ T6040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.837644][ T6040] fs-verity: sha512 using implementation "sha512-avx2" [ 157.856460][ T1182] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.868330][ T1182] pwc: recv_control_msg error -32 req 02 val 2700 [ 157.881458][ T1182] pwc: recv_control_msg error -32 req 02 val 2c00 [ 157.891453][ T1182] pwc: recv_control_msg error -32 req 04 val 1000 [ 157.923109][ T6040] EXT4-fs warning (device loop0): ext4_begin_enable_verity:137: inode #15: comm syz.0.452: verity is only allowed on extent-based files [ 158.101205][ T1182] pwc: recv_control_msg error -32 req 04 val 1400 [ 158.115141][ T14] usb 1-1: 0:2 : does not exist [ 158.136773][ T1182] pwc: recv_control_msg error -32 req 02 val 2000 [ 158.156856][ T4822] tipc: Left network mode [ 158.163991][ T1182] pwc: recv_control_msg error -32 req 02 val 2100 [ 158.221940][ T1182] pwc: recv_control_msg error -32 req 04 val 1500 [ 158.229693][ T14] usb 1-1: USB disconnect, device number 4 [ 158.263719][ T1182] pwc: recv_control_msg error -32 req 02 val 2500 [ 158.302034][ T1182] pwc: recv_control_msg error -32 req 02 val 2400 [ 158.539649][ T1182] pwc: recv_control_msg error -71 req 02 val 2900 [ 158.555629][ T1182] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.562577][ T1182] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.569916][ T1182] pwc: recv_control_msg error -71 req 04 val 1200 [ 159.045284][ T4822] bond1: (slave ip6gretap1): Releasing active interface [ 159.228469][ T1182] pwc: Registered as video103. [ 159.242604][ T1182] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 159.266583][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.306361][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 159.428909][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 159.520670][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 159.938836][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.982881][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.028513][ T6048] device bridge_slave_0 entered promiscuous mode [ 160.087123][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.130625][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.197247][ T6048] device bridge_slave_1 entered promiscuous mode [ 160.272622][ T1182] usb 6-1: USB disconnect, device number 2 [ 161.471216][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 161.718212][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.729741][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.914617][ T6048] team0: Port device team_slave_0 added [ 162.962099][ T6048] team0: Port device team_slave_1 added [ 163.325215][ T6129] loop0: detected capacity change from 0 to 128 [ 163.383079][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.469'. [ 163.424014][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.431003][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.431297][ T6129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 163.457217][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.544133][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 163.571692][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.581609][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.637408][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.424254][ T6129] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.446326][ T6148] loop5: detected capacity change from 0 to 512 [ 165.511208][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 165.521242][ T6048] device hsr_slave_0 entered promiscuous mode [ 165.600255][ T6048] device hsr_slave_1 entered promiscuous mode [ 165.623984][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 165.646072][ T6148] syz.5.464: attempt to access beyond end of device [ 165.646072][ T6148] loop5: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 165.672416][ T6148] syz.5.464: attempt to access beyond end of device [ 165.672416][ T6148] loop5: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 165.698625][ T6048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.725737][ T6048] Cannot create hsr debugfs directory [ 165.744835][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 165.744844][ T26] audit: type=1800 audit(1792515881.341:89): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.464" name="file2" dev="loop5" ino=1048645 res=0 errno=0 [ 168.618084][ T4822] device hsr_slave_0 left promiscuous mode [ 168.829848][ T4822] device hsr_slave_1 left promiscuous mode [ 169.328485][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.341563][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.367764][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.375884][ T4822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.389798][ T4822] device bridge_slave_1 left promiscuous mode [ 169.403201][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.427146][ T4822] device bridge_slave_0 left promiscuous mode [ 169.433556][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.525549][ T4822] device veth1_macvtap left promiscuous mode [ 169.539159][ T4822] device veth0_macvtap left promiscuous mode [ 169.548029][ T4822] device veth1_vlan left promiscuous mode [ 169.554420][ T4822] device veth0_vlan left promiscuous mode [ 172.434762][ T4822] bond1 (unregistering): Released all slaves [ 174.271150][ T4822] team0 (unregistering): Port device team_slave_1 removed [ 174.326230][ T4822] team0 (unregistering): Port device team_slave_0 removed [ 174.369543][ T6239] binder_alloc: 6236: binder_alloc_buf, no vma [ 174.713111][ T6209] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 174.850844][ T6048] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.871094][ T6242] loop5: detected capacity change from 0 to 128 [ 174.922140][ T6048] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.960067][ T6048] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.010235][ T6048] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.682849][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.843209][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.881145][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.894434][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.424466][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.234004][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.263769][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.270939][ T4819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.332396][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.351406][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.386499][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.393678][ T4819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.450251][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.482027][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.553886][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.579854][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.616300][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.647674][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.667832][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.716688][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.745733][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.770527][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.783753][ T4366] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 179.804138][ T6048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.834038][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.857430][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.893142][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.973688][ T4366] usb 6-1: Using ep0 maxpacket: 16 [ 179.981811][ T4366] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.029866][ T4366] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.062089][ T4366] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.101718][ T4366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.145062][ T4366] usb 6-1: Product: syz [ 180.149281][ T4366] usb 6-1: Manufacturer: syz [ 180.185287][ T4366] usb 6-1: SerialNumber: syz [ 180.427393][ T4366] usb 6-1: 0:2 : does not exist [ 180.456750][ T4366] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 180.544062][ T4366] usb 6-1: USB disconnect, device number 3 [ 180.723141][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.741711][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.771512][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.805825][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.916394][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.961890][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.022373][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.059482][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.096891][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.132762][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.172827][ T6048] device veth0_vlan entered promiscuous mode [ 185.230236][ T6048] device veth1_vlan entered promiscuous mode [ 185.340546][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.364549][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.397023][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.426741][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.504859][ T6048] device veth0_macvtap entered promiscuous mode [ 185.535605][ T6048] device veth1_macvtap entered promiscuous mode [ 185.617541][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.663651][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.683807][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.703623][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.713480][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.753586][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.763454][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.781733][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.584626][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.620221][ T6371] device syzkaller0 entered promiscuous mode [ 186.656496][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.699240][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.719767][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.745391][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.771625][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.804070][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.858695][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.883276][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.901410][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.921579][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.932003][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.948029][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.959736][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.822879][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.842703][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.903326][ T6048] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.924662][ T6048] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.933424][ T6048] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.974047][ T6048] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.192384][ T4822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.218351][ T4822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.278129][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.305651][ T6406] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 188.350079][ T6408] FAULT_INJECTION: forcing a failure. [ 188.350079][ T6408] name failslab, interval 1, probability 0, space 0, times 0 [ 188.365169][ T4819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.380646][ T4819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.419334][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.431272][ T6408] CPU: 1 PID: 6408 Comm: syz.5.524 Not tainted syzkaller #0 [ 188.438617][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.448708][ T6408] Call Trace: [ 188.452098][ T6408] [ 188.455053][ T6408] dump_stack_lvl+0x188/0x24e [ 188.459785][ T6408] ? show_regs_print_info+0x12/0x12 [ 188.465106][ T6408] ? load_image+0x410/0x410 [ 188.469641][ T6408] ? __might_sleep+0xd0/0xd0 [ 188.474263][ T6408] ? __lock_acquire+0x7ea0/0x7ea0 [ 188.479330][ T6408] should_fail_ex+0x390/0x4c0 [ 188.484060][ T6408] should_failslab+0x5/0x20 [ 188.488678][ T6408] slab_pre_alloc_hook+0x59/0x300 [ 188.493740][ T6408] ? tomoyo_encode+0x28a/0x550 [ 188.498540][ T6408] __kmem_cache_alloc_node+0x4f/0x270 [ 188.503950][ T6408] ? tomoyo_encode+0x28a/0x550 [ 188.508754][ T6408] __kmalloc+0xa3/0x240 [ 188.512948][ T6408] tomoyo_encode+0x28a/0x550 [ 188.517584][ T6408] tomoyo_realpath_from_path+0x578/0x5c0 [ 188.523267][ T6408] ? tomoyo_domain+0xd2/0x120 [ 188.528003][ T6408] ? tomoyo_path_number_perm+0x205/0x650 [ 188.533674][ T6408] tomoyo_path_number_perm+0x22f/0x650 [ 188.539175][ T6408] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 188.544672][ T6408] ? __d_add+0x4e2/0x7e0 [ 188.548982][ T6408] ? do_raw_spin_unlock+0x11d/0x230 [ 188.554221][ T6408] ? hook_path_mkdir+0x3a0/0x460 [ 188.559202][ T6408] ? lookup_one_qstr_excl+0x11c/0x240 [ 188.564617][ T6408] tomoyo_path_mkdir+0xad/0xf0 [ 188.569436][ T6408] ? tomoyo_path_unlink+0xf0/0xf0 [ 188.574504][ T6408] ? kern_path_create+0x50/0x50 [ 188.579407][ T6408] security_path_mkdir+0xe0/0x130 [ 188.584475][ T6408] do_mkdirat+0x15e/0x440 [ 188.588840][ T6408] ? vfs_mkdir+0x570/0x570 [ 188.593300][ T6408] __x64_sys_mkdirat+0x85/0x90 [ 188.598095][ T6408] do_syscall_64+0x4c/0xa0 [ 188.602543][ T6408] ? clear_bhb_loop+0x60/0xb0 [ 188.607257][ T6408] ? clear_bhb_loop+0x60/0xb0 [ 188.611968][ T6408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.617907][ T6408] RIP: 0033:0x7f6d1299f559 [ 188.622359][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.642087][ T6408] RSP: 002b:00007f6d13797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 188.650535][ T6408] RAX: ffffffffffffffda RBX: 00007f6d12c26090 RCX: 00007f6d1299f559 [ 188.658534][ T6408] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000003 [ 188.666540][ T6408] RBP: 00007f6d12a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 188.674626][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.682625][ T6408] R13: 00007f6d12c26128 R14: 00007f6d12c26090 R15: 00007ffdac8a3068 [ 188.690645][ T6408] [ 188.904795][ T6408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.689415][ T26] audit: type=1800 audit(1792515905.281:90): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.451" name="idProduct" dev="configfs" ino=42832 res=0 errno=0 [ 189.731251][ T26] audit: type=1800 audit(1792515905.311:91): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.451" name="serialnumber" dev="configfs" ino=42834 res=0 errno=0 [ 192.006696][ T6442] loop6: detected capacity change from 0 to 32768 [ 192.141982][ T6442] XFS (loop6): Mounting V5 Filesystem [ 192.244825][ T6442] XFS (loop6): Ending clean mount [ 192.509765][ T26] audit: type=1800 audit(1792515908.101:92): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.530" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 192.621805][ T6487] loop0: detected capacity change from 0 to 2048 [ 192.677345][ T6487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.926266][ T6499] x_tables: duplicate underflow at hook 1 [ 193.590705][ T6048] XFS (loop6): Unmounting Filesystem [ 194.015881][ T6508] overlayfs: failed to clone upperpath [ 194.269661][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276113][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.177815][ T26] audit: type=1804 audit(1792515914.771:93): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 199.792746][ T3638] udevd[3638]: could not touch /run/udev/queue: No such file or directory [ 199.843844][ T26] audit: type=1804 audit(1792515914.901:94): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 200.003826][ T26] audit: type=1804 audit(1792515914.911:95): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 200.027280][ T26] audit: type=1804 audit(1792515914.931:96): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 200.051261][ T26] audit: type=1804 audit(1792515915.021:97): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 200.074753][ T26] audit: type=1804 audit(1792515915.091:98): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 200.119998][ T26] audit: type=1804 audit(1792515915.141:99): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 200.184593][ T26] audit: type=1804 audit(1792515915.241:100): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 200.243958][ T26] audit: type=1804 audit(1792515915.411:101): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 200.289359][ T26] audit: type=1804 audit(1792515915.411:102): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 200.362817][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.548'. [ 200.648690][ T6599] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 204.233610][ T26] kauditd_printk_skb: 752 callbacks suppressed [ 204.233624][ T26] audit: type=1804 audit(1792515919.821:855): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 204.338507][ T26] audit: type=1804 audit(1792515919.821:856): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 204.399058][ T26] audit: type=1804 audit(1792515919.821:857): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 204.489020][ T26] audit: type=1804 audit(1792515919.861:858): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 204.542528][ T26] audit: type=1804 audit(1792515919.861:859): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 