last executing test programs: 21m8.697777246s ago: executing program 2 (id=90): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x10000004}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 21m5.936553476s ago: executing program 2 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 21m2.622120323s ago: executing program 2 (id=103): socket(0xa, 0x3, 0x3a) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10816, &(0x7f0000000700)=ANY=[], 0x1, 0x201, &(0x7f0000000700)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="9fcef773371e4e035a4ff190bea4efd68642046c23be8a9aae70a0043860f98931e9a9d2a4cb9b6cbfab8d88542eafc9851179a8bc28dad0fbfc05804b2b"], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 20m56.947304625s ago: executing program 2 (id=114): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 20m56.63356658s ago: executing program 2 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000000007baa00fe", @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 20m52.336616901s ago: executing program 2 (id=125): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socketpair(0x5, 0x5, 0x9, 0x0) 20m51.936943747s ago: executing program 32 (id=125): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socketpair(0x5, 0x5, 0x9, 0x0) 17m0.240990379s ago: executing program 3 (id=767): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) unshare(0x24020400) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, 0x0) epoll_wait(r3, &(0x7f0000001e40)=[{}], 0x1, 0x0) listen(r2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) fanotify_init(0x5e, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0xf4240, 0x0, 0x0) getpgrp(0x0) fcntl$setownex(r1, 0xf, 0x0) 16m59.965186203s ago: executing program 3 (id=768): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) 16m58.157805869s ago: executing program 3 (id=771): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={r1, 0x0, 0x10}, 0xc) 16m58.155911859s ago: executing program 3 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x5508, &(0x7f000000ab00)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)='./file2/file0\x00') getuid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000e80), &(0x7f0000000ec0), 0x2, 0x1) truncate(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) 16m54.403602262s ago: executing program 3 (id=782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 16m45.990658144s ago: executing program 3 (id=803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r2, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000080)='./control\x00', 0xa4000920) rmdir(&(0x7f0000000100)='./control\x00') 16m44.84440319s ago: executing program 33 (id=803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r2, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000080)='./control\x00', 0xa4000920) rmdir(&(0x7f0000000100)='./control\x00') 13m28.682008837s ago: executing program 6 (id=1183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) socket$nl_route(0x10, 0x3, 0x0) 13m26.867145573s ago: executing program 6 (id=1187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) openat(0xffffffffffffffff, 0x0, 0x280040, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13m24.508714876s ago: executing program 6 (id=1191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 13m22.1122312s ago: executing program 6 (id=1194): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 13m20.205747897s ago: executing program 6 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 13m18.801144327s ago: executing program 6 (id=1205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000240)='efs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, &(0x7f0000000200), 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x24000845) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) close(r5) 13m17.329739798s ago: executing program 34 (id=1205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000240)='efs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, &(0x7f0000000200), 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x24000845) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) close(r5) 50.982092886s ago: executing program 4 (id=2859): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a060400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_raw(0x1d, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 47.615121214s ago: executing program 4 (id=2867): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1, 0x1}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8936, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) 46.173288564s ago: executing program 4 (id=2869): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) socket$tipc(0x1e, 0x5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xa567, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x12, 0x6000, @fd=r0, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 42.653313384s ago: executing program 4 (id=2875): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0xfffffffffffffdf2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x15, 0x0, 0x0) pipe(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r2, r2, 0x0, 0x40008) 39.530368308s ago: executing program 4 (id=2878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) 37.054356784s ago: executing program 4 (id=2887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r2, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000380)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 19.542981872s ago: executing program 35 (id=2887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r2, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000380)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.296482793s ago: executing program 7 (id=2928): socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r2, 0xa, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x3}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 4.234627549s ago: executing program 5 (id=2940): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}}, 0x20}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="140002000000000000000000f1"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r9 = dup2(r0, r0) write$P9_RSTATFS(r9, &(0x7f00000003c0)={0x43, 0x9, 0x2f00, {0x0, 0x0, 0x2000000, 0x3be, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x100000001, 0x7fffffff}}, 0x43) 4.1988683s ago: executing program 1 (id=2941): unshare(0x2a060400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_sfeatures}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_raw(0x1d, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137000059aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 4.106647311s ago: executing program 7 (id=2942): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4000) recvmmsg(r3, &(0x7f0000004d00), 0x0, 0x20, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r4, 0x7fff) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 3.925319424s ago: executing program 0 (id=2943): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000080)=0x16) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000f2000040"]) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$nl_netfilter(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000900), 0x3}, 0x17ba}], 0x1e, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f0000001c0007800c000400403a0000000000000c0003005f"], 0x30}}, 0x20088004) 3.919347064s ago: executing program 1 (id=2944): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1, 0x1, r4}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8936, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) 3.696404777s ago: executing program 5 (id=2945): socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r2, 0xa, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x3}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.531858909s ago: executing program 7 (id=2946): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1, 0x1, r5}) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8936, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) 2.79196015s ago: executing program 1 (id=2947): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2.79129043s ago: executing program 7 (id=2948): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000"], 0x50) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) writev(r2, &(0x7f0000000b00)=[{&(0x7f0000000940)=':', 0xfdef}], 0x1) r3 = dup(r1) r4 = syz_io_uring_setup(0x49be, &(0x7f0000000380)={0x0, 0x37b0, 0x10100, 0x0, 0x2, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8166}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x34, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4000080) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r9, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1}, 0x3}], 0x1, 0x0, 0x0) 2.745477441s ago: executing program 0 (id=2949): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffffffffffdf, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x2000}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd8e3}]}, 0x3c}}, 0x0) r2 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1a343e, 0x0) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x143142, 0x0) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ftruncate(r5, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) 2.579405523s ago: executing program 5 (id=2950): syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4840) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1010052, &(0x7f00000000c0)={[{}, {@nodiscard}, {@errors_remount_ro}, {@norecovery}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFSlUqBfVSpMRV7PfWu8+e7npsz9q7v5/07ds3b3a+b7yRMzOefRuAkdVYfTx5cr4I4d1P33n05aeK315fdld7jSOrj0XstUIIzY5+kW3v87jg6pWXzmzWFuH46mPqh8cut187HUJYDkfCZ6EVPlpc+vLD9x45+vHrU7e8dfGZV3Zp99vy/QAAgGF06c9Lf7/vn396YO6rS4dPh8n28nR83or96XjcfyweKKfj5Ubo7hcd0WkiW28sRiNbbyxbbzzLM16Sr5ltp1my3kSPfGMdyzbbTwAAANiP0nltKxSNha5+o7GwsHbef93nsxPFwnPnl85dGFChAAAAQGX/eXX1plshhBBCCCGEEEIMcazMDvoKBAAAADBq8vnCNlje2Zm62ltr9Zf/8sONzV8PO6Duf//y76/8H7zmNw4AANUN69Fk2q90HJ3mMcjnERzLXrfV4/9Gtp3xLdZZNq/gfplvsKzO/Oe6V5XVv9X3cVDK6s/nw9yryurP5+ncq8rqn6y5jqrK6p+quY6qyuo/UHMdVZXVf7DmOqoqq3+65jqqKqt/puY6qiqr/4aa66iqrP5DNddRVVn9++W22rL6WzXXUVVZ/XM111FVWf031lxHVWX131RzHVWV1X9zzXUMyp2xTT+Hw9l45/lzfk63X87xAAAAYNT91/x/QgghhBBCCCHE0Merg74AAQAAAAxc+lxA+tT7SpTGx3qMj/cYb/YYn+gxPtljHAAAAAjhd2+cu+3tYv1z/tudDy/NG5XmX9rqPEb5fIRbzb/dec+2m3+/zFsGAADAaCm+99m1+x99/4W5ry4dPt1x9nstnu+meUDH47WBT2I/3Rcwk/WLdA59ujtPo2S9/PrADWXbe3ybOwoAAAAjLJ2/t0LRWOg4726FRmNhYf18fD40i3Pnl84ei/30/Sx/nG1OXl/+UM11AwAAAP1bP9/f/Pw/fY/vfJgoFp47v3Tuwlp/pr282ei8LjC7vrzovC7QypYfL1l+IvbT93f+YPbA6vKFMz9cemqndx4AAABGxIUXLz7z5NLS2R954oknnrSfDPo3EwAAsNO++OKd5o9PzPx+7fP/6/Pfpc//H4n9Vpzb7y9xhXSfQPocwIbP6z/RnWe2bL3nu9drZeuNxZjM6p7q2E7omG8wvW6uLF+rezsTJfmms3wzWb58noLxbP2U71C2PJ+fMK03my3P52Ecz3IUWf67AwAAAJRbfOHZ5xcvvHjxwfPPPvn02afPPnfi+Knvnjp17KHvPLS4el//Yufd/QAAAMB+tH7T76ArAQAAAAAAAAAAAAAAAAAAgNFVx9eJDXofAQAAYNT9+9UQwrIQoiTWvgJz8HUIIYQQQvSOsT1QgxBiz8bKSv5N8wAAAAC76+qVl850thssFzuar7211lpzLeZN7cyDf5u7Hmm1yw93Xy85uKPVMOrq/vcv//7K/8FrO5t/Kj3p+/dfo3sDp6vlvXfxl/Od+W8f7zN/vv+PV8t/NMt/b+gv/8r7Wf4nquW/L8t/sM/8G/b/+Wr574/552P/6D395u9+/ydjm/bjQJ/5v53t/1Oh3/zZ/rf6TJh5IOYHgFHUGHQBuyQdJaTj6OnYT/sbDzdDfvfDVo//G9l2xrddefd203HQrbGfjpdmsrzJVuufzrZ3Q8U6c/vlrpKy+nfqfdxtZfU3a66jqrL6J2quo6qy+idrrqOqsvqnaq6jqrL6+z0PHbSy+vfLdeWy+qdrrqOqsvpnaq6jqrL6t/r/+KCU1X+o5jqqKqt/tuY6qiqrv+JltdqV1T9Xcx1VldV/Y811VFVW/00111FVWf0311zHoNwR27Lz4XT+ORvHUr+V9Sc3+VkO67UFAAAA2G/+Zf4/IYQQQgghhBBi6GNlZdBXIBik3f00MwB7ld//o837P9q8/6PN+8//k+7hL7J+MtZjfLzHeLPH+EQ2nv97newxflO23ZUojd/cY/xrPcYP9Ri/tcf4fI/x23qM395j/I4e4wAAAIyGW2Lr/BAAAACG18u/+uTN39z7xJW5ry4dPh0mNsw7fyz2J+Pf1t+I/Xze+6QZ/+b/k9j/RWz/ENt/ZOu7/wQAAAB2X/qeGH//BwAAgOGVvqfU+T8AAAAMr7nYOv8HAACA4XVjbJ3/AwAAwBArpjZfHNt0XeDu2PY7rx8AsPd9PbZ3xvZwbO+K7Tdim44D7ontN2uqDwDYOT///k9PvV2sz/d/Ihu/GpendoPltSsFRaN7Jv8DsT0Y22/1WU/+fQD95k8O9Zlnt/LPbjM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8GquPJ0/OFyG8++k7j/5s4s2/Xl92V3uNI6uPRey1QgjN9uvS6Hr/13HFq1deOtPZXottEY6HIhTt5eGxy+1M0yGE5XAkfBZa4aPFpS8/fO+Rox+/PnXLWxefeWUXfwRd+wcAAADD6H8BAAD//8WNHkw=") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, 0x0, 0x0, 0xff00) r2 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2.358585296s ago: executing program 0 (id=2951): socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x3}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x7ffd) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.941223962s ago: executing program 5 (id=2952): socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x3}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x7ffd) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.870346563s ago: executing program 1 (id=2953): unshare(0x2a060400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_sfeatures}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_raw(0x1d, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.691118326s ago: executing program 1 (id=2954): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}}, 0x20}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="140002000000000000000000f1"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r9 = dup2(r0, r0) write$P9_RSTATFS(r9, &(0x7f00000003c0)={0x43, 0x9, 0x2f00, {0x0, 0x0, 0x2000000, 0x3be, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x100000001, 0x7fffffff}}, 0x43) 1.590708357s ago: executing program 0 (id=2955): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4000) recvmmsg(r3, &(0x7f0000004d00), 0x0, 0x20, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r4, 0x7fff) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 1.167926783s ago: executing program 0 (id=2956): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1, 0x1, r5}) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8936, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) 1.019599445s ago: executing program 5 (id=2957): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1, 0x1, r5}) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8936, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) 398.352754ms ago: executing program 7 (id=2958): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001280)="da", 0x1}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa3, 0x4}}}}}}}, 0x0) sendmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x1, 0x4895) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000400)={0x1, 0x0, 0x94, &(0x7f00000001c0)={0x0, 0x1ff, 0x5}}) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r3, &(0x7f00000000c0)={0x2, 0xfffd, @broadcast}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f0000000040)={0x2, 0x0, @empty, 0x4}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "377306a4e7d911c62a23ec3cc75e0f44518f01b602bd5e5a79a3a7e553e823983f23d863fb2a0e621604bf634b92242f50b09ab215332521cc7331980985a301", 0x2b}, 0x48, 0xfffffffffffffffe) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x200}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000140)={0x0, 0xa8, r6, 0x0}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa, 0xffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f0000000100)={r9}) 320.151275ms ago: executing program 0 (id=2959): socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r2, 0xa, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x3}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 311.338825ms ago: executing program 5 (id=2960): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9002fb41024932205e2176fc5b326c9542"], 0x1, 0x304, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000680)={0xa, @pix={0x5, 0x6, 0x34325258, 0x3, 0x7, 0x10001, 0xa, 0x0, 0x0, 0x8, 0x0, 0x6}}) 206.603946ms ago: executing program 1 (id=2961): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_sfeatures}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_raw(0x1d, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 0s ago: executing program 7 (id=2962): syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4840) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1010052, &(0x7f00000000c0)={[{}, {@nodiscard}, {@errors_remount_ro}, {@norecovery}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) kernel