last executing test programs: 11m12.670005716s ago: executing program 2 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f00000003c0)={0x5, 0x0, [{}, {}, {}, {}, {}]}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000000000000070000000144"], 0x20}}], 0x1, 0x0) 11m10.37123014s ago: executing program 2 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x0) 11m8.889588569s ago: executing program 2 (id=355): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r4 = socket(0x18, 0x803, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 11m8.753105851s ago: executing program 2 (id=358): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f00000001c0)={[{@fat=@nocase}, {@fat=@flush}, {@fat=@quiet}, {@fat=@uid}, {@fat=@dmask={'dmask', 0x3d, 0x9}}, {@fat=@errors_remount}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@uid}, {@fat=@showexec}, {@fat=@showexec}]}, 0xff, 0x23d, &(0x7f0000000a40)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000300)=ANY=[], 0x1, 0x378, &(0x7f0000002f40)="$eJzs3c+LG2UYwPEnu9lksqWbHERRkH3Qi16G3dWzGqQFMWDZNmIrCNPuREPGZJkJkYi468mrePMfECw9FjwU1H9gL97qxYsn9yIIWkQcmV/Z/JhspmlKN+33A7t5Mu/7zrxvZhKeNzBvjt/76uNWwzMbVldWDJWciMg9kYqsSCIXPRQkxaG8fO7Pu89fvnrt7WqtdmFX9WL1yis7qrqx+cMnn5XianeKclT54FiM346ePnr2+L8rHzU9bXra7nTV0uudX7vWdcfWvabXMlUvObbl2dpse7YblXei8obT2d/vq9XeO7++79qep1a7ry27r92Odt2+Wh9azbaapqnn19O6+xgzJjelnrFh9Zu7u1Z1zgPemLMdFu0f3/dPKXbdqrUqYpYmSuo3H2q/AADAmTSW/3+T5AgVWRkklLl4LlAI49GkMsj/kzjM/4PJwkn+f+uFn7rn3r29Eef/dwpp+f+rv0TtR/L/4OgLz/+/G3s+mREtvYPgXz5j5QfK/3E2bI6+I38/mbHHgvw/eDcMZvRfvH9rKwzI/wEAAAAAAAAAAAAAAAAAAAAAWAb3fL/s+345eUz+Tm4hiJ8nz0670RhLZ9r5L8YrCgyuBzyWLl+9JkZ4415+Q8T5slfv1aPHuDypuCVl+Te8HmLRghOHYaEGKvKjc9Crr8UNVsP/VREVR2zZlrJURtqH8cW3ahe2NRK1D49/0Kvn8utB+4Y0w/Y7Upan0tvvpLYvyEsvDrU3pSw/35COOLIXf44l7T/fVn3zndr48cN6aV5/uKcEAAAAAICFM1WNePpcGZ3/RvN301RNKw/m8jI8P5/8fmAwv95KnZ/ny89lXaYGAAAAAAA8EK/wactyHNv1+lODksyqU4z3NlaUlxl7DoJ8hjojwd0wWDutzurQCLPuuRD/gkbWbrheXzL3OQn+Kkrqi5ks4TpSZKS/qhmDZPwZKhv3ewpcb+X+x2673mbQH51rOENB8rXRtDpyad49TwuSlXNnVX7m62//nu8QuXjV3uGi124bM0YaBrmxLYczLto/fH9mf9bSPy2+T/mRGQAAAADLwusXw6S/5CVb3ni0HQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Am00GXSpgSPeowAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAWfF/AAAA//+YNfU/") syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x820014, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 11m8.240827312s ago: executing program 2 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) 11m7.63857239s ago: executing program 2 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 11m7.253534171s ago: executing program 32 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 8m47.796139341s ago: executing program 0 (id=720): syz_io_uring_setup(0x81d, 0x0, &(0x7f00000000c0), &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8094) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r5, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 8m45.833582428s ago: executing program 0 (id=725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 8m40.385263456s ago: executing program 0 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000200)="a38d", 0x2) 8m38.014589027s ago: executing program 0 (id=736): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048000) syz_io_uring_setup(0x1254, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x42, 0x3f}, &(0x7f0000000180), &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fanotify_init(0x180, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0xff03, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) 8m31.464315663s ago: executing program 0 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 8m29.104196552s ago: executing program 0 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r0}, 0xc) 8m13.877309625s ago: executing program 33 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r0}, 0xc) 2m1.244609024s ago: executing program 6 (id=1655): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_GET_SECUREBITS(0x1b) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20800040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x1407, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x83343, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x4004f506, &(0x7f0000000140)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 1m59.252073674s ago: executing program 6 (id=1670): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x81, 0x2, 0x6, 0x1}]}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0) 1m56.884065664s ago: executing program 6 (id=1662): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = msgget$private(0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000180)={0x20080522}, 0x0) r5 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3f8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) msgctl$IPC_INFO(r1, 0x3, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000002880)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x0, 0x8580, 0x8003}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000002ac0)={0x0, 0xb770}, 0x8) 1m53.927014472s ago: executing program 6 (id=1673): userfaultfd(0x80001) 1m53.476625338s ago: executing program 6 (id=1676): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) bind$inet(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[], 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m47.628817447s ago: executing program 6 (id=1686): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r4, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 1m32.245774303s ago: executing program 34 (id=1686): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r4, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 13.373359436s ago: executing program 3 (id=1900): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 12.364776767s ago: executing program 7 (id=1901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000180)) 11.565619891s ago: executing program 7 (id=1903): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="636f6465706167653d63703733372c756d61736b3d30303030303030303030303030303030303030373737372c696f636861727365743d6d6163726f6d616e2c00c132f7d36481fcf97dccf78cfa7daf6825ef665eb163db201d6c13cd72fa3afa91aafaf54e6ba6969d3658c9240c7ec3318af10acda672b66e41b1831dfe26a89b1b2820620e55fbf859a609e57f2aab8ea8a7915d75fb4dc53bc4ac3dd3102fbf2571578726077b2b7577f55dfaa53a5bab2258b97b01aff1526a0ab78dcbb8d7485f3f185aaaa507641d3db038d754c159bb71dafcfa23b22342ed24e54f97b9092408b1de3725bb0cd05b4980d46bd9c0556fecbeeb"], 0x4, 0x339, &(0x7f0000000140)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8c}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socket$inet_tcp(0x2, 0x1, 0x0) bind$ax25(r4, 0x0, 0x0) memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x89901) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 10.445852421s ago: executing program 4 (id=1906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, 0x0, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000001c"], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ff"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01"], 0x3c}}, 0x0) 9.71750953s ago: executing program 7 (id=1907): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_dev$usbfs(0x0, 0x77, 0x101301) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) userfaultfd(0x80001) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x0) 9.58396273s ago: executing program 1 (id=1908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f025, 0xfb}) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 8.538481784s ago: executing program 3 (id=1909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) times(&(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x7) prlimit64(r0, 0x5, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r3, &(0x7f0000000000)='1\x00', 0x2) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 8.525203075s ago: executing program 4 (id=1910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037f43d223b3c1b324debec40e57a07f7bd0000000021946aff1e7154519cc275d04f6205abd307a0c4fa3838bf399ad5bd35f21907c7988d13000000000000f90900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a40)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x2, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) listen(0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 7.46759432s ago: executing program 1 (id=1911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x400077, 0x6b4380) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, 0x0) r3 = syz_open_dev$loop(&(0x7f0000001580), 0x8, 0x8080) ioctl$BLKREPORTZONE(r3, 0xc0101282, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) sendfile(0xffffffffffffffff, r5, 0x0, 0x23b) 7.46662023s ago: executing program 5 (id=1912): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.398500236s ago: executing program 5 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x2}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x61, 0x5f]}}, 0x0, 0x41}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 6.544783364s ago: executing program 3 (id=1914): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000001c"], 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ff"], 0x34}}, 0x0) 6.509014537s ago: executing program 1 (id=1915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000180)) 6.432687094s ago: executing program 7 (id=1916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lstat(0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESHEX], 0xfb, 0x28a, &(0x7f0000000700)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x6f, 0xb6, 0x84, 0x40, 0x1de1, 0xc102, 0x7d08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0xda, 0x91}}]}}]}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) 6.23103422s ago: executing program 4 (id=1917): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.386256097s ago: executing program 3 (id=1918): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) userfaultfd(0x80001) 5.376875228s ago: executing program 1 (id=1919): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.471578421s ago: executing program 5 (id=1920): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, 0x0, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000001c"], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ff"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01"], 0x3c}}, 0x0) 4.446088933s ago: executing program 3 (id=1921): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='net/ip_tables_names\x00') lseek(r5, 0x9, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x4000000, 0x12, r0, 0x4000) flock(r0, 0x1) 4.390642487s ago: executing program 4 (id=1922): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="000000030000000100000000000000010000000800000fff000000000f0000340000000300000001000000000000000000000002000000050000000200005961000000017fffffff000000070000000800000006000000000000"], 0x60) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 2.98412928s ago: executing program 7 (id=1923): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.395985208s ago: executing program 5 (id=1924): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000880)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000340), 0x8) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.966192892s ago: executing program 3 (id=1925): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048005}, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r2, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x20050050, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.200658173s ago: executing program 4 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103, 0x0, {0x4}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r12, r12], 0x2, r10, r11, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa08, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x850, 0x8b8, 0x0, {0xff0f000000000000}, [@common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000140)=0x3, 0x4) 1.199770024s ago: executing program 5 (id=1927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037f43d223b3c1b324debec40e57a07f7bd0000000021946aff1e7154519cc275d04f6205abd307a0c4fa3838bf399ad5bd35f21907c7988d13000000000000f90900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a40)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x2, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.156209587s ago: executing program 1 (id=1928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000459000/0x7000)=nil) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) setpriority(0x3, 0x0, 0x2) 77.024364ms ago: executing program 7 (id=1929): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000001c"], 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ff"], 0x34}}, 0x0) 74.843814ms ago: executing program 4 (id=1930): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$eJzslj2v0lAYx//nlBQwGhNHFwdJ1MHSFjUuJLI4OZj4QhxMJFIJUsRAByEx6Cdwd3Nw9wuY6OqHMOiiC04615yXliOhCNwL3OQ+v4Sn/1POy9PnNP9TEARxbPn+7c8k/l39UQBwEiXk9f2f1qwPN/p/Lfx6+fnWzfqbh++/5CdOcdGccbz6+jkAn2oWonTsv6NL+noXPNX3wHFJ6zoYHK0fgeO+1gEYHmj91NA90d9xnrTDwHncC5tCuCJ4IvgiVObzm75maBr5MeP/wXDUaYRh0N+i+F/9pjWOqpGfuV8OVLauUT8PHJ7WFTDc0fo68kltVEmM5z+bm81vLX1+G9uuiEhljVFnTmVulQ1gszQAdlh7j1f6ld3mO5QhLEiR7OiOV9+BQO5IpLGG2GQvPt5QY5I78Vi1ZZ/TGRPG4xWXsLFR5VN/it8xXDD8SVnJW3nUlKPu8/JgOLrc7jZaQSt45vuVa+4V173ql6URqbjE/4rSn07M5l94JglsZuNFI4r6nopp21dxkeNy6X8cF8+rtnBTe27egqGZ/nF5ld7b+ZCZPUEQxP44ByY9WfpyIvRpAuNb9/YecyQIgiAIgiAIgiAI4mD8DQAA//80kEvd") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x81, 0x2, 0x6, 0x1}]}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0x6, 0x1, 0x1, {0x1, @sliced={0x1, [0x5, 0x9, 0x1, 0x209, 0x9, 0xe, 0x80, 0xb, 0x7a, 0xa00, 0x2, 0xd, 0x5, 0x5, 0x5, 0x8, 0x79b, 0x8001, 0x4, 0xffc7, 0x800, 0x80, 0x0, 0x5, 0x5, 0x1, 0x401, 0x5, 0xf3, 0x400, 0xf11, 0xd, 0x8, 0x4, 0x8, 0x0, 0x7, 0x7, 0x5f4, 0x3, 0x401, 0x6, 0x0, 0x7fff, 0xc874, 0xff, 0xfffe, 0x4], 0x10}}, 0x8a10}) 74.622594ms ago: executing program 1 (id=1939): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x88, &(0x7f00000001c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0xb, 0x36, 0x66, 0x65, 0x66, 0x34b61ac358e0f40a, 0x63], 0x2d, [0x31, 0x35, 0x35, 0x62], 0x2d, [0x39, 0x55, 0x39, 0x61], 0x2d, [0x32, 0x63, 0xc, 0x69], 0x2d, [0x35, 0x30, 0x33, 0x33, 0x66, 0x35, 0x33, 0x38]}}}]}, 0x3, 0x448, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000001, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x1, 0x4}, {}, {}, @raw32}], 0x1c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1931): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) userfaultfd(0x80001) kernel console output (not intermixed with test programs): syz.0.385'. [ 192.717252][ T5725] device team0 entered promiscuous mode [ 192.722868][ T5725] device team_slave_0 entered promiscuous mode [ 192.751639][ T5726] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 192.765496][ T5725] device team_slave_1 entered promiscuous mode [ 192.808753][ T5725] device geneve0 entered promiscuous mode [ 192.825348][ T5725] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.846622][ T5725] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 192.904858][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.936485][ T5723] bond0: (slave rose0): Enslaving as an active interface with an up link [ 192.967372][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 192.989136][ T5727] bridge0: port 3(vlan2) entered blocking state [ 193.027238][ T5727] bridge0: port 3(vlan2) entered disabled state [ 193.076842][ T5727] device vlan2 entered promiscuous mode [ 193.090762][ T5727] device bond0 entered promiscuous mode [ 193.100998][ T5727] device bond_slave_0 entered promiscuous mode [ 193.107842][ T5727] device bond_slave_1 entered promiscuous mode [ 193.114449][ T5727] device macvlan2 entered promiscuous mode [ 193.310673][ T5743] loop0: detected capacity change from 0 to 512 [ 193.357092][ T5649] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.460643][ T5743] EXT4-fs (loop0): Unrecognized mount option "defcontext=unconfined_u" or missing value [ 193.475763][ T5649] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.558933][ T5649] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.571622][ T26] audit: type=1326 audit(1755590476.167:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.0.388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f696697ebe9 code=0x0 [ 193.607393][ T5649] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 194.094133][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.101961][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.271490][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 194.394929][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 194.603420][ T26] audit: type=1804 audit(1755590477.197:42): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.394" name="file1" dev="ramfs" ino=38481 res=1 errno=0 [ 194.649202][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.672893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.690406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.709976][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.752969][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.783689][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.814870][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.823405][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.832093][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.834853][ T21] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.895350][ T21] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 194.904438][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.924989][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.944571][ T5779] tipc: Failed to remove unknown binding: 66,1,1/4:3666879302/3666879304 [ 194.950968][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.985555][ T21] usb 2-1: config 0 descriptor?? [ 194.998786][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.999126][ T5779] tipc: Failed to remove unknown binding: 66,1,1/4:3666879302/3666879304 [ 195.015931][ T4452] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.023117][ T4452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.055077][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.085732][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.104405][ T5779] tipc: Failed to remove unknown binding: 66,1,1/4:3666879302/3666879304 [ 195.108274][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.176280][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.221268][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.250884][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.254162][ T21] usb 2-1: USB disconnect, device number 4 [ 195.273355][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.403040][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.447078][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.505227][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.524250][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.318847][ T5649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.324478][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 197.514658][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 197.563514][ T5836] loop0: detected capacity change from 0 to 256 [ 197.588694][ T5833] loop1: detected capacity change from 0 to 2048 [ 197.635684][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.643469][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.673756][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.825081][ T5836] FAT-fs (loop0): Directory bread(block 64) failed [ 197.851903][ T5833] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.854451][ T5836] FAT-fs (loop0): Directory bread(block 65) failed [ 198.026353][ T5836] FAT-fs (loop0): Directory bread(block 66) failed [ 198.099793][ T5836] FAT-fs (loop0): Directory bread(block 67) failed [ 198.301524][ T5836] FAT-fs (loop0): Directory bread(block 68) failed [ 198.530019][ T5836] FAT-fs (loop0): Directory bread(block 69) failed [ 198.565377][ T5836] FAT-fs (loop0): Directory bread(block 70) failed [ 198.622540][ T5836] FAT-fs (loop0): Directory bread(block 71) failed [ 198.682748][ T5836] FAT-fs (loop0): Directory bread(block 72) failed [ 198.723810][ T5836] FAT-fs (loop0): Directory bread(block 73) failed [ 199.738689][ T5836] loop0: detected capacity change from 0 to 256 [ 199.787536][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.825453][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.093361][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.193201][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.311220][ T5836] FAT-fs (loop0): Directory bread(block 64) failed [ 200.471191][ T5649] device veth0_vlan entered promiscuous mode [ 200.593969][ T5836] FAT-fs (loop0): Directory bread(block 65) failed [ 200.601572][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.646844][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.656541][ T5836] FAT-fs (loop0): Directory bread(block 66) failed [ 200.663107][ T5836] FAT-fs (loop0): Directory bread(block 67) failed [ 200.710296][ T5649] device veth1_vlan entered promiscuous mode [ 200.754226][ T5836] FAT-fs (loop0): Directory bread(block 68) failed [ 200.760952][ T5836] FAT-fs (loop0): Directory bread(block 69) failed [ 200.795247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.806590][ T5836] FAT-fs (loop0): Directory bread(block 70) failed [ 200.837982][ T5836] FAT-fs (loop0): Directory bread(block 71) failed [ 200.851003][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.865676][ T5836] FAT-fs (loop0): Directory bread(block 72) failed [ 200.870050][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.872250][ T5836] FAT-fs (loop0): Directory bread(block 73) failed [ 200.915186][ T5649] device veth0_macvtap entered promiscuous mode [ 200.940145][ T5649] device veth1_macvtap entered promiscuous mode [ 200.979838][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.990439][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.002723][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.013560][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.040167][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.083217][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.099168][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.112330][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.132443][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.145266][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.160917][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.175160][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.192375][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.370279][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.402683][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.433769][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.444490][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.455515][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.468648][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.478798][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.493375][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.572268][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.610788][ T5649] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.620841][ T5649] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.653165][ T5649] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.673252][ T5649] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.708422][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.721247][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.371957][ T5897] loop3: detected capacity change from 0 to 2048 [ 203.399278][ T5897] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 203.418821][ T5900] loop0: detected capacity change from 0 to 512 [ 203.472026][ T5897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.560352][ T451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.579075][ T451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.587300][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.596327][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.655842][ T5900] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.416: casefold flag without casefold feature [ 203.672387][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.734468][ T5900] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.416: couldn't read orphan inode 15 (err -117) [ 203.754199][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.436394][ T5900] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.700850][ T4197] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 206.720752][ T4197] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 206.792059][ T5931] netlink: 'syz.1.426': attribute type 12 has an invalid length. [ 209.738814][ T5944] loop5: detected capacity change from 0 to 262144 [ 209.759541][ T5944] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop5 scanned by syz.5.433 (5944) [ 209.785252][ T1277] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.795029][ T5944] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 209.833878][ T5944] BTRFS info (device loop5): using free space tree [ 209.840953][ T5944] BTRFS info (device loop5): has skinny extents [ 209.847392][ T5944] BTRFS info (device loop5): flagging fs with big metadata feature [ 209.965741][ T1277] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.038502][ T5944] BTRFS info (device loop5): enabling ssd optimizations [ 210.066794][ T1277] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.113236][ T26] audit: type=1804 audit(1755590492.709:43): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.433" name="/newroot/3/bus/bus" dev="loop5" ino=263 res=1 errno=0 [ 210.140152][ T1277] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.250307][ T5944] BTRFS info (device loop5): balance: start -d -m -s [ 210.277505][ T5944] BTRFS info (device loop5): relocating block group 30408704 flags metadata|dup [ 210.355141][ T5944] BTRFS info (device loop5): found 3 extents, stage: move data extents [ 210.407898][ T5944] BTRFS info (device loop5): relocating block group 22020096 flags system|dup [ 210.463951][ T5944] BTRFS info (device loop5): balance: canceled [ 210.473158][ T1277] tipc: Left network mode [ 211.377232][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 212.301063][ T26] audit: type=1326 audit(1755590494.899:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.4.444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2af4b98be9 code=0x0 [ 212.408835][ T5992] lo speed is unknown, defaulting to 1000 [ 213.540823][ T3577] Bluetooth: hci4: command 0x0409 tx timeout [ 214.915453][ T5992] chnl_net:caif_netlink_parms(): no params data found [ 215.682398][ T3577] Bluetooth: hci4: command 0x041b tx timeout [ 215.772723][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.051340][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.071858][ T5992] device bridge_slave_0 entered promiscuous mode [ 216.114543][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.131600][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.168008][ T5992] device bridge_slave_1 entered promiscuous mode [ 217.390899][ T5992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.435362][ T5992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.187230][ T5992] team0: Port device team_slave_0 added [ 218.212771][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 218.229817][ T5992] team0: Port device team_slave_1 added [ 218.452396][ T1277] device hsr_slave_1 left promiscuous mode [ 218.691324][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.751167][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.786388][ T6125] sctp: [Deprecated]: syz.0.473 (pid 6125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.786388][ T6125] Use struct sctp_sack_info instead [ 218.974651][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.131367][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.430114][ T1277] device vlan2 left promiscuous mode [ 219.451665][ T1277] device bond0 left promiscuous mode [ 219.491055][ T1277] device bond_slave_0 left promiscuous mode [ 219.545968][ T1277] device bond_slave_1 left promiscuous mode [ 219.571800][ T1277] device macvlan2 left promiscuous mode [ 219.579916][ T1277] bridge0: port 3(vlan2) entered disabled state [ 219.623593][ T1277] device bridge_slave_1 left promiscuous mode [ 219.651982][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.118060][ T1277] device bridge_slave_0 left promiscuous mode [ 220.130092][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.243551][ T6145] loop0: detected capacity change from 0 to 64 [ 220.303765][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 220.317960][ T1277] device team0 left promiscuous mode [ 220.334347][ T1277] device team_slave_0 left promiscuous mode [ 220.347431][ T1277] device team_slave_1 left promiscuous mode [ 220.354476][ T1277] device geneve0 left promiscuous mode [ 220.366490][ T1277] device veth1_macvtap left promiscuous mode [ 220.377382][ T1277] device veth0_macvtap left promiscuous mode [ 220.397584][ T1277] device veth1_vlan left promiscuous mode [ 220.468237][ T6149] loop1: detected capacity change from 0 to 512 [ 220.560051][ T1277] device veth0_vlan left promiscuous mode [ 221.368963][ T6149] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 221.370220][ T1277] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 221.413167][ T1277] team0 (unregistering): Port device geneve0 removed [ 221.422608][ T6149] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.459423][ T6149] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 221.798946][ T1277] team0 (unregistering): Port device team_slave_1 removed [ 221.847023][ T1277] team0 (unregistering): Port device team_slave_0 removed [ 221.896719][ T1277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.703547][ T1277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.997234][ T1277] bond0 (unregistering): Released all slaves [ 223.701761][ T6179] loop1: detected capacity change from 0 to 1024 [ 223.743236][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.750312][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.811260][ T5992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.824885][ T4247] lo speed is unknown, defaulting to 1000 [ 223.840672][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.848448][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.907284][ T6182] loop0: detected capacity change from 0 to 2048 [ 223.925990][ T5992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.124246][ T6182] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 225.372189][ T5992] device hsr_slave_0 entered promiscuous mode [ 225.382612][ T5992] device hsr_slave_1 entered promiscuous mode [ 225.514070][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.483'. [ 226.400311][ T6189] hfsplus: invalid extended attribute record [ 226.571917][ T6206] loop0: detected capacity change from 0 to 512 [ 227.432714][ T6206] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 227.472979][ T4309] hfsplus: b-tree write err: -5, ino 4 [ 227.501024][ T6206] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 227.564266][ T6206] System zones: 0-2, 18-18, 34-34 [ 227.813824][ T6206] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,debug,jqfmt=vfsv0,noauto_da_alloc,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 227.871100][ T6206] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.171574][ T6206] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on [ 230.192697][ T6249] loop1: detected capacity change from 0 to 64 [ 230.234042][ T5992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.241441][ T6249] hfs: unable to change codepage [ 230.246966][ T6249] hfs: unable to parse mount options [ 230.290873][ T5992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.322589][ T5992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.368404][ T5992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.704437][ T5992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.852854][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.437462][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.485524][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.601238][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.815318][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.827224][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.834463][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.949944][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.961710][ T6314] loop1: detected capacity change from 0 to 128 [ 238.060767][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.171636][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.178853][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.105441][ T6314] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.178058][ T6326] kAFS: unable to lookup cell '.,' [ 239.278332][ T6314] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 239.939603][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.624942][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.798904][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.843455][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.878368][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.930442][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.057769][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.128864][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.220612][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.646258][ T5992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.845519][ T5992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.907742][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.928718][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.011574][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.586228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.603847][ T6021] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 243.626854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.656140][ T5992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.797897][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.827419][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.878803][ T6021] usb 2-1: Using ep0 maxpacket: 32 [ 243.952718][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.986021][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.019336][ T6021] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 244.043306][ T6021] usb 2-1: config 0 has no interface number 0 [ 244.070385][ T5992] device veth0_vlan entered promiscuous mode [ 244.093136][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.108015][ T6021] usb 2-1: config 0 interface 2 has no altsetting 0 [ 244.157149][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.193074][ T5992] device veth1_vlan entered promiscuous mode [ 244.297753][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.317083][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.339138][ T6021] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 244.380532][ T6021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.394920][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.444326][ T6021] usb 2-1: Product: syz [ 244.478824][ T6021] usb 2-1: Manufacturer: syz [ 244.483498][ T6021] usb 2-1: SerialNumber: syz [ 244.509866][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.548898][ T6021] usb 2-1: config 0 descriptor?? [ 244.557418][ T5992] device veth0_macvtap entered promiscuous mode [ 244.604759][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.653730][ T5992] device veth1_macvtap entered promiscuous mode [ 244.685598][ T6406] netlink: 'syz.0.520': attribute type 27 has an invalid length. [ 244.706168][ T6406] netlink: 'syz.0.520': attribute type 3 has an invalid length. [ 244.725313][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.744573][ T6406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.520'. [ 244.775676][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.796881][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.817643][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.838720][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.882593][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.911646][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.933837][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.959807][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.976867][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.994272][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.017647][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.051487][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.075548][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.086672][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.096631][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.107161][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.117091][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.127921][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.325474][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.429505][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.520997][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.756429][ T5992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.815818][ T5992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.869048][ T5992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.877814][ T5992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.028881][ T6021] usb 2-1: invalid MIDI in EP 0 [ 246.520553][ T6426] loop1: detected capacity change from 0 to 8192 [ 246.671174][ T6426] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 246.681520][ T6426] REISERFS (device loop1): using ordered data mode [ 246.688218][ T6426] reiserfs: using flush barriers [ 246.706984][ T6426] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 246.728257][ T6426] REISERFS (device loop1): checking transaction log (loop1) [ 246.749298][ T6426] REISERFS (device loop1): Using r5 hash to sort names [ 246.768013][ T6426] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 246.982295][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.103776][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.475682][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.492648][ T6021] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 247.519036][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.547828][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.598620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.616589][ T4196] udevd[4196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.623088][ T6021] usb 2-1: USB disconnect, device number 5 [ 249.543008][ T6451] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 249.609689][ T6456] loop0: detected capacity change from 0 to 512 [ 249.712117][ T6456] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 251.206728][ T6477] sctp: [Deprecated]: syz.5.537 (pid 6477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.206728][ T6477] Use struct sctp_sack_info instead [ 256.331246][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.337595][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.646439][ T6021] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 266.136200][ T6021] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 266.154390][ T6021] usb 1-1: can't read configurations, error -71 [ 266.194585][ T6586] loop5: detected capacity change from 0 to 1024 [ 266.412445][ T6590] netlink: 'syz.4.568': attribute type 9 has an invalid length. [ 266.420217][ T6590] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.568'. [ 268.990330][ T6586] EXT4-fs (loop5): Mount option "journal_async_commit" incompatible with ext3 [ 269.098882][ T6609] loop1: detected capacity change from 0 to 256 [ 269.406202][ T6609] FAT-fs (loop1): Directory bread(block 64) failed [ 269.423660][ T6609] FAT-fs (loop1): Directory bread(block 65) failed [ 270.292788][ T6609] FAT-fs (loop1): Directory bread(block 66) failed [ 270.331404][ T6609] FAT-fs (loop1): Directory bread(block 67) failed [ 270.368348][ T6609] FAT-fs (loop1): Directory bread(block 68) failed [ 270.375230][ T6609] FAT-fs (loop1): Directory bread(block 69) failed [ 270.408898][ T6616] io-wq is not configured for unbound workers [ 270.445823][ T6609] FAT-fs (loop1): Directory bread(block 70) failed [ 270.506504][ T6609] FAT-fs (loop1): Directory bread(block 71) failed [ 270.513225][ T6609] FAT-fs (loop1): Directory bread(block 72) failed [ 270.542792][ T6621] netlink: 'syz.4.581': attribute type 10 has an invalid length. [ 270.560952][ T6609] FAT-fs (loop1): Directory bread(block 73) failed [ 270.597417][ T6621] device wlan1 entered promiscuous mode [ 270.661486][ T6628] tipc: Enabled bearer , priority 0 [ 270.741026][ T263] block nbd3: Attempted send on invalid socket [ 270.748786][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.762964][ T6631] efs: cannot read volume header [ 270.785303][ T6628] device syzkaller0 entered promiscuous mode [ 270.806655][ T6628] tipc: Resetting bearer [ 270.816704][ T6624] tipc: Resetting bearer [ 270.842236][ T6624] tipc: Disabling bearer [ 271.015838][ T6021] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 271.773448][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 271.830567][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 271.976551][ T6021] usb 6-1: Using ep0 maxpacket: 32 [ 272.415995][ T6021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.583916][ T6021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.597099][ T6021] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 272.613273][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.654420][ T6021] usb 6-1: config 0 descriptor?? [ 272.723074][ T6021] hub 6-1:0.0: USB hub found [ 272.945508][ T6021] hub 6-1:0.0: 1 port detected [ 275.366815][ T4347] hub 6-1:0.0: activate --> -90 [ 275.502541][ T6679] loop1: detected capacity change from 0 to 512 [ 275.632888][ T6679] EXT4-fs (loop1): Unrecognized mount option "subj_user=)" or missing value [ 275.655013][ T4347] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 275.662331][ T4347] usb 6-1-port1: connect-debounce failed [ 275.688150][ T6021] usb 6-1: USB disconnect, device number 2 [ 277.566732][ T6694] tipc: Enabled bearer , priority 0 [ 277.665786][ T6697] loop3: detected capacity change from 0 to 256 [ 277.672919][ T6694] device syzkaller0 entered promiscuous mode [ 277.693716][ T6694] tipc: Resetting bearer [ 277.713995][ T6693] tipc: Resetting bearer [ 277.736854][ T6697] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 277.835336][ T6693] tipc: Disabling bearer [ 278.610418][ T6697] binfmt_misc: register: failed to install interpreter file ./file0 [ 280.454391][ T4347] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 280.854570][ T4347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 280.883488][ T4347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.911957][ T4347] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 280.960727][ T4347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.922411][ T6729] netlink: 'syz.4.610': attribute type 10 has an invalid length. [ 282.055054][ T4347] usb 4-1: config 0 descriptor?? [ 282.074688][ T4347] usb 4-1: can't set config #0, error -71 [ 282.100963][ T6731] loop1: detected capacity change from 0 to 512 [ 282.113247][ T4347] usb 4-1: USB disconnect, device number 6 [ 282.303985][ T6731] EXT4-fs (loop1): Ignoring removed nobh option [ 283.595707][ T6731] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.611: iget: bad i_size value: 38620345925642 [ 283.845597][ T6731] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.611: couldn't read orphan inode 15 (err -117) [ 283.870311][ T6731] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 285.588519][ T6770] loop5: detected capacity change from 0 to 128 [ 285.889199][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 285.898159][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 285.907047][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 288.781911][ T6802] xt_hashlimit: max too large, truncated to 1048576 [ 292.963415][ T6832] tipc: Started in network mode [ 292.968471][ T6832] tipc: Node identity aaae8145bc5a, cluster identity 4711 [ 293.040408][ T6832] tipc: Enabled bearer , priority 0 [ 294.372868][ T23] tipc: Node number set to 385122629 [ 294.452743][ T6843] device syzkaller0 entered promiscuous mode [ 294.604346][ T6832] tipc: Resetting bearer [ 294.745453][ T6830] tipc: Resetting bearer [ 294.766793][ T6830] tipc: Disabling bearer [ 298.864505][ T6863] loop1: detected capacity change from 0 to 2048 [ 298.983930][ T6863] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.308911][ T6872] loop3: detected capacity change from 0 to 1024 [ 300.504106][ T6872] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 300.531628][ T6872] EXT4-fs error (device loop3): ext4_get_journal_inode:5158: inode #32: comm syz.3.650: iget: special inode unallocated [ 300.727654][ T6883] device geneve2 entered promiscuous mode [ 300.738390][ T6872] EXT4-fs (loop3): no journal found [ 300.752012][ T6872] EXT4-fs (loop3): can't get journal size [ 300.779898][ T6872] EXT4-fs (loop3): filesystem is read-only [ 301.267358][ T6872] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 301.344986][ T6872] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.650: bad inode number: 12 [ 304.896498][ T6944] "syz.0.669" (6944) uses obsolete ecb(arc4) skcipher [ 305.756018][ T6946] loop3: detected capacity change from 0 to 512 [ 305.828094][ T6948] tipc: Started in network mode [ 305.836751][ T6948] tipc: Node identity bab350922957, cluster identity 4711 [ 305.854180][ T6948] tipc: Enabled bearer , priority 0 [ 305.867715][ T6948] device syzkaller0 entered promiscuous mode [ 305.922025][ T6946] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 305.945131][ T6948] tipc: Resetting bearer [ 306.000354][ T6947] tipc: Resetting bearer [ 306.030359][ T6947] tipc: Disabling bearer [ 306.742317][ T6946] loop3: detected capacity change from 0 to 256 [ 310.341583][ T6984] loop3: detected capacity change from 0 to 128 [ 311.879815][ T4453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.976102][ T6999] loop5: detected capacity change from 0 to 2048 [ 314.084116][ T3577] Bluetooth: hci2: command 0x0406 tx timeout [ 316.127028][ T4177] loop5: p4 < > [ 316.685392][ T6999] loop5: p4 < > [ 316.953498][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.960658][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.015814][ T7022] ipt_REJECT: TCP_RESET invalid for non-tcp [ 317.744190][ T4453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.079812][ T7034] QAT: failed to copy from user. [ 318.415177][ T4453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.474114][ T4199] udevd[4199]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 318.668464][ T4199] udevd[4199]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 318.707929][ T4453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.729382][ T7041] loop0: detected capacity change from 0 to 32768 [ 319.330217][ T7041] XFS (loop0): Mounting V5 Filesystem [ 319.986935][ T7061] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 320.224692][ T7041] XFS (loop0): Ending clean mount [ 320.236959][ T7064] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 320.260706][ T7041] XFS (loop0): Quotacheck needed: Please wait. [ 320.353682][ T7041] XFS (loop0): Quotacheck: Done. [ 320.383764][ T7064] kvm: pic: non byte read [ 321.783648][ T7064] kvm: pic: level sensitive irq not supported [ 321.783802][ T7064] kvm: pic: non byte read [ 321.945647][ T4191] XFS (loop0): Unmounting Filesystem [ 322.083100][ T7095] tipc: Started in network mode [ 322.098648][ T7095] tipc: Node identity 8ab7af48cdea, cluster identity 4711 [ 322.118620][ T7095] tipc: Enabled bearer , priority 0 [ 322.128477][ T7090] device syzkaller0 entered promiscuous mode [ 322.508273][ T7095] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 322.741497][ T7090] tipc: Resetting bearer [ 322.893860][ T7088] tipc: Resetting bearer [ 322.968382][ T7088] tipc: Disabling bearer [ 323.025703][ T7102] tipc: Enabled bearer , priority 0 [ 323.107313][ T7102] device syzkaller0 entered promiscuous mode [ 323.625086][ T7111] tipc: Resetting bearer [ 324.017390][ T7100] tipc: Resetting bearer [ 324.193278][ T7119] loop0: detected capacity change from 0 to 16 [ 324.263518][ T7100] tipc: Disabling bearer [ 324.386479][ T7119] erofs: (device loop0): mounted with root inode @ nid 36. [ 327.140290][ T7147] tipc: Enabled bearer , priority 0 [ 327.341354][ T7144] device syzkaller0 entered promiscuous mode [ 328.169138][ T7155] tipc: Enabled bearer , priority 0 [ 328.207698][ T4453] device hsr_slave_0 left promiscuous mode [ 328.234734][ T4453] device hsr_slave_1 left promiscuous mode [ 328.259176][ T4899] tipc: Node number set to 1197322056 [ 328.277394][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.295390][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.312958][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.329717][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.346298][ T4453] device vlan1 left promiscuous mode [ 328.357504][ T4453] device bond0 left promiscuous mode [ 328.371514][ T4453] device bond_slave_0 left promiscuous mode [ 328.387766][ T4453] device bond_slave_1 left promiscuous mode [ 328.398940][ T4453] device macvlan2 left promiscuous mode [ 328.405025][ T4453] bridge0: port 3(vlan1) entered disabled state [ 328.429891][ T4453] device bridge_slave_1 left promiscuous mode [ 328.446278][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.457471][ T4453] device bridge_slave_0 left promiscuous mode [ 328.476615][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.497318][ T4453] device team0 left promiscuous mode [ 328.506820][ T4453] device team_slave_0 left promiscuous mode [ 328.527148][ T4453] device team_slave_1 left promiscuous mode [ 328.536789][ T4453] device veth1_macvtap left promiscuous mode [ 328.543188][ T4453] device veth0_macvtap left promiscuous mode [ 328.549504][ T4453] device veth1_vlan left promiscuous mode [ 328.796061][ T7164] loop0: detected capacity change from 0 to 512 [ 328.808816][ T7164] EXT4-fs (loop0): Ignoring removed orlov option [ 328.894377][ T7164] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 328.908309][ T7164] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.938003][ T4453] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 328.949832][ T7170] loop5: detected capacity change from 0 to 128 [ 328.986075][ T7170] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 329.007291][ T7170] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.029302][ T4453] team0 (unregistering): Port device bridge1 removed [ 331.714820][ T4453] team0 (unregistering): Port device team_slave_1 removed [ 331.726846][ T4453] team0 (unregistering): Port device team_slave_0 removed [ 331.739065][ T4453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.169061][ T4453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.853210][ T7186] loop5: detected capacity change from 0 to 128 [ 333.749186][ T4453] bond0 (unregistering): Released all slaves [ 334.062395][ T7186] EXT4-fs (loop5): Ignoring removed nobh option [ 334.078801][ T7186] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 334.091052][ T7186] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.101944][ T7143] tipc: Resetting bearer [ 334.145742][ T7143] tipc: Disabling bearer [ 334.161216][ T7152] tipc: Disabling bearer [ 334.176718][ T7164] device geneve2 entered promiscuous mode [ 334.433096][ T7198] loop1: detected capacity change from 0 to 512 [ 334.439932][ T4899] Bluetooth: hci4: command 0x0406 tx timeout [ 336.616046][ T7198] EXT4-fs (loop1): Ignoring removed nobh option [ 336.632969][ T7198] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 339.155475][ T7230] netlink: 'syz.5.733': attribute type 16 has an invalid length. [ 339.163382][ T7230] netlink: 'syz.5.733': attribute type 17 has an invalid length. [ 339.179232][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.186697][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.638206][ T7230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.865544][ T7226] rdma_op ffff88802051d9f0 conn xmit_rdma 0000000000000000 [ 339.891618][ T7198] EXT4-fs: error -4 creating inode table initialization thread [ 339.957690][ T7198] EXT4-fs (loop1): mount failed [ 343.162427][ T7245] loop5: detected capacity change from 0 to 1024 [ 343.576689][ T7248] loop0: detected capacity change from 0 to 40427 [ 344.329923][ T7248] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 344.337747][ T7248] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 344.357611][ T7248] F2FS-fs (loop0): invalid crc value [ 344.365528][ T7245] hfsplus: request for non-existent node 62977 in B*Tree [ 344.373096][ T7245] hfsplus: request for non-existent node 62977 in B*Tree [ 344.410332][ T7248] F2FS-fs (loop0): Found nat_bits in checkpoint [ 344.473700][ T7248] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 344.480884][ T7248] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 346.995311][ T154] hfsplus: b-tree write err: -5, ino 3 [ 351.384618][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'. [ 351.393614][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 351.406480][ T7310] netlink: 'syz.1.757': attribute type 10 has an invalid length. [ 352.006426][ T7310] bond0: (slave team0): Releasing backup interface [ 352.286788][ T7310] bridge0: port 4(team0) entered blocking state [ 352.293136][ T7310] bridge0: port 4(team0) entered disabled state [ 352.741308][ T7310] device team0 entered promiscuous mode [ 352.765950][ T7310] device team_slave_0 entered promiscuous mode [ 352.787890][ T7310] device team_slave_1 entered promiscuous mode [ 352.816599][ T7317] tipc: Started in network mode [ 352.821518][ T7317] tipc: Node identity 080211, cluster identity 4711 [ 352.836146][ T7317] tipc: Enabled bearer , priority 0 [ 352.855973][ T7323] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 353.956373][ T7] tipc: Node number set to 134353152 [ 355.942832][ T7363] loop1: detected capacity change from 0 to 64 [ 359.490935][ T7385] tipc: Enabled bearer , priority 0 [ 359.536717][ T7385] device syzkaller0 entered promiscuous mode [ 360.637340][ T4293] tipc: Node number set to 2481213586 [ 360.737801][ T7384] tipc: Resetting bearer [ 362.578098][ T7384] tipc: Disabling bearer [ 364.199871][ T7428] loop3: detected capacity change from 0 to 512 [ 364.518185][ T7428] EXT4-fs (loop3): Ignoring removed oldalloc option [ 365.376416][ T7441] overlayfs: failed to clone upperpath [ 365.886473][ T7428] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.782: Parent and EA inode have the same ino 15 [ 365.926155][ T7428] EXT4-fs (loop3): Remounting filesystem read-only [ 366.018089][ T7428] EXT4-fs (loop3): 1 orphan inode deleted [ 366.023869][ T7428] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x0000000000000000,. Quota mode: none. [ 366.069895][ T7448] tipc: Enabled bearer , priority 0 [ 367.824813][ T4347] Bluetooth: hci5: command 0x0409 tx timeout [ 368.061319][ T7455] tipc: Disabling bearer [ 369.891335][ T7484] tipc: Enabling of bearer rejected, already enabled [ 370.038948][ T7483] loop1: detected capacity change from 0 to 4096 [ 370.141704][ T7483] ntfs3: Unknown parameter 'ńÓřź{őggŸç7ßçřĚĚóؙçëşăjÖŻT/>>>ž°' [ 370.603455][ T6019] Bluetooth: hci5: command 0x041b tx timeout [ 370.670535][ T7435] chnl_net:caif_netlink_parms(): no params data found [ 371.444464][ T4453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.579183][ T7517] delete_channel: no stack [ 371.610956][ T7519] loop1: detected capacity change from 0 to 512 [ 371.884284][ T7519] EXT4-fs (loop1): Ignoring removed oldalloc option [ 371.915599][ T7519] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.799: Parent and EA inode have the same ino 15 [ 371.977416][ T7519] EXT4-fs (loop1): Remounting filesystem read-only [ 372.637630][ T6016] Bluetooth: hci5: command 0x040f tx timeout [ 373.004029][ T7519] EXT4-fs (loop1): 1 orphan inode deleted [ 373.009796][ T7519] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x0000000000000000,. Quota mode: none. [ 373.053867][ T4453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.186201][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.238119][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.269557][ T7435] device bridge_slave_0 entered promiscuous mode [ 373.300264][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.316123][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.324929][ T7435] device bridge_slave_1 entered promiscuous mode [ 373.354477][ T7546] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 373.397554][ T4453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.449464][ T7435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.469971][ T7435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.603865][ T7435] team0: Port device team_slave_0 added [ 373.661475][ T7435] team0: Port device team_slave_1 added [ 374.487544][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.808'. [ 374.525417][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 374.645931][ T7562] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 374.674053][ T7562] bridge0: port 3(team0) entered blocking state [ 374.690673][ T7562] bridge0: port 3(team0) entered disabled state [ 374.703432][ T6016] Bluetooth: hci5: command 0x0419 tx timeout [ 374.713001][ T7562] device team0 entered promiscuous mode [ 374.723804][ T7562] device team_slave_0 entered promiscuous mode [ 374.736662][ T7562] device team_slave_1 entered promiscuous mode [ 374.744018][ T7562] bridge0: port 3(team0) entered blocking state [ 374.750308][ T7562] bridge0: port 3(team0) entered forwarding state [ 374.769165][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.777520][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.923202][ T7435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.219641][ T4453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.441218][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.458754][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.559330][ T7435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.641791][ T7588] tipc: Enabling of bearer rejected, already enabled [ 375.803901][ T7435] device hsr_slave_0 entered promiscuous mode [ 375.883804][ T7435] device hsr_slave_1 entered promiscuous mode [ 375.912526][ T7435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.957526][ T7435] Cannot create hsr debugfs directory [ 376.259080][ T7589] tipc: Enabled bearer , priority 0 [ 376.268360][ T7596] device syzkaller0 entered promiscuous mode [ 376.447203][ T7596] tipc: Resetting bearer [ 377.129242][ T7596] tipc: Disabling bearer [ 378.029520][ T7625] loop5: detected capacity change from 0 to 2048 [ 378.107127][ T7625] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.270126][ T4453] tipc: Left network mode [ 378.386394][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.393771][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.875822][ T7435] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.904782][ T7435] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.923224][ T7435] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 379.682871][ T7435] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.134008][ T7654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.822'. [ 380.146285][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'. [ 380.162443][ T7666] netlink: 'syz.5.822': attribute type 10 has an invalid length. [ 380.170925][ T7666] bridge0: port 3(team0) entered blocking state [ 380.177441][ T7666] bridge0: port 3(team0) entered disabled state [ 381.177035][ T7666] device team0 entered promiscuous mode [ 381.236755][ T7666] device team_slave_0 entered promiscuous mode [ 381.255470][ T7666] device team_slave_1 entered promiscuous mode [ 381.266812][ T7666] bridge0: port 3(team0) entered blocking state [ 381.273169][ T7666] bridge0: port 3(team0) entered forwarding state [ 381.295141][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.319633][ T7435] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.490607][ T7673] loop1: detected capacity change from 0 to 40427 [ 381.529838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 381.544439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 381.557910][ T7673] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 381.565862][ T7673] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 381.577296][ T7673] F2FS-fs (loop1): invalid crc value [ 381.583631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 381.593065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 381.601778][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.608885][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.620691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 381.633348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.641831][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.648955][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.658200][ T7673] F2FS-fs (loop1): Found nat_bits in checkpoint [ 381.689790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 381.703905][ T7673] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 381.705181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 381.710978][ T7673] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 381.917267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 382.943933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.194669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.281192][ T7692] xt_socket: unknown flags 0x8 [ 383.786999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.577781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.731784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.788025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 384.827373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.918439][ T7435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.971583][ T7697] netlink: 'syz.4.835': attribute type 10 has an invalid length. [ 385.160908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.189485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.485854][ T7723] 9pnet: p9_fd_create_unix (7723): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 386.810351][ T7725] "syz.4.839" (7725) uses obsolete ecb(arc4) skcipher [ 387.675215][ T7726] loop1: detected capacity change from 0 to 2048 [ 388.569606][ T7726] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.909500][ T7734] tipc: Enabling of bearer rejected, already enabled [ 388.944629][ T7740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 389.030980][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.674377][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 389.909028][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.331853][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.409576][ T7435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.118937][ T7788] "syz.5.852" (7788) uses obsolete ecb(arc4) skcipher [ 392.699336][ T7786] loop3: detected capacity change from 0 to 1024 [ 392.988718][ T4453] device hsr_slave_0 left promiscuous mode [ 393.018821][ T4453] device hsr_slave_1 left promiscuous mode [ 393.043896][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.067283][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.100461][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.108873][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.117788][ T4453] device vlan2 left promiscuous mode [ 393.124302][ T4453] device bond0 left promiscuous mode [ 393.129681][ T4453] device bond_slave_0 left promiscuous mode [ 393.137159][ T4453] device bond_slave_1 left promiscuous mode [ 393.148047][ T4453] device macvlan2 left promiscuous mode [ 393.157548][ T4453] bridge0: port 3(vlan2) entered disabled state [ 393.505578][ T4453] device bridge_slave_1 left promiscuous mode [ 393.610807][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.773421][ T4453] device bridge_slave_0 left promiscuous mode [ 393.797060][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.812109][ T4453] device team0 left promiscuous mode [ 393.817473][ T4453] device team_slave_0 left promiscuous mode [ 393.838585][ T4453] device team_slave_1 left promiscuous mode [ 393.853488][ T4453] device veth1_macvtap left promiscuous mode [ 393.859565][ T4453] device veth0_macvtap left promiscuous mode [ 393.872993][ T4453] device veth1_vlan left promiscuous mode [ 393.878871][ T4453] device veth0_vlan left promiscuous mode [ 394.036543][ T4453] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 394.119411][ T4453] team0 (unregistering): Port device team_slave_1 removed [ 394.135433][ T4453] team0 (unregistering): Port device team_slave_0 removed [ 394.149551][ T4453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.165075][ T4453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.229478][ T4453] bond0 (unregistering): Released all slaves [ 394.307889][ T7793] tipc: Enabled bearer , priority 0 [ 394.323195][ T7797] device syzkaller0 entered promiscuous mode [ 394.456459][ T4452] hfsplus: b-tree write err: -5, ino 8 [ 394.479232][ T7797] tipc: Resetting bearer [ 394.593552][ T7797] tipc: Disabling bearer [ 394.665775][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 394.692038][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.356026][ T7844] loop1: detected capacity change from 0 to 128 [ 395.430617][ T7435] device veth0_vlan entered promiscuous mode [ 395.560109][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 395.585717][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.621132][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.644705][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.730825][ T7435] device veth1_vlan entered promiscuous mode [ 397.220876][ T7865] "syz.5.864" (7865) uses obsolete ecb(arc4) skcipher [ 398.387330][ T7876] netlink: 'syz.1.866': attribute type 29 has an invalid length. [ 399.518311][ T7435] device veth0_macvtap entered promiscuous mode [ 399.648930][ T7435] device veth1_macvtap entered promiscuous mode [ 399.664514][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 399.748776][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 399.812551][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.937538][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 401.154330][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.279290][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.382117][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.496376][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.552734][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.563431][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.608935][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.723782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.780763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.791443][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.817937][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.835742][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.847557][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.866865][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.885842][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.899159][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.934252][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.946123][ T7899] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 402.016555][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 402.044196][ T7435] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.308943][ T7435] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.333928][ T7908] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 403.360125][ T7908] netlink: 224 bytes leftover after parsing attributes in process `syz.1.873'. [ 403.362928][ T7435] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.394357][ T7435] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.433039][ T7914] tipc: Enabled bearer , priority 0 [ 403.491316][ T7909] device syzkaller0 entered promiscuous mode [ 403.534581][ T7908] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 403.643046][ T7908] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 403.686999][ T7909] tipc: Resetting bearer [ 403.940578][ T7907] tipc: Resetting bearer [ 404.096784][ T7907] tipc: Disabling bearer [ 404.218605][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.274119][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.444580][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 404.878683][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.919899][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.931404][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.326511][ T7979] tipc: Enabled bearer , priority 0 [ 409.334873][ T7979] device syzkaller0 entered promiscuous mode [ 409.371828][ T7979] tipc: Resetting bearer [ 409.633663][ T7977] tipc: Resetting bearer [ 410.473712][ T7977] tipc: Disabling bearer [ 415.681435][ T8038] loop3: detected capacity change from 0 to 2048 [ 415.983483][ T8041] loop5: detected capacity change from 0 to 40427 [ 415.991147][ T8044] "syz.6.903" (8044) uses obsolete ecb(arc4) skcipher [ 416.105117][ T8038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.181689][ T8041] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 416.189687][ T8041] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 416.422412][ T8041] F2FS-fs (loop5): invalid crc value [ 416.517431][ T8041] F2FS-fs (loop5): Found nat_bits in checkpoint [ 416.608061][ T8041] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 416.615239][ T8041] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 416.888436][ T8056] tipc: Enabling of bearer rejected, failed to enable media [ 417.518765][ T26] audit: type=1800 audit(1755590700.133:45): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.904" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 418.236018][ T8069] delete_channel: no stack [ 421.428747][ T8098] loop6: detected capacity change from 0 to 32768 [ 422.224064][ T8098] XFS (loop6): Mounting V5 Filesystem [ 422.405469][ T8098] XFS (loop6): Ending clean mount [ 422.466523][ T8098] XFS (loop6): Quotacheck needed: Please wait. [ 423.204442][ T8125] overlayfs: failed to clone upperpath [ 423.587963][ T8098] XFS (loop6): Quotacheck: Done. [ 424.490480][ T7435] XFS (loop6): Unmounting Filesystem [ 425.115117][ T8134] tipc: Enabled bearer , priority 0 [ 425.328582][ T8134] device syzkaller0 entered promiscuous mode [ 425.774852][ T8156] tipc: Resetting bearer [ 426.052360][ T8154] tipc: Enabled bearer , priority 0 [ 426.080723][ T8154] device syzkaller0 entered promiscuous mode [ 426.144254][ T8131] tipc: Resetting bearer [ 426.218457][ T8131] tipc: Disabling bearer [ 426.260147][ T8149] tipc: Resetting bearer [ 426.298498][ T8148] tipc: Resetting bearer [ 426.319628][ T8148] tipc: Disabling bearer [ 428.743050][ T8189] loop6: detected capacity change from 0 to 128 [ 429.328822][ T8189] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 429.373180][ T8189] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 432.639789][ T8219] tipc: Enabling of bearer rejected, already enabled [ 432.715830][ T8221] "syz.1.937" (8221) uses obsolete ecb(arc4) skcipher [ 434.290754][ T8236] tipc: Started in network mode [ 434.327425][ T8236] tipc: Node identity ea1bd21a4f7, cluster identity 4711 [ 434.416621][ T8236] tipc: Enabled bearer , priority 0 [ 434.649934][ T8236] device syzkaller0 entered promiscuous mode [ 435.084519][ T8236] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 435.217111][ T8236] tipc: Resetting bearer [ 435.718049][ T7] tipc: Node number set to 2775306778 [ 435.812917][ T8232] tipc: Resetting bearer [ 435.914437][ T8232] tipc: Disabling bearer [ 437.723275][ T8275] tipc: Enabled bearer , priority 0 [ 437.749953][ T8275] tipc: Resetting bearer [ 437.787083][ T8271] tipc: Disabling bearer [ 437.819180][ T8284] "syz.4.954" (8284) uses obsolete ecb(arc4) skcipher [ 439.746986][ T8307] loop6: detected capacity change from 0 to 64 [ 439.819949][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.826337][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.877635][ T8313] loop5: detected capacity change from 0 to 4096 [ 443.806938][ T8357] loop3: detected capacity change from 0 to 1024 [ 444.031173][ T8367] "syz.4.968" (8367) uses obsolete ecb(arc4) skcipher [ 444.905310][ T8354] Can't find ip_set type hash:net, [ 445.076707][ T154] hfsplus: b-tree write err: -5, ino 4 [ 449.633943][ T8434] netlink: 216 bytes leftover after parsing attributes in process `syz.5.985'. [ 452.386647][ T8472] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 452.750377][ T8472] Cannot find set identified by id 0 to match [ 456.474781][ T8522] loop3: detected capacity change from 0 to 4096 [ 456.535236][ T8536] tipc: Enabling of bearer rejected, already enabled [ 456.728193][ T8532] loop6: detected capacity change from 0 to 32768 [ 456.805322][ T8532] XFS: ikeep mount option is deprecated. [ 456.831938][ T8522] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 457.146850][ T8532] XFS (loop6): Mounting V5 Filesystem [ 459.272963][ T8532] XFS (loop6): Ending clean mount [ 459.281386][ T8532] XFS (loop6): Quotacheck needed: Please wait. [ 459.333268][ T8532] XFS (loop6): Quotacheck: Done. [ 459.553074][ T8569] "syz.4.1011" (8569) uses obsolete ecb(arc4) skcipher [ 459.666362][ T7435] XFS (loop6): Unmounting Filesystem [ 460.442860][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'. [ 460.614339][ T8574] bridge1: port 1(vlan2) entered blocking state [ 460.633805][ T8574] bridge1: port 1(vlan2) entered disabled state [ 460.660173][ T8574] device vlan2 entered promiscuous mode [ 460.665819][ T8574] device bridge0 entered promiscuous mode [ 460.687356][ T8574] device gretap1 entered promiscuous mode [ 460.699664][ T8574] bridge1: port 2(gretap1) entered blocking state [ 460.707062][ T8574] bridge1: port 2(gretap1) entered disabled state [ 462.889775][ T8601] "syz.6.1024" (8601) uses obsolete ecb(arc4) skcipher [ 463.869437][ T8608] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1021'. [ 466.741364][ T8637] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1026'. [ 467.790505][ T8641] loop5: detected capacity change from 0 to 128 [ 469.158816][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1032'. [ 469.265663][ T8655] loop1: detected capacity change from 0 to 40427 [ 469.367714][ T8655] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 469.375724][ T8655] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 469.778811][ T8655] F2FS-fs (loop1): invalid crc value [ 469.926483][ T8655] F2FS-fs (loop1): Found nat_bits in checkpoint [ 470.040750][ T8655] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 470.049143][ T8655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 471.659510][ T8683] netlink: 'syz.4.1037': attribute type 10 has an invalid length. [ 472.007545][ T8698] device syzkaller0 entered promiscuous mode [ 472.571780][ T8691] tipc: Enabled bearer , priority 0 [ 474.026605][ T8701] tipc: Resetting bearer [ 474.245027][ T8718] loop1: detected capacity change from 0 to 2364 [ 474.471108][ T8701] tipc: Disabling bearer [ 475.261229][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 479.922553][ T8779] loop6: detected capacity change from 0 to 256 [ 479.951728][ T8778] tipc: Enabled bearer , priority 0 [ 480.014093][ T8783] device syzkaller0 entered promiscuous mode [ 480.221694][ T8783] tipc: Resetting bearer [ 480.288893][ T8776] tipc: Resetting bearer [ 480.337641][ T8759] "syz.3.1054" (8759) uses obsolete ecb(arc4) skcipher [ 480.405209][ T8776] tipc: Disabling bearer [ 480.638276][ T8791] loop1: detected capacity change from 0 to 256 [ 480.665860][ T8794] netlink: 'syz.4.1061': attribute type 10 has an invalid length. [ 480.679692][ T8794] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.702023][ T8791] FAT-fs (loop1): Unrecognized mount option "sh¤hortname=mixed" or missing value [ 481.054154][ T8794] device team0 entered promiscuous mode [ 481.304941][ T8794] device team_slave_0 entered promiscuous mode [ 482.271386][ T8794] device team_slave_1 entered promiscuous mode [ 482.755716][ T8808] loop5: detected capacity change from 0 to 40427 [ 483.019820][ T8808] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 483.027748][ T8808] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 483.163762][ T8808] F2FS-fs (loop5): Found nat_bits in checkpoint [ 483.491092][ T8822] loop1: detected capacity change from 0 to 40427 [ 483.520773][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1070'. [ 483.535375][ T8808] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 483.542557][ T8808] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 483.549289][ T8822] F2FS-fs (loop1): invalid crc value [ 483.813709][ T8822] F2FS-fs (loop1): Found nat_bits in checkpoint [ 483.873087][ T8822] F2FS-fs (loop1): Start checkpoint disabled! [ 484.007525][ T8822] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 484.387880][ T8839] netlink: 'syz.4.1071': attribute type 12 has an invalid length. [ 485.786067][ T8847] tipc: Enabled bearer , priority 0 [ 487.982150][ T8853] tipc: Disabling bearer [ 488.760730][ T8870] loop3: detected capacity change from 0 to 128 [ 488.954338][ T8870] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 488.982001][ T8870] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.271321][ T4452] attempt to access beyond end of device [ 489.271321][ T4452] loop1: rw=2049, want=40968, limit=40427 [ 493.376173][ T6023] Bluetooth: hci5: command 0x0406 tx timeout [ 493.629912][ T8502] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 495.098610][ T8947] "syz.1.1079" (8947) uses obsolete ecb(arc4) skcipher [ 495.345689][ T8952] loop3: detected capacity change from 0 to 512 [ 495.416364][ T8952] EXT4-fs (loop3): Ignoring removed nobh option [ 495.537866][ T8952] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1094: iget: bad i_size value: 38620345925642 [ 495.582923][ T8952] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1094: couldn't read orphan inode 15 (err -117) [ 495.645436][ T8952] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 495.699749][ T8502] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.299812][ T8956] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 496.538554][ T8502] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 496.547733][ T8502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.778029][ T8502] usb 6-1: config 0 descriptor?? [ 496.839086][ T8502] usb 6-1: can't set config #0, error -71 [ 497.399756][ T8502] usb 6-1: USB disconnect, device number 3 [ 497.410697][ T8972] loop5: detected capacity change from 0 to 256 [ 497.485750][ T8972] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x52218cae, utbl_chksum : 0xe619d30d) [ 498.138663][ T8983] bridge0: port 3(netdevsim0) entered blocking state [ 498.146013][ T8983] bridge0: port 3(netdevsim0) entered disabled state [ 498.158858][ T8983] device netdevsim0 entered promiscuous mode [ 498.166139][ T8983] bridge0: port 3(netdevsim0) entered blocking state [ 498.173437][ T8983] bridge0: port 3(netdevsim0) entered forwarding state [ 498.966569][ T8996] loop6: detected capacity change from 0 to 4096 [ 499.113350][ T8996] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 500.215950][ T9006] "syz.1.1105" (9006) uses obsolete ecb(arc4) skcipher [ 500.908272][ T9008] loop5: detected capacity change from 0 to 1024 [ 501.369072][ T9015] loop1: detected capacity change from 0 to 512 [ 501.642066][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.656665][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.988691][ T9015] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 502.001426][ T9015] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.638841][ T9033] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1109'. [ 502.648369][ T9033] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 505.438927][ T9062] "syz.6.1116" (9062) uses obsolete ecb(arc4) skcipher [ 508.442828][ T9083] netlink: 'syz.3.1123': attribute type 1 has an invalid length. [ 508.483144][ T9085] mmap: syz.4.1124 (9085) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 508.534488][ T9085] gfs2: gfs2 mount does not exist [ 508.587289][ T9083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.649659][ T9086] device vlan3 entered promiscuous mode [ 508.679845][ T9086] device bond1 entered promiscuous mode [ 508.784711][ T9089] bond1: (slave gretap2): making interface the new active one [ 508.839509][ T9089] device gretap2 entered promiscuous mode [ 508.885238][ T9089] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 509.097231][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 509.151311][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 510.770201][ T9109] bridge0: port 1(netdevsim0) entered blocking state [ 510.777204][ T9109] bridge0: port 1(netdevsim0) entered disabled state [ 510.786131][ T9109] device netdevsim0 entered promiscuous mode [ 510.792749][ T9109] bridge0: port 1(netdevsim0) entered blocking state [ 510.799532][ T9109] bridge0: port 1(netdevsim0) entered forwarding state [ 511.157194][ T9124] "syz.6.1129" (9124) uses obsolete ecb(arc4) skcipher [ 512.932110][ T9137] loop3: detected capacity change from 0 to 128 [ 515.027082][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1150'. [ 515.119497][ T9153] loop1: detected capacity change from 0 to 4096 [ 518.443192][ T9185] "syz.1.1144" (9185) uses obsolete ecb(arc4) skcipher [ 519.553967][ T9196] dccp_v4_rcv: dropped packet with invalid checksum [ 519.998793][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 520.247207][ T9203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 522.094867][ T9237] "syz.3.1159" (9237) uses obsolete ecb(arc4) skcipher [ 522.132846][ T9232] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 522.853870][ T9246] loop3: detected capacity change from 0 to 128 [ 523.687041][ T9246] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3. [ 523.762156][ T9254] loop1: detected capacity change from 0 to 128 [ 524.811488][ T9254] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 524.822391][ T9254] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.025913][ T9270] "syz.6.1166" (9270) uses obsolete ecb(arc4) skcipher [ 528.938122][ T9298] "syz.4.1173" (9298) uses obsolete ecb(arc4) skcipher [ 532.094904][ T9322] loop5: detected capacity change from 0 to 64 [ 533.649540][ T9329] Process accounting resumed [ 534.856731][ T9336] device wg2 entered promiscuous mode [ 539.896501][ T9386] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 542.478054][ T9414] hugetlbfs: syz.3.1203 (9414): Using mlock ulimits for SHM_HUGETLB is deprecated [ 545.165214][ T9431] gfs2: gfs2 mount does not exist [ 546.472943][ T9474] "syz.1.1220" (9474) uses obsolete ecb(arc4) skcipher [ 546.926424][ T9482] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 553.582759][ T9539] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1225'. [ 555.321101][ T9565] loop1: detected capacity change from 0 to 40427 [ 555.827817][ T9572] loop5: detected capacity change from 0 to 512 [ 556.075402][ T9565] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 556.083318][ T9565] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 556.103405][ T9565] F2FS-fs (loop1): invalid crc value [ 556.110576][ T9572] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 557.147651][ T9572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 557.186720][ T9572] System zones: 1-12 [ 557.413462][ T9572] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 557.413462][ T9572] [ 557.473047][ T9565] F2FS-fs (loop1): Found nat_bits in checkpoint [ 557.525264][ T9565] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 557.532402][ T9565] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 557.587587][ T9572] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 557.633758][ T9588] attempt to access beyond end of device [ 557.633758][ T9588] loop1: rw=2049, want=78344, limit=40427 [ 557.682010][ T9572] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 559.009796][ T9603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1239'. [ 562.056387][ T9642] loop1: detected capacity change from 0 to 128 [ 562.882621][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.889105][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.165918][ T9642] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 563.176224][ T9647] "syz.6.1242" (9647) uses obsolete ecb(arc4) skcipher [ 563.746189][ T9642] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 563.783360][ T9655] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 563.861422][ T9660] "syz.5.1248" (9660) uses obsolete ecb(arc4) skcipher [ 563.876181][ T9642] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 565.230099][ T9674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1252'. [ 565.520595][ T9670] orangefs_mount: mount request failed with -4 [ 565.843935][ T9686] netlink: 'syz.4.1253': attribute type 9 has an invalid length. [ 565.851856][ T9686] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1253'. [ 569.196719][ T9726] loop6: detected capacity change from 0 to 128 [ 569.480067][ T9730] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 569.507065][ T9730] device virt_wifi0 entered promiscuous mode [ 569.516570][ T9730] team0: Port device virt_wifi0 added [ 570.200766][ T9726] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 570.301235][ T9726] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 570.752359][ T9744] block device autoloading is deprecated and will be removed. [ 570.988840][ T9749] "syz.4.1264" (9749) uses obsolete ecb(arc4) skcipher [ 571.204853][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 573.043193][ T9775] loop6: detected capacity change from 0 to 64 [ 573.317875][ T9784] loop5: detected capacity change from 0 to 16 [ 573.544954][ T9784] erofs: (device loop5): mounted with root inode @ nid 36. [ 573.564103][ T4192] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 573.590370][ T9784] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 573.614727][ T26] audit: type=1800 audit(1755591112.251:46): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1273" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 574.116645][ T9797] "syz.6.1274" (9797) uses obsolete ecb(arc4) skcipher [ 574.483393][ T9804] "syz.1.1271" (9804) uses obsolete ecb(arc4) skcipher [ 575.447967][ T9815] tipc: Enabling of bearer rejected, failed to enable media [ 577.469694][ T9849] "syz.6.1290" (9849) uses obsolete ecb(arc4) skcipher [ 577.617673][ T9852] loop1: detected capacity change from 0 to 512 [ 577.757056][ T9852] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 577.773359][ T9852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 577.810688][ T9852] System zones: 1-12 [ 577.815679][ T9852] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 577.815679][ T9852] [ 577.826609][ T9852] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 577.840851][ T9852] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 579.311675][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 582.114345][ T9912] loop6: detected capacity change from 0 to 512 [ 582.168170][ T9912] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 582.261114][ T9912] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1301: invalid indirect mapped block 4294967295 (level 1) [ 582.289443][ T9912] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1301: invalid indirect mapped block 4294967295 (level 1) [ 582.324732][ T9912] EXT4-fs (loop6): 2 truncates cleaned up [ 582.330648][ T9912] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 582.988437][ T9908] "syz.4.1299" (9908) uses obsolete ecb(arc4) skcipher [ 584.389631][ T9936] "syz.3.1298" (9936) uses obsolete ecb(arc4) skcipher [ 585.180168][ T9940] overlayfs: failed to clone lowerpath [ 586.476672][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1308'. [ 586.486749][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1308'. [ 589.423903][ T9968] loop1: detected capacity change from 0 to 512 [ 589.632730][ T9968] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 590.532154][ T9971] "syz.5.1315" (9971) uses obsolete ecb(arc4) skcipher [ 591.667616][ T9992] No such timeout policy "syz0" [ 593.624514][ T9997] loop1: detected capacity change from 0 to 64 [ 593.726686][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1322'. [ 593.809414][T10001] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 593.867785][T10003] tipc: Enabled bearer , priority 0 [ 593.883475][T10003] device syzkaller0 entered promiscuous mode [ 593.935009][T10003] tipc: Resetting bearer [ 593.953186][T10002] tipc: Resetting bearer [ 594.027245][T10002] tipc: Disabling bearer [ 596.247030][T10030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1331'. [ 599.124008][T10044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1336'. [ 599.567914][T10048] netlink: 'syz.5.1337': attribute type 9 has an invalid length. [ 599.575781][T10048] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1337'. [ 604.729784][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1345'. [ 610.295910][T10124] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1355'. [ 612.170464][T10128] syz.3.1356 (10128): drop_caches: 2 [ 612.196299][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1357'. [ 612.245072][T10133] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1357'. [ 612.812519][T10142] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1360'. [ 615.221892][T10163] loop6: detected capacity change from 0 to 256 [ 616.589641][T10163] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 616.600455][T10163] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 616.617446][T10163] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 618.865755][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1374'. [ 619.699628][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1374'. [ 621.444577][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1380'. [ 621.686060][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1380'. [ 624.148919][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.162747][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.539576][T10249] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.548989][T10249] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.558000][T10249] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.566799][T10249] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.838222][T10249] team0: Port device vxlan0 added [ 626.035159][T10253] netlink: 'syz.5.1389': attribute type 10 has an invalid length. [ 626.069578][T10253] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1389'. [ 626.134473][T10253] batman_adv: batadv0: Adding interface: virt_wifi0 [ 626.163821][T10253] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 626.214522][T10253] batman_adv: batadv0: Interface activated: virt_wifi0 [ 627.609161][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 628.140669][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 628.185912][T10260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1392'. [ 628.426531][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'. [ 629.606584][ T26] audit: type=1326 audit(1755591168.258:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.5.1393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc5297bbe9 code=0x0 [ 629.723759][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 629.766040][T10284] loop3: detected capacity change from 0 to 2048 [ 630.071915][T10284] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 630.157754][T10296] "syz.6.1395" (10296) uses obsolete ecb(arc4) skcipher [ 630.461489][T10298] device vlan2 left promiscuous mode [ 630.488964][T10298] device bond0 left promiscuous mode [ 630.509200][T10298] device bond_slave_0 left promiscuous mode [ 630.529588][T10298] device bond_slave_1 left promiscuous mode [ 630.579586][T10298] bridge0: port 3(vlan2) entered disabled state [ 631.380456][T10298] device bridge_slave_1 left promiscuous mode [ 631.462685][T10298] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.566403][T10298] device bridge_slave_0 left promiscuous mode [ 631.572672][T10298] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.849465][T10308] loop3: detected capacity change from 0 to 32768 [ 631.857837][T10310] "syz.1.1402" (10310) uses obsolete ecb(arc4) skcipher [ 631.894208][T10308] XFS: ikeep mount option is deprecated. [ 632.137686][T10308] XFS (loop3): Mounting V5 Filesystem [ 633.507058][T10308] XFS (loop3): Ending clean mount [ 633.604385][T10308] XFS (loop3): Quotacheck needed: Please wait. [ 634.116971][T10308] XFS (loop3): Quotacheck: Done. [ 634.348836][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 637.679975][ T5992] XFS (loop3): Unmounting Filesystem [ 638.632980][T10375] "syz.5.1418" (10375) uses obsolete ecb(arc4) skcipher [ 639.172531][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1423'. [ 639.198227][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 641.814277][T10402] loop6: detected capacity change from 0 to 4096 [ 641.948399][T10402] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 642.090432][T10402] ntfs3: loop6: Failed to load $Extend. [ 643.702554][ T26] audit: type=1800 audit(1755591182.350:48): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1430" name="file2" dev="loop6" ino=31 res=0 errno=0 [ 645.882914][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1436'. [ 646.121465][T10429] overlayfs: failed to clone upperpath [ 646.320988][T10417] "syz.3.1432" (10417) uses obsolete ecb(arc4) skcipher [ 646.430944][T10441] "syz.1.1433" (10441) uses obsolete ecb(arc4) skcipher [ 647.088022][T10449] overlayfs: failed to clone upperpath [ 648.904957][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 651.249774][T10488] loop3: detected capacity change from 0 to 4096 [ 652.570469][T10500] loop3: detected capacity change from 0 to 512 [ 652.658753][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1458'. [ 652.703421][T10500] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1456: casefold flag without casefold feature [ 652.920028][T10500] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1456: couldn't read orphan inode 15 (err -117) [ 652.951403][T10500] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 665.463076][T10607] xt_CT: You must specify a L4 protocol and not use inversions on it [ 666.827990][T10620] "syz.1.1486" (10620) uses obsolete ecb(arc4) skcipher [ 667.229845][T10627] "syz.4.1491" (10627) uses obsolete ecb(arc4) skcipher [ 670.851592][T10643] bridge0: port 1(netdevsim0) entered disabled state [ 670.858422][T10643] bridge0: port 3(team0) entered disabled state [ 670.864908][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.003288][T10643] device netdevsim0 left promiscuous mode [ 671.028084][T10643] bridge0: port 1(netdevsim0) entered disabled state [ 671.134519][T10643] device team0 left promiscuous mode [ 671.285302][T10643] device team_slave_0 left promiscuous mode [ 671.589426][T10643] device team_slave_1 left promiscuous mode [ 671.705946][T10643] bridge0: port 3(team0) entered disabled state [ 672.323536][T10643] device bridge_slave_1 left promiscuous mode [ 672.332501][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.470616][T10678] overlayfs: failed to clone upperpath [ 674.447458][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 675.588919][T10699] "syz.6.1510" (10699) uses obsolete ecb(arc4) skcipher [ 675.679616][T10705] "syz.1.1508" (10705) uses obsolete ecb(arc4) skcipher [ 676.963576][T10725] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.970878][T10725] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.506581][T10725] device team0 left promiscuous mode [ 677.534499][T10725] device team_slave_0 left promiscuous mode [ 677.649343][T10725] device team_slave_1 left promiscuous mode [ 677.659358][T10725] bridge0: port 4(team0) entered disabled state [ 677.742503][T10725] device batadv1 left promiscuous mode [ 677.780647][T10725] bridge0: port 3(batadv1) entered disabled state [ 678.085274][T10725] device bridge_slave_1 left promiscuous mode [ 678.210275][T10725] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.749221][T10725] device bridge_slave_0 left promiscuous mode [ 678.758131][T10725] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.420029][T10771] "syz.6.1530" (10771) uses obsolete ecb(arc4) skcipher [ 682.483717][T10774] loop3: detected capacity change from 0 to 164 [ 682.599345][T10774] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 685.923407][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.929804][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.786309][T10813] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 687.797507][T10813] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 688.961848][T10821] loop3: detected capacity change from 0 to 764 [ 690.289170][T10836] IPVS: length: 209 != 24 [ 690.501023][T10839] overlayfs: failed to clone upperpath [ 695.700507][T10869] device vlan0 entered promiscuous mode [ 695.776015][T10869] device batadv0 entered promiscuous mode [ 695.822692][T10878] "syz.3.1560" (10878) uses obsolete ecb(arc4) skcipher [ 696.283951][T10889] "syz.1.1558" (10889) uses obsolete ecb(arc4) skcipher [ 696.515340][T10896] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1564'. [ 696.930327][T10865] "syz.6.1557" (10865) uses obsolete ecb(arc4) skcipher [ 705.936443][T10955] overlayfs: failed to clone lowerpath [ 707.146474][T10963] loop3: detected capacity change from 0 to 512 [ 708.211088][T10971] "syz.4.1586" (10971) uses obsolete ecb(arc4) skcipher [ 708.308609][T10963] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 708.338263][T10963] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 708.467453][T10963] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1583: Corrupt directory, running e2fsck is recommended [ 708.482341][T10963] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 708.492352][T10963] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.1583: corrupted in-inode xattr [ 708.505198][T10963] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1583: couldn't read orphan inode 15 (err -117) [ 708.541325][T10963] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpquota,,,errors=continue. Quota mode: writeback. [ 709.322634][ T26] audit: type=1326 audit(1755591247.978:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb419be9 code=0x7ffc0000 [ 709.933631][ T26] audit: type=1326 audit(1755591247.978:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb419be9 code=0x7ffc0000 [ 709.977700][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'. [ 710.018947][T10989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1592'. [ 710.126706][ T26] audit: type=1326 audit(1755591247.978:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bdb419be9 code=0x7ffc0000 [ 710.170437][ T26] audit: type=1326 audit(1755591247.978:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb419be9 code=0x7ffc0000 [ 710.193351][ T26] audit: type=1326 audit(1755591247.978:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb419be9 code=0x7ffc0000 [ 710.216119][ T26] audit: type=1326 audit(1755591247.978:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0bdb419be9 code=0x7ffc0000 [ 710.238877][ T26] audit: type=1326 audit(1755591247.978:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb419be9 code=0x7ffc0000 [ 710.300282][ T26] audit: type=1326 audit(1755591247.978:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb419be9 code=0x7ffc0000 [ 710.323304][ T26] audit: type=1326 audit(1755591247.978:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0bdb419be9 code=0x7ffc0000 [ 710.938249][ T26] audit: type=1326 audit(1755591247.978:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.3.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb419be9 code=0x7ffc0000 [ 713.206484][T11014] "syz.6.1598" (11014) uses obsolete ecb(arc4) skcipher [ 715.554403][T11017] "syz.3.1599" (11017) uses obsolete ecb(arc4) skcipher [ 717.218265][T11061] "syz.5.1611" (11061) uses obsolete ecb(arc4) skcipher [ 718.056634][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'. [ 718.084476][T11066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.098300][T11066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.572212][T11076] netlink: 'syz.1.1615': attribute type 10 has an invalid length. [ 721.706087][T11107] "syz.4.1623" (11107) uses obsolete ecb(arc4) skcipher [ 723.102454][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1621'. [ 723.411438][T11120] delete_channel: no stack [ 723.416857][T11120] delete_channel: no stack [ 724.757974][T11141] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1633'. [ 729.059667][T11171] loop3: detected capacity change from 0 to 4096 [ 729.216516][T11171] __ntfs_error: 14 callbacks suppressed [ 729.216535][T11171] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 729.461980][T11171] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 730.536431][T11190] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 730.562563][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.568685][T11190] CIFS mount error: No usable UNC path provided in device string! [ 730.568685][T11190] [ 730.579100][T11190] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 732.738873][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1647'. [ 737.011234][T11247] CIFS mount error: No usable UNC path provided in device string! [ 737.011234][T11247] [ 737.021408][T11247] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 741.022334][T11294] tipc: Enabling of bearer rejected, failed to enable media [ 741.267731][T11308] trusted_key: encrypted_key: insufficient parameters specified [ 741.292759][ C1] hrtimer: interrupt took 50008 ns [ 744.185584][T11342] binder: 11334:11342 unknown command 1074553620 [ 744.192090][T11342] binder: 11334:11342 ioctl c0306201 200000000640 returned -22 [ 746.983835][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.990223][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.533192][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1690'. [ 754.111743][T11394] "syz.1.1700" (11394) uses obsolete ecb(arc4) skcipher [ 759.254572][T11440] "syz.1.1713" (11440) uses obsolete ecb(arc4) skcipher [ 765.051514][T11467] "syz.1.1720" (11467) uses obsolete ecb(arc4) skcipher [ 765.319629][T11493] "syz.4.1725" (11493) uses obsolete ecb(arc4) skcipher [ 768.843179][ T4232] Bluetooth: hci3: command 0x0409 tx timeout [ 768.983830][ T4453] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.007176][ T4453] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.908747][ T4453] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.963549][ T4453] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.387791][ T4453] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.380939][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 771.687362][T11538] overlayfs: failed to clone upperpath [ 771.744253][ T4453] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.127242][T11543] "syz.4.1737" (11543) uses obsolete ecb(arc4) skcipher [ 772.182252][T11481] chnl_net:caif_netlink_parms(): no params data found [ 773.389088][ T4453] bridge0: port 3(netdevsim0) entered disabled state [ 773.398916][T11558] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.1739'. [ 773.423764][ T4453] device netdevsim0 left promiscuous mode [ 773.456739][ T4899] Bluetooth: hci3: command 0x040f tx timeout [ 773.484760][ T4453] bridge0: port 3(netdevsim0) entered disabled state [ 774.502067][T11569] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1741'. [ 774.811431][ T4453] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.821993][ T4453] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.166521][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 775.769520][ T8502] Bluetooth: hci3: command 0x0419 tx timeout [ 776.465834][T11481] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.475409][T11481] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.494144][T11481] device bridge_slave_0 entered promiscuous mode [ 776.504094][T11481] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.511634][T11481] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.520236][T11481] device bridge_slave_1 entered promiscuous mode [ 776.602441][T11481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.686401][ T4453] tipc: Left network mode [ 776.720616][T11481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.712116][T11610] "syz.1.1752" (11610) uses obsolete ecb(arc4) skcipher [ 779.881429][T11481] team0: Port device team_slave_0 added [ 780.743741][T11481] team0: Port device team_slave_1 added [ 781.001753][T11481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.020966][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.273375][T11481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.747702][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 781.786212][T11620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1756'. [ 781.922135][T11481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.929756][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.012398][T11640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1759'. [ 782.263197][T11481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.343307][T11644] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 782.513573][T11481] device hsr_slave_0 entered promiscuous mode [ 782.557297][T11481] device hsr_slave_1 entered promiscuous mode [ 782.564253][T11481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.580077][T11481] Cannot create hsr debugfs directory [ 783.974786][T11664] "syz.4.1766" (11664) uses obsolete ecb(arc4) skcipher [ 784.097796][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 784.228955][ T4453] IPVS: stopping backup sync thread 9232 ... [ 784.748204][T11481] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 784.787296][T11481] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 785.032653][T11481] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 785.098643][T11481] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 785.134208][T11682] Device name cannot be null; rc = [-22] [ 785.693039][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 785.947778][T11714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1774'. [ 787.283408][ T4453] device hsr_slave_0 left promiscuous mode [ 787.298047][ T4453] device hsr_slave_1 left promiscuous mode [ 787.314162][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.321937][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.329748][T11725] "syz.3.1779" (11725) uses obsolete ecb(arc4) skcipher [ 787.350294][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.357958][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.370706][ T4453] device bridge_slave_1 left promiscuous mode [ 787.381171][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.391054][ T4453] device bridge_slave_0 left promiscuous mode [ 787.410410][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.429737][ T4453] device veth1_macvtap left promiscuous mode [ 787.436264][ T4453] device veth0_macvtap left promiscuous mode [ 787.442620][ T4453] device veth1_vlan left promiscuous mode [ 787.448798][ T4453] device veth0_vlan left promiscuous mode [ 787.666349][ T4453] team0 (unregistering): Port device vxlan0 removed [ 788.454595][ T4453] team0 (unregistering): Port device team_slave_1 removed [ 788.471297][ T4453] team0 (unregistering): Port device team_slave_0 removed [ 788.484374][ T4453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.516743][ T4453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.329437][ T4453] bond0 (unregistering): Released all slaves [ 789.481741][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 789.566283][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1786'. [ 789.600918][T11752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1786'. [ 789.658855][T11481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.687307][T11481] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.713041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 789.777469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 790.957469][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 790.971234][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 791.170547][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.177743][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.187967][T11773] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1792'. [ 792.104705][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 792.118708][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 792.365635][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 792.487189][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.494564][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.877413][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 792.921210][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 792.933201][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 792.982325][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 793.022157][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 793.056547][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 793.065781][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 793.232786][T11481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 793.260325][T11481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 793.964742][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 794.011698][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 794.045507][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 794.083962][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 794.097772][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 794.228784][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1798'. [ 794.251032][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1798'. [ 794.616689][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 794.629730][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 797.076970][T11481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.374806][T11857] loop3: detected capacity change from 0 to 512 [ 800.903051][T11857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 801.347005][T11857] EXT4-fs (loop3): 1 truncate cleaned up [ 801.405956][T11857] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000012,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 801.636792][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 801.702926][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 802.005602][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'. [ 802.119865][T11481] device veth0_vlan entered promiscuous mode [ 802.181684][T11874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1810'. [ 802.260313][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 802.287687][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 802.368081][T11481] device veth1_vlan entered promiscuous mode [ 802.415306][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 802.423690][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 803.473258][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 804.983415][T11481] device veth0_macvtap entered promiscuous mode [ 805.000939][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 805.021032][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 805.082053][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 805.234113][T11481] device veth1_macvtap entered promiscuous mode [ 805.255176][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.266634][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.276898][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.287622][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.298551][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.338663][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.452809][T11481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.460768][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 805.470300][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 805.481264][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.412903][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.512110][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.573433][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.630525][T11481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.654352][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 806.676314][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 806.707764][T11481] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.742745][T11481] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.757122][T11926] loop3: detected capacity change from 0 to 4096 [ 806.779225][T11481] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.818942][T11481] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.950824][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'. [ 807.041339][T11926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 807.717157][T11945] overlayfs: missing 'lowerdir' [ 808.511117][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.537990][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.973476][T11977] usb usb8: selecting invalid altsetting 33554432 [ 810.723518][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.748686][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.810395][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.848547][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 810.891331][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.950287][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 812.984147][T12001] loop7: detected capacity change from 0 to 1024 [ 814.379707][T12001] EXT4-fs (loop7): Ignoring removed nobh option [ 814.492481][T12001] EXT4-fs (loop7): Ignoring removed bh option [ 814.725520][T12001] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 814.877991][T12020] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:bb to non-existent VLAN 2048 [ 815.029104][T12025] loop3: detected capacity change from 0 to 128 [ 816.387414][T12040] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 816.941731][T12044] attempt to access beyond end of device [ 816.941731][T12044] loop3: rw=2049, want=225, limit=128 [ 817.369303][T12060] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1849'. [ 817.419866][T12060] loop7: detected capacity change from 0 to 256 [ 819.548359][T12073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 830.618085][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 831.135983][T12164] overlayfs: failed to resolve './file0': -2 [ 836.948046][T12194] "syz.5.1879" (12194) uses obsolete ecb(arc4) skcipher [ 837.966020][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 839.151375][T12245] netlink: 'syz.4.1892': attribute type 21 has an invalid length. [ 839.159594][T12245] netlink: 'syz.4.1892': attribute type 20 has an invalid length. [ 839.167605][T12245] IPv6: NLM_F_CREATE should be specified when creating new route [ 839.404374][T12233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.113408][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1894'. [ 842.543030][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 842.909217][T12293] IPVS: Error joining to the multicast group [ 843.049786][T12297] loop7: detected capacity change from 0 to 64 [ 844.370688][T12309] ax25_connect(): syz.7.1903 uses autobind, please contact jreuter@yaina.de [ 844.382954][T12281] "syz.3.1900" (12281) uses obsolete ecb(arc4) skcipher [ 844.767133][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1906'. [ 844.823073][T12310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1906'. [ 848.319288][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 848.529346][T12351] IPVS: Error joining to the multicast group [ 848.797633][T12353] loop7: detected capacity change from 0 to 64 [ 849.302583][T12360] batman_adv: batadv0: Adding interface: macsec1 [ 849.309086][T12360] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.334563][T12360] batman_adv: batadv0: Interface activated: macsec1 [ 850.238232][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1920'. [ 850.303120][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1920'. [ 851.704892][T12376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 854.558258][ T4361] [ 854.560633][ T4361] ============================================ [ 854.566795][ T4361] WARNING: possible recursive locking detected [ 854.572962][ T4361] 5.15.189-syzkaller #0 Not tainted [ 854.578156][ T4361] -------------------------------------------- [ 854.584304][ T4361] kworker/u4:8/4361 is trying to acquire lock: [ 854.590466][ T4361] ffff88801f244218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x1f6e/0x2ed0 [ 854.602471][ T4361] [ 854.602471][ T4361] but task is already holding lock: [ 854.609836][ T4361] ffff88805e168258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x10b9/0x2ed0 [ 854.621836][ T4361] [ 854.621836][ T4361] other info that might help us debug this: [ 854.629896][ T4361] Possible unsafe locking scenario: [ 854.629896][ T4361] [ 854.638129][ T4361] CPU0 [ 854.641407][ T4361] ---- [ 854.644678][ T4361] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 854.651619][ T4361] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 854.658558][ T4361] [ 854.658558][ T4361] *** DEADLOCK *** [ 854.658558][ T4361] [ 854.666705][ T4361] May be due to missing lock nesting notation [ 854.666705][ T4361] [ 854.675022][ T4361] 9 locks held by kworker/u4:8/4361: [ 854.680385][ T4361] #0: ffff888077cac938 ((wq_completion)bond1){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 854.690659][ T4361] #1: ffffc900033ffd00 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 854.702922][ T4361] #2: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 854.712235][ T4361] #3: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 854.721561][ T4361] #4: ffffffff8c11c3c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 854.731130][ T4361] #5: ffff88805e168258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x10b9/0x2ed0 [ 854.743569][ T4361] #6: ffff88805eee8498 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x156/0x4a0 [ 854.753053][ T4361] #7: ffffffff8c11c3c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 854.762625][ T4361] #8: ffffffff8c11c3c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 854.772211][ T4361] [ 854.772211][ T4361] stack backtrace: [ 854.778129][ T4361] CPU: 0 PID: 4361 Comm: kworker/u4:8 Not tainted 5.15.189-syzkaller #0 [ 854.786570][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 854.796634][ T4361] Workqueue: bond1 bond_alb_monitor [ 854.801857][ T4361] Call Trace: [ 854.805158][ T4361] [ 854.808104][ T4361] dump_stack_lvl+0x168/0x230 [ 854.812793][ T4361] ? show_regs_print_info+0x20/0x20 [ 854.817996][ T4361] ? load_image+0x3b0/0x3b0 [ 854.822522][ T4361] __lock_acquire+0x1227/0x7c60 [ 854.827389][ T4361] ? mark_lock+0x94/0x320 [ 854.831822][ T4361] ? verify_lock_unused+0x140/0x140 [ 854.837024][ T4361] ? mark_lock+0x94/0x320 [ 854.841374][ T4361] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 854.847359][ T4361] ? mark_lock+0x94/0x320 [ 854.851693][ T4361] ? mark_lock+0x94/0x320 [ 854.856030][ T4361] ? __lock_acquire+0x13ad/0x7c60 [ 854.861068][ T4361] lock_acquire+0x197/0x3f0 [ 854.865579][ T4361] ? __dev_queue_xmit+0x1f6e/0x2ed0 [ 854.870786][ T4361] ? read_lock_is_recursive+0x10/0x10 [ 854.876164][ T4361] ? rcu_read_lock_bh_held+0x76/0xe0 [ 854.881450][ T4361] ? rcu_read_lock_held+0x40/0x40 [ 854.886477][ T4361] ? nf_nat_inet_fn+0x84e/0xa90 [ 854.891346][ T4361] _raw_spin_lock+0x2a/0x40 [ 854.895934][ T4361] ? __dev_queue_xmit+0x1f6e/0x2ed0 [ 854.901285][ T4361] __dev_queue_xmit+0x1f6e/0x2ed0 [ 854.906335][ T4361] ? dev_queue_xmit+0x20/0x20 [ 854.911138][ T4361] ? mark_lock+0x94/0x320 [ 854.915474][ T4361] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 854.921459][ T4361] ? lock_chain_count+0x20/0x20 [ 854.926308][ T4361] ? rcu_lock_acquire+0x30/0x30 [ 854.931157][ T4361] ? ip_finish_output2+0x8e6/0x1080 [ 854.936354][ T4361] ip_finish_output2+0xc69/0x1080 [ 854.941378][ T4361] ? ip_fragment+0x210/0x210 [ 854.945962][ T4361] ? ip_skb_dst_mtu+0x584/0x9b0 [ 854.950812][ T4361] ? ip_finish_output+0x3e8/0x4b0 [ 854.955832][ T4361] iptunnel_xmit+0x525/0x960 [ 854.960454][ T4361] ip_tunnel_xmit+0x1b6f/0x2240 [ 854.965325][ T4361] ? kasan_quarantine_put+0xd4/0x220 [ 854.970647][ T4361] ? ip4_dst_hoplimit+0x2a0/0x2a0 [ 854.975681][ T4361] ? gre_build_header+0x301/0x8c0 [ 854.980709][ T4361] gre_tap_xmit+0x4f9/0x6e0 [ 854.985222][ T4361] dev_hard_start_xmit+0x2a5/0x7e0 [ 854.990348][ T4361] sch_direct_xmit+0x24e/0x4a0 [ 854.995133][ T4361] ? mrp_pdu_append_vecattr_event+0x1590/0x1590 [ 855.001385][ T4361] __dev_queue_xmit+0x170e/0x2ed0 [ 855.006424][ T4361] ? dev_queue_xmit+0x20/0x20 [ 855.011107][ T4361] ? __netdev_alloc_skb+0x114/0x4a0 [ 855.016305][ T4361] ? __alloc_skb+0x750/0x750 [ 855.020899][ T4361] ? __local_bh_enable_ip+0x12a/0x1b0 [ 855.026279][ T4361] ? lockdep_hardirqs_on+0x94/0x140 [ 855.031473][ T4361] ? skb_put+0x117/0x210 [ 855.035722][ T4361] ? __kasan_check_read+0x10/0x10 [ 855.040751][ T4361] alb_upper_dev_walk+0x1f5/0x3f0 [ 855.045777][ T4361] netdev_walk_all_upper_dev_rcu+0xf2/0x3d0 [ 855.051672][ T4361] ? alb_send_lp_vid+0x660/0x660 [ 855.056618][ T4361] ? netdev_has_upper_dev+0x400/0x400 [ 855.061991][ T4361] ? __alloc_skb+0x750/0x750 [ 855.066579][ T4361] ? memset+0x1e/0x40 [ 855.070564][ T4361] ? alb_send_lp_vid+0x387/0x660 [ 855.075505][ T4361] alb_send_learning_packets+0x1bc/0x290 [ 855.081139][ T4361] ? bond_alb_monitor+0x1790/0x1790 [ 855.086354][ T4361] ? netdev_lower_get_next_private_rcu+0x9b/0xf0 [ 855.092787][ T4361] bond_alb_monitor+0x3b2/0x1790 [ 855.097838][ T4361] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 855.103834][ T4361] ? read_lock_is_recursive+0x10/0x10 [ 855.109227][ T4361] ? bond_alb_xmit+0x40/0x40 [ 855.113831][ T4361] ? _raw_spin_unlock_irq+0x1f/0x40 [ 855.119134][ T4361] process_one_work+0x863/0x1000 [ 855.124365][ T4361] ? worker_detach_from_pool+0x240/0x240 [ 855.130005][ T4361] ? lockdep_hardirqs_off+0x70/0x100 [ 855.135306][ T4361] ? _raw_spin_lock_irq+0xab/0xe0 [ 855.140345][ T4361] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 855.145722][ T4361] ? wq_worker_running+0x97/0x170 [ 855.150845][ T4361] worker_thread+0xaa8/0x12a0 [ 855.155527][ T4361] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 855.161432][ T4361] ? lockdep_hardirqs_on+0x94/0x140 [ 855.166643][ T4361] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 855.172540][ T4361] kthread+0x436/0x520 [ 855.176608][ T4361] ? rcu_lock_release+0x20/0x20 [ 855.181454][ T4361] ? kthread_blkcg+0xd0/0xd0 [ 855.186062][ T4361] ret_from_fork+0x1f/0x30 [ 855.190506][ T4361] [ 855.244642][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1929'.