204.724913][ T6641] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 204.731918][ T6641] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.741008][ T6641] vhci_hcd vhci_hcd.0: Device attached [ 205.399804][ T6642] vhci_hcd: connection closed [ 205.406655][ T31] vhci_hcd: stop threads [ 205.653347][ T26] audit: type=1804 audit(1792515919.861:860): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 205.921327][ T31] vhci_hcd: release socket [ 205.929949][ T31] vhci_hcd: disconnect device [ 206.687888][ T4628] vhci_hcd: vhci_device speed not set [ 206.833598][ T26] audit: type=1804 audit(1792515919.861:861): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 206.954280][ T26] audit: type=1804 audit(1792515919.861:862): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 207.399428][ T26] audit: type=1804 audit(1792515919.861:863): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 207.723750][ T26] audit: type=1804 audit(1792515919.861:864): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/21/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 212.321191][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.332113][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.340799][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.377424][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.395287][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.404123][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.808995][ T4805] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.755335][ T4805] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.831756][ T6696] device syzkaller0 entered promiscuous mode [ 213.978148][ T4805] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.049696][ T4805] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.704705][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.723811][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.736304][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.754475][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.762155][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.770119][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.908246][ T6767] loop0: detected capacity change from 0 to 2048 [ 220.956904][ T6767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.501222][ T6788] jffs2: notice: (6788) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 221.786877][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.800714][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.817851][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.832672][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.525598][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.535303][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.666459][ T4805] device hsr_slave_0 left promiscuous mode [ 223.704112][ T4805] device hsr_slave_1 left promiscuous mode [ 223.714628][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.722077][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.787593][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.823634][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.884124][ T4805] device bridge_slave_1 left promiscuous mode [ 223.890377][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.969244][ T4805] device bridge_slave_0 left promiscuous mode [ 223.990111][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.203312][ T4805] device veth1_macvtap left promiscuous mode [ 224.213797][ T4805] device veth0_macvtap left promiscuous mode [ 224.221387][ T4805] device veth1_vlan left promiscuous mode [ 224.263668][ T4805] device veth0_vlan left promiscuous mode [ 225.573409][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.584543][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.594826][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.603980][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.611578][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.618919][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.561186][ T6839] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by ""[6839] [ 228.465108][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.484008][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.492462][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.512580][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.521673][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.529240][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.369748][ T4805] team0 (unregistering): Port device team_slave_1 removed [ 229.475228][ T4805] team0 (unregistering): Port device team_slave_0 removed [ 229.574756][ T4805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.718089][ T4805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.617303][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.638872][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.647765][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.675912][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.685380][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 230.698276][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.310179][ T4805] bond0 (unregistering): Released all slaves [ 232.661461][ T6892] loop6: detected capacity change from 0 to 4096 [ 232.796354][ T6898] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.029473][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.048218][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.057090][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.066624][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.075818][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 234.083160][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.186851][ T6918] device syzkaller0 entered promiscuous mode [ 237.356801][ T6944] jffs2: notice: (6944) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 238.242036][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.6.617'. [ 241.294517][ T6987] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 241.954096][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.971207][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.003863][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.013004][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.022439][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.031512][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.351008][ T7000] loop6: detected capacity change from 0 to 1024 [ 242.394396][ T7000] EXT4-fs: quotafile must be on filesystem root [ 242.665307][ T7005] loop6: detected capacity change from 0 to 128 [ 242.850526][ T7005] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 242.861771][ T7005] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.216699][ T6048] EXT4-fs (loop6): unmounting filesystem. [ 244.422413][ T7021] loop6: detected capacity change from 0 to 1024 [ 244.630503][ T7021] hfsplus: unable to parse mount options [ 244.666125][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 244.666138][ T26] audit: type=1326 audit(1792515960.261:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.6.636" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20d299f559 code=0x0 [ 245.536282][ T7032] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 245.938450][ T7032] CIFS mount error: No usable UNC path provided in device string! [ 245.938450][ T7032] [ 246.010038][ T7032] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 247.805717][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.824217][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.832694][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.840789][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.859570][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.866974][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.394969][ T7100] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 249.733924][ T4363] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 249.954134][ T4363] usb 7-1: Using ep0 maxpacket: 32 [ 249.967349][ T4363] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.001161][ T4363] usb 7-1: config 0 has no interface number 0 [ 250.037138][ T4363] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 250.083391][ T4363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.118534][ T4363] usb 7-1: Product: syz [ 250.136849][ T4363] usb 7-1: Manufacturer: syz [ 250.157898][ T4363] usb 7-1: SerialNumber: syz [ 250.206976][ T4363] usb 7-1: config 0 descriptor?? [ 250.388946][ T4363] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 250.397880][ T4363] usb 7-1: selecting invalid altsetting 1 [ 250.403681][ T4363] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 250.419534][ T4363] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 250.430095][ T4363] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 250.438804][ T4363] usb 7-1: media controller created [ 250.520494][ T4363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.603033][ T7102] loop6: detected capacity change from 0 to 1024 [ 250.627543][ T7116] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 250.698601][ T7102] hfsplus: unable to parse mount options [ 250.737411][ T7116] IPVS: ip_vs_send_async error -1 [ 250.772559][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.810783][ T7102] jffs2: notice: (7102) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 250.850025][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.864884][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.874896][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.926739][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 250.935310][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.942476][ T4363] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 251.552926][ T4363] zl10353_read_register: readreg error (reg=127, ret==-71) [ 251.562689][ T4363] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 251.647945][ T4363] usb 7-1: USB disconnect, device number 2 [ 252.823902][ T7116] IPVS: ip_vs_send_async error -1 [ 254.567448][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.578788][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.590777][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.600430][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.608623][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 254.618047][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.568539][ T26] audit: type=1326 audit(1792515971.161:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.6.659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20d299f559 code=0x0 [ 255.716958][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.723326][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.080550][ T7116] IPVS: ip_vs_send_async error -1 [ 257.722586][ T7177] Error parsing options; rc = [-22] [ 259.991302][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.001844][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.011213][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.021468][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.029306][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.036746][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.426941][ T7233] Bluetooth: MGMT ver 1.22 [ 265.989567][ T7248] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 267.084429][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.096957][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.105232][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.114005][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.121433][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.128792][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.519880][ T7265] overlayfs: './file2' not a directory [ 270.855334][ T7282] loop6: detected capacity change from 0 to 4096 [ 272.231298][ T26] audit: type=1800 audit(1792515987.821:927): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.685" name="file1" dev="loop6" ino=0 res=0 errno=0 [ 276.575611][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.607720][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.619245][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.626816][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.645976][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.655704][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.898149][ T7326] sctp: [Deprecated]: syz.3.697 (pid 7326) Use of int in max_burst socket option. [ 276.898149][ T7326] Use struct sctp_assoc_value instead [ 276.952112][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.697'. [ 279.037141][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.051982][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.060715][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.078500][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.087396][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.096569][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.938805][ T7353] netlink: 20 bytes leftover after parsing attributes in process `syz.6.707'. [ 282.191591][ T7362] loop6: detected capacity change from 0 to 512 [ 282.603691][ T4276] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 282.643969][ T7266] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.914804][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.930904][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.940647][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.953757][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.963389][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.971428][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.163061][ T7379] loop6: detected capacity change from 0 to 32768 [ 283.182095][ T7379] XFS (loop6): Mounting V5 Filesystem [ 283.245595][ T7379] XFS (loop6): Ending clean mount [ 283.259994][ T7379] XFS (loop6): Quotacheck needed: Please wait. [ 283.383652][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 283.407638][ T7379] XFS (loop6): Quotacheck: Done. [ 283.832854][ T26] audit: type=1800 audit(1792515999.381:928): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.708" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0 [ 284.089067][ T6048] XFS (loop6): Unmounting Filesystem [ 286.293922][ T7401] ip_tables: iptables: counters copy to user failed while replacing table [ 286.366967][ T26] audit: type=1326 audit(1792516001.961:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 286.453359][ T26] audit: type=1326 audit(1792516002.001:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 286.539936][ T26] audit: type=1326 audit(1792516002.001:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 286.658361][ T26] audit: type=1326 audit(1792516002.001:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 286.658966][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.716'. [ 286.700905][ T26] audit: type=1326 audit(1792516002.001:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 287.363118][ T7410] device veth0_to_bond entered promiscuous mode [ 287.377502][ T26] audit: type=1326 audit(1792516002.021:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 287.434808][ T26] audit: type=1326 audit(1792516002.021:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 287.459193][ T26] audit: type=1326 audit(1792516002.021:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 287.567615][ T26] audit: type=1326 audit(1792516002.021:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.2.711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365b99f559 code=0x7ffc0000 [ 288.530891][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.544401][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.554206][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.565222][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.574624][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 288.582008][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 289.888120][ T7451] overlayfs: failed to clone upperpath [ 291.430164][ T7455] jffs2: notice: (7455) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 293.016232][ T7461] sctp: [Deprecated]: syz.2.725 (pid 7461) Use of int in max_burst socket option. [ 293.016232][ T7461] Use struct sctp_assoc_value instead [ 295.854572][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.732'. [ 297.818313][ T7492] CIFS: Witness protocol support is experimental [ 297.825044][ T7492] CIFS: Attempting to mount \\127.0.0.1\share [ 297.854350][ T7492] CIFS: VFS: Error connecting to socket. Aborting operation. [ 297.862036][ T7492] CIFS: VFS: cifs_mount failed w/return code = -111 [ 298.021539][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.046906][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.059867][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.070025][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.077805][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.085346][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.411021][ T7522] sctp: [Deprecated]: syz.6.739 (pid 7522) Use of int in max_burst socket option. [ 302.411021][ T7522] Use struct sctp_assoc_value instead [ 302.456099][ T7525] netlink: 'syz.0.736': attribute type 9 has an invalid length. [ 302.473662][ T7525] netlink: 'syz.0.736': attribute type 7 has an invalid length. [ 302.550492][ T7525] netlink: 'syz.0.736': attribute type 8 has an invalid length. [ 302.727117][ T7533] syz.6.740 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 