last executing test programs: 11m49.209351839s ago: executing program 0 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpgrp(r0) ioprio_get$pid(0x2, r3) 11m46.221410934s ago: executing program 0 (id=99): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x2, 0x4002, 0x4, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendfile(r1, r1, 0x0, 0x200000) 11m44.736964092s ago: executing program 0 (id=103): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000007874050003fe0300020073797a32000000000500010007000000050005000a0000000c00078005001500fd000000130003470c0000000069666163"], 0x58}}, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 11m44.137767576s ago: executing program 0 (id=105): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_io_uring_complete(0x0, r0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 11m43.60002513s ago: executing program 0 (id=107): timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) 11m41.523946492s ago: executing program 0 (id=117): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, 0x0, 0x8045) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 11m41.098304073s ago: executing program 32 (id=117): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, 0x0, 0x8045) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 11m12.243781192s ago: executing program 2 (id=212): execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={[0x0, &(0x7f0000000100)='^\x85=', &(0x7f0000000240)='\xff\xff', &(0x7f0000000280)='H:+-\x00', 0x0]}, &(0x7f0000000540)={[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', 0x0, &(0x7f0000000440)='\x00', 0x0, &(0x7f00000004c0)='\xff\xff', &(0x7f0000000500)='$\x00']}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000680)=0x4, 0x4) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, r0) unshare(0x24020400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r1, &(0x7f00000006c0)={@void, @val={0x0, 0x1, 0x9, 0x6, 0x101, 0xa}, @ipv4=@dccp={{0xd, 0x4, 0x2, 0x1, 0x44, 0x64, 0x0, 0x4, 0x21, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@end, @lsrr={0x83, 0x3, 0x5c}, @noop, @ssrr={0x89, 0x13, 0x17, [@rand_addr=0x64010100, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}]}, @ssrr={0x89, 0x7, 0x53, [@broadcast]}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x4, 0x0, 0x0, 0x0, 0x5, "db56c0", 0x6, "ee1a3a"}}}}, 0x4e) 11m11.673601066s ago: executing program 2 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000140)) 11m9.775855144s ago: executing program 2 (id=221): userfaultfd(0x80001) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r3, 0x0, 0x0, 0x36}]) 11m8.675515422s ago: executing program 2 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) 11m8.396331189s ago: executing program 2 (id=224): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000080006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 11m7.56384638s ago: executing program 2 (id=228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) 11m5.443592503s ago: executing program 33 (id=228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) 10m49.448554537s ago: executing program 5 (id=298): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x20, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 10m47.322101221s ago: executing program 5 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 10m43.547584736s ago: executing program 5 (id=309): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) syz_open_dev$sg(0x0, 0x0, 0x80102) semop(r1, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semop(r1, &(0x7f0000000200)=[{0x3, 0x3, 0x800}, {0x3, 0x6}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x29}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, 0x0, 0x4000) 10m42.548502681s ago: executing program 5 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000113000/0x3000)=nil, 0x3000}}) 10m42.266060449s ago: executing program 5 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, &(0x7f00000003c0)) 10m40.715855188s ago: executing program 5 (id=324): symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) lseek(r2, 0x100, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 10m39.876125929s ago: executing program 34 (id=324): symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) lseek(r2, 0x100, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 5m28.296821018s ago: executing program 4 (id=1308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb301fffd) setreuid(0x0, 0xee01) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x1, 0x4f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 5m27.00425656s ago: executing program 4 (id=1314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5m25.504740636s ago: executing program 4 (id=1316): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x34}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5m25.170649894s ago: executing program 4 (id=1319): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611266000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 5m23.585468013s ago: executing program 4 (id=1326): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xc200040, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xb, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000001200)=[{&(0x7f0000001080)="ff", 0x1}], 0x1) syz_fuse_handle_req(r1, &(0x7f0000005040)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x18, 0x0, 0x401, {0x7e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m21.843918385s ago: executing program 4 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x400, &(0x7f0000000080)=ANY=[], 0xff, 0x1bf, &(0x7f00000002c0)="$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") 5m20.144000116s ago: executing program 35 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x400, &(0x7f0000000080)=ANY=[], 0xff, 0x1bf, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMfr9//9/CWaG0NQji4orq7ITc3JSi4oXMlTc4mJlZmBnYGCwv6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQZ4E6ZGOdZ15jXWHq1Ly0vKSqrKqseRMnbpzZ2NnYuHJiXVRaJw8DQ4qLBlSxwGZmQ/VJNtoT3rWvepjEDBVVep3KfMl4YZHUqRX/QdzZjIbfGbh5ylZIaGg4SVyRsGgwYThSZ9vgylBxKzmlgSFNIYwxSY1NrG3LmTkhzPxsbgsUWpJPMIUe5Vg6U8LigFDVyZ+Wmm8dEt1mbHvqwHaG5/BxnjUFfYKgEHVaKPhfBmRMQkNDGdNapqW2C74UafyV8Fpt7JTB4G7PtAwWoCwNIHIllCcL1pOQvMJDR1PTKCU5oWGTREKSW4GhMsPWPZyrBRoY4NHG8lCFgYFhOyMsbiHgGowxCkbBKBgFo2AUjIJRMApGwSgYBaNgRABAAAAA///eC4vL") 4m41.079723275s ago: executing program 1 (id=1430): pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80801) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket(0x1e, 0x5, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x1, 0x257, 0x0, r7}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x820002, 0x4, 0x1000000, 0x1e1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8733, 0x80, 0x0, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0xfffffffd}}], 0x1, &(0x7f0000001000)={0x2e, 0x3, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4, 0x5, 0x0, 0x0}}, 0x0) 4m32.023526015s ago: executing program 1 (id=1450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) 4m29.847472227s ago: executing program 1 (id=1452): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 4m28.726678754s ago: executing program 1 (id=1454): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 4m27.28604563s ago: executing program 1 (id=1458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x20008004) fsopen(0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0xfffffffc, 0x10}, 0xc) 4m26.226953145s ago: executing program 1 (id=1460): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 4m11.061873854s ago: executing program 36 (id=1460): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 14.515607067s ago: executing program 7 (id=2003): syz_open_dev$rtc(&(0x7f0000000040), 0x4, 0x10000) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_add_watch(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x62000000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x82, &(0x7f0000000200), 0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000018000504010000000000000002180000fe03000100000000080001000a141e00160012000a00fe80000000000000000000000000000100000800040002000000"], 0x44}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x0, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000200000000000000022000000000000000000000080001000a14"], 0x24}}, 0x0) 13.323888296s ago: executing program 7 (id=2008): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 13.127836661s ago: executing program 7 (id=2009): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) 12.205151723s ago: executing program 6 (id=2012): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 11.026924922s ago: executing program 6 (id=2016): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r3, 0xb) 8.899882293s ago: executing program 6 (id=2020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bind(0xffffffffffffffff, 0x0, 0x0) 8.059255614s ago: executing program 9 (id=2021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0x47) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 7.916477347s ago: executing program 3 (id=2022): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0) getpgid(r0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0xc6, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @tipc={{0x28, 0x4, 0x0, 0x2a, 0xb8, 0x67, 0x0, 0x69, 0x6, 0x0, @private=0xa010100, @empty, {[@timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x5, [{@remote, 0x7fffffff}, {@remote, 0x5}]}, @timestamp={0x44, 0xc, 0x84, 0x0, 0x1, [0x10000, 0x3]}, @timestamp_addr={0x44, 0x4, 0x52}, @timestamp={0x44, 0x24, 0x1e, 0x0, 0x7, [0x4, 0x7, 0x7, 0x18, 0x3ff, 0x8, 0x6, 0x401]}, @timestamp_prespec={0x44, 0x14, 0xea, 0x3, 0x0, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp={0x44, 0x24, 0xc8, 0x0, 0x2, [0x3, 0x7, 0x0, 0x8, 0x17, 0x9, 0x0, 0x8000]}, @lsrr={0x83, 0xb, 0x16, [@private=0xa010100, @rand_addr=0x64010101]}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, 0x2, 0x0, 0x5, 0x4, 0x4, 0x4e23, 0x4e20}}}}}}}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000400)={0x0, 0xea60}, 0x10) setns(0xc9, 0x0) r4 = socket(0x8, 0x3, 0x7f) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 7.704248262s ago: executing program 3 (id=2024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 6.462272903s ago: executing program 8 (id=2025): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 5.866361947s ago: executing program 9 (id=2026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 5.784461499s ago: executing program 3 (id=2027): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 4.391870943s ago: executing program 3 (id=2028): socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) unshare(0xa000200) r3 = semget$private(0x0, 0x4000, 0x0) semtimedop(r3, &(0x7f0000000640)=[{0x0, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) 3.814746537s ago: executing program 8 (id=2029): memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97C\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x9a[{;\x91\xdbT\xc0\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\xfd\xaf\xf6(G\r\xb3\x14)v@O\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93EO\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0X\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xef\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb\v\x167\xed\xb3J\x012A(?Jl\xe0\xd2\xaa\xbc\x00\xc1\x8d\xeb{\xfa\x12c\xf72T\xf1\xb3\xc9BQ\x9d\xca\x80\t\x82c\x15t\x7f\x8aM\xde\x95\xd0\xb5`\xfe\xd4\xd2\x0fU\xae\x1b\xe8\'\x00J\xa4\x00\x00\x00\x00', 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.813650427s ago: executing program 9 (id=2030): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) setxattr$system_posix_acl(&(0x7f0000005700)='.\x00', &(0x7f0000005740)='system.posix_acl_default\x00', &(0x7f0000005780)={{}, {0x1, 0x5}, [], {0x4, 0x7}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) add_key$user(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) 3.783058307s ago: executing program 6 (id=2031): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x3, 0x0) sendmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xb33, "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"}, &(0x7f0000001740)=0xb3b) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.079751385s ago: executing program 3 (id=2032): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040eb2821c0c"], 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) 3.042444446s ago: executing program 8 (id=2033): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902"], 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_io_uring_setup(0x7a31, &(0x7f0000000080)={0x0, 0x4e36, 0x800, 0x1, 0x2fe}, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f82000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\"P\x00') munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 3.016243896s ago: executing program 7 (id=2034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.985966031s ago: executing program 6 (id=2035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000040)="0f1f44", 0x3) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f00000007c0)={[{@auto_da_alloc}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x9}}], [{@appraise_type}, {@obj_user={'obj_user', 0x3d, '&'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_user}, {@euid_lt}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x1, 0x53e, &(0x7f0000000280)="$eJzs3e9rJGcdAPDvzGbT3F1qtirlLNgWr3JX9HYvjW2jSHuC6KuCWt+fIdkL4TbZI7upl1A0xRe+FERU8A/oG8E/QJD+CSIU9L2oIKJXfak3sruzuEl2s0uyycbN5wOTeZ758XyfZ5KZzI+HmQAurRcj4m5EFCLi5YhYyKen+RD7naG13EeP311tDUlk2dt/TyLJp3XLauVnIuJavtpcRHzr6xE30qNxG7t7D1Zqtep2nq80Nx9WGrt7tzc2V9ar69WtpaXF15ZfX351+U6WO1U7SxHxxlf/8tMfvf+1N37z+e/+8d5fb32vVd8vP9uqd1Y4VeHHSNo/i+1tEfHsfHf69lkFnIDW77x4ZlsQAIBxap2afzwiPtM+/1+IQvtsDgAAAJgm2Zvz8e8kIgMAAACmVhoR85Gk5bwvwHykabnc6cP7ybia1uqN5ufu13e21lrzIkpRTO9v1Kp38r7CpSgmrfxi3se2m3/lUH4pIp6JiJ8sXGnny6v12tqkb34AAADAJXHthYPX//9aSNtpAAAAYMqUBmYAAACAaeGSHwAAAKaf638AAACYat94663WkHW/4732zu7Og/o7t9eqjQflzZ3V8mp9+2F5vV5fb7+zb3NYebV6/eEXYmvnUaVZbTQrjd29e5v1na3mvY38E9gAAADAuXvmhQ/+kETE/peutIfI3wM4zOyZ1wy4UP486QoA41SYdAWAiZmZdAWAiSkOXcIRAqZdMmT+0c47nXuF8duzqQ8AADB+Nz919Pl/99n+8HsDwP+zUfr66OwDANPF0z24vIon7QF4fdw1ASblY53RU4PmD3x5xwjP/zv3GLLsRBUDAADGZr49JGk5P0+fjzQtlyOebn8WoJjc36hV7+TXB79fKD7Vyi+210yG9hkGAAAAAAAAAAAAAAAAAAAAAAAAADqyLIkMAAAAmGrtmwD5i/xvLrw0f/DuwKGvfv3i7Z89Wmk2txcjZpN/LET+afDmz/Ppr2Q+CQAAAAAXQOc6PR8vTro2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEybjx6/u9odzjPu374SEaV+8Wdirj2ei2JEXP1nEjM96yURURhD/P33IuJ6v/hJPMmyrJTXol/8K2ccv9TeNHNZki/bGz+NiGtjiA+X2Qet48/dfvtfGi+2x/33/5lD++NJdY9/s3m+N373+FcYcPx5ujef9pY6eyDGcx/+qjIw/nsRz8104t6Ng8efbvykEz+JQ/FvjNjG73x7b6/vjJ4i+x3/emNVmpsPK43dvdsbmyvr1fXq1tLS4mvLry+/unyncn+jVs1/9g3z40//+slx7b86IH7pYPuPbP+XRmp9Fv/58NHjT3QyxX7xb93o///3+oD4af6/77N5ujX/Zje930n3ev6Xv3v+uPavDWj/3JD23xqp/fHFl7/5gz/1nXNkawAA56Gxu/dgpVarbh+TmBthmZEThbGU8+bY6nNREnExqjGpRPb9zt/j6co55epHEln1hydffSbGUI3ZI/tpIU5aYBKx3yprxD9IAABgyvzvpD+ZdFUAAAAAAAAAAAAAAAAAAADg0jrmNWDv54v0e0PYXER0phSHv07scMz9828mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBQ/w0AAP//z5jGBQ==") mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r2, 0x8dbb000) 1.757235047s ago: executing program 3 (id=2036): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.751612937s ago: executing program 9 (id=2046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0x1000d76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0x2000000d, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc6, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x4, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x2, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0x20000ff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0xc, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x5, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0xc}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 1.495155773s ago: executing program 6 (id=2037): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) open(0x0, 0x84242, 0x1df2a23c5997fad6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.494268383s ago: executing program 7 (id=2038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x2, 0x2, 0x3, 0x9, 0x800, 0x1, 0x0, 0x86c}}}}]}, 0x58}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.301461918s ago: executing program 9 (id=2039): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xce9}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) unshare(0x20040600) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r5, 0x10, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCGNPMODE(r3, 0x4004743c, 0x0) 1.21468124s ago: executing program 8 (id=2040): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 40.511639ms ago: executing program 8 (id=2041): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 39.430289ms ago: executing program 7 (id=2052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x40}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x50}}, 0x0) 0s ago: executing program 9 (id=2042): r0 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r0, 0x172831) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$keyring(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) kernel console output (not intermixed with test programs): in process `syz.3.497'. [ 232.585283][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 232.612803][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 232.623991][ T6476] netlink: 2 bytes leftover after parsing attributes in process `syz.3.497'. [ 232.665987][ T6476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.497'. [ 232.710479][ T6480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.499'. [ 232.860373][ T6485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.499'. [ 233.127570][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'. [ 233.159984][ T6493] loop6: detected capacity change from 0 to 1024 [ 233.192921][ T6493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.200849][ T6493] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.410545][ T6493] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 233.561563][ T6492] bond1: (slave veth3): Enslaving as an active interface with an up link [ 235.614236][ T5252] EXT4-fs (loop6): unmounting filesystem. [ 235.959550][ T6530] bridge0: port 3(macvlan3) entered blocking state [ 235.966334][ T6530] bridge0: port 3(macvlan3) entered disabled state [ 236.014040][ T6530] device macvlan3 entered promiscuous mode [ 236.134099][ T6530] bridge0: port 3(macvlan3) entered blocking state [ 236.140860][ T6530] bridge0: port 3(macvlan3) entered forwarding state [ 236.249832][ T76] bridge0: port 3(macvlan3) entered disabled state [ 236.845835][ T6547] loop4: detected capacity change from 0 to 256 [ 237.814881][ T6573] smc: net device lo applied user defined pnetid SYZ0 [ 237.826330][ T6571] netlink: 'syz.6.519': attribute type 1 has an invalid length. [ 238.758616][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.6.525'. [ 239.982575][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 240.158650][ T6612] device bond2 entered promiscuous mode [ 246.900973][ T6687] block device autoloading is deprecated and will be removed. [ 247.146164][ T6692] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.201250][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.551'. [ 247.369575][ T6700] device syzkaller0 entered promiscuous mode [ 247.507090][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 247.507113][ T26] audit: type=1800 audit(1786039285.802:247): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.554" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 247.823987][ T6697] bond1 (unregistering): Released all slaves [ 250.461910][ T6712] loop7: detected capacity change from 0 to 256 [ 250.621184][ T6712] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 250.650731][ T6712] FAT-fs (loop7): Filesystem has been set read-only [ 250.806140][ T6713] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 253.372414][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.557'. [ 253.456279][ T6726] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.466245][ T6726] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.475292][ T6726] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.484116][ T6726] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.600048][ T6730] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.560'. [ 253.664527][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.557'. [ 253.716006][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.557'. [ 255.724154][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.730846][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.517652][ T6784] loop6: detected capacity change from 0 to 512 [ 258.574683][ T6784] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 258.628272][ T6784] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 258.661842][ T6784] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 258.699701][ T6784] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 258.834724][ T6784] EXT4-fs (loop6): group descriptors corrupted! [ 262.492892][ T6824] Illegal XDP return value 4294967294 on prog (id 76) dev N/A, expect packet loss! [ 262.960823][ T6827] device syzkaller0 entered promiscuous mode [ 263.019254][ T6830] tipc: Started in network mode [ 263.024232][ T6830] tipc: Node identity 9215b1dc0ecd, cluster identity 4711 [ 263.080553][ T6830] tipc: Enabled bearer , priority 0 [ 263.178919][ T6825] tipc: Resetting bearer [ 263.373114][ T6825] tipc: Disabling bearer [ 267.972796][ T6862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.023794][ T6862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.433410][ T6925] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 268.433410][ T6925] The task syz.3.598 (6925) triggered the difference, watch for misbehavior. [ 268.573936][ T6925] binder: 6922:6925 ioctl 4018620d 0 returned -22 [ 268.674010][ T6862] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.683374][ T6862] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.693009][ T6862] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.702364][ T6862] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.951114][ T6862] device team0 left promiscuous mode [ 268.957732][ T6862] device team_slave_0 left promiscuous mode [ 268.970911][ T6862] device team_slave_1 left promiscuous mode [ 268.977179][ T6862] device bridge0 left promiscuous mode [ 269.075754][ T6896] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 269.730071][ T6896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.858540][ T6902] device gretap1 entered promiscuous mode [ 269.912985][ T6902] bond3: (slave gretap1): making interface the new active one [ 269.925582][ T6902] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 270.070895][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 273.611723][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.615'. [ 273.768385][ T26] audit: type=1800 audit(1786039312.052:248): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.607" name="bus" dev="ramfs" ino=42746 res=0 errno=0 [ 274.794406][ T7013] sctp: [Deprecated]: syz.6.619 (pid 7013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.794406][ T7013] Use struct sctp_sack_info instead [ 275.104221][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.112281][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.365341][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 275.374738][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 275.406137][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 275.415333][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 275.446179][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 275.455450][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 275.480272][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 275.489476][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 277.426897][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 278.377933][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 278.826863][ T7030] __nla_validate_parse: 12 callbacks suppressed [ 278.826914][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 278.843045][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 279.442589][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 279.451630][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 279.510241][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 279.519293][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 279.561069][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 279.570307][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 279.602221][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 279.611808][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 281.630072][ T7030] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.639185][ T7030] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.647579][ T7030] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.656709][ T7030] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.963452][ T7041] netlink: 'syz.6.626': attribute type 1 has an invalid length. [ 282.061221][ T7083] loop3: detected capacity change from 0 to 512 [ 282.103111][ T7083] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 282.138401][ T7083] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 282.194262][ T7083] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.636: invalid indirect mapped block 9 (level 0) [ 282.224995][ T7083] EXT4-fs (loop3): 1 truncate cleaned up [ 282.232742][ T7083] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 285.258982][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 285.405490][ T7119] __nla_validate_parse: 146 callbacks suppressed [ 285.405531][ T7119] netlink: 188 bytes leftover after parsing attributes in process `syz.4.643'. [ 289.268727][ T4320] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 289.482034][ T4320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 289.518385][ T4320] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 289.588398][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.710615][ T4320] usb 8-1: config 0 descriptor?? [ 289.928045][ T7150] xt_TCPMSS: Only works on TCP SYN packets [ 290.004913][ T5986] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 290.230264][ T5986] usb 4-1: config 0 has no interfaces? [ 290.236388][ T5986] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 290.266785][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.299528][ T5986] usb 4-1: config 0 descriptor?? [ 290.704177][ T4320] usbhid 8-1:0.0: can't add hid device: -71 [ 290.713810][ T4320] usbhid: probe of 8-1:0.0 failed with error -71 [ 290.779388][ T4320] usb 8-1: USB disconnect, device number 2 [ 290.913299][ T127] usb 4-1: USB disconnect, device number 2 [ 292.086646][ T7201] loop6: detected capacity change from 0 to 512 [ 292.553531][ T7206] netlink: 180 bytes leftover after parsing attributes in process `syz.7.666'. [ 293.384033][ T7201] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 293.995232][ T7229] exfat: Deprecated parameter 'debug' [ 294.047010][ T7229] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.117991][ T7229] exFAT-fs (loop3): unable to read boot sector [ 294.158486][ T7229] exFAT-fs (loop3): failed to read boot sector [ 294.205297][ T7229] exFAT-fs (loop3): failed to recognize exfat type [ 294.235127][ T5252] EXT4-fs (loop6): unmounting filesystem. [ 294.768383][ T7200] infiniband syz2: set down [ 294.774100][ T7200] infiniband syz2: added ipvlan0 [ 295.526713][ T7200] rdma_rxe: unable to create cq [ 295.545899][ T7200] infiniband syz2: Couldn't create ib_mad CQ [ 295.553639][ T7200] infiniband syz2: Couldn't open port 1 [ 295.782830][ T7200] RDS/IB: syz2: added [ 295.787909][ T7200] smc: adding ib device syz2 with port count 1 [ 295.795060][ T7200] smc: ib device syz2 port 1 has pnetid [ 295.913824][ T7250] xt_CONNSECMARK: invalid mode: 0 [ 297.184035][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'. [ 297.453802][ T7268] device bond1 entered promiscuous mode [ 297.980409][ T7275] loop6: detected capacity change from 0 to 512 [ 298.047390][ T7275] EXT4-fs (loop6): Test dummy encryption mode enabled [ 298.137939][ T7275] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 298.229604][ T7275] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.683: bad orphan inode 131083 [ 298.264217][ T7275] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 298.566591][ T7291] xt_limit: Overflow, try lower: 324382443/0 [ 298.628884][ T26] audit: type=1804 audit(1786039336.892:249): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.686" name="/newroot/146/bus/bus" dev="overlay" ino=786 res=1 errno=0 [ 299.686554][ T7301] Need at least one configuration in g1. [ 299.725951][ T7301] udc dummy_udc.0: failed to start g1: -22 [ 299.753719][ T7301] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 299.865210][ T7301] UDC core: g1: couldn't find an available UDC or it's busy [ 299.890127][ T7296] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 300.053295][ T5252] EXT4-fs (loop6): unmounting filesystem. [ 301.613261][ T7337] device syzkaller0 entered promiscuous mode [ 301.651805][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.774400][ T7337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.815467][ T7340] netlink: 'syz.7.695': attribute type 1 has an invalid length. [ 302.794348][ T7349] loop7: detected capacity change from 0 to 512 [ 303.957250][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 304.199480][ T7367] capability: warning: `syz.3.702' uses deprecated v2 capabilities in a way that may be insecure [ 306.428313][ T4322] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 306.606913][ T7404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.714'. [ 306.629602][ T4322] usb 7-1: Using ep0 maxpacket: 16 [ 306.643745][ T4322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 306.670865][ T7404] netlink: 17 bytes leftover after parsing attributes in process `syz.3.714'. [ 306.692435][ T4322] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 306.727375][ T4322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.744211][ T7404] tipc: Invalid UDP bearer configuration [ 306.744275][ T7404] tipc: Enabling of bearer rejected, failed to enable media [ 306.773764][ T4322] usb 7-1: Product: syz [ 306.778029][ T4322] usb 7-1: Manufacturer: syz [ 306.785312][ T4322] usb 7-1: SerialNumber: syz [ 306.812726][ T4322] usb 7-1: config 0 descriptor?? [ 306.855623][ T4322] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 306.869554][ T4322] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 307.450816][ T4322] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 308.035701][ T4322] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 308.148313][ T4322] em28xx 7-1:0.0: board has no eeprom [ 308.448807][ T7430] netlink: 'syz.1.718': attribute type 2 has an invalid length. [ 308.492140][ T7427] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4275] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7427] [ 308.704842][ T4322] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 308.713452][ T4322] em28xx 7-1:0.0: dvb set to bulk mode. [ 308.752457][ T14] em28xx 7-1:0.0: Binding DVB extension [ 309.748449][ T7428] em28xx 7-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 310.024725][ T14] em28xx 7-1:0.0: Registering input extension [ 310.042911][ T5986] usb 7-1: USB disconnect, device number 4 [ 310.110060][ T7444] netlink: 92 bytes leftover after parsing attributes in process `syz.7.722'. [ 310.465962][ T5986] em28xx 7-1:0.0: Disconnecting em28xx [ 311.121500][ T5986] em28xx 7-1:0.0: Closing input extension [ 311.259001][ T5986] em28xx 7-1:0.0: Freeing device [ 311.689058][ T5986] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 311.920803][ T5986] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.989290][ T5986] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.001871][ T5986] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.015459][ T5986] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.025097][ T5986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.052607][ T5986] usb 7-1: config 0 descriptor?? [ 313.278686][ T5986] usbhid 7-1:0.0: can't add hid device: -71 [ 313.288312][ T5986] usbhid: probe of 7-1:0.0 failed with error -71 [ 313.481255][ T5986] usb 7-1: USB disconnect, device number 5 [ 313.616822][ T7476] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 314.409224][ T26] audit: type=1326 audit(1786039352.712:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc8d9e0d9 code=0x7ffc0000 [ 314.521785][ T26] audit: type=1326 audit(1786039352.712:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc8d9e0d9 code=0x7ffc0000 [ 314.602912][ T7484] netlink: 'syz.7.732': attribute type 2 has an invalid length. [ 314.648722][ T26] audit: type=1326 audit(1786039352.732:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1cc8d9e0d9 code=0x7ffc0000 [ 316.125890][ T26] audit: type=1326 audit(1786039352.732:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc8d9e0d9 code=0x7ffc0000 [ 316.151504][ T26] audit: type=1326 audit(1786039352.732:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc8d9e0d9 code=0x7ffc0000 [ 316.355169][ T26] audit: type=1326 audit(1786039352.762:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f1cc8d9e0d9 code=0x7ffc0000 [ 317.328906][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.335318][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.418267][ T26] audit: type=1326 audit(1786039352.762:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc8d9e0d9 code=0x7ffc0000 [ 317.485894][ T7504] netlink: 'syz.1.738': attribute type 13 has an invalid length. [ 317.529218][ T26] audit: type=1326 audit(1786039352.762:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc8d9e0d9 code=0x7ffc0000 [ 317.783841][ T26] audit: type=1326 audit(1786039352.762:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1cc8d9e0d9 code=0x7ffc0000 [ 318.340370][ T26] audit: type=1326 audit(1786039352.762:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc8d9e0d9 code=0x7ffc0000 [ 318.629614][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.932959][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.035642][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.159209][ T7558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.750'. [ 320.700872][ T7578] netlink: 176 bytes leftover after parsing attributes in process `syz.1.753'. [ 320.927421][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.757'. [ 321.518584][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 321.713089][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 321.744435][ T14] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 321.803824][ T14] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 321.865442][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.906469][ T14] usb 4-1: Product: syz [ 321.936911][ T14] usb 4-1: Manufacturer: syz [ 321.967640][ T14] usb 4-1: SerialNumber: syz [ 322.362037][ T14] usb 4-1: Can't get UAC3 power state for id 10 [ 322.394537][ T14] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 322.432077][ T14] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 322.696913][ T14] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 322.739613][ T14] usb 4-1: USB disconnect, device number 3 [ 323.010299][ T4356] udevd[4356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.022053][ T7634] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 323.130362][ T7634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.160552][ T7634] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 323.459962][ T7634] bond4: (slave geneve2): making interface the new active one [ 324.473298][ T7634] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 324.614262][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 324.791456][ T7634] syz.1.766 (7634) used greatest stack depth: 20240 bytes left [ 325.801895][ T7672] input: syz1 as /devices/virtual/input/input7 [ 325.837642][ T7677] netlink: 'syz.7.775': attribute type 1 has an invalid length. [ 327.532726][ T7706] UBIFS error (pid: 7706): cannot open "ubi0_0", error -19 [ 330.214895][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 330.214916][ T26] audit: type=1326 audit(1786039368.512:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 330.415226][ T26] audit: type=1326 audit(1786039368.592:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 330.483461][ T26] audit: type=1326 audit(1786039368.622:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 330.557300][ T26] audit: type=1326 audit(1786039368.622:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 330.601501][ T7746] x_tables: duplicate underflow at hook 4 [ 330.734875][ T7746] sctp: [Deprecated]: syz.6.793 (pid 7746) Use of int in maxseg socket option. [ 330.734875][ T7746] Use struct sctp_assoc_value instead [ 330.792760][ T26] audit: type=1326 audit(1786039368.622:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 330.915944][ T7754] device team0 entered promiscuous mode [ 330.937859][ T7754] device team_slave_0 entered promiscuous mode [ 330.966727][ T7754] device team_slave_1 entered promiscuous mode [ 330.983496][ T26] audit: type=1326 audit(1786039368.622:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 331.051545][ T7754] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 331.083830][ T7754] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 331.105338][ T26] audit: type=1326 audit(1786039368.622:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 331.194565][ T26] audit: type=1326 audit(1786039368.622:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 331.196888][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.797'. [ 331.238407][ T26] audit: type=1326 audit(1786039368.622:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 331.293733][ T26] audit: type=1326 audit(1786039368.622:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 331.599697][ T7773] device bond1 entered promiscuous mode [ 332.766855][ T7793] device syzkaller0 entered promiscuous mode [ 332.852342][ T7793] tipc: Enabled bearer , priority 0 [ 333.382917][ T7790] tipc: Resetting bearer [ 333.811248][ T7790] tipc: Disabling bearer [ 333.897913][ T7810] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 335.388697][ T14] tipc: Node number set to 2631447004 [ 336.402564][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 336.758714][ T7838] x_tables: ip_tables: osf match: only valid for protocol 6 [ 337.709728][ T7843] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 337.798916][ T7843] device bond5 entered promiscuous mode [ 337.804940][ T7843] 8021q: adding VLAN 0 to HW filter on device bond5 [ 339.054838][ T7843] bond5: (slave bridge1): making interface the new active one [ 339.153229][ T7843] device bridge1 entered promiscuous mode [ 339.183062][ T7843] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 339.244526][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 342.019167][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 342.028059][ T7902] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 342.654319][ T7928] loop7: detected capacity change from 0 to 512 [ 342.686531][ T7928] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 342.707699][ T7928] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 342.793455][ T7928] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 342.834250][ T7928] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 342.876794][ T7928] EXT4-fs (loop7): group descriptors corrupted! [ 344.489011][ T7944] loop3: detected capacity change from 0 to 4096 [ 344.605164][ T7944] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 344.693349][ T4474] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.001038][ T7962] device syzkaller0 entered promiscuous mode [ 345.723030][ T7971] loop7: detected capacity change from 0 to 512 [ 345.743803][ T4474] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.885115][ T7971] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.845: iget: bad i_size value: 38620345925642 [ 345.914699][ T7971] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.845: couldn't read orphan inode 15 (err -117) [ 345.926939][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 345.935229][ T7971] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 346.071965][ T7976] EXT4-fs (loop7): shut down requested (1) [ 346.123452][ T7978] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 346.160229][ T7975] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 346.235645][ T5770] EXT4-fs (loop7): unmounting filesystem. [ 348.012302][ T8014] loop0: detected capacity change from 0 to 128 [ 349.958652][ T8041] loop6: detected capacity change from 0 to 256 [ 350.008421][ T8041] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.083610][ T8041] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 350.164880][ T8041] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 351.989877][ T8104] No such timeout policy "syz1" [ 352.727226][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 352.727339][ T26] audit: type=1800 audit(1786039391.022:303): pid=8089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.873" name="bus" dev="ramfs" ino=46517 res=0 errno=0 [ 352.766937][ T8116] smc: net device veth0 applied user defined pnetid SYZ0 [ 352.808452][ T8119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.881'. [ 353.017957][ T8123] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 356.195546][ T8129] bond3: (slave veth9): Enslaving as an active interface with a down link [ 356.490640][ T8142] netlink: 'syz.7.888': attribute type 30 has an invalid length. [ 356.558886][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.7.888'. [ 357.488458][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.893'. [ 358.156158][ T8157] device bond6 entered promiscuous mode [ 358.230800][ T8162] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 358.558883][ T8168] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 358.815455][ T8175] device macvlan3 left promiscuous mode [ 358.844459][ T8175] bridge0: port 3(macvlan3) entered disabled state [ 359.022261][ T8175] device bridge_slave_1 left promiscuous mode [ 359.051396][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.869526][ T8175] device bridge_slave_0 left promiscuous mode [ 359.906541][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.318306][ T26] audit: type=1800 audit(1786039398.612:304): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.900" name="bus" dev="ramfs" ino=46656 res=0 errno=0 [ 360.347990][ T8175] team0: Port device bridge0 removed [ 361.007302][ T8197] netlink: 'syz.1.903': attribute type 8 has an invalid length. [ 361.707827][ T8211] loop6: detected capacity change from 0 to 8 [ 361.777475][ T8211] SQUASHFS error: xz decompression failed, data probably corrupt [ 361.785837][ T8211] SQUASHFS error: Failed to read block 0x108: -5 [ 361.792870][ T8211] SQUASHFS error: Unable to read metadata cache entry [106] [ 361.800396][ T8211] SQUASHFS error: Unable to read inode 0x11f [ 367.327239][ T26] audit: type=1326 audit(1786039405.622:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 367.374798][ T8275] syz.3.920 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 367.422098][ T26] audit: type=1326 audit(1786039405.672:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 367.445997][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.501844][ T26] audit: type=1326 audit(1786039405.692:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 367.538388][ T5986] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 367.579315][ T26] audit: type=1326 audit(1786039405.692:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 367.608409][ T127] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 367.725572][ T26] audit: type=1326 audit(1786039405.692:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 367.749522][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.765127][ T5986] usb 7-1: config 0 interface 0 has no altsetting 0 [ 367.783252][ T5986] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 367.801774][ T5986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.820285][ T127] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 367.839591][ T5986] usb 7-1: config 0 descriptor?? [ 367.854696][ T26] audit: type=1326 audit(1786039405.702:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 367.862872][ T127] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 367.879111][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.912365][ T26] audit: type=1326 audit(1786039405.702:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 367.942669][ T26] audit: type=1326 audit(1786039405.702:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 367.966448][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.978258][ T127] usb 5-1: config 0 interface 0 has no altsetting 0 [ 368.033495][ T127] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 368.048676][ T26] audit: type=1326 audit(1786039405.702:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 368.064256][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.088053][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 368.104753][ T8271] xt_TCPMSS: Only works on TCP SYN packets [ 368.142814][ T127] usb 5-1: config 0 descriptor?? [ 368.171232][ T26] audit: type=1326 audit(1786039405.702:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 368.195178][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.224930][ T8274] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 368.830424][ T5986] usbhid 7-1:0.0: can't add hid device: -71 [ 368.862906][ T5986] usbhid: probe of 7-1:0.0 failed with error -71 [ 368.917472][ T5986] usb 7-1: USB disconnect, device number 6 [ 369.379861][ T127] usbhid 5-1:0.0: can't add hid device: -71 [ 369.422195][ T127] usbhid: probe of 5-1:0.0 failed with error -71 [ 369.663634][ T127] usb 5-1: USB disconnect, device number 5 [ 371.098699][ T8330] tipc: Enabling of bearer rejected, failed to enable media [ 373.652201][ T8363] bond0: (slave bond_slave_0): Releasing backup interface [ 373.692204][ T8363] bond0: (slave bond_slave_1): Releasing backup interface [ 373.740523][ T8363] team0: Port device team_slave_0 removed [ 373.758798][ T8363] team0: Port device team_slave_1 removed [ 373.765751][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.802380][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.827271][ T8363] bond0: (slave macvlan2): Releasing backup interface [ 373.872437][ T8370] team0: Mode changed to "activebackup" [ 373.894438][ T8371] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 374.031011][ T8372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.943'. [ 374.196780][ T8372] bond7: (slave veth5): Enslaving as an active interface with a down link [ 374.245136][ T8367] bond7: (slave veth0_to_bond): making interface the new active one [ 374.331007][ T8367] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 374.340433][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 374.351273][ T8375] 8021q: adding VLAN 0 to HW filter on device bond7 [ 374.367779][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 374.808760][ T127] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 375.168893][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 375.182289][ T127] usb 5-1: unable to get BOS descriptor or descriptor too short [ 375.267513][ T127] usb 5-1: config 254 has an invalid interface number: 103 but max is 0 [ 375.318663][ T127] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 375.380436][ T127] usb 5-1: config 254 has no interface number 0 [ 375.387401][ T8394] device bond_slave_0 entered promiscuous mode [ 375.393720][ T8394] device bond_slave_1 entered promiscuous mode [ 375.412804][ T127] usb 5-1: config 254 interface 103 has no altsetting 0 [ 375.439268][ T8399] loop3: detected capacity change from 0 to 2048 [ 375.459959][ T8394] device bond_slave_0 left promiscuous mode [ 375.466042][ T8394] device bond_slave_1 left promiscuous mode [ 375.474081][ T8399] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 375.476385][ T127] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 375.490561][ T8394] bond2: (slave vlan3): making interface the new active one [ 375.501992][ T8394] device bond_slave_0 entered promiscuous mode [ 375.508309][ T8394] device bond_slave_1 entered promiscuous mode [ 375.517991][ T8399] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 375.529615][ T8394] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 375.548822][ T8399] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 375.579011][ T8399] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 375.596301][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.617501][ T8399] UDF-fs: Scanning with blocksize 512 failed [ 375.633703][ T127] usb 5-1: Product: syz [ 375.655814][ T127] usb 5-1: Manufacturer: syz [ 375.671169][ T8399] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 375.683347][ T127] usb 5-1: SerialNumber: syz [ 375.747130][ T8399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.905007][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 375.905023][ T26] audit: type=1800 audit(1786039414.202:329): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.951" name="file1" dev="loop3" ino=838 res=0 errno=0 [ 376.790871][ T127] usbserial_generic 5-1:254.103: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 376.825099][ T127] usbserial_generic 5-1:254.103: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 376.961291][ T127] usbserial_generic 5-1:254.103: device has no bulk endpoints [ 377.024782][ T127] usb 5-1: USB disconnect, device number 6 [ 377.072638][ T8418] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 377.215450][ T8418] device bond4 entered promiscuous mode [ 377.271150][ T8418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 377.325687][ T8425] bond4: (slave bridge2): making interface the new active one [ 377.360457][ T8425] device bridge2 entered promiscuous mode [ 377.412216][ T8425] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 377.449540][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 377.523255][ T8430] netlink: 24 bytes leftover after parsing attributes in process `syz.7.957'. [ 378.318577][ T26] audit: type=1326 audit(1786039416.622:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.965" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 378.595978][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.606338][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.066589][ T26] audit: type=1326 audit(1786039416.622:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.965" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 379.091589][ T26] audit: type=1326 audit(1786039416.622:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.965" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 379.115769][ T26] audit: type=1326 audit(1786039416.692:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.965" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a9f9e0d9 code=0x7ffc0000 [ 379.140345][ T26] audit: type=1326 audit(1786039416.692:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.965" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3a9f9de42 code=0x7ffc0000 [ 379.194842][ T26] audit: type=1326 audit(1786039416.692:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.965" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd3a9f9ded7 code=0x7ffc0000 [ 379.334146][ T26] audit: type=1326 audit(1786039416.702:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.965" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd3a9f5add1 code=0x7ffc0000 [ 379.456321][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 379.720847][ T26] audit: type=1326 audit(1786039416.702:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.965" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd3a9f9eec9 code=0x7ffc0000 [ 380.206442][ T26] audit: type=1326 audit(1786039416.722:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.4.965" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd3a9f5ae3b code=0x7ffc0000 [ 380.432577][ T8473] Bluetooth: MGMT ver 1.22 [ 380.636920][ T8478] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 380.849456][ T8478] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.908447][ T4388] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 380.932876][ T8480] device vlan5 entered promiscuous mode [ 380.951145][ T8480] device bond5 entered promiscuous mode [ 381.618512][ T4388] usb 5-1: Using ep0 maxpacket: 16 [ 381.625814][ T4388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 381.714778][ T4388] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.775454][ T4388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.802918][ T4388] usb 5-1: Product: syz [ 381.837966][ T4388] usb 5-1: Manufacturer: syz [ 381.854923][ T4388] usb 5-1: SerialNumber: syz [ 381.896859][ T4388] usb 5-1: config 0 descriptor?? [ 381.943625][ T8483] bond5: (slave bridge3): making interface the new active one [ 381.963598][ T4388] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 381.989430][ T8483] device bridge3 entered promiscuous mode [ 381.995389][ T4388] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 382.018678][ T8483] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 382.037985][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 382.059040][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan5: link becomes ready [ 382.960314][ T4388] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 383.216678][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.305957][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.505826][ T4388] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 384.270885][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.276570][ T4388] em28xx 5-1:0.0: board has no eeprom [ 384.478275][ T4388] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 384.529862][ T4388] em28xx 5-1:0.0: dvb set to bulk mode. [ 384.591889][ T4388] usb 5-1: USB disconnect, device number 7 [ 384.616394][ T4388] em28xx 5-1:0.0: Disconnecting em28xx [ 384.626300][ T4320] em28xx 5-1:0.0: Binding DVB extension [ 384.779026][ T4320] em28xx 5-1:0.0: Registering input extension [ 384.796014][ T4388] em28xx 5-1:0.0: Closing input extension [ 384.842314][ T4388] em28xx 5-1:0.0: Freeing device [ 384.882157][ T8533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.433448][ T8553] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 385.581030][ T8553] CIFS: Attempting to mount \\127.0.0.1\share [ 386.236128][ T8553] CIFS: VFS: Error connecting to socket. Aborting operation. [ 386.251936][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 386.251952][ T26] audit: type=1800 audit(1786039424.552:407): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.990" name="bus" dev="ramfs" ino=47986 res=0 errno=0 [ 386.285285][ T8553] CIFS: VFS: cifs_mount failed w/return code = -4 [ 387.598489][ T8584] loop6: detected capacity change from 0 to 2048 [ 387.794187][ T8584] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 388.046992][ T8596] device vlan2 entered promiscuous mode [ 388.142191][ T8596] device bond0 entered promiscuous mode [ 388.269681][ T8601] Unknown status report in ack skb [ 390.061491][ T5252] EXT4-fs (loop6): unmounting filesystem. [ 390.131774][ T8633] tipc: Enabling of bearer rejected, failed to enable media [ 390.276217][ T8638] netlink: 'syz.6.1011': attribute type 13 has an invalid length. [ 390.385342][ T8638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.491523][ T8638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.533630][ T8638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.087335][ T8653] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 391.099331][ T8653] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 391.945841][ T8642] syzkaller0: Caught tx_queue_len zero misconfig [ 392.095699][ T8658] netlink: 'syz.4.1015': attribute type 12 has an invalid length. [ 392.577436][ T8677] CIFS: Attempting to mount \\::1\share [ 394.156956][ T8677] CIFS: VFS: Error connecting to socket. Aborting operation. [ 394.206842][ T8677] CIFS: VFS: cifs_mount failed w/return code = -4 [ 396.239192][ T127] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 396.448593][ T8701] PKCS8: Unsupported PKCS#8 version [ 396.541137][ T127] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 396.568612][ T127] usb 4-1: config 0 has no interface number 0 [ 396.574794][ T127] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 396.697055][ T127] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 396.947209][ T127] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 397.680250][ T127] usb 4-1: config 0 interface 11 has no altsetting 0 [ 397.687037][ T127] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 397.743918][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.792463][ T127] usb 4-1: config 0 descriptor?? [ 397.820522][ T127] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 398.022411][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 398.030408][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 398.041600][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 398.064009][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 398.089988][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 398.847360][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 398.874454][ T127] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 398.930027][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 398.938069][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 398.967865][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 398.980993][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 398.994366][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1035'. [ 399.007765][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 399.027855][ T127] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 399.099427][ T127] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 399.179613][ T127] usb 4-1: USB disconnect, device number 4 [ 400.107493][ T127] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 400.121007][ T127] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 400.133423][ T127] keyspan 4-1:0.11: device disconnected [ 400.253393][ T8727] bond1 (unregistering): Released all slaves [ 400.406586][ T8742] file system registered [ 400.602711][ T8742] ffs_data_put(): freeing [ 402.621652][ T8756] UBIFS error (pid: 8756): cannot open "ubi0_0", error -19 [ 402.774731][ T8771] device syzkaller0 entered promiscuous mode [ 403.108445][ T8779] netlink: 'syz.3.1045': attribute type 13 has an invalid length. [ 403.253626][ T8785] syzkaller0: Caught tx_queue_len zero misconfig [ 405.747991][ C1] Unknown status report in ack skb [ 408.580743][ T8853] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 408.630128][ T8854] x_tables: duplicate underflow at hook 4 [ 408.705142][ T8852] sctp: [Deprecated]: syz.1.1060 (pid 8852) Use of int in maxseg socket option. [ 408.705142][ T8852] Use struct sctp_assoc_value instead [ 409.099701][ T8850] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 411.071938][ T8870] netlink: 'syz.7.1064': attribute type 13 has an invalid length. [ 414.480974][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.621198][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.634322][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 414.742379][ T8919] ffs_data_put(): freeing [ 415.802109][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 415.877571][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 415.901552][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 415.933576][ T8924] device bridge_slave_0 left promiscuous mode [ 415.982223][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.007143][ T8924] device bridge_slave_1 left promiscuous mode [ 416.013694][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.249989][ T8924] bond7: (slave veth0_to_bond): Releasing active interface [ 416.710815][ T8924] bond0: (slave bond_slave_0): Releasing backup interface [ 416.765618][ T8924] bond0: (slave bond_slave_1): Releasing backup interface [ 417.141646][ T8924] team0: Port device team_slave_0 removed [ 417.209105][ T8924] team0: Port device team_slave_1 removed [ 418.289137][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.340258][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.389923][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.441813][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.548091][ T8924] bond1: (slave veth3): Releasing backup interface [ 418.681510][ T8924] bond3: (slave gretap1): Releasing active interface [ 418.733443][ T8924] bond4: (slave geneve2): Releasing active interface [ 418.780080][ T8924] bond5: (slave bridge1): Releasing backup interface [ 418.797130][ T8924] device bridge1 left promiscuous mode [ 418.833428][ T8924] bond7: (slave veth5): Releasing active interface [ 418.970974][ T8940] lo: Caught tx_queue_len zero misconfig [ 418.976711][ T8940] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 419.057119][ T8944] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 419.235486][ T8979] loop4: detected capacity change from 0 to 1024 [ 419.299299][ T8979] hfsplus: unable to parse mount options [ 423.090250][ T49] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 423.099727][ T49] Bluetooth: hci2: Injecting HCI hardware error event [ 423.113273][ T49] Bluetooth: hci2: hardware error 0x00 [ 423.476968][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'. [ 424.205695][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 425.228434][ T49] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 425.486066][ T9080] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 426.369480][ T9080] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.484319][ T9094] tunl0: Caught tx_queue_len zero misconfig [ 427.908488][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1132'. [ 428.313224][ T9119] bridge1: port 1(veth5) entered blocking state [ 428.454939][ T9119] bridge1: port 1(veth5) entered disabled state [ 428.704500][ T9119] device veth5 entered promiscuous mode [ 428.821044][ T9122] bridge1: port 2(veth7) entered blocking state [ 428.863602][ T9122] bridge1: port 2(veth7) entered disabled state [ 428.900223][ T9122] device veth7 entered promiscuous mode [ 429.074586][ T9111] binder: 9103:9111 ioctl 4018620d 0 returned -22 [ 431.724392][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 431.739079][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'. [ 432.489657][ T9168] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1135'. [ 432.687954][ T9174] tipc: Enabling of bearer rejected, failed to enable media [ 433.880605][ T9193] tipc: Enabling of bearer rejected, failed to enable media [ 434.313473][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 435.825615][ T9221] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 435.835659][ T9221] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 435.845499][ T9221] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 435.976846][ T9221] syz.1.1143 (9221) used greatest stack depth: 20160 bytes left [ 435.984741][ T26] audit: type=1800 audit(1786039474.122:408): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1143" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 437.068548][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1152'. [ 438.710833][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.721065][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.728777][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.951177][ T9270] team0: Mode changed to "loadbalance" [ 439.011037][ T9278] netlink: 'syz.3.1160': attribute type 2 has an invalid length. [ 440.078743][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.085226][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.351819][ T9300] fuse: Unknown parameter 'group_i' [ 440.623125][ T9310] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1168'. [ 441.550808][ T9330] loop4: detected capacity change from 0 to 256 [ 441.609228][ T9330] FAT-fs (loop4): bogus sectors per cluster 0 [ 441.697843][ T9330] FAT-fs (loop4): Can't find a valid FAT filesystem [ 442.789796][ T9348] device syzkaller0 left promiscuous mode [ 442.885638][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 444.014088][ T9370] netlink: 'syz.6.1179': attribute type 11 has an invalid length. [ 444.089018][ T9370] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.096397][ T9370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.104291][ T9370] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.111553][ T9370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.208224][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 444.248080][ T9370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.031770][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.421528][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1184'. [ 447.775458][ T9415] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 447.859773][ T26] audit: type=1326 audit(1786039486.162:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.7.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 448.922161][ T9416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.954041][ T26] audit: type=1326 audit(1786039486.202:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.7.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 448.961744][ T9419] netlink: 'syz.3.1192': attribute type 21 has an invalid length. [ 448.983694][ T26] audit: type=1326 audit(1786039486.202:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.7.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 449.144402][ T26] audit: type=1326 audit(1786039486.202:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.7.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 449.175908][ T9421] bond8: (slave veth7): Enslaving as an active interface with a down link [ 449.233789][ T9426] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 449.270009][ T26] audit: type=1326 audit(1786039486.212:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.7.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 449.338189][ T26] audit: type=1326 audit(1786039486.212:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.7.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 449.444007][ T26] audit: type=1326 audit(1786039486.212:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.7.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 449.529483][ T26] audit: type=1326 audit(1786039486.212:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.7.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 449.636063][ T26] audit: type=1326 audit(1786039486.212:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.7.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 449.744650][ T26] audit: type=1326 audit(1786039486.212:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.7.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 449.790875][ T9449] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 452.435231][ T9486] lo: Caught tx_queue_len zero misconfig [ 452.674712][ T9505] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 453.530757][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1211'. [ 454.639111][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1217'. [ 454.758288][ T9549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.047582][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.244392][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1223'. [ 456.314621][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.321964][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.329685][ T4388] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 456.528385][ T4388] usb 5-1: Using ep0 maxpacket: 8 [ 456.535565][ T4388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.559200][ T4388] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 456.586771][ T4388] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 456.616301][ T4388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.670634][ T4388] usb 5-1: config 0 descriptor?? [ 456.910359][ T4388] usbhid 5-1:0.0: can't add hid device: -71 [ 456.916433][ T4388] usbhid: probe of 5-1:0.0 failed with error -71 [ 456.955170][ T4388] usb 5-1: USB disconnect, device number 8 [ 459.868582][ T49] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 459.877792][ T49] Bluetooth: hci0: Injecting HCI hardware error event [ 459.892813][ T49] Bluetooth: hci0: hardware error 0x00 [ 463.024008][ T9676] netlink: 'syz.3.1245': attribute type 1 has an invalid length. [ 464.033017][ T49] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 465.329213][ T9676] 8021q: adding VLAN 0 to HW filter on device bond7 [ 465.395516][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 465.395533][ T26] audit: type=1326 audit(1786039503.692:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.6.1246" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf2979e0d9 code=0x0 [ 465.396506][ T9684] device bond7 entered promiscuous mode [ 470.613335][ T9731] CIFS: Attempting to mount \\127.0.0.1\share [ 470.662751][ T9731] CIFS: VFS: Error connecting to socket. Aborting operation. [ 471.321600][ T9731] CIFS: VFS: cifs_mount failed w/return code = -4 [ 471.836652][ T9747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 472.659117][ T9754] device bond8 entered promiscuous mode [ 474.139566][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.147560][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.186331][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 477.239546][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1278'. [ 478.639169][ T9797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.246362][ T9945] netlink: 'syz.1.1298': attribute type 4 has an invalid length. [ 488.254494][ T9945] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1298'. [ 488.316892][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'. [ 490.578153][ T9994] kvm [9992]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 490.645850][ T9994] kvm [9992]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 493.323728][T10025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 493.347047][T10025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 493.391682][T10025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 493.439238][T10025] bond8: (slave veth0_to_bond): Releasing active interface [ 493.585185][T10025] bond8: (slave veth7): Releasing active interface [ 493.603729][ T26] audit: type=1326 audit(1786039531.902:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.3.1318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 493.716241][ T26] audit: type=1326 audit(1786039531.932:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.3.1318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 493.745383][T10039] loop4: detected capacity change from 0 to 2048 [ 493.790586][ T26] audit: type=1326 audit(1786039531.932:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.3.1318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 493.824609][T10039] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 493.843625][T10039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.090778][ T26] audit: type=1326 audit(1786039531.962:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.3.1318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 494.115841][ T26] audit: type=1326 audit(1786039531.962:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.3.1318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 494.517030][ T26] audit: type=1326 audit(1786039531.962:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.3.1318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 494.901171][T10051] ip6tnl0: Caught tx_queue_len zero misconfig [ 494.908187][ T26] audit: type=1326 audit(1786039531.962:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.3.1318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 494.964785][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1321'. [ 495.007060][ T26] audit: type=1326 audit(1786039531.962:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.3.1318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 495.091082][ T26] audit: type=1326 audit(1786039531.962:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.3.1318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 495.144540][ T4273] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 495.157141][ T4273] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 495.186633][ T26] audit: type=1326 audit(1786039531.962:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.3.1318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe13999e0d9 code=0x7ffc0000 [ 496.741426][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1341'. [ 496.787774][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1341'. [ 496.833156][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1341'. [ 498.677887][T10114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.772946][T10117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.304218][ T9620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 500.316619][ T9620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 500.331341][ T9620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 500.342220][ T9620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 500.351582][ T9620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 500.360682][ T9620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 500.511972][T10136] bond9: (slave vlan7): Opening slave failed [ 501.085019][T10150] lo speed is unknown, defaulting to 1000 [ 502.251110][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.257481][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.593389][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 502.617570][T10150] lo speed is unknown, defaulting to 1000 [ 502.625027][T10150] lo speed is unknown, defaulting to 1000 [ 502.638272][T10150] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 502.653994][T10150] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 502.897358][T10150] lo speed is unknown, defaulting to 1000 [ 502.952704][T10150] lo speed is unknown, defaulting to 1000 [ 502.961045][T10135] chnl_net:caif_netlink_parms(): no params data found [ 502.982209][T10150] lo speed is unknown, defaulting to 1000 [ 503.084481][T10150] lo speed is unknown, defaulting to 1000 [ 503.124066][T10150] lo speed is unknown, defaulting to 1000 [ 503.234166][T10150] lo speed is unknown, defaulting to 1000 [ 503.234562][T10135] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.253012][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.261690][T10135] device bridge_slave_0 entered promiscuous mode [ 503.270807][T10135] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.277983][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.287173][T10135] device bridge_slave_1 entered promiscuous mode [ 503.366386][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.400209][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.510419][T10135] team0: Port device team_slave_0 added [ 503.547452][ T4327] device hsr_slave_0 left promiscuous mode [ 503.554872][ T4327] device hsr_slave_1 left promiscuous mode [ 503.607284][ T4327] bond1 (unregistering): Released all slaves [ 504.668790][ T9620] Bluetooth: hci2: command 0x041b tx timeout [ 504.779845][ T4327] bond0 (unregistering): Released all slaves [ 504.827504][T10135] team0: Port device team_slave_1 added [ 504.883615][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.891128][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.919062][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.946434][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.954658][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.989492][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.043755][T10135] device hsr_slave_0 entered promiscuous mode [ 505.051663][T10135] device hsr_slave_1 entered promiscuous mode [ 505.059155][T10135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.066778][T10135] Cannot create hsr debugfs directory [ 505.350423][T10135] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 505.367648][T10135] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 505.378912][T10135] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 505.407681][T10135] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 505.535101][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.561696][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 505.573241][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 505.585220][T10135] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.600403][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 505.618992][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 505.633906][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.641108][ T5604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.660983][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 505.673991][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 505.684405][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.700284][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.707472][ T5604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.722116][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 505.737555][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 505.767753][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 505.785426][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 505.799169][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 505.814879][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 505.823902][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 505.840602][T10135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.858901][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 505.868951][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 505.877066][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 506.149857][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 506.157606][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 506.173609][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.658269][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 506.667192][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 506.691632][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 506.702488][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 506.713631][T10135] device veth0_vlan entered promiscuous mode [ 506.721283][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 506.730401][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 506.744842][T10135] device veth1_vlan entered promiscuous mode [ 506.752271][ T9620] Bluetooth: hci2: command 0x040f tx timeout [ 506.778015][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 506.794245][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 506.804954][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 506.817031][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 506.830147][T10135] device veth0_macvtap entered promiscuous mode [ 506.848992][T10135] device veth1_macvtap entered promiscuous mode [ 506.870755][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 506.880341][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 506.894872][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.906155][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.917196][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.927890][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.941959][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.953684][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 506.963047][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 506.975873][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.998532][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.010347][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.021752][T10135] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.035616][T10135] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.045126][T10135] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.058534][T10135] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.071304][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 507.083200][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 507.171857][ T5607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.190753][ T5607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.206832][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 507.240848][ T4469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.252919][ T4469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.264840][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 507.454590][T10236] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 508.622762][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 508.622779][ T26] audit: type=1800 audit(1786039546.922:510): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1363" name="bus" dev="ramfs" ino=52596 res=0 errno=0 [ 508.624916][T10236] 8021q: adding VLAN 0 to HW filter on device bond9 [ 508.724412][T10244] bond9: (slave ip6gretap1): making interface the new active one [ 508.734966][T10244] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 508.752994][T10245] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 508.769599][T10245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.803322][T10245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.828998][ T9620] Bluetooth: hci2: command 0x0419 tx timeout [ 508.872872][T10245] bond9: (slave ip6gretap1): Releasing active interface [ 509.041052][ T26] audit: type=1326 audit(1786039547.342:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 509.159798][ T26] audit: type=1326 audit(1786039547.372:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 510.051070][ T26] audit: type=1326 audit(1786039547.372:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 510.358509][ T26] audit: type=1326 audit(1786039547.372:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 510.393526][ T26] audit: type=1326 audit(1786039547.372:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 510.732534][ T26] audit: type=1326 audit(1786039547.372:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 511.386257][T10274] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 511.395044][ T26] audit: type=1326 audit(1786039547.372:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 511.508229][ T26] audit: type=1326 audit(1786039547.382:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 511.578572][T10273] overlayfs: failed to decode file handle (len=16, type=0, flags=0, err=-22) [ 511.635036][ T26] audit: type=1326 audit(1786039547.382:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.7.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f879e0d9 code=0x7ffc0000 [ 514.564397][T10327] fuse: Unknown parameter '0x0000000000000003' [ 518.389064][T10368] tipc: Failed to remove unknown binding: 66,0,0/0:653668168/653668169 [ 518.397586][T10369] tipc: Failed to remove unknown binding: 66,0,0/0:157703745/157703747 [ 518.416053][T10368] tipc: Failed to remove unknown binding: 66,0,0/0:653668168/653668169 [ 525.413297][T10469] netlink: 'syz.7.1401': attribute type 12 has an invalid length. [ 525.598306][T10472] fuse: Bad value for 'fd' [ 530.403477][T10518] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 537.645769][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1426'. [ 537.999786][T10593] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 538.592264][T10579] bond1: (slave veth7): Enslaving as an active interface with an up link [ 538.890164][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'. [ 547.854955][T10669] netlink: 'syz.7.1449': attribute type 10 has an invalid length. [ 548.903463][T10669] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 550.211721][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1455'. [ 559.366947][ T9620] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 559.376434][ T9620] Bluetooth: hci4: Injecting HCI hardware error event [ 559.389011][ T49] Bluetooth: hci4: hardware error 0x00 [ 559.405226][T10759] loop8: detected capacity change from 0 to 2048 [ 559.541201][T10759] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 563.126888][T10776] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 563.143703][T10776] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 563.156768][T10776] EXT4-fs (loop8): This should not happen!! Data will be lost [ 563.156768][T10776] [ 563.166509][T10776] EXT4-fs (loop8): Total free blocks count 0 [ 563.172553][T10776] EXT4-fs (loop8): Free/Dirty block details [ 563.178545][T10776] EXT4-fs (loop8): free_blocks=2415919504 [ 563.184317][T10776] EXT4-fs (loop8): dirty_blocks=39760 [ 563.189759][T10776] EXT4-fs (loop8): Block reservation details [ 563.195765][T10776] EXT4-fs (loop8): i_reserved_data_blocks=2485 [ 563.203100][ T49] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 563.214069][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.220509][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.341933][ T11] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28 [ 566.130300][T10720] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.139572][T10720] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.148981][T10720] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.259678][T10720] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.388050][T10783] netlink: 'syz.6.1475': attribute type 1 has an invalid length. [ 568.784994][T10788] device bridge2 entered promiscuous mode [ 569.712472][T10135] EXT4-fs: 15 callbacks suppressed [ 569.712487][T10135] EXT4-fs (loop8): unmounting filesystem. [ 569.890347][T10836] futex_wake_op: syz.3.1486 tries to shift op by 144; fix this program [ 571.060834][T10847] tipc: Started in network mode [ 571.066452][T10847] tipc: Node identity f662eb3e1ae4, cluster identity 4711 [ 571.097231][T10847] tipc: Enabled bearer , priority 0 [ 571.120484][ T9620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 571.156610][ T9620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 571.188354][ T9620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 571.198233][ T9620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 571.206638][ T9620] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 571.214107][ T9620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 571.263849][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'. [ 571.309315][T10853] device syzkaller0 entered promiscuous mode [ 571.457229][T10860] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 572.228316][ T14] tipc: Node number set to 3968265022 [ 573.361518][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 574.805679][T10846] lo speed is unknown, defaulting to 1000 [ 575.649248][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 575.919737][T10846] chnl_net:caif_netlink_parms(): no params data found [ 576.327888][T10914] No such timeout policy "syz1" [ 576.351025][T10914] loop8: detected capacity change from 0 to 256 [ 576.383521][T10914] vfat filesystem being mounted at /30/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 577.092091][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.128380][T10846] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.159376][T10846] device bridge_slave_0 entered promiscuous mode [ 578.660076][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 578.696810][T10846] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.748632][T10846] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.788535][T10846] device bridge_slave_1 entered promiscuous mode [ 578.903262][T10846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.963234][T10846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.185378][T10846] team0: Port device team_slave_0 added [ 579.470188][T10846] team0: Port device team_slave_1 added [ 579.817649][T10846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.831783][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.904472][T10846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.083027][T10846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.094982][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.151661][T10846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.668239][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 580.765622][T10846] device hsr_slave_0 entered promiscuous mode [ 581.046094][T10846] device hsr_slave_1 entered promiscuous mode [ 581.229348][T10846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.273390][T10846] Cannot create hsr debugfs directory [ 582.031615][T10965] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4275] was attempted by ""[10965] [ 586.956981][T10996] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.965156][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.569327][T10996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.635603][T10996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.171737][T10996] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.181936][T10996] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.192292][T10996] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.201739][T10996] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.358273][ T5601] tipc: Disabling bearer [ 588.375467][ T5601] tipc: Left network mode [ 588.395491][T10846] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 588.473099][T10846] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 588.690532][T10846] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 588.730517][T10846] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 588.967209][T11050] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5252] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11050] [ 590.738566][T11065] netlink: 'syz.7.1527': attribute type 1 has an invalid length. [ 590.823221][T11065] device bond2 entered promiscuous mode [ 590.846513][T11065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.138402][T11070] bond2: (slave bridge1): making interface the new active one [ 591.146170][T11070] device bridge1 entered promiscuous mode [ 591.161642][T11070] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 591.176565][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 591.223549][T10846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.383751][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 591.412959][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 591.480295][T10846] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.554391][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 591.593024][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 591.638782][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.646004][ T5579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.698649][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 592.825467][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 592.878913][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 592.924067][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.931309][ T5579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.069772][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 593.109647][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 593.130061][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 593.158750][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.182914][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 593.209220][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 593.239037][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 593.293858][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 593.321276][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.340191][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.350863][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.591746][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 596.888327][ T5601] device hsr_slave_0 left promiscuous mode [ 596.897879][ T5601] device hsr_slave_1 left promiscuous mode [ 597.658951][ T5601] bond9 (unregistering): Released all slaves [ 597.726721][ T5601] bond8 (unregistering): Released all slaves [ 598.765909][T11146] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1543'. [ 599.196135][ T5601] bond7 (unregistering): Released all slaves [ 599.215920][ T5601] bond6 (unregistering): Released all slaves [ 600.240005][ T5601] bond5 (unregistering): Released all slaves [ 600.512806][ T5601] bond4 (unregistering): Released all slaves [ 601.659317][ T5601] bond3 (unregistering): Released all slaves [ 601.694352][ T5601] bond2 (unregistering): Released all slaves [ 601.749740][ T5601] bond1 (unregistering): Released all slaves [ 601.996221][ T4337] smc: removing ib device syz2 [ 603.042138][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805822bc00: rx timeout, send abort [ 603.062740][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805514fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 603.148152][ T5601] smc: removing net device veth0 with user defined pnetid SYZ0 [ 603.346056][ T5601] bond0 (unregistering): Released all slaves [ 603.391908][T11141] netlink: 'syz.7.1541': attribute type 1 has an invalid length. [ 603.420862][T11146] bridge0: port 3(syz_tun) entered blocking state [ 603.427603][T11146] bridge0: port 3(syz_tun) entered disabled state [ 603.437278][T11146] device syz_tun entered promiscuous mode [ 603.561559][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805822bc00: abort rx timeout. Force session deactivation [ 603.742285][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1549'. [ 603.844755][T11176] tipc: Enabling of bearer rejected, already enabled [ 603.948631][T10846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.970591][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 603.987316][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 606.073260][T11220] netlink: 'syz.7.1559': attribute type 1 has an invalid length. [ 606.129316][T11220] 8021q: adding VLAN 0 to HW filter on device bond3 [ 607.092452][T11227] bond3: (slave gretap1): making interface the new active one [ 607.124523][T11227] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 607.136034][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 609.752113][T11260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.759785][T11260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.813943][T11260] device bridge_slave_0 left promiscuous mode [ 609.820361][T11260] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.843165][T11260] device bridge_slave_1 left promiscuous mode [ 609.849521][T11260] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.860097][T11260] bond0: (slave bond_slave_0): Releasing backup interface [ 609.867954][T11260] device bond_slave_0 left promiscuous mode [ 609.892461][T11260] bond0: (slave bond_slave_1): Releasing backup interface [ 609.902003][T11260] device bond_slave_1 left promiscuous mode [ 609.933536][T11260] team0: Port device team_slave_0 removed [ 609.977633][T11260] team0: Port device team_slave_1 removed [ 609.984105][T11260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.991580][T11260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.265708][T11272] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 610.980346][T11260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.987897][T11260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.005148][T11260] bond2: (slave vlan3): Releasing active interface [ 611.015852][T11260] device veth5 left promiscuous mode [ 611.021471][T11260] bridge1: port 1(veth5) entered disabled state [ 611.069825][T11260] device veth7 left promiscuous mode [ 611.075377][T11260] bridge1: port 2(veth7) entered disabled state [ 611.206383][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 611.237969][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.574487][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1571'. [ 612.272436][T11268] team0: Mode changed to "loadbalance" [ 612.306810][T10846] device veth0_vlan entered promiscuous mode [ 612.335659][T10846] device veth1_vlan entered promiscuous mode [ 612.376669][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 612.404783][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 612.439382][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 612.501525][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 612.529968][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 612.573065][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 612.590296][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 612.635513][T10846] device veth0_macvtap entered promiscuous mode [ 612.658757][T10846] device veth1_macvtap entered promiscuous mode [ 612.724241][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.753477][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.799938][T10846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.807401][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 612.852482][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 612.872289][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 612.890340][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 612.944532][T10846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.965686][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 612.988988][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 613.012285][T10846] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.029576][T10846] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.054905][T10846] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.073877][T10846] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.266968][ T5579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.291860][ T5579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.321308][T11297] netlink: 276 bytes leftover after parsing attributes in process `syz.7.1573'. [ 613.350754][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 613.385782][ T4955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.414369][ T4955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.422788][T11297] tipc: Enabling of bearer rejected, failed to enable media [ 613.455263][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 613.853294][T11307] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1483'. [ 618.402001][T11340] md: serialize_policy is only effective for raid1 [ 619.184620][T11344] netlink: 'syz.6.1595': attribute type 30 has an invalid length. [ 619.194627][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1595'. [ 619.379185][T11357] fuse: Unknown parameter 'group_i' [ 620.629228][T11370] syz.3.1590 (11370) used greatest stack depth: 15952 bytes left [ 620.942732][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1591'. [ 620.955528][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1591'. [ 621.836231][T11385] 8021q: adding VLAN 0 to HW filter on device bond4 [ 621.844407][T11385] bridge0: port 3(bond4) entered blocking state [ 621.851267][T11385] bridge0: port 3(bond4) entered disabled state [ 621.859565][T11385] device bond4 entered promiscuous mode [ 621.988166][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'. [ 623.967244][T11417] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1601'. [ 624.359900][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.374479][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.099215][T11444] device syzkaller0 entered promiscuous mode [ 626.834504][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 628.068101][T11471] No such timeout policy "syz1" [ 632.509428][T11508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 632.510057][T11508] netlink: 'syz.9.1619': attribute type 21 has an invalid length. [ 638.668232][ T49] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 638.677566][ T49] Bluetooth: hci5: Injecting HCI hardware error event [ 638.689534][ T4287] Bluetooth: hci5: hardware error 0x00 [ 641.091475][ T4287] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 643.376240][T11624] lo: Caught tx_queue_len zero misconfig [ 645.474427][T11638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.545360][T11636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.603688][T11656] o2cb: This node has not been configured. [ 646.610477][T11656] o2cb: Cluster check failed. Fix errors before retrying. [ 646.617979][T11656] (syz.7.1654,11656,0):user_dlm_register:674 ERROR: status = -22 [ 646.626021][T11656] (syz.7.1654,11656,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 648.167607][T11681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 648.187044][T11681] bond1: (slave macvlan2): making interface the new active one [ 648.203390][T11681] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 649.468241][T11707] device bond_slave_0 entered promiscuous mode [ 649.474532][T11707] device bond_slave_1 entered promiscuous mode [ 649.481796][T11707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 649.707074][T11707] bond1: (slave macvlan2): making interface the new active one [ 649.947978][T11707] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 650.592339][ T4287] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 650.601793][ T4287] Bluetooth: hci3: Injecting HCI hardware error event [ 650.613433][ T49] Bluetooth: hci3: hardware error 0x00 [ 651.527343][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'. [ 652.828236][ T49] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 653.453823][T11755] device syzkaller0 entered promiscuous mode [ 654.518662][T11764] loop9: detected capacity change from 0 to 512 [ 654.613383][T11764] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 655.589399][ T49] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 655.598820][ T49] Bluetooth: hci2: Injecting HCI hardware error event [ 655.611808][ T49] Bluetooth: hci2: hardware error 0x00 [ 655.672749][T11764] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 655.690147][T11770] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 655.710505][T11770] bond9: (slave macvlan2): Enslaving as an active interface with a down link [ 655.762217][T11764] EXT4-fs (loop9): 1 truncate cleaned up [ 655.767978][T11764] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 657.767231][ T49] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 657.906859][T10846] EXT4-fs (loop9): unmounting filesystem. [ 663.873258][T11845] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 663.905290][T11845] bond2: (slave macvlan2): Enslaving as an active interface with a down link [ 665.361334][T11868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 665.389511][T11868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 665.412115][T11868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 665.448314][T11868] device bridge_slave_0 left promiscuous mode [ 665.478561][T11868] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.574324][T11868] device bridge_slave_1 left promiscuous mode [ 665.591066][T11868] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.613859][T11868] bond0: (slave bond_slave_0): Releasing backup interface [ 665.630457][T11868] device bond_slave_0 left promiscuous mode [ 665.678698][T11868] bond0: (slave bond_slave_1): Releasing backup interface [ 665.690145][T11868] device bond_slave_1 left promiscuous mode [ 665.810864][T11868] team0: Port device team_slave_0 removed [ 665.876741][T11868] team0: Port device team_slave_1 removed [ 665.919446][T11868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.948723][T11868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.979404][T11868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.000913][T11868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.084465][T11868] bond1: (slave macvlan2): Releasing active interface [ 667.438236][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.445938][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.451843][T11895] bond2: (slave macvlan2): Releasing active interface [ 669.326144][T11915] loop8: detected capacity change from 0 to 512 [ 669.343450][T11915] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 669.376955][T11915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 669.412638][T11915] System zones: 1-12 [ 669.472870][T11915] EXT4-fs error (device loop8): ext4_orphan_get:1431: comm syz.8.1716: bad orphan inode 16 [ 669.583824][T11915] ext4_test_bit(bit=15, block=4) = 0 [ 669.598444][T11915] EXT4-fs (loop8): 1 orphan inode deleted [ 669.623884][T11915] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 669.678919][T11927] tipc: Enabling of bearer rejected, already enabled [ 670.668602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.765197][T10135] EXT4-fs (loop8): unmounting filesystem. [ 671.708277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.748172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.788066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.828152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.868120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.908167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.948121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.988160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.739612][T12064] netlink: 'syz.3.1754': attribute type 1 has an invalid length. [ 679.830164][T12064] 8021q: adding VLAN 0 to HW filter on device bond10 [ 679.951134][T12071] bond10: (slave veth13): Enslaving as an active interface with a down link [ 680.012705][T12074] device bond10 entered promiscuous mode [ 680.028101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.060595][T12064] device macvlan3 entered promiscuous mode [ 680.084438][T12064] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 681.068209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.362158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.388242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.438079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.341717][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 685.341733][ T26] audit: type=1800 audit(3933523371.640:583): pid=12123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1751" name="bus" dev="ramfs" ino=58460 res=0 errno=0 [ 685.468191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.839501][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.851675][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.508093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.628703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.736883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.788247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.828155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.878199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.908069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.953145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.281907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.348271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.037372][T12260] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 697.388130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.542934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.548067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.588434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.638051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.668133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.434447][T12320] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 703.708219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.518420][T10856] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 704.718252][T10856] usb 9-1: Using ep0 maxpacket: 8 [ 704.732002][T10856] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.748131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.779713][T10856] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 704.812104][T10856] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 704.847509][T10856] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 704.944243][T10856] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 705.019606][T10856] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.078832][T10856] hub 9-1:1.0: bad descriptor, ignoring hub [ 705.112068][T10856] hub: probe of 9-1:1.0 failed with error -5 [ 705.512075][T12326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.798055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.966932][T10856] cdc_wdm 9-1:1.0: skipping garbage [ 705.972362][T10856] cdc_wdm 9-1:1.0: skipping garbage [ 705.982623][T10856] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 705.988724][T10856] cdc_wdm 9-1:1.0: Unknown control protocol [ 706.061987][T12326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.198641][ T4357] usb 9-1: USB disconnect, device number 2 [ 707.318524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.338955][T12354] kvm [12353]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 707.408492][T12354] kvm [12353]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 707.416670][T12354] kvm [12353]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 707.958374][T12369] loop9: detected capacity change from 0 to 512 [ 707.965713][T12369] EXT4-fs: inline encryption not supported [ 708.008947][T12369] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 708.144955][T12369] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 708.220402][T12369] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.1808: invalid indirect mapped block 2683928664 (level 1) [ 708.283990][T12369] EXT4-fs (loop9): 1 truncate cleaned up [ 708.291343][T12369] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 708.358149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.773210][ T26] audit: type=1800 audit(3933523651.142:584): pid=12384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1808" name="file0" dev="loop9" ino=13 res=0 errno=0 [ 709.059528][T10846] EXT4-fs (loop9): unmounting filesystem. [ 709.388134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.546604][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1812'. [ 709.594741][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1812'. [ 709.690697][T12399] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 710.438046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.468171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.000926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.028250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.068137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.238864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.308094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.806945][T12474] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 718.348122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.220769][ T26] audit: type=1326 audit(3933523661.592:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.9.1832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7577b9e0d9 code=0x7ffc0000 [ 719.315382][ T26] audit: type=1326 audit(3933523661.592:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.9.1832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7577b9e0d9 code=0x7ffc0000 [ 719.345146][ T26] audit: type=1326 audit(3933523661.622:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.9.1832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7577b9e0d9 code=0x7ffc0000 [ 719.388065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.400377][ T26] audit: type=1326 audit(3933523661.622:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.9.1832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7577b9e0d9 code=0x7ffc0000 [ 719.433356][ T26] audit: type=1326 audit(3933523661.622:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.9.1832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7577b5e90e code=0x7ffc0000 [ 719.463383][ T26] audit: type=1326 audit(3933523661.622:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.9.1832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7577b9e0d9 code=0x7ffc0000 [ 719.709143][ T26] audit: type=1326 audit(3933523661.622:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.9.1832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7577b9e0d9 code=0x7ffc0000 [ 719.797718][ T26] audit: type=1326 audit(3933523661.622:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.9.1832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7577b9e0d9 code=0x7ffc0000 [ 719.837438][ T26] audit: type=1326 audit(3933523661.622:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.9.1832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7577b9e0d9 code=0x7ffc0000 [ 719.889085][ T26] audit: type=1326 audit(3933523661.622:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12486 comm="syz.9.1832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7577b9e0d9 code=0x7ffc0000 [ 720.428136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.168223][T12526] overlayfs: failed to clone upperpath [ 721.468057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.518129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.122636][T12538] loop9: detected capacity change from 0 to 256 [ 723.200638][T12538] exfat: Deprecated parameter 'utf8' [ 723.548151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.210450][T12538] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 724.271824][T12538] exfat filesystem being mounted at /53/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 724.602970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.638135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.668163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.979110][T12567] loop8: detected capacity change from 0 to 1024 [ 727.088984][T12567] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 727.128186][T12567] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.708108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.758156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.542551][T10135] EXT4-fs (loop8): unmounting filesystem. [ 729.605750][T12591] device syzkaller0 entered promiscuous mode [ 729.788367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.828118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.851155][T12625] loop9: detected capacity change from 0 to 8 [ 731.879195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.479286][T12625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 732.487358][T12625] SQUASHFS error: Failed to read block 0x9b: -5 [ 732.493781][T12625] SQUASHFS error: Unable to read metadata cache entry [99] [ 732.501117][T12625] SQUASHFS error: Unable to read inode 0x127 [ 732.620788][T12624] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.629711][T12624] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.638501][T12624] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.647241][T12624] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.198581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.635240][T12624] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 734.278031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.318153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.340780][T12662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.358913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.388159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.438054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.851747][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.858167][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.157286][T12717] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.176859][T12717] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.204100][T12717] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.232557][T12717] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.538276][ T4321] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 754.922976][ T4321] usb 9-1: Using ep0 maxpacket: 8 [ 754.931470][ T4321] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 754.988185][ T4321] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 755.098093][ T4321] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.390650][ T4321] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 755.780276][ T4321] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.910616][ T4321] usbtmc 9-1:16.0: bulk endpoints not found [ 756.140502][ T4321] usb 9-1: USB disconnect, device number 3 [ 758.268663][T12876] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 759.441731][T12871] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1912'. [ 762.072016][T12910] loop9: detected capacity change from 0 to 32768 [ 762.487183][T12910] XFS (loop9): Mounting V5 Filesystem [ 762.770283][T12910] XFS (loop9): Ending clean mount [ 762.790976][T12910] XFS (loop9): Quotacheck needed: Please wait. [ 763.010700][T12910] XFS (loop9): Quotacheck: Done. [ 764.148934][T10846] XFS (loop9): Unmounting Filesystem [ 765.228807][T12938] overlayfs: failed to clone upperpath [ 765.598493][T12950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1930'. [ 765.608519][T12950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1930'. [ 765.618060][T12950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1930'. [ 766.490364][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1931'. [ 786.620595][T13139] trusted_key: encrypted_key: key user:syz not found [ 789.608736][T13173] loop9: detected capacity change from 0 to 512 [ 789.726226][T13173] msdos filesystem being mounted at /77/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 789.969715][T13176] device vlan7 entered promiscuous mode [ 789.975590][T13176] device bond0 entered promiscuous mode [ 794.051325][T13224] device syzkaller0 entered promiscuous mode [ 795.570993][T13244] netlink: 'syz.7.1986': attribute type 10 has an invalid length. [ 795.596104][T13244] device bridge_slave_1 left promiscuous mode [ 795.602753][T13244] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.606512][T13244] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 799.676490][T13295] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 799.931024][T13295] 8021q: adding VLAN 0 to HW filter on device bond11 [ 799.944412][T13298] bond11: (slave vlan7): Opening slave failed [ 802.120936][T13327] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1996'. [ 805.316976][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1999'. [ 809.845345][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 809.845363][ T26] audit: type=1800 audit(3933524004.906:663): pid=13395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2017" name="bus" dev="ramfs" ino=62711 res=0 errno=0 [ 811.614060][T13433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.214169][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.224618][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.962250][T13496] netlink: 'syz.7.2034': attribute type 10 has an invalid length. [ 817.044253][T13501] tc action pedit offset must be on 32 bit boundaries [ 817.355377][T13511] tipc: Enabling of bearer rejected, failed to enable media [ 817.645575][T13517] smc: net device lo applied user defined pnetid SYZ0 [ 817.720883][T13517] syz.9.2039 (13517) used obsolete PPPIOCDETACH ioctl [ 818.729966][T13528] ------------[ cut here ]------------ [ 818.737999][T13528] WARNING: CPU: 0 PID: 13528 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180 [ 818.749060][T13528] Modules linked in: [ 818.753009][T13528] CPU: 0 PID: 13528 Comm: syz.7.2052 Not tainted syzkaller #0 [ 818.760579][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 818.770824][T13528] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 818.777821][T13528] Code: 7c 2d 00 00 74 08 48 89 df e8 ac 2a 1b f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 d8 80 00 e8 d0 fd c9 f7 <0f> 0b eb c5 48 c7 c1 a4 3f 21 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 818.797702][T13528] RSP: 0018:ffffc90003287250 EFLAGS: 00010287 [ 818.803889][T13528] RAX: ffffffff89b83050 RBX: ffff888054fad5a8 RCX: 0000000000080000 [ 818.811971][T13528] RDX: ffffc90016c7a000 RSI: 00000000000057c4 RDI: 00000000000057c5 [ 818.820045][T13528] RBP: 0000000000000000 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 818.828125][T13528] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff888054faeab0 [ 818.836217][T13528] R13: 1ffff1100a9f5ab5 R14: ffff888054fae228 R15: dffffc0000000000 [ 818.844283][T13528] FS: 00007fa3f957e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 818.853326][T13528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.859958][T13528] CR2: 00007f75789556c8 CR3: 00000000561fb000 CR4: 00000000003506f0 [ 818.868045][T13528] Call Trace: [ 818.871485][T13528] [ 818.874575][T13528] ieee80211_if_change_type+0x205/0xa80 [ 818.880250][T13528] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 818.887088][T13528] ? cfg80211_mlme_purge_registrations+0x1d0/0x200 [ 818.893735][T13528] ieee80211_change_iface+0x58/0x4c0 [ 818.899065][T13528] cfg80211_change_iface+0x786/0xf10 [ 818.904550][T13528] nl80211_set_interface+0x601/0x860 [ 818.909905][T13528] ? nl80211_dump_interface+0x560/0x560 [ 818.915517][T13528] genl_family_rcv_msg_doit+0x22f/0x350 [ 818.921184][T13528] ? end_current_label_crit_section+0x170/0x170 [ 818.927557][T13528] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 818.933486][T13528] ? bpf_lsm_capable+0x5/0x10 [ 818.938312][T13528] ? security_capable+0x85/0xb0 [ 818.943290][T13528] genl_rcv_msg+0x601/0x790 [ 818.947872][T13528] ? genl_bind+0x360/0x360 [ 818.952306][T13528] ? nl80211_dump_interface+0x560/0x560 [ 818.957916][T13528] netlink_rcv_skb+0x1ef/0x440 [ 818.962768][T13528] ? genl_bind+0x360/0x360 [ 818.967239][T13528] ? netlink_ack+0x1160/0x1160 [ 818.972134][T13528] ? down_read+0x1a8/0x2d0 [ 818.976647][T13528] genl_rcv+0x24/0x40 [ 818.980675][T13528] netlink_unicast+0x7ad/0x920 [ 818.985469][T13528] netlink_sendmsg+0x8ad/0xbd0 [ 818.990291][T13528] ? netlink_getsockopt+0x550/0x550 [ 818.995540][T13528] ? apparmor_socket_sendmsg+0x8a/0x330 [ 819.001164][T13528] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 819.006481][T13528] ? security_socket_sendmsg+0x7c/0xa0 [ 819.012054][T13528] ? netlink_getsockopt+0x550/0x550 [ 819.017311][T13528] ____sys_sendmsg+0x5ed/0x9a0 [ 819.022212][T13528] ? __sys_sendmsg_sock+0x30/0x30 [ 819.027282][T13528] ? __import_iovec+0x306/0x510 [ 819.032261][T13528] ? import_iovec+0x6f/0xa0 [ 819.036792][T13528] ___sys_sendmsg+0x2a2/0x360 [ 819.041510][T13528] ? __sys_sendmsg+0x2a0/0x2a0 [ 819.046359][T13528] __se_sys_sendmsg+0x1c3/0x2b0 [ 819.051234][T13528] ? __x64_sys_sendmsg+0x80/0x80 [ 819.056244][T13528] ? lockdep_hardirqs_on+0x94/0x140 [ 819.061488][T13528] do_syscall_64+0x4c/0xa0 [ 819.065962][T13528] ? clear_bhb_loop+0x60/0xb0 [ 819.070707][T13528] ? clear_bhb_loop+0x60/0xb0 [ 819.075430][T13528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.081345][T13528] RIP: 0033:0x7fa3f879e0d9 [ 819.085808][T13528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.105465][T13528] RSP: 002b:00007fa3f957e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.113937][T13528] RAX: ffffffffffffffda RBX: 00007fa3f8a25fa0 RCX: 00007fa3f879e0d9 [ 819.121961][T13528] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 819.130006][T13528] RBP: 00007fa3f8835024 R08: 0000000000000000 R09: 0000000000000000 [ 819.138014][T13528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.146051][T13528] R13: 00007fa3f8a26038 R14: 00007fa3f8a25fa0 R15: 00007ffed05fcbc8 [ 819.154081][T13528] [ 819.157126][T13528] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 819.164417][T13528] CPU: 0 PID: 13528 Comm: syz.7.2052 Not tainted syzkaller #0 [ 819.171884][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 819.181946][T13528] Call Trace: [ 819.185236][T13528] [ 819.188182][T13528] dump_stack_lvl+0x188/0x24e [ 819.192885][T13528] ? memcpy+0x3c/0x60 [ 819.196972][T13528] ? show_regs_print_info+0x12/0x12 [ 819.202192][T13528] ? load_image+0x410/0x410 [ 819.206739][T13528] panic+0x2d3/0x710 [ 819.210651][T13528] ? bpf_jit_dump+0xd0/0xd0 [ 819.215181][T13528] __warn+0x2f8/0x4f0 [ 819.219174][T13528] ? ieee80211_link_release_channel+0x150/0x180 [ 819.225448][T13528] ? ieee80211_link_release_channel+0x150/0x180 [ 819.231713][T13528] report_bug+0x2ba/0x4f0 [ 819.236086][T13528] ? ieee80211_link_release_channel+0x150/0x180 [ 819.242351][T13528] handle_bug+0x3a/0x70 [ 819.246524][T13528] exc_invalid_op+0x16/0x40 [ 819.251044][T13528] asm_exc_invalid_op+0x16/0x20 [ 819.255924][T13528] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 819.262837][T13528] Code: 7c 2d 00 00 74 08 48 89 df e8 ac 2a 1b f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 d8 80 00 e8 d0 fd c9 f7 <0f> 0b eb c5 48 c7 c1 a4 3f 21 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 819.282484][T13528] RSP: 0018:ffffc90003287250 EFLAGS: 00010287 [ 819.288594][T13528] RAX: ffffffff89b83050 RBX: ffff888054fad5a8 RCX: 0000000000080000 [ 819.296684][T13528] RDX: ffffc90016c7a000 RSI: 00000000000057c4 RDI: 00000000000057c5 [ 819.304673][T13528] RBP: 0000000000000000 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 819.312662][T13528] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff888054faeab0 [ 819.320664][T13528] R13: 1ffff1100a9f5ab5 R14: ffff888054fae228 R15: dffffc0000000000 [ 819.328657][T13528] ? ieee80211_link_release_channel+0x150/0x180 [ 819.334936][T13528] ieee80211_if_change_type+0x205/0xa80 [ 819.340519][T13528] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 819.347249][T13528] ? cfg80211_mlme_purge_registrations+0x1d0/0x200 [ 819.353781][T13528] ieee80211_change_iface+0x58/0x4c0 [ 819.359087][T13528] cfg80211_change_iface+0x786/0xf10 [ 819.364403][T13528] nl80211_set_interface+0x601/0x860 [ 819.369719][T13528] ? nl80211_dump_interface+0x560/0x560 [ 819.375321][T13528] genl_family_rcv_msg_doit+0x22f/0x350 [ 819.380895][T13528] ? end_current_label_crit_section+0x170/0x170 [ 819.387175][T13528] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 819.393088][T13528] ? bpf_lsm_capable+0x5/0x10 [ 819.397779][T13528] ? security_capable+0x85/0xb0 [ 819.402652][T13528] genl_rcv_msg+0x601/0x790 [ 819.407175][T13528] ? genl_bind+0x360/0x360 [ 819.411628][T13528] ? nl80211_dump_interface+0x560/0x560 [ 819.417204][T13528] netlink_rcv_skb+0x1ef/0x440 [ 819.422016][T13528] ? genl_bind+0x360/0x360 [ 819.426463][T13528] ? netlink_ack+0x1160/0x1160 [ 819.431258][T13528] ? down_read+0x1a8/0x2d0 [ 819.435684][T13528] genl_rcv+0x24/0x40 [ 819.439675][T13528] netlink_unicast+0x7ad/0x920 [ 819.444482][T13528] netlink_sendmsg+0x8ad/0xbd0 [ 819.449276][T13528] ? netlink_getsockopt+0x550/0x550 [ 819.454511][T13528] ? apparmor_socket_sendmsg+0x8a/0x330 [ 819.460099][T13528] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 819.465446][T13528] ? security_socket_sendmsg+0x7c/0xa0 [ 819.470974][T13528] ? netlink_getsockopt+0x550/0x550 [ 819.476253][T13528] ____sys_sendmsg+0x5ed/0x9a0 [ 819.481263][T13528] ? __sys_sendmsg_sock+0x30/0x30 [ 819.486318][T13528] ? __import_iovec+0x306/0x510 [ 819.491218][T13528] ? import_iovec+0x6f/0xa0 [ 819.495791][T13528] ___sys_sendmsg+0x2a2/0x360 [ 819.500509][T13528] ? __sys_sendmsg+0x2a0/0x2a0 [ 819.505332][T13528] __se_sys_sendmsg+0x1c3/0x2b0 [ 819.510201][T13528] ? __x64_sys_sendmsg+0x80/0x80 [ 819.515195][T13528] ? lockdep_hardirqs_on+0x94/0x140 [ 819.520404][T13528] do_syscall_64+0x4c/0xa0 [ 819.524841][T13528] ? clear_bhb_loop+0x60/0xb0 [ 819.529535][T13528] ? clear_bhb_loop+0x60/0xb0 [ 819.534232][T13528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.540175][T13528] RIP: 0033:0x7fa3f879e0d9 [ 819.544610][T13528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.564257][T13528] RSP: 002b:00007fa3f957e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.572692][T13528] RAX: ffffffffffffffda RBX: 00007fa3f8a25fa0 RCX: 00007fa3f879e0d9 [ 819.580687][T13528] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 819.588666][T13528] RBP: 00007fa3f8835024 R08: 0000000000000000 R09: 0000000000000000 [ 819.596669][T13528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.604651][T13528] R13: 00007fa3f8a26038 R14: 00007fa3f8a25fa0 R15: 00007ffed05fcbc8 [ 819.612652][T13528] [ 819.616284][T13528] Kernel Offset: disabled [ 819.620772][T13528] Rebooting in 86400 seconds..