console output (not intermixed with test programs): 5 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76886d969 code=0x7ffc0000 [ 445.323728][ T26] audit: type=1326 audit(1747757225.746:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe76886d969 code=0x7ffc0000 [ 445.842353][ T8144] netlink: 48 bytes leftover after parsing attributes in process `syz.1.958'. [ 446.303465][ T8145] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 446.412170][ T4213] kernel read not supported for file /vga_arbiter (pid: 4213 comm: kworker/1:4) [ 447.340479][ T1134] net_ratelimit: 5 callbacks suppressed [ 447.340498][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.591875][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.706849][ T4250] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.901889][ T4250] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 449.249980][ T8169] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 449.257752][ T8169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.960'. [ 449.268198][ T8169] batman_adv: batadv0: Adding interface: wlan0 [ 449.274406][ T8169] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.299539][ T8169] batman_adv: batadv0: Interface activated: wlan0 [ 449.862474][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 450.035380][ T1134] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 450.297313][ T4256] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.660403][ T8190] No source specified [ 452.300198][ T4250] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.245431][ T4250] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.537897][ T8200] loop0: detected capacity change from 0 to 1024 [ 453.552744][ T8198] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.969'. [ 453.571403][ T4250] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.675118][ T8200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.586728][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 455.080265][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 455.623487][ T8211] bond0: (slave bond_slave_0): Releasing backup interface [ 456.639441][ T8211] bond0: (slave bond_slave_1): Releasing backup interface [ 456.814311][ T8211] team0: Port device team_slave_0 removed [ 456.911531][ T8211] team0: Port device team_slave_1 removed [ 456.955340][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.048069][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.082019][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.099901][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.372606][ T8211] bond1: (slave ip6gretap1): Removing an active aggregator [ 457.417320][ T8211] bond1: (slave ip6gretap1): Releasing backup interface [ 457.846779][ T8231] tipc: Enabling of bearer rejected, already enabled [ 458.194261][ T8249] loop1: detected capacity change from 0 to 128 [ 458.340752][ T8249] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 458.372789][ T8249] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.475244][ T5091] bridge0: port 3(syz_tun) entered disabled state [ 458.553763][ T5091] device syz_tun left promiscuous mode [ 458.559293][ T5091] bridge0: port 3(syz_tun) entered disabled state [ 462.271846][ T8272] loop6: detected capacity change from 0 to 40427 [ 462.545895][ T8272] F2FS-fs (loop6): invalid crc value [ 462.571655][ T8272] F2FS-fs (loop6): Found nat_bits in checkpoint [ 462.669900][ T8272] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 463.522712][ T4255] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 463.971015][ T7412] attempt to access beyond end of device [ 463.971015][ T7412] loop6: rw=2049, want=45104, limit=40427 [ 463.984137][ T4250] tipc: Resetting bearer [ 464.363225][ T1134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.132584][ T1134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.201809][ T1134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.396245][ T8304] loop1: detected capacity change from 0 to 2048 [ 466.502206][ T8304] UDF-fs: bad mount option "" or missing value [ 466.884269][ T1134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.392425][ T8306] lo speed is unknown, defaulting to 1000 [ 467.399078][ T8306] lo speed is unknown, defaulting to 1000 [ 468.712070][ T1134] tipc: Disabling bearer [ 468.729310][ T1134] tipc: Left network mode [ 469.986703][ T2285] Bluetooth: hci0: command 0x0409 tx timeout [ 469.998480][ T8306] chnl_net:caif_netlink_parms(): no params data found [ 472.622182][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 473.786788][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.813363][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.007354][ T8306] device bridge_slave_0 entered promiscuous mode [ 474.010141][ T8373] loop6: detected capacity change from 0 to 512 [ 474.041199][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.096117][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.169942][ T8306] device bridge_slave_1 entered promiscuous mode [ 474.283965][ T8373] EXT4-fs (loop6): Unrecognized mount option "pcr=00000000000000000003" or missing value [ 475.194121][ T2285] Bluetooth: hci0: command 0x040f tx timeout [ 475.526220][ T8385] tipc: Enabling of bearer rejected, failed to enable media [ 475.553872][ T8306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.647752][ T8306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.855272][ T4216] Bluetooth: hci0: command 0x0419 tx timeout [ 477.879503][ T8306] team0: Port device team_slave_0 added [ 477.935892][ T8306] team0: Port device team_slave_1 added [ 479.648835][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.658012][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.815704][ T8306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.915103][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.983347][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.009288][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.071621][ T8306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.220344][ T8306] device hsr_slave_0 entered promiscuous mode [ 480.282530][ T8306] device hsr_slave_1 entered promiscuous mode [ 480.310172][ T8306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.345462][ T8306] Cannot create hsr debugfs directory [ 481.295356][ T8445] loop6: detected capacity change from 0 to 512 [ 481.401721][ T8445] EXT4-fs (loop6): Ignoring removed bh option [ 481.465544][ T8445] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 481.497181][ T8445] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 481.559924][ T8445] EXT4-fs (loop6): group descriptors corrupted! [ 481.843815][ T8443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.966595][ T8454] loop5: detected capacity change from 0 to 1024 [ 482.181457][ T8454] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,user_xattr,. Quota mode: none. [ 482.196283][ T8454] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.678318][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 482.703335][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 482.712245][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 482.733772][ T8475] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 485.098916][ T8492] device wg2 entered promiscuous mode [ 488.054622][ T8531] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1036'. [ 488.074486][ T8528] delete_channel: no stack [ 488.081093][ T4529] Bluetooth: hci3: command 0x0406 tx timeout [ 489.008517][ T8545] io-wq is not configured for unbound workers [ 489.327966][ T8555] loop6: detected capacity change from 0 to 32768 [ 489.376442][ T8552] loop5: detected capacity change from 0 to 1024 [ 491.530880][ T8571] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 491.789654][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.523011][ T8306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 493.435158][ T8306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 495.001290][ T8306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 495.017087][ T8306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 495.382912][ T1134] bond0: (slave wlan1): Releasing backup interface [ 497.197279][ T8306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.382354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 497.405739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 497.903576][ T8306] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.965890][ T8306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.990700][ T8306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.255059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.300973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.377084][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.384239][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.479673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 499.533247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.573991][ T8610] kvm [8609]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 499.874472][ T8610] kvm [8609]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 499.994266][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.001449][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.095635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.104632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.113555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.122571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.131504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.165087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.280406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.328710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.598078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.900346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 501.073826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 501.086736][ T8648] loop6: detected capacity change from 0 to 1024 [ 501.125760][ T8653] loop1: detected capacity change from 0 to 512 [ 501.144965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 501.227222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 501.247390][ T8653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 501.335014][ T8653] EXT4-fs (loop1): 1 truncate cleaned up [ 501.340865][ T8653] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 501.376247][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.382828][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.336575][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.370042][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.415155][ T8306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.444081][ T8648] EXT4-fs (loop6): Ignoring removed nobh option [ 503.470308][ T8648] EXT4-fs (loop6): inline encryption not supported [ 503.476864][ T8648] EXT4-fs (loop6): Ignoring removed bh option [ 503.569865][ T8648] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 505.108080][ T8648] EXT4-fs: error -4 creating inode table initialization thread [ 505.234796][ T8648] EXT4-fs (loop6): mount failed [ 506.201589][ T1134] device hsr_slave_0 left promiscuous mode [ 506.377083][ T1134] device hsr_slave_1 left promiscuous mode [ 506.920179][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.928417][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.936748][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.104508][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.167655][ T1134] device bridge_slave_1 left promiscuous mode [ 507.393049][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.631104][ T1134] device bridge_slave_0 left promiscuous mode [ 507.659500][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.721345][ T8719] loop6: detected capacity change from 0 to 128 [ 508.043633][ T1134] device veth1_macvtap left promiscuous mode [ 509.314042][ T1134] device veth0_macvtap left promiscuous mode [ 509.512715][ T1134] device veth1_vlan left promiscuous mode [ 509.518566][ T1134] device veth0_vlan left promiscuous mode [ 512.092980][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1082'. [ 512.108458][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1082'. [ 513.914104][ T8767] loop5: detected capacity change from 0 to 1024 [ 514.049242][ T8767] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 514.097448][ T8767] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 514.149020][ T8767] EXT4-fs error (device loop5): ext4_get_journal_inode:5160: inode #5: comm syz.5.1084: unexpected bad inode w/o EXT4_IGET_BAD [ 514.193619][ T8767] EXT4-fs (loop5): no journal found [ 514.199243][ T8767] EXT4-fs (loop5): can't get journal size [ 514.270207][ T8767] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e11c, mo2=0002] [ 514.279486][ T8767] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,debug,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 514.478043][ T1134] bond1 (unregistering): Released all slaves [ 515.023623][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 515.115081][ T8783] loop5: detected capacity change from 0 to 1024 [ 515.214247][ T8783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.288926][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 515.339643][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.411008][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.560529][ T1134] bond0 (unregistering): Released all slaves [ 515.621375][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 515.678874][ T8775] device team_slave_0 entered promiscuous mode [ 515.685615][ T8775] device team_slave_1 entered promiscuous mode [ 515.706535][ T8775] device macvtap2 entered promiscuous mode [ 515.730132][ T8775] device team0 entered promiscuous mode [ 515.746406][ T8775] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 515.756575][ T4245] lo speed is unknown, defaulting to 1000 [ 515.756665][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 515.780947][ T8776] device team0 left promiscuous mode [ 515.787568][ T8776] device team_slave_0 left promiscuous mode [ 515.793614][ T8776] device team_slave_1 left promiscuous mode [ 515.829411][ T8782] netlink: 'syz.5.1088': attribute type 9 has an invalid length. [ 516.024653][ T8797] loop6: detected capacity change from 0 to 1024 [ 516.089242][ T8797] EXT4-fs (loop6): Ignoring removed orlov option [ 516.115903][ T8797] EXT4-fs (loop6): test_dummy_encryption requires encrypt feature [ 516.366472][ T8801] loop1: detected capacity change from 0 to 1024 [ 517.620964][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 517.645879][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 517.833758][ T8801] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,abort,,errors=continue. Quota mode: none. [ 517.862787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 517.891994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 518.155743][ T8306] device veth0_vlan entered promiscuous mode [ 518.186379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 518.995104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.213474][ T8306] device veth1_vlan entered promiscuous mode [ 519.385245][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 519.401497][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.463028][ T8306] device veth0_macvtap entered promiscuous mode [ 520.670215][ T8306] device veth1_macvtap entered promiscuous mode [ 521.298803][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 521.307255][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 521.400002][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.411614][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.421980][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.436880][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.522448][ T8306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.566908][ T8306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.701440][ T8306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.719456][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1106'. [ 521.981302][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 521.997474][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 522.629984][ T4254] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 522.900043][ T4254] usb 7-1: Using ep0 maxpacket: 16 [ 524.870028][ T4254] usb 7-1: unable to read config index 0 descriptor/all [ 524.877249][ T4254] usb 7-1: can't read configurations, error -71 [ 524.967696][ T8896] xt_CT: No such helper "snmp_trap" [ 525.928835][ T8906] binder: 8905:8906 ioctl c0306201 200000000680 returned -14 [ 528.210228][ T8931] lo speed is unknown, defaulting to 1000 [ 528.787165][ T8931] chnl_net:caif_netlink_parms(): no params data found [ 529.130070][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 530.260005][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.271894][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.322530][ T8931] device bridge_slave_0 entered promiscuous mode [ 530.352525][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.379124][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.387959][ T8931] device bridge_slave_1 entered promiscuous mode [ 531.267168][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 531.298208][ T8931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.381983][ T8931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.522100][ T8931] team0: Port device team_slave_0 added [ 531.886740][ T8931] team0: Port device team_slave_1 added [ 532.450975][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.500721][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.568628][ T8931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.708864][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.180898][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.237547][ T8931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.280176][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 534.763031][ T8931] device hsr_slave_0 entered promiscuous mode [ 534.832973][ T8931] device hsr_slave_1 entered promiscuous mode [ 534.903786][ T9020] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 534.910351][ T9020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 534.924554][ T9020] vhci_hcd vhci_hcd.0: Device attached [ 536.500910][ T8459] Bluetooth: hci0: command 0x0419 tx timeout [ 536.659867][ T13] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 536.671803][ T9021] vhci_hcd: connection closed [ 536.672445][ T4255] vhci_hcd: stop threads [ 536.723175][ T4255] vhci_hcd: release socket [ 536.729001][ T9019] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.738399][ T9019] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.747246][ T9019] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.756014][ T9019] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.822508][ T4255] vhci_hcd: disconnect device [ 537.247083][ T9019] team0: Port device vxlan0 added [ 541.841072][ T13] vhci_hcd: vhci_device speed not set [ 543.457310][ T8931] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 543.466881][ T8931] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 543.485313][ T8931] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 543.596029][ T9087] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 544.339981][ T8931] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 545.728242][ T9100] loop5: detected capacity change from 0 to 1024 [ 546.410672][ T9100] EXT4-fs (loop5): Ignoring removed orlov option [ 546.502304][ T9100] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: writeback. [ 547.555845][ T9122] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 547.563471][ T9122] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 547.571187][ T9122] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 547.585047][ T9122] Error parsing options; rc = [-22] [ 548.504682][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.746373][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 548.784050][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.014367][ T8931] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.043555][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 549.859660][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 549.868267][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.875524][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.120284][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.060840][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.094972][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.222373][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.229483][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.248148][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.822204][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.895051][ T1134] device hsr_slave_0 left promiscuous mode [ 551.943961][ T1134] device hsr_slave_1 left promiscuous mode [ 552.054881][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.452542][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.643929][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.688311][ T1134] device bridge_slave_1 left promiscuous mode [ 552.738552][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.021074][ T1134] device bridge_slave_0 left promiscuous mode [ 553.037708][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.739229][ T1134] device veth1_macvtap left promiscuous mode [ 553.745633][ T1134] device veth0_macvtap left promiscuous mode [ 553.759887][ T1134] device veth1_vlan left promiscuous mode [ 553.765953][ T1134] device veth0_vlan left promiscuous mode [ 556.113028][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 556.128070][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 556.142812][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.158840][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.316445][ T1134] bond0 (unregistering): Released all slaves [ 556.777260][ T8931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 557.214656][ T8931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.289996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 557.331420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 557.356251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.478869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.508427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.559534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.568402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.577878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.589853][ T9176] lo speed is unknown, defaulting to 1000 [ 558.237941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 558.256635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 558.517343][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1180'. [ 559.679011][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.687386][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 561.113487][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 561.113508][ T26] audit: type=1326 audit(1747757344.716:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd041c40969 code=0x7ffc0000 [ 561.579283][ T8931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.068419][ T26] audit: type=1326 audit(1747757344.716:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd041c40969 code=0x7ffc0000 [ 564.199953][ T26] audit: type=1326 audit(1747757344.916:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd041c40969 code=0x7ffc0000 [ 564.245468][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.251863][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.530235][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1193'. [ 564.599608][ T26] audit: type=1326 audit(1747757344.916:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd041c40969 code=0x7ffc0000 [ 565.053268][ T26] audit: type=1326 audit(1747757344.916:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd041c40969 code=0x7ffc0000 [ 565.595472][ T26] audit: type=1326 audit(1747757345.046:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd041c40969 code=0x7ffc0000 [ 565.800449][ T26] audit: type=1326 audit(1747757345.046:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd041c40969 code=0x7ffc0000 [ 565.824211][ T26] audit: type=1326 audit(1747757345.046:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd041c40969 code=0x7ffc0000 [ 565.862506][ T26] audit: type=1326 audit(1747757345.206:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd041c40969 code=0x7ffc0000 [ 565.894855][ T26] audit: type=1326 audit(1747757345.206:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd041c40969 code=0x7ffc0000 [ 566.929486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 566.972757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 567.346665][ T9269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1200'. [ 567.409587][ T8931] device veth0_vlan entered promiscuous mode [ 567.438459][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 567.467677][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 567.494085][ T8931] device veth1_vlan entered promiscuous mode [ 567.510859][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 567.519454][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 567.545956][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 567.592901][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'. [ 567.626869][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 567.649589][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 567.756730][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 568.712340][ T8931] device veth0_macvtap entered promiscuous mode [ 568.725250][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 568.784232][ T8931] device veth1_macvtap entered promiscuous mode [ 568.845566][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.879746][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.909758][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.950395][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.113703][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.201047][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.212546][ T8931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.223395][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.236700][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.525913][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.751240][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.092808][ T9294] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 570.172354][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.231747][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.279386][ T8931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.296351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 570.333730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 570.344604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 570.354263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.367505][ T8931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.392896][ T8931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.409797][ T8931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.428808][ T8931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.528181][ T9299] lo speed is unknown, defaulting to 1000 [ 570.626071][ T8931] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 570.660027][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.716737][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.743394][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.783581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 570.835008][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.856740][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.928367][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 571.023394][ T9299] chnl_net:caif_netlink_parms(): no params data found [ 571.469070][ T9299] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.562629][ T9299] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.717018][ T9299] device bridge_slave_0 entered promiscuous mode [ 571.882276][ T9299] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.937004][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.976343][ T9299] device bridge_slave_1 entered promiscuous mode [ 572.327459][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1214'. [ 572.400561][ T2285] Bluetooth: hci3: command 0x0409 tx timeout [ 572.642494][ T9299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.976499][ T9299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.391088][ T9299] team0: Port device team_slave_0 added [ 573.418919][ T9299] team0: Port device team_slave_1 added [ 575.298715][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 576.291366][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.298355][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.422403][ T9299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.540794][ T9299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.875363][ T9299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.989766][ T9299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.036082][ T9365] netlink: 'syz.1.1224': attribute type 12 has an invalid length. [ 577.100863][ T9361] loop4: detected capacity change from 0 to 8192 [ 577.297483][ T9361] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 577.325236][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 577.325258][ T26] audit: type=1800 audit(1747757361.616:233): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1226" name="file2" dev="loop4" ino=1048656 res=0 errno=0 [ 577.357187][ T9361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 577.370257][ T8459] Bluetooth: hci3: command 0x040f tx timeout [ 577.392326][ T9361] FAT-fs (loop4): Filesystem has been set read-only [ 577.399355][ T9361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 577.413857][ T26] audit: type=1800 audit(1747757361.646:234): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1226" name="file2" dev="loop4" ino=1048656 res=0 errno=0 [ 577.437486][ T9361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 577.448073][ T9361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 577.463742][ T9299] device hsr_slave_0 entered promiscuous mode [ 577.469773][ T9361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 577.470014][ T9361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 577.470042][ T9361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 577.470068][ T9361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 577.470098][ T9361] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 577.472670][ T9360] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 577.533174][ T9299] device hsr_slave_1 entered promiscuous mode [ 577.570298][ T9299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.585780][ T9299] Cannot create hsr debugfs directory [ 577.694917][ T1134] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.732319][ T1134] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.819036][ T1134] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.829578][ T1134] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.904654][ T1134] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.915156][ T1134] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.960405][ T1134] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.970931][ T1134] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.314071][ T9299] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 578.373597][ T9299] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 578.394875][ T9299] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 578.417307][ T9299] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 578.624953][ T9299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.684138][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.700622][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.724075][ T9299] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.771323][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 578.793124][ T9389] loop4: detected capacity change from 0 to 512 [ 578.794235][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.895388][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.902807][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.949910][ T9389] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 579.251909][ T9389] EXT4-fs (loop4): 1 truncate cleaned up [ 579.345760][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 579.394389][ T9389] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 579.451420][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 579.539611][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 579.584223][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 579.642525][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.649761][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.940475][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 579.964304][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 580.008737][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 582.037720][ T13] Bluetooth: hci3: command 0x0405 tx timeout [ 582.046768][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.055825][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 582.065531][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 582.074434][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 583.813415][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 583.830219][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 583.839156][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'. [ 583.989762][ T26] audit: type=1326 audit(1747757368.266:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.5.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 584.083569][ T26] audit: type=1326 audit(1747757368.276:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.5.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 584.114326][ T26] audit: type=1326 audit(1747757368.276:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.5.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 584.145786][ T26] audit: type=1326 audit(1747757368.276:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.5.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 584.185996][ T26] audit: type=1326 audit(1747757368.306:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.5.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 584.206717][ T4214] libceph: connect (1)[c::]:6789 error -101 [ 584.263556][ T26] audit: type=1326 audit(1747757368.306:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.5.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 584.643709][ T26] audit: type=1326 audit(1747757368.306:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.5.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 585.007297][ T9299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.053481][ T4214] libceph: mon0 (1)[c::]:6789 connect error [ 585.060706][ T9432] ceph: No mds server is up or the cluster is laggy [ 585.080420][ T26] audit: type=1326 audit(1747757368.306:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.5.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 585.103556][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.122339][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1236'. [ 585.288311][ T26] audit: type=1326 audit(1747757368.306:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.5.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 585.319574][ T26] audit: type=1326 audit(1747757368.306:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.5.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 585.788102][ T9450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 586.331166][ T4529] libceph: connect (1)[c::]:6789 error -101 [ 586.430740][ T4529] libceph: mon0 (1)[c::]:6789 connect error [ 586.663627][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 586.681942][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 589.008596][ T9299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.892690][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 589.901571][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 592.624821][ T1134] device hsr_slave_0 left promiscuous mode [ 593.093512][ T1134] device hsr_slave_1 left promiscuous mode [ 594.261331][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.279533][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.296722][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.354118][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.655783][ T1134] device bridge_slave_1 left promiscuous mode [ 594.779477][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.990620][ T1134] device bridge_slave_0 left promiscuous mode [ 595.075490][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.211591][ T1134] device veth1_macvtap left promiscuous mode [ 595.217776][ T1134] device veth0_macvtap left promiscuous mode [ 595.237713][ T1134] device veth1_vlan left promiscuous mode [ 595.257587][ T1134] device veth0_vlan left promiscuous mode [ 597.840969][ T1134] team0 (unregistering): Port device vxlan0 removed [ 598.035991][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 598.850271][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 598.997880][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.214575][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.302901][ T1134] bond0 (unregistering): Released all slaves [ 599.411830][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 599.421022][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 599.430038][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 599.438888][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 599.447851][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 599.457172][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 599.483018][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 599.512824][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 599.522946][ T9519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 600.552531][ T9545] netlink: 'syz.4.1261': attribute type 10 has an invalid length. [ 600.561120][ T9545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1261'. [ 600.571037][ T9545] batman_adv: batadv0: Adding interface: wlan0 [ 600.577325][ T9545] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.602678][ T9545] batman_adv: batadv0: Interface activated: wlan0 [ 602.081207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 602.316839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 603.556900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 603.581404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 604.468742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 604.806858][ T9615] loop4: detected capacity change from 0 to 4096 [ 605.268213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 605.812500][ T9299] device veth0_vlan entered promiscuous mode [ 605.895085][ T9299] device veth1_vlan entered promiscuous mode [ 606.107111][ T9299] device veth0_macvtap entered promiscuous mode [ 606.225431][ T9627] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 606.274710][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 606.274757][ T26] audit: type=1800 audit(1747757390.566:272): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1277" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 606.310210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 606.368346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 606.503711][ T9299] device veth1_macvtap entered promiscuous mode [ 606.666065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 607.418862][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.674638][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.221464][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.285874][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.383224][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.507216][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.652732][ T9299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.036748][ T9634] netlink: 'syz.0.1280': attribute type 10 has an invalid length. [ 609.044743][ T9634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1280'. [ 609.054973][ T9634] batman_adv: batadv0: Adding interface: wlan0 [ 609.061191][ T9634] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.086482][ T9634] batman_adv: batadv0: Interface activated: wlan0 [ 609.156605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 609.174045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 609.232649][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.263662][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.296274][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.375968][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.429875][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.478220][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.552401][ T9299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.607629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 609.650681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 609.665555][ T9299] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.782792][ T9299] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.870378][ T9299] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.087757][ T9299] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.934252][ T9299] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 612.193833][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.213955][ T9299] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 612.243436][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.321651][ T9299] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 612.369068][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.490163][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.493585][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.498654][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.504282][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 612.547043][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.579489][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 613.647202][ T9679] netlink: 'syz.5.1289': attribute type 1 has an invalid length. [ 614.771568][ T9686] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 614.884227][ T9686] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 614.924364][ T9686] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 614.969772][ T9686] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 615.016815][ T9686] bond2: (slave geneve2): making interface the new active one [ 615.044542][ T9686] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 616.876445][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1295'. [ 623.125181][ T9768] loop7: detected capacity change from 0 to 1024 [ 623.377555][ T9768] EXT4-fs (loop7): Ignoring removed orlov option [ 623.389907][ T9768] EXT4-fs (loop7): Ignoring removed nobh option [ 623.397643][ T9768] EXT4-fs (loop7): Ignoring removed bh option [ 624.325114][ T9768] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 625.182247][ T9768] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 629.386450][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.400107][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.546925][ T9830] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 632.654063][ T9829] tipc: Started in network mode [ 632.659147][ T9829] tipc: Node identity a6372b2f369f, cluster identity 4711 [ 632.872369][ T9829] tipc: Enabled bearer , priority 0 [ 633.580628][ T9829] tipc: Resetting bearer [ 633.812279][ T9829] tipc: Disabling bearer [ 642.162304][ T9930] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1341'. [ 644.365758][ T9949] loop7: detected capacity change from 0 to 2048 [ 647.700311][ T9949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.707985][ T9914] tipc: Enabled bearer , priority 0 [ 647.816542][ T9921] tipc: Resetting bearer [ 647.977908][ T9956] loop4: detected capacity change from 0 to 512 [ 648.051555][ T9921] tipc: Disabling bearer [ 648.426826][ T9956] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 648.488009][ T9956] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 648.568970][ T9956] System zones: 0-1, 15-15, 18-18, 34-34 [ 649.007021][ T9956] EXT4-fs (loop4): orphan cleanup on readonly fs [ 649.162468][ T9956] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 649.190494][ T9956] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 649.248297][ T9956] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 649.280930][ T9956] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1349: bad orphan inode 16 [ 649.324574][ T9956] ext4_test_bit(bit=15, block=18) = 1 [ 649.344214][ T9956] is_bad_inode(inode)=0 [ 649.361490][ T9956] NEXT_ORPHAN(inode)=0 [ 649.375692][ T9956] max_ino=32 [ 649.387298][ T9956] i_nlink=2 [ 649.399824][ T9956] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 653.759510][ T4214] Bluetooth: hci0: command 0x0406 tx timeout [ 654.939502][ T9984] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 654.967008][ T9984] CIFS mount error: No usable UNC path provided in device string! [ 654.967008][ T9984] [ 654.977356][ T9984] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 657.753618][T10024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1366'. [ 658.174595][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 658.210489][T10033] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1368'. [ 658.287221][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 658.297072][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 658.304677][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 658.316388][T10024] device bridge_slave_0 left promiscuous mode [ 658.323595][T10024] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.630294][T10024] device bridge_slave_1 left promiscuous mode [ 659.067248][T10024] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.463332][T10024] bond0: (slave bond_slave_0): Releasing backup interface [ 659.624140][T10024] bond0: (slave bond_slave_1): Releasing backup interface [ 660.330522][T10024] team0: Port device team_slave_0 removed [ 660.395013][T10024] team0: Port device team_slave_1 removed [ 660.413788][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.439862][T10024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.458809][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.629220][T10024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.668291][T10024] batman_adv: batadv0: Interface deactivated: wlan0 [ 660.676565][T10024] batman_adv: batadv0: Removing interface: wlan0 [ 660.808835][T10024] bond1: (slave ip6gretap1): Releasing backup interface [ 660.898453][T10024] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 0a:ef:fb:67:ba:4e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 661.360880][T10024] bond1: (slave veth5): Releasing backup interface [ 661.407520][T10024] device batadv1 left promiscuous mode [ 661.427802][T10024] bridge0: port 3(batadv1) entered disabled state [ 661.723362][ T4269] tipc: Resetting bearer [ 663.347448][T10063] bridge0: port 3(vlan3) entered blocking state [ 663.354290][T10063] bridge0: port 3(vlan3) entered disabled state [ 663.361778][T10063] device vlan3 entered promiscuous mode [ 663.367946][T10063] bridge0: port 3(vlan3) entered blocking state [ 663.374357][T10063] bridge0: port 3(vlan3) entered forwarding state [ 663.739869][T10077] overlayfs: failed to clone lowerpath [ 664.811924][T10083] bridge0: port 3(vlan2) entered blocking state [ 664.829819][T10083] bridge0: port 3(vlan2) entered disabled state [ 664.917895][T10083] device vlan2 entered promiscuous mode [ 664.942275][T10083] device bond0 entered promiscuous mode [ 664.949960][T10083] device bond_slave_0 entered promiscuous mode [ 664.956532][T10083] device bond_slave_1 entered promiscuous mode [ 665.161437][T10083] bridge0: port 3(vlan2) entered blocking state [ 665.168800][T10083] bridge0: port 3(vlan2) entered forwarding state [ 671.580337][T10143] loop7: detected capacity change from 0 to 512 [ 671.770719][T10143] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 671.936263][T10143] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 671.960976][T10155] netlink: 'syz.1.1396': attribute type 9 has an invalid length. [ 678.473285][T10221] kvm [10220]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 679.781999][T10243] netlink: 'syz.0.1411': attribute type 9 has an invalid length. [ 683.423509][T10285] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1430'. [ 683.589581][T10289] bridge0: port 3(vlan2) entered blocking state [ 683.740736][T10289] bridge0: port 3(vlan2) entered disabled state [ 683.855295][T10289] device vlan2 entered promiscuous mode [ 683.865208][T10289] device bond0 entered promiscuous mode [ 683.871162][T10289] device bond_slave_0 entered promiscuous mode [ 683.879725][T10289] device bond_slave_1 entered promiscuous mode [ 684.012109][T10289] bridge0: port 3(vlan2) entered blocking state [ 684.018495][T10289] bridge0: port 3(vlan2) entered forwarding state [ 684.507906][T10294] kvm [10293]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 684.526405][T10294] kvm [10293]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 684.748877][T10294] kvm [10293]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 690.804564][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.811148][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.930574][T10425] kvm [10422]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 694.947504][T10425] kvm [10422]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 694.986933][T10425] kvm [10422]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 695.296859][T10433] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 695.674775][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.085923][T10433] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 696.119806][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.121928][T10602] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 716.230574][T10659] loop4: detected capacity change from 0 to 2048 [ 717.412798][T10659] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 725.211086][T10734] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 728.581411][T10761] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.591091][T10761] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.599920][T10761] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.608762][T10761] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.431858][T10761] team0: Port device vxlan0 added [ 729.545952][T10759] kvm [10757]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 731.304472][T10800] netlink: 'syz.1.1541': attribute type 11 has an invalid length. [ 737.538539][ T4214] Bluetooth: hci3: command 0x0405 tx timeout [ 741.421420][T10933] loop7: detected capacity change from 0 to 64 [ 742.832414][T10942] minix_free_block (loop7:1): bit already cleared [ 742.838951][T10942] minix_free_block (loop7:4): bit already cleared [ 742.953111][T10942] minix_free_block (loop7:3): bit already cleared [ 742.959927][T10943] minix_free_inode: bit 2 already cleared [ 742.969076][T10942] minix_free_block (loop7:2): bit already cleared [ 742.984474][T10942] minix_free_block (loop7:1): bit already cleared [ 744.242958][T10962] loop4: detected capacity change from 0 to 512 [ 745.701410][T10962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 745.793034][T10974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1564'. [ 745.867998][T10962] EXT4-fs (loop4): 1 truncate cleaned up [ 745.951134][T10962] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 746.906802][T10986] Cannot find del_set index 4 as target [ 746.917940][T10986] syz.7.1567 uses old SIOCAX25GETINFO [ 748.086168][T10962] ptrace attach of "./syz-executor exec"[8931] was attempted by ""[10962] [ 750.924748][T11021] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 752.614850][T11018] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1580'. [ 752.980371][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.986719][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.241962][T11053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1587'. [ 758.799236][ T26] audit: type=1326 audit(1747757798.766:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.7.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5d07e969 code=0x7ffc0000 [ 760.049741][ T26] audit: type=1326 audit(1747757798.766:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.7.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5d07e969 code=0x7ffc0000 [ 760.344446][T11082] lo speed is unknown, defaulting to 1000 [ 769.240673][T11144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1614'. [ 771.039730][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1621'. [ 775.306522][T11211] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 775.402798][T11211] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 784.750936][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 790.409912][ T26] audit: type=1326 audit(1747757830.106:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 791.484571][ T26] audit: type=1326 audit(1747757830.106:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 791.591444][ T26] audit: type=1326 audit(1747757830.106:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 791.641001][ T26] audit: type=1326 audit(1747757830.106:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 791.705230][ T26] audit: type=1326 audit(1747757830.106:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 791.768785][ T26] audit: type=1326 audit(1747757830.106:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 791.847141][ T26] audit: type=1326 audit(1747757830.106:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 791.869566][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.919707][ T26] audit: type=1326 audit(1747757830.106:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 791.962917][ T26] audit: type=1326 audit(1747757830.106:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 792.002612][ T26] audit: type=1326 audit(1747757830.106:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.5.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 792.458402][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1667'. [ 795.174814][ T13] libceph: connect (1)[c::]:6789 error -101 [ 795.181108][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 795.244016][T11377] ceph: No mds server is up or the cluster is laggy [ 795.462034][ T13] libceph: connect (1)[c::]:6789 error -101 [ 796.227624][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 798.494241][T11412] loop7: detected capacity change from 0 to 256 [ 798.990633][T11412] FAT-fs (loop7): Directory bread(block 64) failed [ 799.153848][T11412] FAT-fs (loop7): Directory bread(block 65) failed [ 799.168185][T11417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1687'. [ 799.177764][T11412] FAT-fs (loop7): Directory bread(block 66) failed [ 799.186354][T11412] FAT-fs (loop7): Directory bread(block 67) failed [ 799.213310][T11412] FAT-fs (loop7): Directory bread(block 68) failed [ 799.230349][T11412] FAT-fs (loop7): Directory bread(block 69) failed [ 799.240005][T11412] FAT-fs (loop7): Directory bread(block 70) failed [ 799.267209][T11412] FAT-fs (loop7): Directory bread(block 71) failed [ 799.306926][T11412] FAT-fs (loop7): Directory bread(block 72) failed [ 799.323595][T11412] FAT-fs (loop7): Directory bread(block 73) failed [ 804.031719][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1700'. [ 807.640010][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1706'. [ 809.027276][T11510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1714'. [ 809.104783][T11513] xt_CT: You must specify a L4 protocol and not use inversions on it [ 809.971796][T11519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1718'. [ 810.732611][T11525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1730'. [ 810.823956][T11529] device vlan3 entered promiscuous mode [ 810.933393][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1719'. [ 811.998915][T11537] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 812.078312][T11538] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 812.153577][T11538] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 812.183373][T11538] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 812.203034][T11538] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 812.382099][T11538] bond2: (slave geneve2): making interface the new active one [ 812.400855][T11538] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 813.308244][T11537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 813.684905][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.696416][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.495541][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1729'. [ 814.606903][T11563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1732'. [ 815.035682][T11572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 818.283616][T11599] device vlan2 entered promiscuous mode [ 818.327987][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1738'. [ 820.201997][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 821.173359][T11627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1745'. [ 826.520137][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1760'. [ 827.519196][T11683] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.529370][T11683] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.538287][T11683] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.547530][T11683] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.667611][T11683] team0: Port device vxlan0 added [ 832.952550][T11732] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1775'. [ 833.869257][T11748] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 836.894814][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1787'. [ 837.007522][T11781] binder: 11778:11781 ioctl c0306201 200000000680 returned -14 [ 840.073941][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1802'. [ 840.097663][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1802'. [ 840.123298][T11819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 840.141199][T11819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 840.148860][T11819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 840.172170][T11819] device bridge_slave_0 left promiscuous mode [ 840.187504][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.197844][T11819] device bridge_slave_1 left promiscuous mode [ 840.250671][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.281062][T11819] device vlan2 left promiscuous mode [ 840.289782][T11819] device bond0 left promiscuous mode [ 840.298598][T11819] bond0: (slave bond_slave_0): Releasing backup interface [ 840.312813][T11819] device bond_slave_0 left promiscuous mode [ 840.390431][T11823] xt_l2tp: v2 doesn't support IP mode [ 841.096856][T11819] bond0: (slave bond_slave_1): Releasing backup interface [ 841.143430][T11819] device bond_slave_1 left promiscuous mode [ 842.212548][T11819] team0: Port device team_slave_0 removed [ 842.279821][T11819] team0: Port device team_slave_1 removed [ 842.286692][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.379724][T11819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.399001][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.418215][T11819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.466107][T11819] batman_adv: batadv0: Interface deactivated: wlan0 [ 842.490766][T11819] batman_adv: batadv0: Removing interface: wlan0 [ 842.499478][T11819] bridge0: port 3(vlan2) entered disabled state [ 848.719850][T11885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1820'. [ 848.738163][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1820'. [ 848.763866][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 848.777689][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 848.787612][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 848.806018][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 848.818706][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 848.822181][T11887] CIFS mount error: No usable UNC path provided in device string! [ 848.822181][T11887] [ 848.836467][T11887] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 848.850156][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 848.983816][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 849.857016][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 849.911718][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 849.946077][T11885] device bridge_slave_0 left promiscuous mode [ 850.002436][T11885] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.801708][T11885] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.853943][T11885] device vlan3 left promiscuous mode [ 850.871314][T11885] bond0: (slave bond_slave_0): Releasing backup interface [ 851.771116][T11885] bond0: (slave bond_slave_1): Releasing backup interface [ 852.688175][T11885] team0: Port device team_slave_0 removed [ 853.757301][T11885] team0: Port device team_slave_1 removed [ 853.764504][T11885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.805773][T11885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.814855][T11885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.822379][T11885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.861501][T11885] batman_adv: batadv0: Interface deactivated: wlan0 [ 853.868578][T11885] batman_adv: batadv0: Removing interface: wlan0 [ 853.920013][T11885] bond0: (slave vxlan0): Releasing backup interface [ 853.938830][T11885] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.948022][T11885] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.956976][T11885] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.966009][T11885] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.056710][T11885] bond1: (slave veth5): Releasing backup interface [ 854.079283][T11885] device bridge_slave_1 left promiscuous mode [ 854.094351][T11885] bridge0: port 3(vlan3) entered disabled state [ 854.111637][T11885] bond2: (slave geneve2): Releasing active interface [ 854.127989][T11885] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 854.138024][T11885] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 854.155340][T11885] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 854.166046][T11885] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 856.362841][T11959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1841'. [ 857.362439][T11967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1855'. [ 857.597623][T11977] bridge0: port 1(vlan4) entered blocking state [ 857.606165][T11977] bridge0: port 1(vlan4) entered disabled state [ 858.238687][T11983] loop7: detected capacity change from 0 to 256 [ 859.924667][T11982] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 860.163131][T11990] netlink: 'syz.4.1850': attribute type 11 has an invalid length. [ 864.318942][T12014] device bond3 entered promiscuous mode [ 864.331735][T12014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 864.372449][T12014] bond3 (unregistering): Released all slaves [ 870.780005][T12091] Cannot find del_set index 4 as target [ 872.121823][T12098] loop4: detected capacity change from 0 to 512 [ 872.974561][T12098] EXT4-fs error (device loop4): ext4_fill_super:4841: inode #2: comm syz.4.1877: iget: bad i_size value: -1 [ 873.017494][T12098] EXT4-fs (loop4): get root inode failed [ 873.023990][T12098] EXT4-fs (loop4): mount failed [ 873.163948][T12112] loop7: detected capacity change from 0 to 2048 [ 873.557942][T11553] loop7: p1 < > p2 p3 < p5 p6 > p4 [ 873.564035][T11553] loop7: partition table partially beyond EOD, truncated [ 873.607510][T11553] loop7: p1 start 3405774849 is beyond EOD, truncated [ 873.899651][T11553] loop7: p2 size 5046285 extends beyond EOD, truncated [ 873.944193][T11553] loop7: p5 size 5046285 extends beyond EOD, truncated [ 874.054093][T12112] loop7: p1 < > p2 p3 < p5 p6 > p4 [ 874.059447][T12112] loop7: partition table partially beyond EOD, truncated [ 874.067459][T12112] loop7: p1 start 3405774849 is beyond EOD, truncated [ 874.074467][T12112] loop7: p2 size 5046285 extends beyond EOD, truncated [ 874.085048][T12112] loop7: p5 size 5046285 extends beyond EOD, truncated [ 874.446721][T12125] hub 8-0:1.0: USB hub found [ 874.455385][T12125] hub 8-0:1.0: 1 port detected [ 875.754181][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.760572][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.208371][T11554] udevd[11554]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 876.222751][T11553] udevd[11553]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 876.286772][T12128] udevd[12128]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 876.313030][T12129] udevd[12129]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 876.339879][T12130] udevd[12130]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 876.444319][T12128] udevd[12128]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 876.458912][T12130] udevd[12130]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 876.469649][T11553] udevd[11553]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 876.484391][T11554] udevd[11554]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 876.498224][T12129] udevd[12129]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 879.261285][T12160] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 879.267924][T12160] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 879.275809][T12160] vhci_hcd vhci_hcd.0: Device attached [ 879.422282][T12160] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 879.559651][ T8852] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 880.164723][T12161] vhci_hcd: connection closed [ 880.165379][ T154] vhci_hcd: stop threads [ 880.465020][ T154] vhci_hcd: release socket [ 880.683209][ T154] vhci_hcd: disconnect device [ 881.154397][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 881.154412][ T26] audit: type=1326 audit(1747757921.446:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 881.390334][ T26] audit: type=1326 audit(1747757921.536:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 881.483498][ T26] audit: type=1326 audit(1747757921.536:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 881.544351][ T26] audit: type=1326 audit(1747757921.536:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 882.343457][ T26] audit: type=1326 audit(1747757921.536:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 882.387281][ T26] audit: type=1326 audit(1747757921.536:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 882.629620][ T26] audit: type=1326 audit(1747757921.616:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 885.636115][ T8852] vhci_hcd: vhci_device speed not set [ 885.717901][ T26] audit: type=1326 audit(1747757921.616:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 887.381032][T12208] lo speed is unknown, defaulting to 1000 [ 894.750229][T12281] Cannot find del_set index 4 as target [ 900.603953][T12337] atomic_op ffff888073d16998 conn xmit_atomic 0000000000000000 [ 903.442663][T12349] netlink: 'syz.1.1948': attribute type 12 has an invalid length. [ 905.201955][T12363] loop7: detected capacity change from 0 to 2048 [ 905.486192][T12363] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 906.045489][T12380] EXT4-fs (loop7): re-mounted. Opts: . Quota mode: none. [ 910.548443][T12407] bridge0: port 2(syz_tun) entered blocking state [ 910.750397][T12407] bridge0: port 2(syz_tun) entered disabled state [ 910.757888][T12407] device syz_tun entered promiscuous mode [ 910.928806][T12407] device vlan4 entered promiscuous mode [ 911.711285][T12413] loop7: detected capacity change from 0 to 512 [ 911.762611][T12407] device bond0 entered promiscuous mode [ 911.810556][T12413] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 911.851106][T12407] bridge0: port 2(syz_tun) entered blocking state [ 911.857621][T12407] bridge0: port 2(syz_tun) entered forwarding state [ 912.048179][T12409] netlink: 'syz.7.1965': attribute type 12 has an invalid length. [ 912.817439][T12413] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 913.018706][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 913.052224][T12413] ext4 filesystem being mounted at /139/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 916.379428][T12464] loop4: detected capacity change from 0 to 512 [ 917.732468][T12464] EXT4-fs (loop4): Ignoring removed nobh option [ 918.488501][T12464] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1978: invalid indirect mapped block 256 (level 2) [ 919.498206][T12464] EXT4-fs (loop4): 2 truncates cleaned up [ 920.481987][T12464] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 920.497334][T12488] netlink: 'syz.5.1985': attribute type 12 has an invalid length. [ 921.156417][T12490] loop7: detected capacity change from 0 to 2048 [ 921.767959][T12490] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 925.573986][T12523] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 925.580550][T12523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 925.592343][T12523] vhci_hcd vhci_hcd.0: Device attached [ 925.869533][ T8852] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 926.139169][T12524] vhci_hcd: connection closed [ 926.168505][ T154] vhci_hcd: stop threads [ 926.253599][ T154] vhci_hcd: release socket [ 926.307360][ T154] vhci_hcd: disconnect device [ 927.308779][T12537] netlink: 'syz.4.2002': attribute type 12 has an invalid length. [ 927.514797][T12537] loop4: detected capacity change from 0 to 512 [ 927.692753][T12537] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 927.806919][T12537] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 927.869837][T12537] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 928.155610][T12537] EXT4-fs error (device loop4): __ext4_new_inode:1286: comm syz.4.2002: failed to insert inode 16: doubly allocated? [ 930.498857][T12585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2014'. [ 931.779656][ T8852] vhci_hcd: vhci_device speed not set [ 934.171929][T12618] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 936.568094][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.578721][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.813495][T12645] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2031'. [ 939.411375][ T4214] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 939.452409][ T4214] Bluetooth: hci3: Injecting HCI hardware error event [ 939.462689][ T4186] Bluetooth: hci3: hardware error 0x00 [ 939.665064][ T7] Bluetooth: hci3: command 0x0405 tx timeout [ 943.140398][T12708] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 943.147089][T12708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 943.154988][T12708] vhci_hcd vhci_hcd.0: Device attached [ 943.957985][T12709] vhci_hcd: connection closed [ 943.960649][ T4306] vhci_hcd: stop threads [ 944.479617][ T4306] vhci_hcd: release socket [ 944.484236][ T4306] vhci_hcd: disconnect device [ 944.654461][ T4214] vhci_hcd: vhci_device speed not set [ 945.979634][T12722] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2050'. [ 947.188716][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2056'. [ 947.761730][T12753] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 947.812622][T12753] usb usb1: Process 12753 (syz.0.2060) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 952.072993][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2069'. [ 952.389860][T12800] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 952.429992][T12800] usb usb1: Process 12800 (syz.0.2072) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 954.708402][T12822] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2078'. [ 955.955180][T12832] loop7: detected capacity change from 0 to 32768 [ 957.059908][T12838] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 957.570378][T12832] gfs2: Unknown parameter 'statfs_quaotum' [ 960.180134][T12873] loop4: detected capacity change from 0 to 164 [ 960.466949][T12878] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2094'. [ 961.246537][T12879] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 971.738072][T12946] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2109'. [ 972.163822][T12949] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 972.175252][T12949] usb usb1: Process 12949 (syz.7.2112) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 972.719567][ T1109] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 972.727867][ T1109] Bluetooth: hci4: Injecting HCI hardware error event [ 972.743970][ T4186] Bluetooth: hci4: hardware error 0x00 [ 972.786455][T12958] usb usb1: usbfs: process 12958 (syz.7.2117) did not claim interface 0 before use [ 972.796309][T12958] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 983.303391][T13060] netlink: get zone limit has 8 unknown bytes [ 987.658666][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2157'. [ 990.634382][T13150] loop4: detected capacity change from 0 to 512 [ 990.761248][T13150] EXT4-fs (loop4): Ignoring removed bh option [ 990.786129][T13150] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 991.031077][T13150] EXT4-fs (loop4): 1 truncate cleaned up [ 991.036914][T13150] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 998.002479][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.008875][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.366729][T13250] netlink: 'syz.0.2196': attribute type 1 has an invalid length. [ 998.761041][T13254] bond3: (slave gretap1): making interface the new active one [ 998.771140][T13254] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 999.347680][T13267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2201'. [ 999.940740][T13280] binder: 13268:13280 ioctl 4018620d 0 returned -22 [ 1002.717682][ T26] audit: type=1326 audit(1747758043.008:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 1003.100186][ T26] audit: type=1326 audit(1747758043.008:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 1003.124104][ T26] audit: type=1326 audit(1747758043.048:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 1003.243441][ T26] audit: type=1326 audit(1747758043.048:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 1003.799519][ T26] audit: type=1326 audit(1747758043.048:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 1003.842649][ T26] audit: type=1326 audit(1747758043.048:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 1003.871814][T13322] loop7: detected capacity change from 0 to 128 [ 1004.730980][ T26] audit: type=1326 audit(1747758043.048:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 1004.819194][T13321] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2219'. [ 1004.875424][ T26] audit: type=1326 audit(1747758043.048:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 1005.012575][ T26] audit: type=1326 audit(1747758043.048:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 1005.107279][ T26] audit: type=1326 audit(1747758043.048:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13296 comm="syz.1.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8accb93969 code=0x7ffc0000 [ 1006.311946][T13342] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1007.456421][T13353] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 1011.704868][T13392] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1014.963145][T13422] tipc: Resetting bearer [ 1016.057928][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2247'. [ 1016.928638][ T1109] Bluetooth: hci1: command 0x0406 tx timeout [ 1017.350979][T13445] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1018.674170][T13457] loop4: detected capacity change from 0 to 1024 [ 1018.685856][T13459] usb usb1: usbfs: process 13459 (syz.7.2257) did not claim interface 0 before use [ 1018.738938][T13459] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1020.038807][ T4265] hfsplus: b-tree write err: -5, ino 4 [ 1020.660443][T13475] ipt_CLUSTERIP: Please specify destination IP [ 1022.200757][ T4265] Bluetooth: hci5: Frame reassembly failed (-84) [ 1022.245435][ T4265] Bluetooth: hci5: Frame reassembly failed (-84) [ 1023.730682][T12674] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1025.103043][T13507] usb usb1: usbfs: process 13507 (syz.4.2270) did not claim interface 0 before use [ 1025.146983][T13507] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1027.267315][T13519] netlink: 'syz.1.2272': attribute type 10 has an invalid length. [ 1027.344728][T13521] loop4: detected capacity change from 0 to 64 [ 1027.359647][T13519] device syz_tun entered promiscuous mode [ 1029.096022][T13545] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1029.108097][T13545] F2FS-fs (loop11): Unable to read 1th superblock [ 1029.115702][T13545] blk_update_request: I/O error, dev loop11, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1029.127062][T13545] F2FS-fs (loop11): Unable to read 2th superblock [ 1032.272400][T13561] binder: 13560:13561 ioctl c0306201 0 returned -14 [ 1034.933298][T13564] syz.4.2283 (13564): drop_caches: 2 [ 1039.274541][T13612] overlayfs: failed to clone upperpath [ 1042.269664][T13623] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1045.015591][T13649] usb usb1: usbfs: process 13649 (syz.0.2306) did not claim interface 0 before use [ 1045.027135][T13649] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1045.040061][T13649] usb usb1: Process 13649 (syz.0.2306) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1046.406345][T13657] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2308'. [ 1047.681104][T13669] loop7: detected capacity change from 0 to 256 [ 1055.256386][T13716] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2322'. [ 1057.857287][T13731] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1059.828317][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.834705][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.010791][T13773] loop4: detected capacity change from 0 to 16 [ 1062.807969][T13773] erofs: (device loop4): mounted with root inode @ nid 36. [ 1063.709500][T13785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2337'. [ 1068.187633][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2352'. [ 1075.284849][T13878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2365'. [ 1077.191538][T13891] overlayfs: failed to clone lowerpath [ 1081.585039][T13920] usb usb1: usbfs: process 13920 (syz.0.2375) did not claim interface 0 before use [ 1081.594709][T13920] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1081.603233][T13920] usb usb1: Process 13920 (syz.0.2375) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1083.449999][T13932] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1083.457972][T13932] usb usb1: Process 13932 (syz.0.2378) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1085.188337][T13943] overlayfs: failed to clone lowerpath [ 1087.087815][T13958] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1087.098203][T13957] loop7: detected capacity change from 0 to 256 [ 1087.781994][T13968] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1089.922920][T13979] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1089.934106][T13979] usb usb1: Process 13979 (syz.4.2392) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1091.995652][T13999] loop4: detected capacity change from 0 to 1024 [ 1093.465632][T12521] hfsplus: b-tree write err: -5, ino 4 [ 1093.959119][T14021] loop4: detected capacity change from 0 to 128 [ 1096.138775][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2408'. [ 1096.153498][T14021] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1096.189200][T14021] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.211406][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2422'. [ 1109.698611][T14137] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2434'. [ 1111.457394][T14156] loop7: detected capacity change from 0 to 1024 [ 1114.140578][T14172] overlayfs: failed to clone upperpath [ 1115.111766][ T4265] hfsplus: b-tree write err: -5, ino 4 [ 1117.549861][T14199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2449'. [ 1119.507047][T14207] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2463'. [ 1119.708557][T14218] loop4: detected capacity change from 0 to 256 [ 1120.959275][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.965679][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.185717][T14228] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1125.417434][T14271] loop7: detected capacity change from 0 to 4096 [ 1126.557601][T14276] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1126.603806][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1126.603837][ T26] audit: type=1800 audit(1747758422.890:311): pid=14271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2466" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1128.465029][T14285] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 1129.067011][T14296] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1134.867192][T14327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2483'. [ 1134.943735][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2482'. [ 1136.218375][T14343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2498'. [ 1139.333220][T14382] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2499'. [ 1139.408082][T14386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2511'. [ 1142.081032][T14402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2503'. [ 1143.316046][ T26] audit: type=1326 audit(1747758439.600:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.5.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 1143.415586][ T26] audit: type=1326 audit(1747758439.600:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.5.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 1143.710544][ T26] audit: type=1326 audit(1747758439.600:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.5.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 1143.855259][ T26] audit: type=1326 audit(1747758439.600:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.5.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 1143.878084][ T26] audit: type=1326 audit(1747758439.600:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.5.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 1143.900652][ T26] audit: type=1326 audit(1747758439.600:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.5.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 1144.532960][T14427] Process accounting resumed [ 1144.547884][ T26] audit: type=1326 audit(1747758439.600:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.5.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 1144.657421][ T26] audit: type=1326 audit(1747758439.600:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.5.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 1144.707291][ T26] audit: type=1326 audit(1747758439.600:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.5.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 1144.882728][T14440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2519'. [ 1145.861290][ T26] audit: type=1326 audit(1747758439.630:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.5.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fd6a97b0969 code=0x7ffc0000 [ 1146.990463][T14457] netlink: 'syz.4.2522': attribute type 3 has an invalid length. [ 1152.857380][T14491] loop7: detected capacity change from 0 to 164 [ 1152.926630][T14491] Unable to read rock-ridge attributes [ 1154.234859][T14494] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1154.242643][T14494] usb usb1: Process 14494 (syz.0.2533) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1156.677770][T14529] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 1162.499618][T14570] lo speed is unknown, defaulting to 1000 [ 1162.505537][T14570] lo speed is unknown, defaulting to 1000 [ 1162.511890][T14570] lo speed is unknown, defaulting to 1000 [ 1162.522457][T14570] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1162.593048][T14570] lo speed is unknown, defaulting to 1000 [ 1162.599577][T14570] lo speed is unknown, defaulting to 1000 [ 1162.606203][T14570] lo speed is unknown, defaulting to 1000 [ 1162.612757][T14570] lo speed is unknown, defaulting to 1000 [ 1162.619106][T14570] lo speed is unknown, defaulting to 1000 [ 1172.153888][T14647] netlink: 'syz.4.2569': attribute type 4 has an invalid length. [ 1179.863243][T14733] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 1181.088994][T14746] xt_l2tp: wrong L2TP version: 0 [ 1182.263687][T14752] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1182.271666][T14752] usb usb1: Process 14752 (syz.0.2602) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1182.339956][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.349650][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.997046][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 1182.997087][ T26] audit: type=1400 audit(1747758479.160:354): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14758 comm="syz.4.2606" [ 1184.719575][T14785] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 1185.557264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1186.971010][T14792] loop7: detected capacity change from 0 to 4096 [ 1187.099584][T14809] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1188.396032][ T26] audit: type=1400 audit(1747758484.670:355): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14824 comm="syz.7.2623" [ 1189.503554][T14839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2628'. [ 1189.533132][T14839] loop4: detected capacity change from 0 to 256 [ 1189.543798][T14839] exfat: Unknown parameter 'zero_size_dir' [ 1191.171679][T14848] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1191.707482][T14861] xt_TCPMSS: Only works on TCP SYN packets [ 1193.318389][T14865] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1193.335382][T14865] usb usb1: Process 14865 (syz.7.2634) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1193.698388][T14891] Device name cannot be null; rc = [-22] [ 1194.818498][T14897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2642'. [ 1200.739197][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2656'. [ 1201.839576][T14969] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1201.847329][T14969] usb usb1: Process 14969 (syz.7.2662) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1207.838243][T15021] 9pnet_virtio: no channels available for device syz [ 1215.463433][ T26] audit: type=1326 audit(1747758511.750:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15064 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a290a4969 code=0x7ffc0000 [ 1215.803609][T15071] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1215.811431][T15071] usb usb1: Process 15071 (syz.7.2689) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1215.838865][ T26] audit: type=1326 audit(1747758511.750:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15064 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4a290a4969 code=0x7ffc0000 [ 1216.428488][ T26] audit: type=1326 audit(1747758511.750:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15064 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a290a4969 code=0x7ffc0000 [ 1216.724858][ T26] audit: type=1326 audit(1747758511.750:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15064 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4a290a4969 code=0x7ffc0000 [ 1218.136674][T15085] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1218.317612][ T26] audit: type=1326 audit(1747758511.750:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15064 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a290a4969 code=0x7ffc0000 [ 1218.340689][ T26] audit: type=1326 audit(1747758511.750:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15064 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f4a290a4969 code=0x7ffc0000 [ 1218.565078][ T26] audit: type=1326 audit(1747758512.990:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15064 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a290a4969 code=0x7ffc0000 [ 1219.529366][ T26] audit: type=1326 audit(1747758512.990:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15064 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a290a4969 code=0x7ffc0000 [ 1219.830592][T15105] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1219.838400][T15105] usb usb1: Process 15105 (syz.0.2696) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1220.921181][T15117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2700'. [ 1226.888723][T15153] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1226.897145][T15153] usb usb1: Process 15153 (syz.4.2711) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1229.007238][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'. [ 1230.066473][T15175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2716'. [ 1235.779886][T15208] lo speed is unknown, defaulting to 1000 [ 1235.807631][T15208] lo speed is unknown, defaulting to 1000 [ 1235.821788][T15208] lo speed is unknown, defaulting to 1000 [ 1236.326346][T15208] infiniband sz1: set active [ 1236.331671][T15208] infiniband sz1: added lo [ 1236.515569][ T4529] lo speed is unknown, defaulting to 1000 [ 1236.518144][T15208] infiniband sz1: Couldn't open port 1 [ 1236.693647][T15208] RDS/IB: sz1: added [ 1236.704460][T15208] smc: adding ib device sz1 with port count 1 [ 1236.713014][T15208] smc: ib device sz1 port 1 has pnetid [ 1236.886433][T15208] lo speed is unknown, defaulting to 1000 [ 1236.971058][T15208] lo speed is unknown, defaulting to 1000 [ 1237.043699][T15208] lo speed is unknown, defaulting to 1000 [ 1237.114416][T15208] lo speed is unknown, defaulting to 1000 [ 1237.189796][T15208] lo speed is unknown, defaulting to 1000 [ 1237.324478][ T7] lo speed is unknown, defaulting to 1000 [ 1238.792644][T15223] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2726'. [ 1238.806493][ T26] audit: type=1326 audit(1747758535.090:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.7.2726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca5d07e969 code=0x0 [ 1241.110121][T15258] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1243.762927][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.769429][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.589544][T15287] hub 9-0:1.0: USB hub found [ 1245.709316][T15287] hub 9-0:1.0: 1 port detected [ 1257.598420][T15353] bridge0: port 1(vlan4) entered disabled state [ 1259.577225][T15379] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1259.584991][T15379] usb usb1: Process 15379 (syz.4.2766) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1262.753559][T15414] hub 9-0:1.0: USB hub found [ 1262.760232][T15414] hub 9-0:1.0: 1 port detected [ 1266.531801][T15426] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1266.539889][T15426] usb usb1: Process 15426 (syz.4.2778) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1267.170088][T15435] loop7: detected capacity change from 0 to 4096 [ 1273.530513][T15468] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1273.538282][T15468] usb usb1: Process 15468 (syz.0.2788) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1276.698662][T15476] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1279.632412][ T4214] Bluetooth: hci0: command 0x0405 tx timeout [ 1289.299299][T15559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2809'. [ 1289.935331][T15560] loop7: detected capacity change from 0 to 4096 [ 1291.281707][T15560] NILFS (loop7): error -4 creating segctord thread [ 1291.542996][T15571] program syz.0.2815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1292.259978][T15575] syz.7.2816[15575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1292.260085][T15575] syz.7.2816[15575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1295.764111][T15600] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2823'. [ 1295.785640][T15600] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2823'. [ 1296.331059][T15608] loop7: detected capacity change from 0 to 8 [ 1296.360648][T15610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2826'. [ 1296.627260][T15608] squashfs: Unknown parameter '€ëø¡J›´¨^øˤ]5dÝÓÁþëØHÏ`™ºÍ8 $%gkX*[8ÔîÛ‚ÓqÜ—*' [ 1298.679443][T15623] bridge0: port 3(vlan2) entered disabled state [ 1298.755955][T15625] : renamed from bond0 [ 1298.893913][T15632] loop7: detected capacity change from 0 to 64 [ 1302.196827][T15652] minix_free_block (loop7:1): bit already cleared [ 1302.203650][T15652] minix_free_block (loop7:4): bit already cleared [ 1302.210478][T15652] minix_free_block (loop7:3): bit already cleared [ 1302.216996][T15652] minix_free_block (loop7:2): bit already cleared [ 1302.223794][T15652] minix_free_block (loop7:1): bit already cleared [ 1305.054681][T15681] : renamed from bond0 [ 1305.252157][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.258743][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.277040][T15685] loop4: detected capacity change from 0 to 512 [ 1305.429502][T15685] EXT4-fs (loop4): Value of option "test_dummy_encryption=dont_appraise" is unrecognized [ 1307.231021][T15703] loop7: detected capacity change from 0 to 128 [ 1307.633919][T15703] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1307.656428][T15213] udevd[15213]: incorrect ext4 checksum on /dev/loop7 [ 1310.095009][T15213] udevd[15213]: incorrect ext4 checksum on /dev/loop7 [ 1312.265659][T15723] loop7: detected capacity change from 0 to 4096 [ 1314.809163][ T4186] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1314.819411][ T4186] CPU: 1 PID: 4186 Comm: kworker/u5:7 Not tainted 5.15.183-syzkaller #0 [ 1314.827768][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1314.838191][ T4186] Workqueue: hci1 hci_rx_work [ 1314.842917][ T4186] Call Trace: [ 1314.846207][ T4186] [ 1314.849152][ T4186] dump_stack_lvl+0x168/0x230 [ 1314.853845][ T4186] ? show_regs_print_info+0x20/0x20 [ 1314.859060][ T4186] ? load_image+0x3b0/0x3b0 [ 1314.863591][ T4186] sysfs_create_dir_ns+0x252/0x280 [ 1314.868752][ T4186] ? __lock_acquire+0x7c60/0x7c60 [ 1314.873801][ T4186] ? sysfs_warn_dup+0xa0/0xa0 [ 1314.878500][ T4186] ? le_conn_complete_evt+0xcbc/0x1590 [ 1314.883981][ T4186] ? hci_event_packet+0xe05/0x12f0 [ 1314.889121][ T4186] ? process_one_work+0x863/0x1000 [ 1314.894255][ T4186] ? do_raw_spin_unlock+0x11d/0x230 [ 1314.899472][ T4186] kobject_add_internal+0x662/0xd00 [ 1314.904781][ T4186] kobject_add+0x152/0x210 [ 1314.909221][ T4186] ? kobject_init+0x1d0/0x1d0 [ 1314.913922][ T4186] ? klist_children_get+0x50/0x50 [ 1314.918964][ T4186] ? get_device_parent+0x121/0x3f0 [ 1314.924092][ T4186] device_add+0x483/0xfb0 [ 1314.928445][ T4186] hci_conn_add_sysfs+0xd1/0x1e0 [ 1314.933406][ T4186] le_conn_complete_evt+0xcbc/0x1590 [ 1314.938926][ T4186] ? cs_le_create_conn+0x5e0/0x5e0 [ 1314.944092][ T4186] ? __mutex_trylock_common+0x14f/0x250 [ 1314.949827][ T4186] hci_le_meta_evt+0x289/0x3b80 [ 1314.954699][ T4186] ? hci_event_packet+0x36d/0x12f0 [ 1314.959813][ T4186] ? hci_event_packet+0x2e2/0x12f0 [ 1314.964921][ T4186] ? __lock_acquire+0x7c60/0x7c60 [ 1314.969963][ T4186] ? hci_remote_host_features_evt+0x280/0x280 [ 1314.976046][ T4186] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1314.981679][ T4186] ? mark_lock+0x94/0x320 [ 1314.986023][ T4186] ? mutex_unlock+0x10/0x10 [ 1314.990547][ T4186] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1314.996549][ T4186] ? lock_chain_count+0x20/0x20 [ 1315.001397][ T4186] ? __rwlock_init+0x140/0x140 [ 1315.006158][ T4186] hci_event_packet+0xe05/0x12f0 [ 1315.011091][ T4186] ? lockdep_hardirqs_on+0x94/0x140 [ 1315.016297][ T4186] ? rcu_lock_release+0x20/0x20 [ 1315.021156][ T4186] ? hci_send_to_monitor+0x9c/0x4a0 [ 1315.026376][ T4186] hci_rx_work+0x255/0xa10 [ 1315.030810][ T4186] process_one_work+0x863/0x1000 [ 1315.035754][ T4186] ? worker_detach_from_pool+0x240/0x240 [ 1315.041387][ T4186] ? lockdep_hardirqs_off+0x70/0x100 [ 1315.046698][ T4186] ? _raw_spin_lock_irq+0xab/0xe0 [ 1315.051722][ T4186] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1315.057091][ T4186] ? wq_worker_running+0x97/0x170 [ 1315.062417][ T4186] worker_thread+0xaa8/0x12a0 [ 1315.067098][ T4186] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1315.072996][ T4186] ? lockdep_hardirqs_on+0x94/0x140 [ 1315.078201][ T4186] ? lockdep_hardirqs_on+0x94/0x140 [ 1315.083399][ T4186] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1315.089310][ T4186] kthread+0x436/0x520 [ 1315.093394][ T4186] ? rcu_lock_release+0x20/0x20 [ 1315.098426][ T4186] ? kthread_blkcg+0xd0/0xd0 [ 1315.103012][ T4186] ret_from_fork+0x1f/0x30 [ 1315.107435][ T4186] [ 1315.117550][ T4186] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1315.130823][ T4186] Bluetooth: hci1: failed to register connection device [ 1315.281943][T15723] NILFS (loop7): error -4 creating segctord thread [ 1317.093564][T15745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1318.492809][T15765] loop7: detected capacity change from 0 to 64 [ 1323.375454][T15797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2872'. [ 1329.368048][T15851] loop7: detected capacity change from 0 to 4096 [ 1330.512507][T15854] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1330.541583][ T26] audit: type=1800 audit(1747759138.836:365): pid=15851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2883" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1334.329335][T15890] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1334.337224][T15890] usb usb1: Process 15890 (syz.7.2894) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1337.872990][T15920] loop7: detected capacity change from 0 to 4096 [ 1339.985469][T15923] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1348.226964][T15972] loop7: detected capacity change from 0 to 4096 [ 1349.394126][T15975] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1349.421519][ T26] audit: type=1800 audit(1747759157.716:366): pid=15972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2914" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1349.610834][T15979] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1349.619067][T15979] usb usb1: Process 15979 (syz.0.2916) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 1351.056959][T15986] lo speed is unknown, defaulting to 1000 [ 1352.571951][T15986] lo speed is unknown, defaulting to 1000 [ 1352.580290][T15986] lo speed is unknown, defaulting to 1000 [ 1352.753485][T15959] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.924259][ T1106] Bluetooth: hci0: command 0x0409 tx timeout [ 1353.377747][T16007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2923'. [ 1353.387362][T16008] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2923'. [ 1353.493151][T15959] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.936886][T15959] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.942163][ T1106] Bluetooth: hci0: command 0x041b tx timeout [ 1357.111532][T15959] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.221736][ T1106] Bluetooth: hci0: command 0x040f tx timeout [ 1359.352692][T15986] chnl_net:caif_netlink_parms(): no params data found [ 1360.021285][T16053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2935'. [ 1360.559338][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 1360.566767][T15986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.576872][T15986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.595969][T15986] device bridge_slave_0 entered promiscuous mode [ 1360.842113][T15986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.877873][T15986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.899834][T15986] device bridge_slave_1 entered promiscuous mode [ 1362.028550][T15986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.094588][T15986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.163101][T16086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2940'. [ 1362.443149][T15986] team0: Port device team_slave_0 added [ 1362.452767][T15986] team0: Port device team_slave_1 added [ 1363.233844][T15986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.249342][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.296222][T15986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.461745][T15986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.476720][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.515879][T15986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.555324][T16125] xt_NFQUEUE: number of total queues is 0 [ 1363.702165][T16129] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1363.735267][T15986] device hsr_slave_0 entered promiscuous mode [ 1363.745146][T15986] device hsr_slave_1 entered promiscuous mode [ 1363.752483][T15986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1363.760788][T15986] Cannot create hsr debugfs directory [ 1364.534313][T15959] device hsr_slave_0 left promiscuous mode [ 1364.556348][T15959] device veth1_macvtap left promiscuous mode [ 1364.568285][T15959] device veth0_macvtap left promiscuous mode [ 1364.578426][T15959] device veth1_vlan left promiscuous mode [ 1364.594310][T15959] device veth0_vlan left promiscuous mode [ 1365.690128][T15959] bond0 (unregistering): Released all slaves [ 1365.737380][T15986] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1365.751748][T16160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2954'. [ 1365.910037][T15986] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1365.942011][T15986] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1366.171969][T15986] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1366.670342][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.677015][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1471.219091][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1471.226151][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3547/1:b..l [ 1471.234699][ C0] (detected by 0, t=10502 jiffies, g=53417, q=165) [ 1471.241287][ C0] task:udevd state:R running task stack:23168 pid: 3547 ppid: 1 flags:0x00004002 [ 1471.253453][ C0] Call Trace: [ 1471.256738][ C0] [ 1471.259771][ C0] __schedule+0x11b8/0x43b0 [ 1471.264267][ C0] ? __wake_up_sync+0x114/0x180 [ 1471.269129][ C0] ? ep_poll_callback+0x5b6/0x9f0 [ 1471.274159][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1471.280053][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 1471.285098][ C0] ? preempt_schedule+0xa7/0xb0 [ 1471.290034][ C0] preempt_schedule_common+0x82/0xd0 [ 1471.295306][ C0] preempt_schedule+0xa7/0xb0 [ 1471.299977][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1471.305933][ C0] ? lock_chain_count+0x20/0x20 [ 1471.310791][ C0] preempt_schedule_thunk+0x16/0x18 [ 1471.315996][ C0] _raw_spin_unlock_irqrestore+0xf6/0x100 [ 1471.321723][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1471.326670][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 1471.331697][ C0] __wake_up_sync_key+0x11b/0x180 [ 1471.336734][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 1471.342900][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1471.348810][ C0] sock_def_readable+0x136/0x250 [ 1471.353752][ C0] netlink_sendskb+0x97/0x130 [ 1471.358442][ C0] netlink_sendmsg+0x8ab/0xbc0 [ 1471.363212][ C0] ? netlink_getsockopt+0x560/0x560 [ 1471.368412][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 1471.373351][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1471.378646][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 1471.384109][ C0] ? netlink_getsockopt+0x560/0x560 [ 1471.389304][ C0] ____sys_sendmsg+0x5a2/0x8c0 [ 1471.394082][ C0] ? memset+0x1e/0x40 [ 1471.398125][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 1471.403170][ C0] ? import_iovec+0x6f/0xa0 [ 1471.407678][ C0] ___sys_sendmsg+0x1f0/0x260 [ 1471.412356][ C0] ? __sys_sendmsg+0x250/0x250 [ 1471.417133][ C0] ? __context_tracking_exit+0x4c/0x80 [ 1471.422587][ C0] ? __fdget+0x150/0x210 [ 1471.426827][ C0] __se_sys_sendmsg+0x190/0x250 [ 1471.431679][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 1471.436618][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1471.442611][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1471.447963][ C0] do_syscall_64+0x4c/0xa0 [ 1471.452383][ C0] ? clear_bhb_loop+0x15/0x70 [ 1471.457051][ C0] ? clear_bhb_loop+0x15/0x70 [ 1471.461725][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1471.467642][ C0] RIP: 0033:0x7f702b4e8407 [ 1471.472049][ C0] RSP: 002b:00007ffd737a6f70 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1471.480455][ C0] RAX: ffffffffffffffda RBX: 00007f702b3fa880 RCX: 00007f702b4e8407 [ 1471.488438][ C0] RDX: 0000000000000000 RSI: 00007ffd737a6fd0 RDI: 0000000000000004 [ 1471.496411][ C0] RBP: 00005610e02cf380 R08: 0000000000000000 R09: 0000000000000000 [ 1471.504379][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000b5 [ 1471.512463][ C0] R13: 00005610e02a59e0 R14: 0000000000000000 R15: 0000000000000000 [ 1471.520460][ C0] [ 1471.523497][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10482 jiffies! g53417 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1471.536133][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=64767 [ 1471.544014][ C0] rcu: rcu_preempt kthread starved for 10483 jiffies! g53417 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1471.555395][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1471.565361][ C0] rcu: RCU grace-period kthread stack dump: [ 1471.571248][ C0] task:rcu_preempt state:I stack:28032 pid: 15 ppid: 2 flags:0x00004000 [ 1471.580451][ C0] Call Trace: [ 1471.583729][ C0] [ 1471.586663][ C0] __schedule+0x11b8/0x43b0 [ 1471.591165][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 1471.596555][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1471.602444][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1471.608330][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1471.613174][ C0] ? rcu_is_watching+0x11/0xa0 [ 1471.617925][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1471.623905][ C0] schedule+0x11b/0x1e0 [ 1471.628056][ C0] schedule_timeout+0x15c/0x280 [ 1471.632895][ C0] ? console_conditional_schedule+0x40/0x40 [ 1471.638792][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1471.644681][ C0] ? update_process_times+0x200/0x200 [ 1471.650056][ C0] ? prepare_to_swait_event+0x331/0x350 [ 1471.655649][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 1471.660540][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1471.665731][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 1471.671875][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 1471.676638][ C0] ? finish_swait+0xc0/0x1d0 [ 1471.681226][ C0] rcu_gp_kthread+0x98/0x350 [ 1471.685816][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1471.690919][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1471.696970][ C0] ? __kthread_parkme+0x157/0x1b0 [ 1471.702003][ C0] kthread+0x436/0x520 [ 1471.706103][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1471.711220][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1471.715809][ C0] ret_from_fork+0x1f/0x30 [ 1471.720228][ C0] [ 1471.723239][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1471.729557][ C0] NMI backtrace for cpu 0 [ 1471.733873][ C0] CPU: 0 PID: 1421 Comm: aoe_tx0 Not tainted 5.15.183-syzkaller #0 [ 1471.742100][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1471.752148][ C0] Call Trace: [ 1471.755417][ C0] [ 1471.758450][ C0] dump_stack_lvl+0x168/0x230 [ 1471.763125][ C0] ? show_regs_print_info+0x20/0x20 [ 1471.768310][ C0] ? load_image+0x3b0/0x3b0 [ 1471.772809][ C0] ? irq_work_queue+0xbf/0x140 [ 1471.777566][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 1471.782493][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1471.788633][ C0] ? _printk+0xcc/0x110 [ 1471.792775][ C0] ? cpu_online+0x1d/0x30 [ 1471.797091][ C0] ? load_image+0x3b0/0x3b0 [ 1471.801588][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1471.807647][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1471.813619][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 1471.819768][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 1471.825399][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 1471.830412][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 1471.835699][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 1471.840891][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 1471.845733][ C0] ? account_process_tick+0x227/0x3a0 [ 1471.851099][ C0] update_process_times+0x193/0x200 [ 1471.856295][ C0] tick_sched_timer+0x37d/0x560 [ 1471.861138][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 1471.866333][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 1471.871963][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1471.877083][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1471.883142][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 1471.888099][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1471.894158][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1471.899782][ C0] [ 1471.902702][ C0] [ 1471.905625][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1471.911592][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 1471.918094][ C0] Code: 74 05 e8 9e 63 d3 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 76 e3 a6 f7 65 8b 05 e7 f3 57 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 1471.937723][ C0] RSP: 0018:ffffc90005647900 EFLAGS: 00000206 [ 1471.943800][ C0] RAX: 8d5e6564cd1b1100 RBX: 0000000000000a02 RCX: 8d5e6564cd1b1100 [ 1471.951760][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b0fc0 RDI: 0000000000000001 [ 1471.959719][ C0] RBP: ffffc90005647990 R08: dffffc0000000000 R09: fffffbfff1ff3245 [ 1471.967696][ C0] R10: fffffbfff1ff3245 R11: 1ffffffff1ff3244 R12: dffffc0000000000 [ 1471.975743][ C0] R13: ffff8880779cf600 R14: ffffffff963c7408 R15: 1ffff92000ac8f20 [ 1471.983721][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1471.988654][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1471.994651][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1471.999844][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1472.005854][ C0] uart_write+0x430/0x880 [ 1472.010192][ C0] ? uart_write_room+0x1f7/0x2c0 [ 1472.015122][ C0] ? uart_close+0x1b0/0x1b0 [ 1472.019634][ C0] handle_tx+0x23f/0x600 [ 1472.023890][ C0] dev_hard_start_xmit+0x2a5/0x7e0 [ 1472.029009][ C0] __dev_queue_xmit+0x19df/0x2ed0 [ 1472.034035][ C0] ? dev_queue_xmit+0x20/0x20 [ 1472.038705][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1472.044860][ C0] ? lock_chain_count+0x20/0x20 [ 1472.049711][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1472.054848][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1472.060135][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1472.065326][ C0] tx+0x65/0x160 [ 1472.068866][ C0] ? aoenet_xmit+0x190/0x190 [ 1472.073468][ C0] kthread+0x1bc/0x390 [ 1472.077556][ C0] ? aoe_ktstart+0x130/0x130 [ 1472.082138][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1472.088031][ C0] ? sched_dynamic_update+0x210/0x210 [ 1472.093394][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1472.099280][ C0] ? __kthread_parkme+0x157/0x1b0 [ 1472.104517][ C0] kthread+0x436/0x520 [ 1472.108595][ C0] ? aoe_ktstart+0x130/0x130 [ 1472.113206][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1472.117793][ C0] ret_from_fork+0x1f/0x30 [ 1472.122652][ C0] [ 1472.126167][ C0] vkms_vblank_simulate: vblank timer overrun