308.224534][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.236457][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.246578][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.256790][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.266329][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 308.275397][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.312019][ T7586] FAULT_INJECTION: forcing a failure. [ 309.312019][ T7586] name fail_futex, interval 1, probability 0, space 0, times 1 [ 309.324985][ T7586] CPU: 0 PID: 7586 Comm: syz.6.749 Not tainted syzkaller #0 [ 309.332299][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 309.342394][ T7586] Call Trace: [ 309.345692][ T7586] [ 309.348635][ T7586] dump_stack_lvl+0x188/0x24e [ 309.353337][ T7586] ? show_regs_print_info+0x12/0x12 [ 309.358571][ T7586] ? load_image+0x410/0x410 [ 309.363099][ T7586] ? finish_task_switch+0x25d/0x8e0 [ 309.368320][ T7586] should_fail_ex+0x390/0x4c0 [ 309.373026][ T7586] get_futex_key+0x1b1/0x1000 [ 309.377731][ T7586] ? futex_setup_timer+0xc0/0xc0 [ 309.382676][ T7586] ? finish_task_switch+0x327/0x8e0 [ 309.387898][ T7586] futex_wake+0x123/0x4f0 [ 309.392277][ T7586] ? futex_wake_mark+0x150/0x150 [ 309.397238][ T7586] ? release_firmware_map_entry+0x187/0x187 [ 309.403153][ T7586] do_futex+0x2e2/0x320 [ 309.407322][ T7586] ? preempt_schedule_irq+0xe6/0x160 [ 309.412635][ T7586] ? __ia32_sys_get_robust_list+0x100/0x100 [ 309.418544][ T7586] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 309.424553][ T7586] ? preempt_schedule_notrace+0x120/0x120 [ 309.430300][ T7586] __se_sys_futex+0x381/0x410 [ 309.434991][ T7586] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 309.440653][ T7586] ? __x64_sys_futex+0xf0/0xf0 [ 309.445439][ T7586] ? __x64_sys_futex+0x1d/0xf0 [ 309.450224][ T7586] do_syscall_64+0x4c/0xa0 [ 309.454659][ T7586] ? clear_bhb_loop+0x60/0xb0 [ 309.459366][ T7586] ? clear_bhb_loop+0x60/0xb0 [ 309.464075][ T7586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.469996][ T7586] RIP: 0033:0x7f20d299f559 [ 309.474429][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.494063][ T7586] RSP: 002b:00007f20d38940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 309.502505][ T7586] RAX: ffffffffffffffda RBX: 00007f20d2c26098 RCX: 00007f20d299f559 [ 309.510510][ T7586] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f20d2c2609c [ 309.518501][ T7586] RBP: 00007f20d2c26090 R08: 000fe6002d88eef8 R09: 0000000000000000 [ 309.526504][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.534494][ T7586] R13: 00007f20d2c26128 R14: 00007ffc367ef2a0 R15: 00007ffc367ef388 [ 309.542504][ T7586] [ 310.507199][ T7593] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7593] [ 312.783218][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 312.783232][ T26] audit: type=1326 audit(1792516028.371:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.755" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0159f559 code=0x7ffc0000 [ 313.693698][ T26] audit: type=1326 audit(1792516028.411:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.755" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca0159f559 code=0x7ffc0000 [ 313.718058][ T26] audit: type=1326 audit(1792516028.411:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.755" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0159f559 code=0x7ffc0000 [ 313.743338][ T26] audit: type=1326 audit(1792516028.411:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.755" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0159f559 code=0x7ffc0000 [ 313.783570][ T26] audit: type=1326 audit(1792516028.411:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.755" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca0159f559 code=0x7ffc0000 [ 313.840095][ T26] audit: type=1326 audit(1792516028.411:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.755" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0159f559 code=0x7ffc0000 [ 313.872154][ T7615] misc userio: Invalid payload size [ 314.100905][ T26] audit: type=1326 audit(1792516028.411:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.755" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0159f559 code=0x7ffc0000 [ 314.125966][ T26] audit: type=1326 audit(1792516028.411:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.755" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fca0159f559 code=0x7ffc0000 [ 314.523393][ T26] audit: type=1326 audit(1792516028.411:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.755" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0159f559 code=0x7ffc0000 [ 314.571469][ T26] audit: type=1326 audit(1792516028.411:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.755" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0159f559 code=0x7ffc0000 [ 315.274837][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.289125][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.300790][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.302829][ T7634] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 315.317541][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.327449][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 315.334918][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.107066][ T7636] CIFS: Attempting to mount \\127.0.0.1\share [ 316.160525][ T7634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.261986][ T7636] CIFS: VFS: Error connecting to socket. Aborting operation. [ 316.269640][ T7636] CIFS: VFS: cifs_mount failed w/return code = -4 [ 317.235321][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241656][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.535479][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 317.682644][ T7643] bond1: (slave veth3): Enslaving as an active interface with a down link [ 317.799909][ T7634] bond1: (slave veth0_to_bond): making interface the new active one [ 317.857100][ T7634] device veth0_to_bond entered promiscuous mode [ 317.881030][ T7634] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 317.914196][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 319.303945][ T7116] IPVS: ip_vs_send_async error -1 [ 320.161848][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 320.209268][ T7672] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 320.235076][ T7679] loop6: detected capacity change from 0 to 512 [ 321.563687][ T7679] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 322.039946][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.773'. [ 322.088192][ T7688] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 58966 - 0 [ 322.096634][ T7679] EXT4-fs (loop6): 1 truncate cleaned up [ 322.127653][ T7688] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 58966 - 0 [ 322.163710][ T7679] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 322.203668][ T7688] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 58966 - 0 [ 322.276354][ T7688] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 58966 - 0 [ 322.289819][ T7688] device geneve2 entered promiscuous mode [ 322.309201][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.320187][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.330182][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.856939][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 322.858100][ T26] audit: type=1800 audit(1792516038.441:1036): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.772" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 322.919048][ T7119] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.044260][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.056848][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 323.067391][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.190096][ T6048] EXT4-fs (loop6): unmounting filesystem. [ 323.368846][ T7711] 9pnet_fd: Insufficient options for proto=fd [ 324.145217][ T7713] loop6: detected capacity change from 0 to 512 [ 324.172210][ T7713] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 324.199579][ T7713] EXT4-fs (loop6): 1 truncate cleaned up [ 324.205494][ T7713] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=7 req=562 state=3 status=67 (errno 9: Bad file descriptor) [ 324.248077][ T7713] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 324.638624][ T4274] bond0: (slave syz_tun): Releasing backup interface [ 324.726920][ T7712] EXT4-fs (loop6): unmounting filesystem. [ 325.056784][ T4676] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.259511][ T4676] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.347414][ T4676] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.453155][ T7700] bond0: (slave syz_tun): Releasing backup interface [ 325.481786][ T4676] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.604009][ T4676] device hsr_slave_0 left promiscuous mode [ 326.610255][ T4676] device hsr_slave_1 left promiscuous mode [ 326.617341][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.624856][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.632439][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.640227][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.648343][ T4676] device bridge_slave_1 left promiscuous mode [ 326.654562][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.663134][ T4676] device bridge_slave_0 left promiscuous mode [ 326.669727][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.701831][ T4676] device veth1_macvtap left promiscuous mode [ 326.708057][ T4676] device veth0_macvtap left promiscuous mode [ 326.716398][ T4676] device veth1_vlan left promiscuous mode [ 326.722219][ T4676] device veth0_vlan left promiscuous mode [ 327.242793][ T4676] team0 (unregistering): Port device team_slave_1 removed [ 327.286788][ T4676] team0 (unregistering): Port device team_slave_0 removed [ 327.329813][ T4676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.376742][ T4676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.391149][ T7119] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.826173][ T4676] bond0 (unregistering): Released all slaves [ 328.362268][ T4676] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.431043][ T4676] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.500118][ T4676] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.544303][ T4676] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.276671][ T4676] IPVS: stopping master sync thread 7248 ... [ 329.532168][ T4676] device hsr_slave_0 left promiscuous mode [ 329.538570][ T4676] device hsr_slave_1 left promiscuous mode [ 329.545877][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.553270][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.561000][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.569106][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.576988][ T4676] device bridge_slave_1 left promiscuous mode [ 329.583169][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.591463][ T4676] device bridge_slave_0 left promiscuous mode [ 329.602139][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.629352][ T4676] device veth1_macvtap left promiscuous mode [ 329.635703][ T4676] device veth0_macvtap left promiscuous mode [ 329.641772][ T4676] device veth1_vlan left promiscuous mode [ 329.647688][ T4676] device veth0_vlan left promiscuous mode [ 330.200788][ T4676] team0 (unregistering): Port device team_slave_1 removed [ 330.244910][ T4676] team0 (unregistering): Port device team_slave_0 removed [ 330.286048][ T4676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.331319][ T4676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.659169][ T4676] bond0 (unregistering): Released all slaves [ 330.814120][ T4303] device veth0_to_bond left promiscuous mode [ 332.506796][ T4303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.518259][ T4815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration