last executing test programs: 4m16.105908781s ago: executing program 1 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m15.762357999s ago: executing program 1 (id=27): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xfffffffffffffd86, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x221b, 0x7721, 0x16, 0x0, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) 4m13.54858858s ago: executing program 1 (id=29): openat$urandom(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00004bf000/0x1000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 4m12.460340306s ago: executing program 1 (id=32): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000001500)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8}, {@utf8no}, {@utf8no}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_win95}, {@uni_xlate}, {@fat=@debug}, {@fat=@errors_remount}, {@uni_xlate}, {@utf8no}, {@utf8no}]}, 0x81, 0x2ed, &(0x7f0000001140)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x48) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000300)={0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES8=r4, @ANYRESHEX=0xee00, @ANYBLOB="2c64697363611f642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182c492bbc501d94f854a7e26909bdc25d00000000c83bfcc5ede7a5e9e68e9dddb34b8b3b1358d4fe62d4d636329b9bbc7291b80aa026755142c3a993b82de3f3f33e79"], 0x1, 0x14f2, &(0x7f0000001580)="$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") setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)=@v3={0x3000000, [{0x50e5, 0x1}, {0x80000001, 0xa2}], r3}, 0x18, 0x3) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r1, r3, 0xffffffffffffffff}, 0xc) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 4m12.085669575s ago: executing program 1 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x1000, 0x3, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) 4m9.804578448s ago: executing program 1 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x34}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x95, &(0x7f0000000000)=""/149}, 0x90) 4m9.051130495s ago: executing program 32 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x34}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x95, &(0x7f0000000000)=""/149}, 0x90) 1m21.344721276s ago: executing program 0 (id=511): r0 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='source', 0x0, r0) read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) gettid() timer_create(0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc28c554a, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x83, 0x3ac}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) 1m18.726986025s ago: executing program 0 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m18.251013206s ago: executing program 0 (id=518): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r1, 0x32}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb", 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 1m18.003621182s ago: executing program 0 (id=519): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xf, 0x44, 0x7f}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m17.828047695s ago: executing program 0 (id=521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a000b0000000000000000000a008000", @ANYBLOB="f9"], 0x1c}}, 0x0) 1m17.363316406s ago: executing program 0 (id=524): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1m15.891176279s ago: executing program 33 (id=524): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 6.17894992s ago: executing program 3 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 5.871340457s ago: executing program 5 (id=701): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x8001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) sendmmsg$inet(r4, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="8f", 0x1}], 0x1}}], 0x1, 0x40840) 5.533574085s ago: executing program 5 (id=703): r0 = io_uring_setup(0xd1b, &(0x7f0000000300)={0x0, 0xa06c, 0x0, 0x5, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = eventfd(0x5) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x1, 0x80a0000, 0xa, r3, 0x3}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000040)=0xf, 0x4) sendto$inet(r6, &(0x7f0000000000)="f461c5bbd7000083", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8005}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f00000003c0)=""/135, 0x87}], 0x2}, 0x9}], 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000600000005000100060000e0050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) 5.164652503s ago: executing program 3 (id=706): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xa) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) syz_usb_connect(0x5, 0x35, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.657828835s ago: executing program 4 (id=709): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) sendto$inet6(r1, &(0x7f0000000440)="10", 0x1, 0x4044850, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x2, 0xfbffffff}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) close(r1) 3.920110082s ago: executing program 5 (id=710): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_clone(0x668c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.875136512s ago: executing program 2 (id=711): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r3, 0x100000000) 3.56067909s ago: executing program 4 (id=712): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) open(0x0, 0x480920, 0x146) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r9, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r8, 0x0, r0, 0x0, 0x40010003, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 3.343698495s ago: executing program 3 (id=713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.803872387s ago: executing program 2 (id=714): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) pipe(0x0) unshare(0x20000400) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.63461078s ago: executing program 2 (id=715): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) r0 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) close(0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.22297087s ago: executing program 2 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0xda) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1", 0x1c}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) set_mempolicy(0x4000, 0x0, 0x400000000) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9c, 0xb}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.915915777s ago: executing program 4 (id=717): r0 = io_uring_setup(0x5d2c, &(0x7f0000000340)={0x0, 0x4255, 0x40, 0x0, 0x2f}) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000440)={r0, 0x86d}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x40, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x420000, 0x66, 0x39}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0x8) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 1.915554317s ago: executing program 3 (id=718): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000002c0)=0x6) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000400)={0x6, 0xff, 0x200, 0x2a50, 0x0, "ca89005b445053b9"}) r1 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2002000, &(0x7f0000000000)={[{@quota}]}, 0x1, 0x515, &(0x7f0000000b40)="$eJzs3V9oHHkdAPDvbJOY6+W6FQ7U49Cg4B2eJm2T63kcyB34j3optfFFGyhJu01CN9mQbLSJoBWLFHzxSYRK0T4oiGJ87JuKoMWiD4WiL6VIQS20harPkdnd6YVk02zbdCdJPx+Yzm9+2+zvO/PNbGZ+O/ObAJ5ZvRHxdkTsiojXIqLYqC80pjhbn9L/NzawNJFOSSwvD99LIomIQwNLE9l7JY358403eDUift+ZxNi5te3OLSyeHi2XS7ON5f7q1Ez/3MLipyanRsdL46XpgTff+PTBgdcHDw5s2rreHD029cvK0Fs/u334Nx/++CfuJfF29DReW7kem6U3ehvbpDNeWPlCEvH1zW4sZ90ryklHjoHQsj+/8fIP844BAGi/QuPYv6N2/F+MXVE/eOu+NnK/GLf+st7PHRq5+O92xgkAAAA8vuXljzTmAAAAwM6VOPcHAACAHS67DuDQwNJENrXr2oPbX2hXS6znzjsRsbee/+z+7vorHY17erujMyJ2/yeJlbf1Jqvu+X0c1c9F9MY3/lg9+4NT6RRP6T5stqalf+QdAXnqGsw7AvL00pfzjoA8/fV83hGQp2t38o6APB0dzjsC8nT4YN4RkKcL9/KOgN++Ux8AcG3/X6E25l/Wy7O6/yctP/eEbd8tRPRG969W1un/aa+s/29sTf9f4UH/3651+v/2tNjG5a9d/1Cz+i9+Nc3/8FjW//fJkR+X0vbT+ROvGC25852Ilzqa5T95kP9knfwXW2zjD1cHm/b0/25Pmv+f/yLNdzbJf3st/zTilWie/0zy8PFZ+09Nlkv76v82beOj9//5v2b1039L83/lM9n+n05p+9l3ATx96f6/e538b/T5v7fFNi5N3mra0zvck+b/lW89PP+F213JV2q/jF2NmjOj1ers/oiu5N219QcedQs8W7JtlG3DNP+vfqz53/8P1ubNP//T34n3t9jmu8cKbzWrH/x1mv/vf97+n580/yc32P/X+/v/YqttXL852qx+4rNp/o9ekn8AAAAAAAAAeDKFiOiJpND3oFwo9PXVn+H9YuwulCtz1ddOVeanT0btWdl7o7OQXelVrC8n6fL+xvVA2fKBVcsDjetFzhefqy33naiUT+a98gAAALDD9UTcOPbdyx94ftX5/7+K9fN/AAAAYPtLz/9f/snFC2n5v60O5AMAAABsK+n5//3v3b0Szv8BAABgx+rpdv4PAAAAO132/f+RoaE4MjS0nD33b7oyPnl6YubNA/v6puZP9J2ozM70jVcq47UR+6Y2ft9ypTKz//WYP9NfLc1V++cWFo9PVeanq8drz409Xupsw7oBGzv398sjeccAAAC0T8864/+/sGLs/n0RsScirhY735eN9Q8AAABsfT0RN770o2/+aW5h8fRouVyaVXjUwvK3I7ZAGAprCtlFJlslnm1ZyPkDCgAA2HTvHfTnHQkAAAAAAAAAAAAAAAAAAAA8u9oxnFje6wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD28f8AAAD//0FW/Wk=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x1000, &(0x7f0000001080)="c81c3caaae315388ca1930485e7a8a936273364a63dba9f829dbaa2578ec97b2af89f693811d67cc3791d70c715a43d432042904599ca0ab7963e180703e855268801d139cb0b6e1084fe6a776bb3ec833ff51ea85708fca5555908b8a3ef7fd35b6e905f6a1ddeabc179c8ea584a5ec25123e98678de495b321c47363fa576ace0ccb28bfe64106795620832be787207215eed80327e1abba225391b0911b787c7df30445fe2141cdcf0f121a457ab8735facde7e7374d512503da036e2e11b4937ac72a4109be6e68ae3edc60664a61db090d94529d5ae59bdbf11572bff47763095b00d54926687db9561fc53b08cea9e46f032f6bba0219638e6086956037a3ab5319e2a7a7c0d4ee9f719de884e60ba87c43bcdfedb563d88357198e1b565c8d2c8dd0894513528b975551e7016aa27b322bc3bcdd37ee70700e3cb6f56404ab3cb712b3f9508fcbdb50c70d5cf409d70a1779d6110791a24d192a8a888682522330a27a287915e5a651a45ef8cd9da4dce27cc78a33ff089898feb1f4543841f899d30c5022acdc73ac9560a2a0c83b00aa2f5fa399047aaa8c7a267c709fced49b7bb29b6a8149b325f7596a829794448991ad4b750ca211b949fc02a72d8ea46cef4fa04a1f7dbf2b3e75120d5f2aa5e22b4174a86cc6584c41f9f710c9a62ea3b169fc06b2d9c4885872dfc91a2f8f1a30dad6667b3f07c891e7948c0b69c3d785b72dbccbeaf4350126eaaaedb9010529ba944dd9765a2061ac632a1278f031455307f4b0aeb22b85784fcd90c3d4deb3b842df796e3da2e22ec9b79777b6fd38ddae82dc7d050c01d7444c487707204f8d5651f5ed1bf117a819deb7d471fd2cb262c2aaa63824b1c3c0bfc9e70850fb41fcc633b84d252b1f79f15d06dceeb8e99b03516fdfbe3d3c051496c8978263ddc3f660b4d38784ea873aa2a974cba59d6038976ee2164066a9ac65be773ba47857e0c399f26715673cc5f137f3aea760591cfed59c69f398be53db17152d3b38aad25656b3fed0b52202ca11a6a4563bb90a0a64f906b4b401287fa7265111cc159e3bfbf4dd9a000aa7a84a73df0c54f7b3677c50ac203d7eda76c941bb1ec31852c0a5fe625312eb8e15a4d3421ee828fcfc0852ba86bc0e3e33101d52cea048a3d0b1c424eb79ffb2d6ebc4aa27ea10c088cf8df2ddfafd739bf68ae658e2efb7e66add8b91620ef7e7ab90e9c7e74e3b40956eb9d9ac9e257734183ecd1a67d6ab3dfd51b2dd2a2d3cf674d8ea30555f41cb0d9f1c2c7a2c6c9f22a09b96217973c17e0c6532a019cfd37faa365d2e53c23c05aa94e1ee9101bcb0fea1c6a501ead4780ca0c8fd2c0e98ff19a5dce16dd669fb96b60e34ca6ace1a607621a44825876e8b2bf7ece6a5c3a0e8299b5b47aed9f3495f7355fa3dcabbd5f409c4bd74b4f1732d2134a0e74442a203bd36a6d7ef21ec370492924bfcd4058c47c9f4557935aaa822e49c692b36210abf0d27c07fd12ce775104aa8cb96fe93838085c34444a4b48dccc7d451b3cebcbaa70b8da53a2ca7cb4309e256060574fe509c0f80981fea7276f8dd6fde009d76afbb92ea9fdeb28c1ceca0e8b0baa46c2517b19ab5c0564cc6b09e77755d91d50f28855d5982ca029acae111c538812d0fdebd7f6dffcde5d411a4238c5b8e4a18fdf678cd7fe3b97ef890c6f3cf379caf2440ee3d2d42aec0966573a9eda114994fa8230939d06188c71306f9ea5ba2931526139f16b63fff81d147bcc35a1124f5b7f535abc7311c83af3d4614b5fd91cbfc82517833d6ae0893b296516364326c1c66db31e9d6ddaa5f5e7ff71a6b9e0a40ca46375363ca83da3f9b7b75d564b8c9e1e339435676bfa37e486159a591637e846ea1d20977ea5c4f6fed3a4c9d9aeacc5b0958c5b63c7f0aa2d58ad248d2f77272d42ca262eb445635126a6ca1b808503cb85d594cedc21f2aecd3b5c96051815ce2f19e0a3291843adfa2cd69112004454c8c548b09d0bbca340dda78efda4982450cb9b561a6b5bbfd22a1ed889e3b724beacb5970182f09d54e7df20f68d4046ee1e2a156a421b0bba675d7ffb9af9816d9e0c437da8db276f818eb347da574bc070a9ec5bd87dfd41ab0f1e4e033b2ab33305c6c2103e858597b9aa8b72601aade774adc572ee78c61e4516408022ce66a1277afc544a1482808662d3094737c0ae6f2dc335e7825d40bd974643c610c35883e3551e49011ad1a2d8a40387d1f21303d2c735466720cb4fd404d71cdbe1537f3b5b5082563e70efa125fec3f882a9d66ad80c1bcb682c18920c2196eb9d8bf44bed8285bc15a346107313e0ad4db41e5b618f840259be0dd99e022be345811e8a2fe2882ce6333432c5574a909ca492c6f5b847a86feb4d5f68514763a004fb397c7bcbb30fb733dfd19265b5cbe61b426dfe63fa75bfe2994e9f8b2b6eafedf523f64ec5527cb9d898a6f7fee53909162bf4feb444c07316091d7283ebe91c57fd782c061012a8fbf645e2380810741f08fad6f66926279912184a5e5544d6feba34aee1f2911089242353f6f952ab8dd236f22526cb1581e4039ce43dd83ae15d33d38d3d86720ff880343173c351a0f7d1ea7ea32c21fd57f85e444403db3ec59c9692c6f9e70f9c2aefa0194c33087685b6998d8296b16792b2e295f0847c60bf0c8d72220cbc9eb0840b22da3431eee7393c196beed2ae914674e3b51f189245169a9db2d545c1e5ec4804dcffc34f26e05bd1af0de3de8b07e01df7075ab6a0e6a05694787dd7907e892dc732b07ee0ccf25adad3b364d55deb8a60b5f76460ac3035d155e7b2636dba454e53160d67a348f1280eccd8ddfabfc42deaa621e7983e91eb4e70bba142c24f864037c35938fe302eeb32dfae69a1e4bea876a2f9982ade49461d26525e397d7f5a4040d54068484f100b231da4c09506962835ad5d62a7b47e5d5b3b4f5c55e7c596badb3015384da5c01234aae864798a13b1365670165cd7ac70b8120b2bb9b0a1b0b3145db00b0f278fbef9554140c72f5dc199381a13e469baafc97290041d48b1474269cd2fb9530064c04864a6bd8a4f37e9530ebb4393d636623888e687e74ed9ac3665ec87d91ddec1ce9b84175a14d17d1fcbc05132e1a2838a8af361df66d26c4fcc6f26859e6d7b1b1522122032049ce295a0ea47c64583ab9fa9bb1687e96206ef43abf4eadd47b33b63d883f89593897b265ad423236d976357f3df5f69900729df4bb6c10205e3c64bc0bdb38e0c47b6630ebdc5446434870001157505f30deac0e395bcb17ecce96b747e378e9a92e50227a8b21b1c8afa9e1dc11d3362a2221acb887acdbf3a46723ec20ee6e14028e1489c06f46cb3f8d999930e872cc0973df5e9c5bb16675001b76ad65f9507eec195344be2b5f2a7ecce9a6650e7c0042f95c96d5693074bcbe67b7b84d47ff03f3eb2d33495340cb547b55b3ab68c802fb99b8b347aa73b64244d83e56b732f4dfb23030c7eda1bcf8d8ee0cb6b0aa16172b9c59485187a0e6fc19f735fde71d82bc53623789ef54a5401086c41b64e847399d90dba6660bec24e5b9d8400b9c4896dd9d6264b903b2728a9d9f165398909395f2b038a8e6bb1aa7f4609e69ca25c2246408c33aaf9fb3e9e7f80662189177292222fee943cf86675223629df3fa895f92a6bc31b3c8182e5dad78cbaf4ce0085acdae1b8e4453fa9b572f38d718b862abc8f0fc187a9011c46e4126f1313274a6f965172a04f3b8ca7b10b0add5b1b3c23f494e7aa42f84016c8dd56fecdb852f0a34af93d150448c3b28e74838cf005bcb3e9ef1061a057ab9a0dcc950051e67e1cfaad96c9f8ebb2aacce857dc2a539e40a560ec05d50198421c7f3f758be1fd62c01be2feea507a04851e86cb2c688f06151d98562109e2dc2d0e2a2c2c29f76cdc44b3d4a438f1c04f72921749cf3b45424de7a6102708d3eaec409da64b9aa5c2d0a8963bf927f8bd258abbebdce3b68d7ef04b187dec95d555c327fb8fc25ba155bd1a2e433a6116070cd0ddb815cece9850527f4fd828256c8a34927341dea726f3bf7a18796353b215c9f123f3443e38acc3a5a839bd9bd3d8284d882f9f565a81455c90288e9a757dd0d86caea41d5173b6c5417fb59ccbed7318cdbaf0ddff5c287987daa9aedf7ea77fd36e7b9de916ff3238aa66d5a83f0b07bec5f7f95b2dd36f8639ecc2ee15310646523215d34729d87f1873420ade41a1e56a0690a61857dc35969f30dd1473c16e96ef09ade97c643a373a08b5b34f3983fc9752e10314d1a6dd61cc6c4ddcff60bf2b78928b682fdeef7d407f2b2da37e49e381a6723429f5937b0337e863a1b3ca74c0925d36760665319a1f9843817f61fb319beeb2ea8bdcca06ae81885e1f086051eba9bf229b84f1b09a7aa5a9eb727b2e8d5a9eae1cd3d9e2eaf5f70d699a8d6ee24d1c685409de9ddcbb4f281d267ed2a9ea5743ebb1205a3e2ffb6f8d14624a4f56c0e3dc118faf248cf062fb9b9d395949d92ce777a894db74836d43387d0b1981de0e545e6664a2ad7e2d2cae4f33812f55a8e8aa9df34734c635c44ed4b981042fefb66a4b5bd5023d7c76dca3a4b62383b57f31237d1f65fa7dc5d9feed3be91097f3fd73f62faacdc5b111e0e947c3eec428edc5af8b42a454f537e5866342a36b7d40eb2e626d9ec37d7dbad90e5c8353e189bb66985b558141beee436eac4736c137affa43ad73459e158a90a3904786f00aea4f20eac5ab10867718c9f210bbcc6809d831daadb2558be5a404bf4df8135bd46342b1c475e531b5c816336ac5b6f0bec623889c43a70e5d5d16798915904dc7042798a72b0cd3b4fdc3f402d42f8187761d652a8a31e8b6b7086985041e3e2796bcf56aa878c96a3589acc92905109d151f0f06f6ae21e0a4ffd8fcf787b8b219796c9fa12170ec88e045d4fee2a54670cc6f814f6464a42f3ac661c0184505c0d9a6daa92a1af9f5176de9c43534cdef6a937ec737b5b7fe4a646398729cab5374d729a0342dafca0046f6266f8fc36eef9749631aed3140b437b229a46902d9449473e415b0928e203734026b55cbc644d9fd3beb474e955cc6887ccc61688c0eb66ee2db8e1f387a20f582bd2b139f03702349a7a8d8581cdec3b6982e3576250eda0e72810377306def2ce7909c548f6f5542bec9b35b3a4b5d605931f4f5ae87294f0e1ccfefba4def907bc1e7e69c6b19268d070450eb75df8eb0fa8836f8a6c34a92923aa261c78b20890feec211629f551bf4f7f88f275ae6fddef2870b171d6f913b90c3f21b41500165558ed4c895bcc89f4395723789c0af03ff84a0c7de0f64c7aff485fba93dd2a7f4294dc909d645c753533ff199d03cdec9a863ee00c100b4c1d17f2972b7f6d9004e01f204564f846131f955efded00c820aa2b5cc0eb1eea6b245e4276994f0c5d7db8110e9c0b95449b2a3edb3338fd2eb2b3e57c314ea35897f6d5e7c7a3f579836dc7c20f3bc7866fb68e51e7083da9fe1a8c519808d2e3c9bbf4941f6845d97e3c4d1588b2c5a11d3b3c0d1b6a2f735b0e4f19600ad0d210882811f98082c37a322ccc86498ac728001d4e09b651108d161172aac0520ce42fb30acf7bad3b911a65819d577373f61afbf9f7c5d723074d5d78586d0bd0e2cfaed10d6bba4160fa75bc47eee98a73c7b31d19dc86a7d267bf4a1907c9d068a750bb941377a1de9cb5110f81a7eb85d0bffc87bfa3eb11eb772819fb0fcdc00081b9f", 0x1000, &(0x7f0000002080), &(0x7f00000020c0), &(0x7f0000002100)="69e4aee3e059c1aa7b20f970a9f27abaa09325c63b0d4176cd54d184167d4f7a24043172551ee079a6a43fae99b09e7eb62b3a04baaf6cb69b6822e8007e3d7eaa068e79cce87feee305d0182593cb6f607db14ea28778adf18e54ad33f2c9362b0bdf06b1cde3734de9eeaaf85da12c57a8e7081ebb7b4908b62c2681683c0ead1fdddd4f4369e791ff4d8000953bed1204a85783d126937684920bae051479f5abbfd2855e3dac06b2c9db2c30f9c8ebb5cb9ad8ef67ac") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972e3aaa30cbdaa8c3994196fb2a65b315e3100f2acaeae3669942e96c3b99b6ec2"], 0xc) r4 = epoll_create(0xb398) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r2, r1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000100)={0x40, 0xffffffffffffff7d, 0x5, 0x2000ffb}) 1.596337464s ago: executing program 4 (id=719): ioperm(0x8, 0xf0, 0x2) rseq(0x0, 0x0, 0x0, 0x0) unshare(0x400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x4000) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.534981196s ago: executing program 3 (id=720): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10000, 0x3, &(0x7f0000003000/0x10000)=nil) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1.455650378s ago: executing program 2 (id=721): socket$inet(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x8, 0x7, 0xffeffffc}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) 1.420927958s ago: executing program 5 (id=722): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r3, 0x3328}, {r2, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r1) 1.300659111s ago: executing program 4 (id=723): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x9, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000300)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) accept$inet(r0, 0x0, 0x0) 1.205488003s ago: executing program 2 (id=724): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x1c7d, "0300005627de1100a3250300541886d5ff4144b0f26a07219808229ad9000100"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 1.173048224s ago: executing program 5 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffeffc, 0x0) write(r0, &(0x7f0000000600)="303f28a0db6c3603c5d209649c9b04c52d544f4d4f594f5f434f4e4649473d300a302d505245464552454e43453d6d4b785f61756469745f6c6f673d3000ff0755188b3f2c9230815b2e7b2fb4556a4e2fe5216e501ffb62b17606c08e121be3a228d036b606c9e04a594016d045758868a360217e3284a2d4a3437fb286e5484928f58e85a8342e40d0f47013d7cf88a815eb40f3f0b160b41f26f01050eea978e0011811aca8e5d5d65771166135406880d69833217f501b91956f4d7964d0945e27f5ff7b48d8c6a675c6447f1879e7ef699235d359812f186b2eef7e5ef9af77566787a8190a", 0xe8) 70.952079ms ago: executing program 4 (id=726): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0) read(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x13}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 70.587169ms ago: executing program 3 (id=727): ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 0s ago: executing program 5 (id=728): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000140)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000040)={0x40, 0x11, 0x1, "aa"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000d40)={0x10, &(0x7f0000000740), 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.110' (ED25519) to the list of known hosts. [ 82.500386][ T5761] cgroup: Unknown subsys name 'net' [ 82.665911][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.406113][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.072374][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.081443][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.106973][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.117895][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.125805][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.141345][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.176724][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.185821][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.193617][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.201253][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.210052][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.218633][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.227128][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.234966][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.243224][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.285338][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.294197][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.302605][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.311615][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.319708][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.329145][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.354373][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.364679][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.372593][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.779327][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 86.855600][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 86.950970][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.057026][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.064952][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.072637][ T5772] bridge_slave_0: entered allmulticast mode [ 87.080328][ T5772] bridge_slave_0: entered promiscuous mode [ 87.110009][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.117328][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.124587][ T5777] bridge_slave_0: entered allmulticast mode [ 87.132119][ T5777] bridge_slave_0: entered promiscuous mode [ 87.165290][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.172837][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.180505][ T5772] bridge_slave_1: entered allmulticast mode [ 87.188309][ T5772] bridge_slave_1: entered promiscuous mode [ 87.195771][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.224112][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.235004][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.243103][ T5777] bridge_slave_1: entered allmulticast mode [ 87.250957][ T5777] bridge_slave_1: entered promiscuous mode [ 87.342886][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.368975][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.388935][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.453069][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.488340][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.495615][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.503274][ T5776] bridge_slave_0: entered allmulticast mode [ 87.511094][ T5776] bridge_slave_0: entered promiscuous mode [ 87.570384][ T5772] team0: Port device team_slave_0 added [ 87.580858][ T5772] team0: Port device team_slave_1 added [ 87.587106][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.594263][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.606994][ T5776] bridge_slave_1: entered allmulticast mode [ 87.614499][ T5776] bridge_slave_1: entered promiscuous mode [ 87.651245][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.658552][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.666047][ T5778] bridge_slave_0: entered allmulticast mode [ 87.677972][ T5778] bridge_slave_0: entered promiscuous mode [ 87.698055][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.705202][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.730438][ T5778] bridge_slave_1: entered allmulticast mode [ 87.739153][ T5778] bridge_slave_1: entered promiscuous mode [ 87.789267][ T5777] team0: Port device team_slave_0 added [ 87.799134][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.836198][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.846612][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.882443][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.898111][ T5777] team0: Port device team_slave_1 added [ 87.906275][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.941513][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.948866][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.976042][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.044612][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.057878][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.072641][ T5772] hsr_slave_0: entered promiscuous mode [ 88.081908][ T5772] hsr_slave_1: entered promiscuous mode [ 88.109233][ T5776] team0: Port device team_slave_0 added [ 88.116173][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.124088][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.152172][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.175439][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.182702][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.199569][ T5781] Bluetooth: hci0: command tx timeout [ 88.216491][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.233878][ T5776] team0: Port device team_slave_1 added [ 88.276703][ T5781] Bluetooth: hci2: command tx timeout [ 88.292841][ T5778] team0: Port device team_slave_0 added [ 88.341665][ T5778] team0: Port device team_slave_1 added [ 88.363023][ T5781] Bluetooth: hci1: command tx timeout [ 88.381917][ T5777] hsr_slave_0: entered promiscuous mode [ 88.390810][ T5777] hsr_slave_1: entered promiscuous mode [ 88.397777][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.405673][ T5777] Cannot create hsr debugfs directory [ 88.412164][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.422498][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.449240][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.457117][ T5781] Bluetooth: hci3: command tx timeout [ 88.479362][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.488102][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.514619][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.541480][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.549426][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.579055][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.591304][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.598514][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.624768][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.726159][ T5778] hsr_slave_0: entered promiscuous mode [ 88.733191][ T5778] hsr_slave_1: entered promiscuous mode [ 88.740838][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.750008][ T5778] Cannot create hsr debugfs directory [ 88.825375][ T5776] hsr_slave_0: entered promiscuous mode [ 88.832605][ T5776] hsr_slave_1: entered promiscuous mode [ 88.839113][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.847131][ T5776] Cannot create hsr debugfs directory [ 89.183647][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.221622][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.232908][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.266142][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.323615][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.342319][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.353212][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.365375][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.492037][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.514209][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.535031][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.548561][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.626337][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.639059][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.658656][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.672819][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.695284][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.754115][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.787722][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.816527][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.824048][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.841618][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.875811][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.883076][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.904520][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.911810][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.923560][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.930903][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.102453][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.135255][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.186355][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.215960][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.262006][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.269236][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.277751][ T5781] Bluetooth: hci0: command tx timeout [ 90.308909][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.316748][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.358400][ T5781] Bluetooth: hci2: command tx timeout [ 90.378123][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.385339][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.436790][ T5781] Bluetooth: hci1: command tx timeout [ 90.444531][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.455629][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.488346][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.495568][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.516927][ T5781] Bluetooth: hci3: command tx timeout [ 90.660055][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.739251][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.776245][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.895913][ T5777] veth0_vlan: entered promiscuous mode [ 90.936509][ T5777] veth1_vlan: entered promiscuous mode [ 90.961135][ T5772] veth0_vlan: entered promiscuous mode [ 91.010217][ T5772] veth1_vlan: entered promiscuous mode [ 91.064649][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.123618][ T5777] veth0_macvtap: entered promiscuous mode [ 91.155100][ T5777] veth1_macvtap: entered promiscuous mode [ 91.194295][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.219563][ T5772] veth0_macvtap: entered promiscuous mode [ 91.242976][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.256287][ T5772] veth1_macvtap: entered promiscuous mode [ 91.279888][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.292312][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.304568][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.315050][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.325904][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.362582][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.373773][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.391904][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.401335][ T5778] veth0_vlan: entered promiscuous mode [ 91.429705][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.442301][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.454859][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.489664][ T5778] veth1_vlan: entered promiscuous mode [ 91.521229][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.530262][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.540932][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.550646][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.583686][ T5776] veth0_vlan: entered promiscuous mode [ 91.649852][ T5776] veth1_vlan: entered promiscuous mode [ 91.738636][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.748726][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.774821][ T5778] veth0_macvtap: entered promiscuous mode [ 91.813543][ T5778] veth1_macvtap: entered promiscuous mode [ 91.830216][ T5776] veth0_macvtap: entered promiscuous mode [ 91.842626][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.854818][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.871302][ T5776] veth1_macvtap: entered promiscuous mode [ 91.925603][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.938869][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.970612][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.985016][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.996019][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.012915][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.026524][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.051488][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.063956][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.075314][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.086333][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.097015][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.109221][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.130207][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.143975][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.160474][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.172151][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.183013][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.194726][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.205105][ T173] cfg80211: failed to load regulatory.db [ 92.232091][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.247731][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.261077][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.272726][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.298688][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.332822][ T5836] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.336681][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.357555][ T5781] Bluetooth: hci0: command tx timeout [ 92.374444][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.390042][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.404650][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.413893][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.423079][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.437090][ T5781] Bluetooth: hci2: command tx timeout [ 92.457403][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.472935][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.477256][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.494045][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.503363][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.516486][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.518964][ T5781] Bluetooth: hci1: command tx timeout [ 92.596983][ T5781] Bluetooth: hci3: command tx timeout [ 92.757481][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.765374][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.845212][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.872513][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.912007][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.928340][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.968202][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.976209][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.294907][ T5847] mmap: syz.3.4 (5847) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.374385][ T5844] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.511489][ T5855] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 93.648810][ T5858] syz.1.2[5858]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.737294][ T5858] loop1: detected capacity change from 0 to 8192 [ 94.476685][ T5781] Bluetooth: hci0: command tx timeout [ 94.516959][ T5781] Bluetooth: hci2: command tx timeout [ 94.596725][ T5781] Bluetooth: hci1: command tx timeout [ 94.676712][ T5781] Bluetooth: hci3: command tx timeout [ 94.737138][ T5853] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 94.744069][ T5853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.753087][ T5853] vhci_hcd vhci_hcd.0: Device attached [ 94.784675][ T5858] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.983009][ T5854] vhci_hcd: connection closed [ 94.984656][ T71] vhci_hcd: stop threads [ 95.007237][ T71] vhci_hcd: release socket [ 95.015663][ T71] vhci_hcd: disconnect device [ 95.098206][ T5813] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 95.106060][ T5813] usb 35-1: enqueue for inactive port 0 [ 95.247472][ T5813] vhci_hcd: vhci_device speed not set [ 95.513716][ T5868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 95.806924][ T5875] netlink: 'syz.3.11': attribute type 9 has an invalid length. [ 97.836606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.770047][ T5899] loop1: detected capacity change from 0 to 1024 [ 99.895242][ T5903] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 100.256323][ T5910] syzkaller0: entered promiscuous mode [ 100.263442][ T5910] syzkaller0: entered allmulticast mode [ 103.443539][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28'. [ 103.554424][ T5924] netlink: 'syz.0.28': attribute type 6 has an invalid length. [ 103.624075][ T5924] netlink: 72 bytes leftover after parsing attributes in process `syz.0.28'. [ 103.684328][ T5930] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 103.835822][ T5936] loop1: detected capacity change from 0 to 256 [ 103.954054][ T28] audit: type=1800 audit(1786570977.040:2): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.32" name="file2" dev="loop1" ino=1048592 res=0 errno=0 [ 104.128778][ T5776] FAT-fs (loop1): error, invalid access to FAT (entry 0x000003ff) [ 104.146613][ T5776] FAT-fs (loop1): Filesystem has been set read-only [ 104.174524][ T5776] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 104.205850][ T5776] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 105.316177][ T5956] loop3: detected capacity change from 0 to 256 [ 106.009223][ T5956] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.020609][ T5956] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 106.050500][ T5956] exFAT-fs (loop3): failed to read sector(0x100) [ 106.057821][ T5956] exFAT-fs (loop3): failed to load upcase table [ 106.064240][ T5956] exFAT-fs (loop3): failed to recognize exfat type [ 106.251813][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.494740][ T5960] loop3: detected capacity change from 0 to 512 [ 106.516956][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.567219][ T5960] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.616625][ T5960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.661717][ T5960] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.40: bad orphan inode 131083 [ 106.673808][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.737815][ T5960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.820601][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.938048][ T5964] syz.3.40 (pid 5964) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 107.224015][ T5958] overlayfs: failed to clone upperpath [ 107.245478][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.578080][ T5974] loop3: detected capacity change from 0 to 512 [ 107.947164][ T5967] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.336558][ C0] sched: RT throttling activated [ 109.788146][ T5998] tipc: Failed to remove unknown binding: 66,0,0/0:3809746183/3809746185 [ 109.821031][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.830829][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.846635][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.854936][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.863343][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 109.876076][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.936040][ T5998] tipc: Failed to remove unknown binding: 66,0,0/0:3809746183/3809746184 [ 109.992892][ T5998] tipc: Failed to remove unknown binding: 66,0,0/0:3809746183/3809746185 [ 110.067766][ T5998] tipc: Failed to remove unknown binding: 66,0,0/0:3809746183/3809746184 [ 110.958118][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 111.025961][ T6018] warning: `syz.2.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.969132][ T5084] Bluetooth: hci1: command tx timeout [ 114.056771][ T5084] Bluetooth: hci1: command tx timeout [ 114.130394][ T5996] chnl_net:caif_netlink_parms(): no params data found [ 114.938726][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.946816][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.966253][ T5996] bridge_slave_0: entered allmulticast mode [ 114.986421][ T5996] bridge_slave_0: entered promiscuous mode [ 115.028704][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.067794][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.096143][ T5996] bridge_slave_1: entered allmulticast mode [ 115.115205][ T5996] bridge_slave_1: entered promiscuous mode [ 115.370583][ T1144] hsr_slave_0: left promiscuous mode [ 115.393056][ T1144] hsr_slave_1: left promiscuous mode [ 115.433149][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.457674][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.503819][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.525851][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.550743][ T1144] bridge_slave_1: left allmulticast mode [ 115.571974][ T1144] bridge_slave_1: left promiscuous mode [ 115.588255][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.624906][ T1144] bridge_slave_0: left allmulticast mode [ 115.644114][ T1144] bridge_slave_0: left promiscuous mode [ 115.678159][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.018243][ T1144] veth1_macvtap: left promiscuous mode [ 116.118336][ T5084] Bluetooth: hci1: command tx timeout [ 116.130197][ T1144] veth0_macvtap: left promiscuous mode [ 116.240989][ T1144] veth1_vlan: left promiscuous mode [ 116.364388][ T1144] veth0_vlan: left promiscuous mode [ 117.717917][ T6110] (null): rxe_set_mtu: Set mtu to 1024 [ 117.745607][ T6110] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 117.911670][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 117.958433][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 118.001405][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.059801][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.196739][ T5084] Bluetooth: hci1: command tx timeout [ 118.470147][ T1144] bond0 (unregistering): Released all slaves [ 120.309577][ T5996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.352229][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.435400][ T6108] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.510748][ T5996] team0: Port device team_slave_0 added [ 120.547375][ T6108] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 120.556464][ T5996] team0: Port device team_slave_1 added [ 120.685079][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.708357][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.757289][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.786859][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.793918][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.889480][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.095330][ T5996] hsr_slave_0: entered promiscuous mode [ 121.154596][ T5996] hsr_slave_1: entered promiscuous mode [ 121.165226][ T5996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.186862][ T5996] Cannot create hsr debugfs directory [ 121.503466][ T6140] loop3: detected capacity change from 0 to 128 [ 121.709007][ T6140] bridge_slave_0: left allmulticast mode [ 121.727997][ T6140] bridge_slave_0: left promiscuous mode [ 121.735222][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.771653][ T6140] bridge_slave_1: left allmulticast mode [ 121.786968][ T6140] bridge_slave_1: left promiscuous mode [ 121.792924][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.855375][ T6140] bond0: (slave bond_slave_0): Releasing backup interface [ 121.934328][ T6140] bond0: (slave bond_slave_1): Releasing backup interface [ 122.185785][ T6140] team0: Port device team_slave_0 removed [ 122.613851][ T6140] team0: Port device team_slave_1 removed [ 122.738281][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.033892][ T6140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.122138][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.169055][ T6140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.573954][ T5996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.598873][ T5996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.624251][ T5996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.640581][ T5996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.779430][ T28] audit: type=1326 audit(1786570997.473:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.83" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137019e0d9 code=0x0 [ 124.958818][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.217584][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.614678][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.623200][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.730380][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.737656][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.523836][ T6185] loop3: detected capacity change from 0 to 512 [ 127.548013][ T6185] ======================================================= [ 127.548013][ T6185] WARNING: The mand mount option has been deprecated and [ 127.548013][ T6185] and is ignored by this kernel. Remove the mand [ 127.548013][ T6185] option from the mount to silence this warning. [ 127.548013][ T6185] ======================================================= [ 128.572439][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.677986][ T6203] team0: Port device bridge0 added [ 128.935450][ T6212] syz_tun: entered allmulticast mode [ 130.400938][ T5996] veth0_vlan: entered promiscuous mode [ 130.511082][ T5996] veth1_vlan: entered promiscuous mode [ 131.439768][ T5996] veth0_macvtap: entered promiscuous mode [ 131.451893][ T5996] veth1_macvtap: entered promiscuous mode [ 131.644417][ T5811] IPVS: starting estimator thread 0... [ 131.738025][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 131.757848][ T6248] netlink: 17 bytes leftover after parsing attributes in process `syz.0.99'. [ 131.767534][ T6250] IPVS: using max 19 ests per chain, 45600 per kthread [ 131.796652][ T6248] tipc: Invalid UDP bearer configuration [ 131.796719][ T6248] tipc: Enabling of bearer rejected, failed to enable media [ 131.884326][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.935410][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.957060][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.986594][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.023676][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.074074][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.106594][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.126606][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.152976][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.172725][ T6269] syz.0.104 uses obsolete (PF_INET,SOCK_PACKET) [ 132.191841][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.210696][ T6269] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 132.210696][ T6269] The task syz.0.104 (6269) triggered the difference, watch for misbehavior. [ 132.242232][ T5996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.261948][ T5996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.274640][ T5996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.291209][ T5996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.453248][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.467187][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.509440][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.523077][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.661951][ T6277] loop4: detected capacity change from 0 to 512 [ 132.679270][ T6277] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.701018][ T6277] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.771405][ T6277] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.867973][ T6277] EXT4-fs (loop4): 1 truncate cleaned up [ 132.904062][ T6277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.164700][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.175421][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.283828][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 134.045426][ T5996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.179991][ T6299] Zero length message leads to an empty skb [ 134.392054][ T6309] netlink: 'syz.4.112': attribute type 1 has an invalid length. [ 134.961782][ T6309] veth3: entered allmulticast mode [ 136.254465][ T6331] loop4: detected capacity change from 0 to 128 [ 136.320321][ T6331] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 136.363113][ T6331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.684286][ T6335] netlink: 'syz.0.118': attribute type 12 has an invalid length. [ 137.001287][ T6349] netlink: zone id is out of range [ 137.068612][ T6349] netlink: zone id is out of range [ 137.085853][ T6349] netlink: zone id is out of range [ 137.123706][ T6349] netlink: zone id is out of range [ 137.146895][ T6349] netlink: zone id is out of range [ 137.201443][ T6349] netlink: zone id is out of range [ 137.239781][ T6349] netlink: zone id is out of range [ 137.327354][ T6349] netlink: zone id is out of range [ 137.433569][ T6349] netlink: zone id is out of range [ 137.527073][ T6349] netlink: zone id is out of range [ 138.430402][ T6371] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 138.481770][ T6370] loop2: detected capacity change from 0 to 1024 [ 138.557483][ T6370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.680002][ T6370] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.682632][ T6392] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.128: bg 0: block 112: padding at end of block bitmap is not set [ 139.735754][ T6392] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 139.748837][ T6392] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.748837][ T6392] [ 139.758772][ T6392] EXT4-fs (loop2): Total free blocks count 0 [ 139.765013][ T6392] EXT4-fs (loop2): Free/Dirty block details [ 139.771250][ T6392] EXT4-fs (loop2): free_blocks=0 [ 139.776451][ T6392] EXT4-fs (loop2): dirty_blocks=64 [ 139.781792][ T6392] EXT4-fs (loop2): Block reservation details [ 139.788041][ T6392] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 140.243044][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.265321][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 140.865911][ T6405] vlan2: entered allmulticast mode [ 140.958951][ T6405] bridge1: entered allmulticast mode [ 141.081055][ T6407] bridge1: port 1(erspan0) entered blocking state [ 141.276276][ T6407] bridge1: port 1(erspan0) entered disabled state [ 141.874468][ T6407] erspan0: entered allmulticast mode [ 142.468909][ T6407] erspan0: entered promiscuous mode [ 142.477423][ T6407] bridge1: port 1(erspan0) entered blocking state [ 142.484545][ T6407] bridge1: port 1(erspan0) entered forwarding state [ 142.723082][ T6428] loop3: detected capacity change from 0 to 256 [ 142.964901][ T6435] loop3: detected capacity change from 0 to 1024 [ 142.973213][ T6435] EXT4-fs: Ignoring removed i_version option [ 142.979423][ T6435] EXT4-fs: Ignoring removed oldalloc option [ 142.990524][ T6432] loop4: detected capacity change from 0 to 2048 [ 143.040255][ T6435] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 143.054051][ T6436] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.498967][ T6435] EXT4-fs (loop3): group descriptors corrupted! [ 143.585889][ T6432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.962004][ T6435] loop3: detected capacity change from 0 to 16 [ 144.044878][ T6435] erofs: (device loop3): mounted with root inode @ nid 36. [ 144.079629][ T6435] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 144.104636][ T6447] net_ratelimit: 23 callbacks suppressed [ 144.104654][ T6447] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 144.139357][ T6435] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851] [ 144.206385][ T6435] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 144.389291][ T5996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.943197][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 146.219080][ T6466] netlink: 2 bytes leftover after parsing attributes in process `syz.0.145'. [ 146.983374][ T6480] syzkaller0: entered promiscuous mode [ 147.003094][ T6480] syzkaller0: entered allmulticast mode [ 147.041088][ T6480] tipc: Started in network mode [ 147.049207][ T6480] tipc: Node identity 0e5b60d0d417, cluster identity 4711 [ 147.073846][ T6480] tipc: Enabled bearer , priority 0 [ 147.203828][ T6478] tipc: Resetting bearer [ 147.371036][ T6478] tipc: Disabling bearer [ 148.375277][ T6497] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.385174][ T6497] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.394210][ T6498] loop2: detected capacity change from 0 to 2048 [ 148.402287][ T6497] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.412102][ T6497] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.453133][ T6498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.460900][ T6497] bond0: (slave vxlan1): Enslaving as an active interface with an up link [ 148.590163][ T6498] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.811236][ T6498] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.152: bg 0: block 345: padding at end of block bitmap is not set [ 149.118588][ T6498] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 128 with error 28 [ 149.191186][ T6507] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6507] [ 149.866738][ T6498] EXT4-fs (loop2): This should not happen!! Data will be lost [ 149.866738][ T6498] [ 150.019730][ T6498] EXT4-fs (loop2): Total free blocks count 0 [ 150.025886][ T6498] EXT4-fs (loop2): Free/Dirty block details [ 150.295060][ T6498] EXT4-fs (loop2): free_blocks=0 [ 150.316883][ T6498] EXT4-fs (loop2): dirty_blocks=128 [ 150.322217][ T6498] EXT4-fs (loop2): Block reservation details [ 150.384686][ T6498] EXT4-fs (loop2): i_reserved_data_blocks=8 [ 151.206244][ T6517] Set syz1 is full, maxelem 2 reached [ 151.255817][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.828290][ T6541] loop5: detected capacity change from 0 to 6 [ 153.113700][ T49] loop: Write error at byte offset 0, length 3072. [ 153.171638][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 153.182043][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 154.566616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 156.431490][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 158.424065][ T6588] syzkaller0: entered promiscuous mode [ 158.468854][ T6588] syzkaller0: entered allmulticast mode [ 158.939970][ T6588] tipc: Enabled bearer , priority 0 [ 159.098679][ T6587] tipc: Resetting bearer [ 159.265931][ T6596] dummy_hcd dummy_hcd.0: remove, state 4 [ 159.273299][ T6596] usb usb1: USB disconnect, device number 1 [ 159.325746][ T6587] tipc: Disabling bearer [ 159.496039][ T6604] netlink: 'syz.2.173': attribute type 2 has an invalid length. [ 159.510501][ T6596] dummy_hcd dummy_hcd.0: stopped [ 159.526879][ T6596] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 166.625373][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.189'. [ 166.783927][ T6683] netlink: 'syz.2.189': attribute type 5 has an invalid length. [ 166.804969][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 167.890506][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'. [ 168.346269][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 168.370769][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 168.419269][ T6704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.443450][ T6704] bond1: (slave bond0): making interface the new active one [ 168.480428][ T6704] bond1: (slave bond0): Enslaving as an active interface with an up link [ 168.517128][ T6707] netlink: 'syz.0.194': attribute type 4 has an invalid length. [ 168.545245][ T6707] netlink: 152 bytes leftover after parsing attributes in process `syz.0.194'. [ 168.583998][ T6716] loop4: detected capacity change from 0 to 128 [ 168.594217][ T6707] .`: renamed from bond0 (while UP) [ 168.675846][ T6704] syz.0.194 (6704) used greatest stack depth: 19944 bytes left [ 172.269864][ T6757] bond_slave_0: entered promiscuous mode [ 172.277269][ T6757] bond_slave_1: entered promiscuous mode [ 172.304986][ T6757] bond_slave_0: left promiscuous mode [ 172.310595][ T6757] bond_slave_1: left promiscuous mode [ 172.319917][ T6757] bond1: (slave vlan2): making interface the new active one [ 172.327847][ T6757] bond_slave_0: entered promiscuous mode [ 172.333626][ T6757] bond_slave_1: entered promiscuous mode [ 172.340654][ T6757] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 172.386131][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'. [ 172.470298][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 173.003465][ T6762] bond0: entered promiscuous mode [ 173.050048][ T6762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.203065][ T6765] vlan3: entered allmulticast mode [ 173.523506][ T6765] bond0: entered allmulticast mode [ 173.543812][ T6767] bond0: (slave ip6gre1): refused to change device type [ 173.635209][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 174.569271][ T6790] MTD: Couldn't look up './dev/mtdblock0': -2 [ 176.119419][ T6814] xt_l2tp: invalid flags combination: 0 [ 176.185544][ T6821] process 'syz.0.219' launched './file1' with NULL argv: empty string added [ 176.631518][ T6831] syzkaller0: entered promiscuous mode [ 176.655288][ T6831] syzkaller0: entered allmulticast mode [ 176.696630][ T6831] tipc: Started in network mode [ 176.703884][ T6831] tipc: Node identity ee036a286d09, cluster identity 4711 [ 176.724757][ T6831] tipc: Enabled bearer , priority 0 [ 176.750341][ T6830] tipc: Resetting bearer [ 176.868392][ T6830] tipc: Disabling bearer [ 177.023844][ T6836] tipc: Started in network mode [ 177.058251][ T6836] tipc: Node identity 86e44ade922a, cluster identity 4711 [ 177.090548][ T6836] tipc: Enabled bearer , priority 0 [ 177.252332][ T6841] syzkaller0: entered promiscuous mode [ 177.268373][ T6841] syzkaller0: entered allmulticast mode [ 177.274970][ T6841] tipc: Resetting bearer [ 177.672748][ T6856] loop3: detected capacity change from 0 to 64 [ 177.929575][ T6865] loop2: detected capacity change from 0 to 128 [ 178.276461][ T49] tipc: Resetting bearer [ 178.288385][ T5813] tipc: Node number set to 349063902 [ 178.381498][ T6872] tipc: Failed to remove unknown binding: 66,0,0/0:560613605/560613607 [ 178.413116][ T6870] tipc: Failed to remove unknown binding: 66,0,0/0:41801788/41801789 [ 178.436237][ T6870] tipc: Failed to remove unknown binding: 66,0,0/0:41801788/41801789 [ 183.165007][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.172956][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.338910][ T6888] bond_slave_0: left promiscuous mode [ 183.354054][ T6888] bond_slave_1: left promiscuous mode [ 184.174436][ T6923] loop3: detected capacity change from 0 to 512 [ 184.227900][ T6923] EXT4-fs (loop3): orphan cleanup on readonly fs [ 184.258042][ T6923] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.242: corrupted inode contents [ 184.315126][ T6923] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 184.353159][ T6923] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.242: corrupted inode contents [ 184.434036][ T6923] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.242: mark_inode_dirty error [ 184.458943][ T6923] EXT4-fs (loop3): 1 orphan inode deleted [ 184.466108][ T6923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 187.489709][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.779944][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.852174][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.394853][ T6888] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.404537][ T6888] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.419466][ T6888] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.428648][ T6888] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.592763][ T6888] tipc: Resetting bearer [ 189.625227][ T6888] syzkaller0: left promiscuous mode [ 189.631025][ T6888] syzkaller0: left allmulticast mode [ 192.695833][ T6847] tipc: Disabling bearer [ 192.761579][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 192.870709][ T6961] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.899683][ T6961] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 193.358219][ T28] audit: type=1326 audit(1786571066.052:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e0d9 code=0x7ffc0000 [ 193.463671][ T28] audit: type=1326 audit(1786571066.052:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e0d9 code=0x7ffc0000 [ 193.645028][ T28] audit: type=1326 audit(1786571066.052:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f8a8cd9e0d9 code=0x7ffc0000 [ 194.152816][ T6961] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 194.207841][ T28] audit: type=1326 audit(1786571066.052:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e0d9 code=0x7ffc0000 [ 194.242526][ T28] audit: type=1326 audit(1786571066.052:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e0d9 code=0x7ffc0000 [ 194.271680][ T28] audit: type=1326 audit(1786571066.052:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a8cd9e0d9 code=0x7ffc0000 [ 194.304329][ T28] audit: type=1326 audit(1786571066.052:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e0d9 code=0x7ffc0000 [ 194.346046][ T6961] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.394822][ T6961] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 194.416730][ T28] audit: type=1326 audit(1786571066.052:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e0d9 code=0x7ffc0000 [ 194.511000][ T6961] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 194.530968][ T28] audit: type=1326 audit(1786571066.052:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a8cd9e0d9 code=0x7ffc0000 [ 194.603509][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.609738][ T28] audit: type=1326 audit(1786571066.052:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.4.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8cd9e0d9 code=0x7ffc0000 [ 194.613294][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.681974][ T6986] loop4: detected capacity change from 0 to 2048 [ 194.744579][ T6986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.819184][ T6961] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.836374][ T5996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.988650][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.039218][ T6961] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 196.150363][ T6961] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 196.185271][ T6961] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.247748][ T6961] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.291237][ T6961] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.406789][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.486758][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.735687][ T7013] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7013] [ 198.039875][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.202391][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.225250][ T7022] loop4: detected capacity change from 0 to 1024 [ 198.231144][ T7025] netlink: 'syz.2.264': attribute type 4 has an invalid length. [ 198.332880][ T6996] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.437104][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.539935][ T7026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.575292][ T7026] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.660761][ T7026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.041094][ T7036] tipc: Started in network mode [ 199.077541][ T7036] tipc: Node identity 7f000001, cluster identity 4711 [ 199.092603][ T7036] tipc: Enabled bearer , priority 10 [ 199.124272][ T7026] syz.2.264 (7026) used greatest stack depth: 19432 bytes left [ 199.165157][ T7036] netlink: 104 bytes leftover after parsing attributes in process `syz.0.260'. [ 199.215055][ T7036] tipc: Enabling of bearer rejected, failed to enable media [ 199.414040][ T7041] syzkaller0: entered promiscuous mode [ 199.433276][ T7041] syzkaller0: entered allmulticast mode [ 199.557809][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.218769][ T5839] tipc: Node number set to 2130706433 [ 200.224496][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.276754][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.518461][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.591997][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 200.592013][ T28] audit: type=1326 audit(1786571073.292:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f137019e0d9 code=0x0 [ 200.691626][ T7061] UHID_CREATE from different security context by process 247 (syz.3.270), this is not allowed. [ 200.841051][ T7074] bridge0: port 3(syz_tun) entered blocking state [ 200.864641][ T7074] bridge0: port 3(syz_tun) entered disabled state [ 200.911891][ T7074] syz_tun: entered promiscuous mode [ 200.931977][ T7074] bridge0: port 3(syz_tun) entered blocking state [ 200.939669][ T7074] bridge0: port 3(syz_tun) entered forwarding state [ 201.479619][ T5084] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 201.646683][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.548504][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.983453][ T7099] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.278'. [ 202.992702][ T7099] openvswitch: netlink: ct_state flags 00030000 unsupported [ 203.047474][ T7100] netlink: 96 bytes leftover after parsing attributes in process `syz.4.277'. [ 203.456066][ T7103] loop3: detected capacity change from 0 to 128 [ 203.578984][ T7103] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 203.997602][ T7110] sysv_free_block: trying to free block not in datazone [ 204.498984][ T5778] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 205.659325][ T7127] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.771222][ T23] IPVS: starting estimator thread 0... [ 205.886843][ T7132] IPVS: using max 17 ests per chain, 40800 per kthread [ 207.041049][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 207.733760][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 208.262950][ T7161] loop2: detected capacity change from 0 to 128 [ 208.405799][ T7161] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.486938][ T7161] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.550749][ T7161] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.313568][ T7172] netlink: 'syz.0.298': attribute type 5 has an invalid length. [ 212.236448][ T7197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.305'. [ 212.262073][ T7197] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 212.273924][ T7197] bridge1: entered promiscuous mode [ 212.729834][ T7200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.737713][ T7200] IPv6: NLM_F_CREATE should be set when creating new route [ 212.952681][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.305'. [ 213.223180][ T7201] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 213.682275][ T7201] bridge2: entered promiscuous mode [ 215.137484][ T7216] loop4: detected capacity change from 0 to 128 [ 215.168118][ T7216] EXT4-fs (loop4): Test dummy encryption mode enabled [ 215.226332][ T7216] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.286746][ T7216] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.448840][ T5996] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.022712][ T7244] syzkaller0: entered promiscuous mode [ 217.042808][ T7244] syzkaller0: entered allmulticast mode [ 218.959162][ T7275] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 219.638746][ T7275] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.664281][ T7275] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.689226][ T7275] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.726027][ T7275] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.756439][ T7275] bond1: (slave geneve2): making interface the new active one [ 219.781844][ T7275] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 219.888316][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'. [ 219.915564][ T7279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.548926][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.334'. [ 221.245815][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 221.263537][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 221.282103][ T7304] ceph: No mds server is up or the cluster is laggy [ 221.297525][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 221.303633][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 221.374643][ T7314] loop4: detected capacity change from 0 to 512 [ 221.428167][ T7314] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 221.483131][ T7314] EXT4-fs (loop4): 1 truncate cleaned up [ 221.555111][ T7314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.583027][ T7314] netlink: 'syz.4.337': attribute type 322 has an invalid length. [ 224.067625][ T7356] syzkaller0: left promiscuous mode [ 224.072928][ T7356] syzkaller0: left allmulticast mode [ 224.514295][ T5996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.663229][ T7378] loop4: detected capacity change from 0 to 128 [ 224.760933][ T7378] bridge_slave_0: left allmulticast mode [ 224.779123][ T7378] bridge_slave_0: left promiscuous mode [ 224.807656][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.875785][ T7378] bridge_slave_1: left allmulticast mode [ 224.908994][ T7378] bridge_slave_1: left promiscuous mode [ 224.914973][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.952386][ T7378] bond0: (slave bond_slave_0): Releasing backup interface [ 224.975364][ T7378] bond0: (slave bond_slave_1): Releasing backup interface [ 226.038530][ T7378] team0: Port device team_slave_0 removed [ 226.087452][ T7378] team0: Port device team_slave_1 removed [ 226.103335][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.121232][ T7378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.165551][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.204521][ T7378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.190092][ T7425] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 229.276254][ T7429] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.285810][ T7429] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.294752][ T7429] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.303672][ T7429] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.461730][ T7429] team0: Port device vxlan0 added [ 234.192716][ T7466] syz_tun: entered allmulticast mode [ 234.507915][ T7472] loop4: detected capacity change from 0 to 1024 [ 234.572773][ T7472] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 234.603374][ T7472] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 234.837491][ T7480] wg1: entered promiscuous mode [ 234.842427][ T7480] wg1: entered allmulticast mode [ 234.993849][ T7482] loop3: detected capacity change from 0 to 2048 [ 235.080317][ T7482] loop3: p2 < > p3 p4 [ 235.089778][ T7482] loop3: p3 start 65535 is beyond EOD, truncated [ 235.135194][ T7482] loop3: p4 size 8192 extends beyond EOD, truncated [ 235.146844][ T7472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.302637][ T7472] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.4.383: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 235.454788][ T6996] udevd[6996]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 235.462567][ T6972] udevd[6972]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 235.484506][ T5996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.613184][ T7507] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 236.660129][ T7507] bond2: entered promiscuous mode [ 236.667077][ T7507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.726079][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.396'. [ 236.744359][ T7507] bond2: entered allmulticast mode [ 236.829063][ T7507] bond2: (slave bridge2): making interface the new active one [ 236.847013][ T7507] bridge2: entered promiscuous mode [ 236.853692][ T7507] bridge2: entered allmulticast mode [ 236.861511][ T7507] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 242.394576][ T7574] overlayfs: failed to clone upperpath [ 244.368534][ T7603] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 246.181010][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 246.321582][ T7611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.453914][ T7613] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.464643][ T7613] bond3: (slave bond4): Enslaving as an active interface with an up link [ 247.211942][ T7619] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.430'. [ 247.473862][ T7611] bond3 (unregistering): (slave bond4): Releasing backup interface [ 247.643750][ T7611] bond3 (unregistering): Released all slaves [ 248.011903][ T7622] loop4: detected capacity change from 0 to 1024 [ 248.074370][ T7622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.106732][ T7622] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.076947][ T7628] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 249.426051][ T5996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.591835][ T7640] netlink: 165 bytes leftover after parsing attributes in process `syz.2.432'. [ 252.116867][ T7673] loop4: detected capacity change from 0 to 2048 [ 252.194252][ T7673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.207263][ T7673] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.841027][ T7683] syzkaller0: entered promiscuous mode [ 252.939917][ T7683] syzkaller0: entered allmulticast mode [ 253.191828][ T7684] netlink: 'syz.4.440': attribute type 12 has an invalid length. [ 253.217631][ T7676] tipc: Enabled bearer , priority 0 [ 253.271799][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 254.452573][ T5811] tipc: Node number set to 3662438608 [ 254.586549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 256.212888][ T5781] Bluetooth: hci4: command 0x1003 tx timeout [ 256.220180][ T5084] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 256.227889][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.234256][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.258465][ T7680] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 256.542995][ T5996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.768103][ T7726] Bluetooth: ISO socket layer initialized [ 258.136872][ T7732] netlink: 1 bytes leftover after parsing attributes in process `syz.0.455'. [ 259.668243][ T7757] tipc: Enabling of bearer rejected, failed to enable media [ 261.182947][ T7788] futex_wake_op: syz.4.470 tries to shift op by 32; fix this program [ 262.716900][ T7807] loop3: detected capacity change from 0 to 2048 [ 262.823976][ T7807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.848894][ T7807] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.091802][ T7807] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.474: bg 0: block 345: padding at end of block bitmap is not set [ 263.108983][ T7807] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 84 with error 28 [ 263.121782][ T7807] EXT4-fs (loop3): This should not happen!! Data will be lost [ 263.121782][ T7807] [ 263.984315][ T7807] EXT4-fs (loop3): Total free blocks count 0 [ 264.492602][ T7807] EXT4-fs (loop3): Free/Dirty block details [ 264.533018][ T7807] EXT4-fs (loop3): free_blocks=0 [ 264.548919][ T7807] EXT4-fs (loop3): dirty_blocks=96 [ 264.722200][ T7807] EXT4-fs (loop3): Block reservation details [ 265.047532][ T7807] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 265.467861][ T1144] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 100 with max blocks 1 with error 28 [ 268.120241][ T7886] tipc: Enabling of bearer rejected, already enabled [ 268.467172][ T7886] syzkaller0: mtu less than device minimum [ 268.972597][ T49] loop: Write error at byte offset 0, length 1024. [ 269.023831][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 269.033408][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 269.048677][ T7880] loop: Write error at byte offset 0, length 1024. [ 269.105822][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 269.115371][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 273.992642][ T7986] netlink: 'syz.0.507': attribute type 2 has an invalid length. [ 274.895833][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 276.702132][ T8005] capability: warning: `syz.3.512' uses deprecated v2 capabilities in a way that may be insecure [ 277.016313][ T7993] veth3: entered allmulticast mode [ 277.113782][ T7993] bond1: (slave veth3): Enslaving as an active interface with an up link [ 277.990490][ T8039] loop3: detected capacity change from 0 to 128 [ 278.027052][ T8039] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 278.083177][ T8039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.593760][ T8050] bridge0: port 3(syz_tun) entered disabled state [ 278.678050][ T8050] syz_tun (unregistering): left allmulticast mode [ 278.684578][ T8050] syz_tun (unregistering): left promiscuous mode [ 278.707095][ T8050] bridge0: port 3(syz_tun) entered disabled state [ 278.957851][ T8060] tipc: Enabling of bearer rejected, failed to enable media [ 281.072334][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.082668][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.099040][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.110411][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.121174][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.128863][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.413360][ T8074] chnl_net:caif_netlink_parms(): no params data found [ 281.674271][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.721172][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.760200][ T8074] bridge_slave_0: entered allmulticast mode [ 281.805246][ T8074] bridge_slave_0: entered promiscuous mode [ 281.845635][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.853002][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.860391][ T8074] bridge_slave_1: entered allmulticast mode [ 281.867875][ T8074] bridge_slave_1: entered promiscuous mode [ 281.904205][ T8074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.919823][ T8074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.531388][ T8074] team0: Port device team_slave_0 added [ 282.590822][ T8074] team0: Port device team_slave_1 added [ 282.705459][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.712523][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.739020][ T8074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.759110][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.766134][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.797285][ T8074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.861506][ T8074] hsr_slave_0: entered promiscuous mode [ 282.900708][ T8074] hsr_slave_1: entered promiscuous mode [ 282.911346][ T8074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.940288][ T8074] Cannot create hsr debugfs directory [ 283.159581][ T5781] Bluetooth: hci0: command tx timeout [ 283.505756][ T8074] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.538618][ T8074] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 283.552274][ T8074] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.568894][ T8074] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.833097][ T8074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.889258][ T8074] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.938326][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.945537][ T7898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.983326][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.990578][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.082586][ T8117] bond2: (slave vlan2): Enslaving as an active interface with a down link [ 285.349230][ T5781] Bluetooth: hci0: command tx timeout [ 286.031545][ T8074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.113992][ T8151] jffs2: notice: (8151) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 288.033314][ T5084] Bluetooth: hci0: command tx timeout [ 288.508919][ T8074] veth0_vlan: entered promiscuous mode [ 288.539782][ T8074] veth1_vlan: entered promiscuous mode [ 288.619614][ T8074] veth0_macvtap: entered promiscuous mode [ 288.650127][ T8074] veth1_macvtap: entered promiscuous mode [ 288.679325][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.695634][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.720152][ T8074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.745523][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.762639][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.775026][ T8074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.815999][ T8074] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.831705][ T8074] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.850155][ T8074] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.859443][ T8074] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.046087][ T7898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.068851][ T7898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.103102][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.116743][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.258206][ T6949] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 289.476988][ T6949] usb 5-1: Using ep0 maxpacket: 32 [ 289.488646][ T6949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.501355][ T6949] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.512208][ T6949] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 289.525331][ T6949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.560988][ T6949] usb 5-1: config 0 descriptor?? [ 290.238443][ T5781] Bluetooth: hci0: command tx timeout [ 290.984703][ T6949] usb 5-1: USB disconnect, device number 2 [ 292.584877][ T8212] tipc: Enabled bearer , priority 0 [ 293.914946][ T8228] tipc: Enabling of bearer rejected, failed to enable media [ 294.042587][ T8232] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 294.895878][ T8237] loop3: detected capacity change from 0 to 512 [ 295.326731][ T8237] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.572: bad orphan inode 11862016 [ 295.502762][ T8237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 295.557870][ T8237] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.569371][ T8244] tipc: Failed to remove unknown binding: 66,0,0/349063902:629197888/629197889 [ 295.596780][ T8245] tipc: Failed to remove unknown binding: 66,0,0/349063902:3554193643/3554193645 [ 295.705732][ T8244] tipc: Failed to remove unknown binding: 66,0,0/349063902:629197888/629197889 [ 297.624005][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 297.737748][ T28] audit: type=1326 audit(1786571170.442:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.2.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137019e0d9 code=0x7ffc0000 [ 297.793581][ T8259] sock: sock_set_timeout: `syz.2.578' (pid 8259) tries to set negative timeout [ 297.804136][ T28] audit: type=1326 audit(1786571170.462:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.2.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f137019e0d9 code=0x7ffc0000 [ 297.887455][ T28] audit: type=1326 audit(1786571170.462:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.2.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137019e0d9 code=0x7ffc0000 [ 297.972012][ T28] audit: type=1326 audit(1786571170.462:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.2.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137019e0d9 code=0x7ffc0000 [ 298.252193][ T28] audit: type=1326 audit(1786571170.462:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.2.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f137019e0d9 code=0x7ffc0000 [ 298.320190][ T8265] veth0_vlan: entered allmulticast mode [ 298.346952][ T28] audit: type=1326 audit(1786571170.472:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.2.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137019e0d9 code=0x7ffc0000 [ 298.371177][ T28] audit: type=1326 audit(1786571170.472:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.2.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f137019e0d9 code=0x7ffc0000 [ 298.401555][ T8269] xt_hashlimit: max too large, truncated to 1048576 [ 298.414586][ T28] audit: type=1326 audit(1786571170.472:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.2.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137019e0d9 code=0x7ffc0000 [ 298.756990][ T28] audit: type=1326 audit(1786571170.472:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.2.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137019e0d9 code=0x7ffc0000 [ 298.881768][ T8265] ªªªªªª: renamed from vlan0 [ 298.917712][ T28] audit: type=1326 audit(1786571170.472:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.2.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f137019e0d9 code=0x7ffc0000 [ 302.897737][ T7898] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.958823][ T7898] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.242750][ T7898] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.339388][ T7898] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.872004][ T7898] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.916660][ T7898] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.588928][ T7898] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.786850][ T7898] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.589422][ T7898] tipc: Disabling bearer [ 307.609882][ T8343] loop4: detected capacity change from 0 to 512 [ 307.650892][ T7898] tipc: Left network mode [ 307.814704][ T8343] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.001492][ T8343] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.132675][ T8343] EXT4-fs (loop4): 1 truncate cleaned up [ 308.184581][ T8343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.505231][ T8356] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8074] was attempted by " [ 310.059880][ T5996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.668638][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 313.208933][ T28] audit: type=1326 audit(1786571185.342:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952f59e0d9 code=0x7ffc0000 [ 313.482709][ T8415] netlink: 92 bytes leftover after parsing attributes in process `syz.5.615'. [ 313.883091][ T28] audit: type=1326 audit(1786571185.342:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952f59e0d9 code=0x7ffc0000 [ 314.138438][ T28] audit: type=1326 audit(1786571185.342:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f952f59e0d9 code=0x7ffc0000 [ 314.210827][ T8421] Bluetooth: MGMT ver 1.22 [ 314.217360][ T28] audit: type=1326 audit(1786571185.342:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952f59e0d9 code=0x7ffc0000 [ 314.327455][ T28] audit: type=1326 audit(1786571185.342:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952f59e0d9 code=0x7ffc0000 [ 314.396556][ T28] audit: type=1326 audit(1786571185.342:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f952f59e0d9 code=0x7ffc0000 [ 314.448047][ T7898] bridge1: port 1(erspan0) entered disabled state [ 314.582737][ T28] audit: type=1326 audit(1786571185.342:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952f59e0d9 code=0x7ffc0000 [ 314.628816][ T7898] erspan0 (unregistering): left allmulticast mode [ 314.656530][ T7898] erspan0 (unregistering): left promiscuous mode [ 314.683586][ T7898] bridge1: port 1(erspan0) entered disabled state [ 314.754492][ T28] audit: type=1326 audit(1786571185.342:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952f59e0d9 code=0x7ffc0000 [ 314.803059][ T8424] loop3: detected capacity change from 0 to 8192 [ 314.871259][ T28] audit: type=1326 audit(1786571185.342:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f952f59e0d9 code=0x7ffc0000 [ 314.943531][ T8424] Dev loop3: unable to read RDB block 8 [ 314.960339][ T8424] loop3: unable to read partition table [ 314.966273][ T8424] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 314.988529][ T28] audit: type=1326 audit(1786571185.342:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.3.612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952f59e0d9 code=0x7ffc0000 [ 317.422025][ T6951] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 317.482036][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.490019][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.477464][ T6951] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.506553][ T6951] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.514325][ T7898] hsr_slave_0: left promiscuous mode [ 318.564547][ T6951] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 318.591924][ T6951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.596895][ T7898] hsr_slave_1: left promiscuous mode [ 318.616506][ T6951] usb 5-1: Product: syz [ 318.626757][ T6951] usb 5-1: Manufacturer: syz [ 318.638138][ T7898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.645686][ T7898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.652036][ T6951] usb 5-1: SerialNumber: syz [ 318.675703][ T7898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.703721][ T7898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.739819][ T7898] bridge_slave_1: left allmulticast mode [ 318.762447][ T7898] bridge_slave_1: left promiscuous mode [ 318.778792][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.815573][ T7898] bridge_slave_0: left allmulticast mode [ 318.841453][ T7898] bridge_slave_0: left promiscuous mode [ 318.856955][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.974532][ T7898] veth1_macvtap: left promiscuous mode [ 318.992310][ T7898] veth0_macvtap: left promiscuous mode [ 319.016273][ T7898] veth1_vlan: left promiscuous mode [ 319.030809][ T7898] veth0_vlan: left promiscuous mode [ 319.313055][ T6951] usb 5-1: USB disconnect, device number 3 [ 320.609041][ T7898] bond4 (unregistering): Released all slaves [ 320.687268][ T7898] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 320.705373][ T7898] bridge2 (unregistering): left promiscuous mode [ 320.712770][ T7898] bridge2 (unregistering): left allmulticast mode [ 321.066088][ T7898] bond2 (unregistering): Released all slaves [ 321.285774][ T7898] bond0 (unregistering): Released all slaves [ 321.326163][ T7898] bond1 (unregistering): (slave .`): Releasing active interface [ 321.354426][ T7898] bond1 (unregistering): Released all slaves [ 321.386339][ T7898] .` (unregistering): (slave vxlan1): Releasing backup interface [ 322.243700][ T7898] team0 (unregistering): Port device team_slave_1 removed [ 322.333837][ T7898] team0 (unregistering): Port device team_slave_0 removed [ 322.382768][ T7898] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.438210][ T7898] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.863281][ T7898] .` (unregistering): Released all slaves [ 322.990813][ T8487] tipc: Enabled bearer , priority 10 [ 323.057218][ T8479] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.082384][ T8479] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.102341][ T8479] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.369154][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.644'. [ 324.044972][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 324.546248][ T7898] IPVS: stop unused estimator thread 0... [ 325.036762][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 325.077134][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 325.083490][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 325.158194][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.085928][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 327.085945][ T28] audit: type=1800 audit(1786571199.782:65): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.642" name="bus" dev="ramfs" ino=17418 res=0 errno=0 [ 327.571150][ T8575] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.281565][ T8573] syz.2.651 (8573) used greatest stack depth: 17768 bytes left [ 331.507121][ C1] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96 [ 333.920803][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 333.986855][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 336.468067][ T8679] netlink: 'syz.4.668': attribute type 5 has an invalid length. [ 338.121365][ T8698] loop3: detected capacity change from 0 to 256 [ 338.181296][ T8698] FAT-fs (loop3): Directory bread(block 64) failed [ 338.188003][ T8698] FAT-fs (loop3): Directory bread(block 65) failed [ 338.194667][ T8698] FAT-fs (loop3): Directory bread(block 66) failed [ 338.201509][ T8698] FAT-fs (loop3): Directory bread(block 67) failed [ 338.208303][ T8698] FAT-fs (loop3): Directory bread(block 68) failed [ 338.214971][ T8698] FAT-fs (loop3): Directory bread(block 69) failed [ 338.221994][ T8698] FAT-fs (loop3): Directory bread(block 70) failed [ 338.228668][ T8698] FAT-fs (loop3): Directory bread(block 71) failed [ 338.236333][ T8698] FAT-fs (loop3): Directory bread(block 72) failed [ 338.242987][ T8698] FAT-fs (loop3): Directory bread(block 73) failed [ 338.262059][ T8698] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 340.181386][ T8719] loop4: detected capacity change from 0 to 40427 [ 340.224130][ T8719] F2FS-fs (loop4): invalid crc value [ 340.241162][ T8719] F2FS-fs (loop4): Found nat_bits in checkpoint [ 340.313644][ T8719] F2FS-fs (loop4): Start checkpoint disabled! [ 340.347984][ T8719] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 341.095910][ T8733] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 342.546911][ T49] kworker/u4:3: attempt to access beyond end of device [ 342.546911][ T49] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 342.575616][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 342.592240][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 345.805494][ T8801] loop4: detected capacity change from 0 to 512 [ 347.370813][ T8801] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.551698][ T8801] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.693: Allocating blocks 41-42 which overlap fs metadata [ 347.969934][ T8801] EXT4-fs (loop4): Remounting filesystem read-only [ 348.052647][ T8801] Quota error (device loop4): write_blk: dquota write failed [ 348.061924][ T8801] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 348.071528][ T8801] Quota error (device loop4): write_blk: dquota write failed [ 348.082648][ T8801] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 348.267027][ T8801] EXT4-fs (loop4): 1 truncate cleaned up [ 348.467484][ T8801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.262603][ T8829] atomic_op ffff8880320f0998 conn xmit_atomic 0000000000000000 [ 349.700444][ T5996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.136049][ T8835] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 350.136393][ T8832] fuse: Bad value for 'fd' [ 350.452878][ T8835] veth3: entered allmulticast mode [ 350.498890][ T8835] bond2: (slave veth3): Enslaving as an active interface with a down link [ 350.555872][ T8840] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 350.627194][ T8849] macvlan3: entered promiscuous mode [ 350.648714][ T8849] macvlan3: entered allmulticast mode [ 350.659661][ T8849] bond2: entered promiscuous mode [ 350.666203][ T8849] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 350.675343][ T8849] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 350.694417][ T8849] bond2: left promiscuous mode [ 350.782613][ T8848] syzkaller0: entered promiscuous mode [ 350.792982][ T8848] syzkaller0: entered allmulticast mode [ 350.813239][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.822288][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.913088][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 350.934711][ T8858] bridge0: entered promiscuous mode [ 350.955334][ T8858] macvtap1: entered promiscuous mode [ 350.980124][ T8858] macvtap1: entered allmulticast mode [ 350.988123][ T8858] bridge0: entered allmulticast mode [ 351.010382][ T8859] bridge0: left allmulticast mode [ 351.017516][ T8859] bridge0: left promiscuous mode [ 351.037009][ T8859] macvtap1: left promiscuous mode [ 351.042122][ T8859] macvtap1: left allmulticast mode [ 351.124053][ T8864] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 351.358861][ T8864] 8021q: adding VLAN 0 to HW filter on device bond4 [ 351.388987][ T8864] bond3: (slave bond4): making interface the new active one [ 351.425824][ T8864] bond3: (slave bond4): Enslaving as an active interface with an up link [ 351.530910][ T8869] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 353.465843][ T5810] IPVS: starting estimator thread 0... [ 353.599872][ T8901] IPVS: using max 22 ests per chain, 52800 per kthread [ 353.986347][ T8921] netlink: 184 bytes leftover after parsing attributes in process `syz.2.716'. [ 354.007333][ T8921] bond0: entered allmulticast mode [ 354.018528][ T8921] bond_slave_0: entered allmulticast mode [ 354.024452][ T8921] bond_slave_1: entered allmulticast mode [ 354.364799][ T8931] loop3: detected capacity change from 0 to 512 [ 354.423811][ T8934] siw: device registration error -23 [ 354.443392][ T8934] (null): rxe_set_mtu: Set mtu to 1024 [ 354.466843][ T8934] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 354.487789][ T8931] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 354.680001][ T8940] syzkaller0: entered promiscuous mode [ 354.685714][ T8940] syzkaller0: entered allmulticast mode [ 356.227618][ T8962] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 356.239418][ T8962] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 356.247896][ T8962] CPU: 0 PID: 8962 Comm: syz.4.726 Not tainted syzkaller #0 [ 356.255233][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.265443][ T8962] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 356.271594][ T8962] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f d3 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 06 d3 23 fb 41 be 78 12 00 00 4d [ 356.291337][ T8962] RSP: 0018:ffffc900051df7e0 EFLAGS: 00010246 [ 356.297449][ T8962] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 356.305494][ T8962] RDX: ffff888023fb5a00 RSI: 0000000000000003 RDI: 0000000000000005 [ 356.313618][ T8962] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 356.321632][ T8962] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 356.329647][ T8962] R13: ffff88807b590530 R14: ffff8880258e1280 R15: 0000000000000000 [ 356.337651][ T8962] FS: 00007f8a8dd086c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 356.346616][ T8962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.353313][ T8962] CR2: 0000200000002202 CR3: 000000002f45f000 CR4: 00000000003506f0 [ 356.361322][ T8962] Call Trace: [ 356.364628][ T8962] [ 356.367587][ T8962] ? dummy_wakeup+0x270/0x270 [ 356.372307][ T8962] usb_gadget_set_selfpowered+0x6e/0x230 [ 356.377992][ T8962] composite_dev_prepare+0x2fa/0x320 [ 356.383505][ T8962] configfs_composite_bind+0xa1/0x13f0 [ 356.389018][ T8962] ? kernfs_put+0x309/0x360 [ 356.393565][ T8962] ? webusb_landingPage_store+0x1c0/0x1c0 [ 356.399414][ T8962] gadget_bind_driver+0x2b3/0x770 [ 356.404480][ T8962] ? gadget_match_driver+0x130/0x130 [ 356.409804][ T8962] really_probe+0x247/0xae0 [ 356.414341][ T8962] ? pm_runtime_barrier+0x14b/0x1c0 [ 356.419582][ T8962] __driver_probe_device+0x1f5/0x390 [ 356.424905][ T8962] driver_probe_device+0x4f/0x420 [ 356.429954][ T8962] __driver_attach+0x444/0x6d0 [ 356.434760][ T8962] bus_for_each_dev+0x235/0x2b0 [ 356.439650][ T8962] ? driver_attach+0x50/0x50 [ 356.444299][ T8962] ? bus_remove_file+0x140/0x140 [ 356.449285][ T8962] ? do_raw_spin_unlock+0x121/0x230 [ 356.454529][ T8962] bus_add_driver+0x340/0x630 [ 356.459538][ T8962] driver_register+0x23a/0x310 [ 356.464448][ T8962] usb_gadget_register_driver_owner+0xf9/0x270 [ 356.470646][ T8962] gadget_dev_desc_UDC_store+0x1c7/0x2e0 [ 356.476323][ T8962] configfs_write_iter+0x312/0x400 [ 356.481475][ T8962] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 356.487058][ T8962] vfs_write+0x474/0x9a0 [ 356.491344][ T8962] ? file_end_write+0x250/0x250 [ 356.496232][ T8962] ? __fget_files+0x3fc/0x460 [ 356.500956][ T8962] ? __fdget_pos+0x2a3/0x330 [ 356.505576][ T8962] ? ksys_write+0x74/0x260 [ 356.510030][ T8962] ksys_write+0x151/0x260 [ 356.514395][ T8962] ? __ia32_sys_read+0x90/0x90 [ 356.519207][ T8962] ? lockdep_hardirqs_on+0x98/0x150 [ 356.524507][ T8962] do_syscall_64+0x55/0xb0 [ 356.528959][ T8962] ? clear_bhb_loop+0x40/0x90 [ 356.533724][ T8962] ? clear_bhb_loop+0x40/0x90 [ 356.538436][ T8962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.544388][ T8962] RIP: 0033:0x7f8a8cd9e0d9 [ 356.548849][ T8962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.568637][ T8962] RSP: 002b:00007f8a8dd08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.577090][ T8962] RAX: ffffffffffffffda RBX: 00007f8a8d025fa0 RCX: 00007f8a8cd9e0d9 [ 356.585185][ T8962] RDX: 000000000000000b RSI: 0000200000001600 RDI: 0000000000000004 [ 356.593197][ T8962] RBP: 00007f8a8ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 356.601258][ T8962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.609260][ T8962] R13: 00007f8a8d026038 R14: 00007f8a8d025fa0 R15: 00007ffea6e91338 [ 356.617279][ T8962] [ 356.620342][ T8962] Modules linked in: [ 356.829929][ T8962] ---[ end trace 0000000000000000 ]--- [ 356.848754][ T8962] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 357.291774][ T8962] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f d3 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 06 d3 23 fb 41 be 78 12 00 00 4d [ 357.352968][ T8962] RSP: 0018:ffffc900051df7e0 EFLAGS: 00010246 [ 357.359290][ T8962] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 357.367481][ T8962] RDX: ffff888023fb5a00 RSI: 0000000000000003 RDI: 0000000000000005 [ 357.375609][ T8962] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 357.383926][ T8962] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 357.410196][ T8962] R13: ffff88807b590530 R14: ffff8880258e1280 R15: 0000000000000000 [ 357.436091][ T8962] FS: 00007f8a8dd086c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 357.459760][ T8962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.507681][ T8962] CR2: 00007fe6051ef2f8 CR3: 000000002f45f000 CR4: 00000000003506e0 [ 357.526556][ T8962] Kernel panic - not syncing: Fatal exception [ 357.533442][ T8962] Kernel Offset: disabled [ 357.537786][ T8962] Rebooting in 86400 seconds..