last executing test programs: 9m14.738735399s ago: executing program 3 (id=436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 9m14.453019395s ago: executing program 3 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r2, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x2000001, 0x4, 0xc2, 0x53, 0x3d, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x8, 0x2, 0x1}, {0xb, 0xa7f6, 0x8, 0x8, 0x33, 0xff, 0x6, 0x3, 0xd, 0x7, 0x7, 0x6, 0x1}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x9, 0x0, 0xbb, 0x4, 0x1d, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m14.322895438s ago: executing program 3 (id=440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) 9m13.922935627s ago: executing program 3 (id=444): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11c9cd6, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 9m13.676687902s ago: executing program 3 (id=447): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c03400200", 0x1a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 9m13.252846072s ago: executing program 3 (id=448): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 9m12.760909933s ago: executing program 32 (id=448): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 7m45.69005486s ago: executing program 0 (id=1100): r0 = inotify_init() r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 7m45.375882877s ago: executing program 0 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x8}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x800, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x209, 0x3ff, 0x2, 0x6, 0x42, 0xfffc, 0x83, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x54, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x12, 0x6, 0x2, 0x8, 0x2, 0xc, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7, 0x2002, 0x4, 0x4, 0x6, 0xd03, 0x80, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0xa, 0x7, 0xaa, 0x81, 0x2, 0x2, 0x42, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 7m44.972896516s ago: executing program 0 (id=1108): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81) lseek(r2, 0x4, 0x0) getdents64(r2, 0x0, 0x4f) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7m44.77766556s ago: executing program 0 (id=1110): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 7m43.88937247s ago: executing program 0 (id=1119): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ppoll(&(0x7f0000000600)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000540)=""/77, 0x0, 0x70000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7m42.133516439s ago: executing program 0 (id=1128): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 7m41.64666927s ago: executing program 33 (id=1128): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 7m14.035715557s ago: executing program 5 (id=1265): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], 0x50) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) execveat(0xffffffffffffffff, &(0x7f0000000f00)='./file1\x00', &(0x7f00000010c0), 0x0, 0x1000) 7m12.934635532s ago: executing program 5 (id=1273): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) lstat(0x0, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) 7m12.529953921s ago: executing program 5 (id=1275): prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m11.310704478s ago: executing program 5 (id=1280): syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000001540)='./file0\x00', 0x2010c00, &(0x7f00000003c0)=ANY=[], 0x1, 0x150f, &(0x7f0000001c00)="$eJzs3AuYjtXaOPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkWxISQ05JQxJynCTnkBymMWmcz4eckyZbmiQJCUnW/5q+9mfv3f523/7a/8/+9ty/63quWfc8732/9/Pec73v8zzXzHzdc1S9FvVrNyMi8bvAf3xJEULECCGGCSGuEUIEQohK8ZXic/cXUJDy+56E/XM9OOdKd8CuJJ5/3sbzz9t4/nkbzz9v4/nnbTz/vI3nn7fx/BnLy3bMLXYtb3l3+4fu/6//O/v4/v//Qfz5/28kp/zkzzeVv77XP5DC88/beP55G88/b+P55208/7yN5//vr9bf2cfzz9t4/ozlZTtAC/EvcB+atyuzXemfP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecN5f5kWQvxpfaX7YowxxhhjjDHG2D+Pz3+lO2CMMcYYY4wxxtj/fyCkUEKLQOQT+UWMKCBixVUiTlwtCoprRERcK+LFdaKQuF4UFkVEUVFMJIjiooQwAoUVJEJRUpQSUXGDKC1uFIkFcmuWE06UF0niJlFB3CwqiltEJXGrqCxuE1VEVVFNVBe3ixriDlFT1BK1xZ2ijqgr6on64i7RQNwtGop7RCNxr2gs7hNNxP2iqXhANBMPiubiIdFCPCxaikdEK9FatBFtRbv/Uf7zoq94QfQT/UWKGCAGihfFIDFYDBFDxTDxkhguXhYjxCsiVYwUo8SrYrR4TYwRr4uxYpwYL94QE8REMUlMFlPEVJEm3hTTxFtiunhbzBAzxSwxW8wRc8U88Y6YLxaIheJdsUi8JxaLJWKpWCbSxfsiQywXmeIDsUJ8KLLESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBc7xEdip9gldos9Yq/YJ/aLj8UB8Yk4KD4V2eKzfzD/3F/l9wIBAiRI0KAhH+SDGIiBWIiFOIiDglAQIhCBeIiHQlAICkNhKApFIQESoASUAAQEAoKSUBKiEIXSUBoSIRHKQllw4CAJkqAC3AwVoSJUgkpQGSpDFagKVaE6VIcaUANqQk2oDbWhDtSBelAP7oK74G5oCA2hETSCxtAYmkATaApNoRk0g+bQHFpAC2gJLaEVtII20AbaQTtoD+2hA3SATtAJOkNn6AJdIBmSoSt0hW7QDbpDd+gBPaAn9IRe0Bt6w/PwPLwAL0B/qCMHwEAYCINgEAyBoTAUXoLh8DK8DK9AKoyEUfAqvAqvwRg4C2NhHIyH8VBDToRJMBlIToU0SINpMA2mw3SYATNhJsyGOTAX5sE8mA8LYAG8C4vgPXgPlsASWAbpkA4ZsBwyIRNWwDnIgpWwClbDGlgLa2A9bID1sAk2wybYClthO2yHj+Aj2AW7YA/sgX2wDz6Gj+ET+ARSIRuy4RAcgsNwGI7AEciBHDgKR+EYHIPjcBxOwAk4CafgNJyCM3AGzsI5OA/n4QJcgIvwbMKXzfeV2ZgqZC4ttcwn88kYGSNjZayMk3GyoCwoIzIi42W8LCQLycKysCwqi8oEmSBLyBISJUqSoSwpS8qojMrSsrRMlImyrCwrnXQySSbJCrKCrCgrykryVllZ3iaryKqyo6suq8saspOrKWvJ2rK2rCPrynqyvqwvG8gGsqFsKBvJRrKxbCybyPtlUzkAhsCDMncyLeRIaClHQSvZWraRbeVr8KhsL8dAB9lRdpKPy3EwFrrI9i5ZPiW7yknQTf5BToZnZA85FXrK52Qv2Vv2kc/LvrKD6yf7yxkwQA6Us2GQHCyHyKFyPtSVuROrJ1+RqXKkHCVflcvgNTlGvi7HynFyvHxDTpAT5SQ5WU6RU2WafFNOk2/J6fJtOUPOlLPkbDlHzpXz5DtyvlwgF8p35SL5nlwsl8ilcplMl+/LDLlcZsoP5Ar5ocySK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2uV3ukB/JnXKX3C33yL1yn9wvP5YH5CfyoPxUZsvP5CH5R3lYfi6PyC9kjvxSHpVfyWPya3lcfiNPyG/lSXlKnpbfyTPye3lWnpPn5Q/ygvxRXpQ/yUvSS6FASaWUVoHKp/KrGFVAxaqrVJy6WhVU16iIulbFq+tUIXW9KqyKqKKqmEpQxVUJZRQqq0iFqqQqpaLqBlVa3agSVRlVVpVTTpVXSeomVUHdrCqqW1QldauqrG5TVVRVVU1VV7erGuoOVVPVUrXVnaqOqqvqqfrqLtVA3a0aqntUI3WvaqzuU03U/aqpekA1Uw+q5uoh1UI9rFqqR1Qr1Vq1UW1VO/Woaq8eUx1UR9VJPa46qydUF/WkSlZPqa7qadVN/UF1V8+oHupZ1VM9p3qp3qqP+kldUl71U/1VihqgBqoX1SA1WA1RQ9Uw9ZIarl5WI9QrKlWNVKPUq2q0ek2NUa+rsWqcGq/eUBPURDVJTVZT1FSVpt5U09Rbarp6W81QM9UsNVvNUXPVkF8qLfxv5L/1N/JH/Pzs29UO9ZHaqXap3WqP2qv2qf1qvzqgDqiD6qDKVtnqkDqkDqvD6og6onJUjjqqjqpj6pg6ro6rE+qEOqlOqR/Ud+qM+l6dVefUOfWDuqAuqIu/vAZCg5Zaaa0DnU/n1zG6gI7VV+k4fbUuqK/REX2tjtfX6UL6el1YF9FFdTGdoIvrEtpo1FaTDnVJXUpH9Q26tL5RJ+oyuqwup50ur5P0Tb87/7f6a6fb6fa6ve6gO+hOupPurDvrLrqLTtbJuqvuqrvpbrq77q576B66p+6pe+leuo/uo/vqvrqf7qdTdIoeqF/Ug/RgPUQP1cP0S3q4Hq5H6BE6VafqUXqUHq1H6zF6jB6rx+rxeryeoCfoSXqSnqKn6DSdpqfpaXq6nq5n6Bl6lp6l5+g5ep6ep+fr+XqhXqgX6UV6sV6sl+qlOl2n6wydoTN1pl6hV+gsvVKv1Kv1ar1Wr9Xr9Xq9UW/Um/VmvVVv1Vl6h96hd+qderferffqvXq/3q8P6AP6oD6os3W2PqQP6cP6sD6ij+gcnaOP6qP6mD6mj+vj+oQ+oU/qk/q0Pq3P6DP6rD6rz+vz+oK+oC/qi/qSvpR72hfIQAY60EG+IF8QE8QEsUFsEBfEBQWDgkEkiATxQXxQKLg+KBwUCYoGxYKEoHhQIjABBjagIAxKBqWCaHBDUDq4MUgMygRlg3KBC8oHScFNQYXg5qBicEtQKbg1qBzcFlQpIIJqQfXg9qBGcEdQM6gV1A7uDOoEdYN6Qf3grqBBcHfQMLgnaBTcGzQO7guaBPcHTYMHgmbBg0Hz4KGgRfBw0DJ4JGgVtA7aBG2Ddn9dP6j6O+p7f7bIY66f6W9SzAAz0LxoBpnBZogZaoaZl8xw87IZYV4xqWakGWVeNaPNa2aMed2MNePMePOGmWAmmklmsplippo086aZZt4y083bZoaZaWaZ2WaOmWvmmXfMfLPALDTvmkXmPbPYLDFLzTKTbt43GWa5yTQfmBXmQ5NlVppVZrVZY9aadWa92WA2mk1ms9litpptZrvZYT4yO80us9vsMXvNPrPffGwOmE/MQfOpyTafmUPmj+aw+dwcMV+YHPOlOWq+MsfM1+a4+cacMN+ak+aUOW2+M2fM9+asOWfOmx/MBfOjuWh+MpeMzz25z/14R40a82E+jMEYjMVYjMM4LIgFMYIRjMd4LISFsDAWxqJYFBMwAUtgCcxFSFgSS2IUo1gaS2MiJmJZLIsOHSZhElbAClgRK2IlrISVsTJWwSpYDavh7Xg73oF3YC2shXfinVgX62J9rI8NsAE2xIbYCBthY2yMTbAJNsWm2AybYXNsji2wBbbEltgKW2EbbIPtsB22x/bYATtgJ+yEnbEzdsEumIzJ2BW7Yjfsht2xO/bAHtgTe2Iv7IV9sA/2xb7YD/thCqbgQByIg3AQDsEhOAyH4XAcjiNwBKZiKo7CUTgaR+MYHINjcRyOxzdwAk7ESTgZp+BUTMM0nIbTcDpOxxk4A2fhLJyDc3AezsP5OB8X4kJchItwMS7GpbgU0zEdMzADMzETV+AKzMIsXIWrcA2uwXW4DjfgBtyEm3ALbsFtuA134A7ciTtxN+7GvbgX9+N+PIAH8CAexGzMxkN4CA/jYTyCRzAHc/AoHsVjeAyP43E8gSfwJJ7E03gaz+AZPItn8Tyexwv4I17En/ASeoyxUsTaq2ycvdoWtNfYGFvA/nlc1BazCba4LWGNLWyL/EWM1tpEW8aWteWss+Vtkr3pV3EVW9VWs9Xt7baGvcPW/FXcwN5tG9p7bCN7r61v7/qLuLG9zzaxD9um9hHbzLa2zW1b28I+bFvaR2wr29q2sW1tZ/uE7WKftMn2KdvVPv2rOMMutxvsRrvJbrYH7Cf2vP3BHrNf2wv2R9vP9rfD7Et2uH3ZjrCv2FQ78lfxePuGnWAn2kl2sp1ip/4qnmVn2zl2rp1n37Hz7YJfxen2fbvIZtrFdoldapf9HOf2lGk/sCvshzbLrrSr7Gq7xq616+z6/+x1td1qt9ntdr/92O60u+xuu8futft+jnOP46D91Gbbz+xR+5U9bD+3R+xxm2O//DnOPb7j9ht7wn5rT9pT9rT9zp6x39uz9tzPx5977N/Zn+wl660gIEmKNAWUj/JTDBWgWLqK4uhqKkjXUISupXi6jgrR9VSYilBRKkYJVJxKkCEkS0QhlaRSFKUbqDTdSIlUhspSOXJUnpLoJqpAN1NFuoUq0a1UmW6jKlSVqlF1up1q0B1Uk2pRbbqT6lBdqkf16S5qQHdTQ7qHGtG91JjuoyZ0PzWlB6gZPUjN6SFqQQ9TS3qEWlFrakNtqR09Su3pMepAHakT5fvlXseTlExPUVd6mrr96fce6FnqSc9RL+pNfeh56ksvUD/qTyk0gAbSizSIBtMQGkrD6CUaTi/TCHqFUmkkjaJXaTS9RmPodRpL42g8vUETaCJNosk0haZSGr1J0+gtmk5v0wyaSbNoNs2huTSP3qH5tIAW0ru0iN6jxbSEltIySqf3KYOWUyZ9QCvoQ8qilbSKVtMaWkvraD1toI20iTbTFtpK22g77aCPaCftot20h/bSPtpPH9MB+oQO0qeUTZ/RIfojHabP6Qh9QTn0JR2lr+gYfU3H6Rs6Qd/SSTpFp+k7OkPf01k6R+fpB7pAP9JF+okukScRQihDFeowCPOF+cOYsEAYG14VxuW+lOE1YSS8NowPrwsLhdeHhcMiYdGwWJgQFg9LhCbE0IYUhmHJsFQYDW8IS4c3holhmbBsWC50YfkwKbwprBDeHFYMbwkrhbeGlcPbwiph1fDhe6uHt4c1wjvCmmGtsHZ4Z1gnrBvWC+uHd4UNwrvDhuE9YaPw3rBieF/YJLw/bBo+EDYLHwybhw+FLcKHw5bhI2GrsHXYJmwbtgsfDduHj4Udwo5hp/DxsHP4RNglfDJMDp8Ku4ZP/+b+lHBAODB8MXwx9P4etTS6LJoefT+aEV0ezYx+EF0R/TCaFV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3RbdHvW+fn7hwEmnnHaBy+fyuxhXwMW6q1ycu9oVdNe4iLvWxbvrXCF3vSvsiriirphLcMVdCWccOuvIha6kK+Wi7gZX2t3oEl0ZV9aVc86Vd0murWvn2rn27jHXwXV0ndzj7nH3hHvCPemedE+5ru5p1839wXV3z7ge7ln3rHvO9XK9XR/3vOvrXnD9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLzXFz3Dw3z813891Ct9AtSlzkFrvFbqlb6tJdustwGS7TZboVboXLcllulVvl1rg1bp1b5za4DW6T2+S2uC1um9vmdrgdbqfb6Xa73W6v2+v2u/3ugDvgDrqDLttlu0PukDvsDrsj7guX4750R91X7pj72h1337gT7lt30p1yp9137oz73p1159x594O74H50F91P7pLzLi3yZmRa5K3I9MjbkRmRmZFZ8Mu7QuSdyPzIgsjCyLuRRZH3IosjSyJLI8si6ZH3IxmR5ZHMyAeRFZEPI1mRlZFVkdWRNZG1Ee+L7wx9SV/KR/0NvrS/0Sf6Mr6sL+edL++T/E2+gr/ZV/S3+Er+Vl/Z3+ar+Kq+mn/Et/KtfRvf1rfzj/r2/jHfwXf0nfzjvrN/wnfxT/pk/5Tv6p/23fwffHf/jO/hn/U9/XO+l+/t+/jnfV//gu/n+/sUP8AP9C/6QX6wH+KH+mH+JT/cv+xH+Fd8qh/pR/lX/Wj/mh/jX/dj/Tg/3r/hJ/iJfpKf7Kf4qT7Nv+mn+bf8dP+2n+Fn+ll+tp/j5/p5/h0/3y/wC/27fpF/zy/2S/xSv8yn+/d9hl/uM/0HfoX/0Gf5lX6VX+3X+LV+nV/vN/iNfpPf7Lf4rX6b3+53+I/8Tr/L7/Z7/F6/z+/3H/sD/hN/0H/qs/1n/pD/oz/sP/dH/Bc+x3/pj/qv/DH/tT/uv/En/Lf+pD/lT/vv/Bn/vT/rz/nz/gd/wf/oL/qf/CX+mzXGGGOMsf8W9Rv7B/yN78lftlwDhRBX7yqW89c1txT+j/VgmdA5IoR4qn/PB/+01amTkpLyy2OzlAhKLck9476c//PV+i/xStFJPCGSRUdR4W/2N1j2vkC/UT96qxCx/9m5EDHiT/Gf17/5v6j/6OPjMyqH5+P/Tv0lQiSWupxTQFyOL9ev+F/UL9L+N/ov8HmaEB3+LCdOXI4v108Sj4mnRfJfPPJnBf/mEzPGGGOMMcYYy1MGy2rdf+v6Off6PEFfzskvLse/dX3OGGOMMcYYY4yxK++Z3n2efDQ5uWP3//uLQPxLtMGLy4uUf402ePE/WFzpdybGGGOMMcbYP9vlk/4r3QljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZZ3/W/8O7ErfYyMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfb/AgAA///6QTKO") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000040)) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 7m10.755857531s ago: executing program 5 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)={0x18c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x148, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x4, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x20044010, 0x0, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES32], 0x0) 7m9.432443s ago: executing program 5 (id=1293): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) recvmmsg(r1, &(0x7f000000a340)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xce}], 0x2, 0x30140, 0x0) 7m8.909280642s ago: executing program 34 (id=1293): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) recvmmsg(r1, &(0x7f000000a340)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xce}], 0x2, 0x30140, 0x0) 2m31.614028302s ago: executing program 7 (id=2412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) fanotify_mark(0xffffffffffffffff, 0x2d, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x804}, 0x200, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m30.214068513s ago: executing program 7 (id=2418): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m29.799315483s ago: executing program 7 (id=2421): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000013c0)='cmdline\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) read$FUSE(r1, &(0x7f0000001400)={0x2020}, 0x2020) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x8, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x60, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m25.216856086s ago: executing program 7 (id=2436): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m23.646387491s ago: executing program 7 (id=2439): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000180), 0x53c, 0xc0b00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000240)={0x3, 0xb400, 0xfffffffffffffff1, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000007, 0xb06c}, 0x0, 0x0) 2m21.762706304s ago: executing program 7 (id=2445): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000001c0)={0x5, 0x7, 0xeeef0000, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000001) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 2m5.945524072s ago: executing program 35 (id=2445): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000001c0)={0x5, 0x7, 0xeeef0000, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000001) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 20.731080201s ago: executing program 4 (id=2737): r0 = io_uring_setup(0x136a, &(0x7f0000000400)={0x0, 0x1f8e, 0x0, 0x3, 0x40000289}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000140)={0xce, 0x0, r5}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xb14}) close_range(r0, 0xffffffffffffffff, 0x0) 19.143093738s ago: executing program 1 (id=2738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 19.115585798s ago: executing program 4 (id=2739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 17.945342085s ago: executing program 1 (id=2741): gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2b, 0x80801, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 16.891260318s ago: executing program 4 (id=2745): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 13.814332748s ago: executing program 1 (id=2751): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 11.222937426s ago: executing program 1 (id=2757): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") creat(0x0, 0x132) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x7ff, 0x28, 0xe50, 0x81, 0x4, 0xfffd, 0x4100, 0x1000, 0x27fe, 0x4800, 0x101, 0x8002}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) 10.905666944s ago: executing program 4 (id=2759): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xab46c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000001e40)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 9.403063678s ago: executing program 4 (id=2761): getgroups(0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x1000000}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xffffff00, 0xff, 0xff], 0x4e22, 0x4e23, 0x4e22, 0x4e20, 0x8, 0x6, 0x50b5, 0x4, 0x4}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2dd) 9.112702674s ago: executing program 6 (id=2762): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 8.980577607s ago: executing program 2 (id=2764): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) 8.934909398s ago: executing program 8 (id=2765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 8.647187835s ago: executing program 1 (id=2766): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 7.54794072s ago: executing program 4 (id=2767): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 7.156672759s ago: executing program 6 (id=2768): socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) memfd_create(0x0, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x38}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) 7.155995539s ago: executing program 2 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000004bb0000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.774274757s ago: executing program 8 (id=2770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r6, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x804) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 6.457631364s ago: executing program 2 (id=2771): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x37, 0x4) r1 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 6.129169041s ago: executing program 8 (id=2772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x2}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x4000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x108, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0x1, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.984926245s ago: executing program 2 (id=2773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xf5ff, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) 5.961519026s ago: executing program 6 (id=2774): getdents(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380), 0x34000, 0x0) 2.689292479s ago: executing program 2 (id=2775): fallocate(0xffffffffffffffff, 0x6f, 0x1, 0x8) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) setgroups(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0xa, 0xffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902"], 0x0) r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0xa63f, 0x400, 0x201, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006"], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0x4d, r4, 0x10, {0xef, 0x1f}, 0x81}, 0x1) 2.547666273s ago: executing program 6 (id=2776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 2.464610655s ago: executing program 8 (id=2777): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000600)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="c000000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414bb0c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000004005c00068008000200e000000114000400ff010000000000000000000000000001140005e0fb0100000000000000000000000000010c000380060002004e23000014000400fe880000000000000000000000000101080001"], 0xc0}}, 0x0) 1.402733309s ago: executing program 6 (id=2778): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.385318549s ago: executing program 8 (id=2779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@ipv4_newnexthop={0x1c, 0x68, 0x5, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 891.71186ms ago: executing program 2 (id=2780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001c00)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 163.781827ms ago: executing program 8 (id=2781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000520099b1"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x200}], 0x2, 0x10022, 0x0) 109.177448ms ago: executing program 1 (id=2782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=2783): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) write$tun(r3, 0x0, 0x3db) accept4(r0, 0x0, 0x0, 0x80000) kernel console output (not intermixed with test programs): rt 1(bridge_slave_0) entered forwarding state [ 248.984960][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.000074][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.018455][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.027217][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.034428][ T6187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.086701][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.104866][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.139009][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.174630][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.207690][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.228532][ T5915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.245315][ T5915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.292320][ T5915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.321221][ T5915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.345989][ T5915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.358855][ T5915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.384689][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.795811][ T4320] kernel write not supported for file bpf-prog (pid: 4320 comm: kworker/1:6) [ 250.303745][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.321794][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.376520][ T7736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.745343][ T8026] loop4: detected capacity change from 0 to 1024 [ 251.639029][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 251.690378][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 251.889815][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.919468][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.993691][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.017772][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.038932][ T26] audit: type=1326 audit(1784218246.062:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.1.1202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f317899de59 code=0x0 [ 252.066760][ T7736] device veth0_vlan entered promiscuous mode [ 252.094453][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.114870][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.162049][ T8061] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 252.181618][ T8061] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 252.205753][ T8061] bond1: (slave xfrm1): making interface the new active one [ 252.224126][ T8061] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 252.256778][ T7736] device veth1_vlan entered promiscuous mode [ 252.302721][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.320513][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.348435][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.362860][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.383970][ T7736] device veth0_macvtap entered promiscuous mode [ 252.396058][ T7736] device veth1_macvtap entered promiscuous mode [ 252.446445][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.473040][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.491517][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.509780][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.530296][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.557477][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.582318][ T7736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.643772][ T26] audit: type=1326 audit(1784218246.662:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.5.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64adb9de59 code=0x7ffc0000 [ 252.687574][ T26] audit: type=1326 audit(1784218246.692:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.5.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f64adb9de59 code=0x7ffc0000 [ 252.721273][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.748258][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.768887][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.806931][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.815714][ T26] audit: type=1326 audit(1784218246.692:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.5.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64adb9de59 code=0x7ffc0000 [ 252.851082][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.872007][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.891037][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.902703][ T26] audit: type=1326 audit(1784218246.692:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.5.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f64adb9de59 code=0x7ffc0000 [ 252.962261][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.989781][ T26] audit: type=1326 audit(1784218246.692:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.5.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64adb9de59 code=0x7ffc0000 [ 253.006463][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.075305][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.103901][ T26] audit: type=1326 audit(1784218246.692:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.5.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64adb9de59 code=0x7ffc0000 [ 253.136727][ T7736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.168145][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.194916][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.228309][ T26] audit: type=1326 audit(1784218246.692:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.5.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64adb9de59 code=0x7ffc0000 [ 253.299342][ T26] audit: type=1326 audit(1784218246.692:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.5.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64adb9de59 code=0x7ffc0000 [ 253.346172][ T26] audit: type=1326 audit(1784218246.692:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.5.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64adb9de59 code=0x7ffc0000 [ 255.408054][ T8079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.474360][ T8079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.748918][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.755407][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.397378][ T8123] loop4: detected capacity change from 0 to 32768 [ 256.509416][ T8123] XFS (loop4): Mounting V5 Filesystem [ 256.578272][ T8123] XFS (loop4): Ending clean mount [ 256.650726][ T8079] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.661024][ T8079] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.670336][ T8079] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.679966][ T8079] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.710616][ T7736] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.733642][ T7736] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.752656][ T7736] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.771780][ T7736] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.983729][ T8134] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1221'. [ 257.056419][ T6191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.074468][ T6191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.104588][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.177869][ T7991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.219138][ T7991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.253235][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.294641][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 257.294655][ T26] audit: type=1326 audit(1784218251.313:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6935d9de59 code=0x0 [ 257.766292][ T8123] syz.4.1220 (8123): drop_caches: 2 [ 257.873464][ T8123] syz.4.1220 (8123) used greatest stack depth: 20432 bytes left [ 257.916960][ T4271] XFS (loop4): Unmounting Filesystem [ 259.160222][ T8188] loop5: detected capacity change from 0 to 256 [ 259.400938][ T8188] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 259.656439][ T8188] loop5: detected capacity change from 256 to 1 [ 259.696639][ T8200] syz.5.1235: attempt to access beyond end of device [ 259.696639][ T8200] loop5: rw=2049, sector=160, nr_sectors = 1 limit=1 [ 259.773889][ T8200] Buffer I/O error on dev loop5, logical block 160, lost sync page write [ 259.816512][ T8200] syz.5.1235: attempt to access beyond end of device [ 259.816512][ T8200] loop5: rw=0, sector=160, nr_sectors = 1 limit=1 [ 259.859297][ T8206] loop6: detected capacity change from 0 to 256 [ 259.874456][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1241'. [ 259.886726][ T8206] exfat: Deprecated parameter 'utf8' [ 259.894178][ T8206] exfat: Deprecated parameter 'namecase' [ 259.957767][ T8206] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0232f1a3, utbl_chksum : 0xe619d30d) [ 260.349544][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 260.576346][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 260.583624][ T7] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 260.616220][ T7] usb 3-1: config 0 has no interface number 0 [ 260.665435][ T7] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 260.698552][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.731128][ T7] usb 3-1: Product: syz [ 260.735373][ T7] usb 3-1: Manufacturer: syz [ 260.766558][ T7] usb 3-1: SerialNumber: syz [ 260.800188][ T7] usb 3-1: config 0 descriptor?? [ 260.818922][ T7] smsc95xx v2.0.0 [ 260.829798][ T8228] loop5: detected capacity change from 0 to 2048 [ 260.947809][ T8228] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 261.147480][ T8242] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1246: corrupted inode contents [ 261.202329][ T8242] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1246: corrupted inode contents [ 261.224861][ T7] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 261.255669][ T8242] EXT4-fs error (device loop5): ext4_try_add_inline_entry:1372: inode #12: comm syz.5.1246: mark_inode_dirty error [ 261.258183][ T7] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.575376][ T5633] EXT4-fs (loop5): unmounting filesystem. [ 262.566322][ T7] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 262.628060][ T7] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 262.686105][ T7] usb 3-1: USB disconnect, device number 4 [ 263.669837][ T8284] tipc: Started in network mode [ 263.674826][ T8284] tipc: Node identity ac14140f, cluster identity 4711 [ 263.731957][ T8284] gre0: MTU too low for tipc bearer [ 263.746608][ T8284] tipc: Enabling of bearer rejected, failed to enable media [ 263.889520][ T8276] loop4: detected capacity change from 0 to 8192 [ 264.757181][ T8327] device bridge2 entered promiscuous mode [ 265.006300][ T8330] loop2: detected capacity change from 0 to 512 [ 265.099676][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 266.025707][ T8355] loop5: detected capacity change from 0 to 128 [ 266.194611][ T8359] syz.5.1275: attempt to access beyond end of device [ 266.194611][ T8359] loop5: rw=2049, sector=145, nr_sectors = 360 limit=128 [ 266.385666][ T8355] syz.5.1275: attempt to access beyond end of device [ 266.385666][ T8355] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 266.481207][ T8355] syz.5.1275: attempt to access beyond end of device [ 266.481207][ T8355] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 266.574067][ T8355] syz.5.1275: attempt to access beyond end of device [ 266.574067][ T8355] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 266.607580][ T8355] syz.5.1275: attempt to access beyond end of device [ 266.607580][ T8355] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 266.645620][ T8355] syz.5.1275: attempt to access beyond end of device [ 266.645620][ T8355] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 266.666004][ T26] audit: type=1326 audit(1784218260.694:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.1278" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ddc79de59 code=0x0 [ 266.709223][ T8355] syz.5.1275: attempt to access beyond end of device [ 266.709223][ T8355] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 266.769449][ T8355] syz.5.1275: attempt to access beyond end of device [ 266.769449][ T8355] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 266.827198][ T8355] syz.5.1275: attempt to access beyond end of device [ 266.827198][ T8355] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 266.938048][ T8357] loop6: detected capacity change from 0 to 32768 [ 267.140629][ T8357] XFS (loop6): Mounting V5 Filesystem [ 267.224594][ T8357] XFS (loop6): Ending clean mount [ 267.257995][ T8389] loop5: detected capacity change from 0 to 256 [ 267.281129][ T8389] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 267.517848][ T8394] loop2: detected capacity change from 0 to 512 [ 267.586808][ T4285] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 267.595590][ T4285] Bluetooth: hci0: Injecting HCI hardware error event [ 267.606567][ T4290] Bluetooth: hci0: hardware error 0x00 [ 267.993277][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 268.264383][ T8357] syz.6.1276 (8357): drop_caches: 2 [ 268.333665][ T8394] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1281: iget: bad i_size value: 38620345925642 [ 268.350310][ T7736] XFS (loop6): Unmounting Filesystem [ 268.356338][ T8394] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1281: couldn't read orphan inode 15 (err -117) [ 268.370276][ T8394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 268.604542][ T4355] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:8: bg 0: block 5: invalid block bitmap [ 268.645460][ T4355] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 268.665301][ T4355] EXT4-fs (loop2): This should not happen!! Data will be lost [ 268.665301][ T4355] [ 268.675047][ T4355] EXT4-fs (loop2): Total free blocks count 0 [ 268.719847][ T4355] EXT4-fs (loop2): Free/Dirty block details [ 268.729047][ T4355] EXT4-fs (loop2): free_blocks=0 [ 268.734077][ T4355] EXT4-fs (loop2): dirty_blocks=1 [ 268.805883][ T4355] EXT4-fs (loop2): Block reservation details [ 268.811970][ T4355] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 268.837163][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 269.231017][ T8422] loop6: detected capacity change from 0 to 512 [ 269.297463][ T8422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.322920][ T8422] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1290: iget: bad i_size value: 38620345925642 [ 269.355624][ T8422] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1290: couldn't read orphan inode 15 (err -117) [ 269.375681][ T8422] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 269.593543][ T8431] overlayfs: failed to clone upperpath [ 269.634682][ T8431] overlayfs: failed to clone upperpath [ 269.745401][ T4290] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 269.815245][ T28] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 269.880986][ T28] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 780 with error 28 [ 269.911894][ T28] EXT4-fs (loop6): This should not happen!! Data will be lost [ 269.911894][ T28] [ 269.932302][ T28] EXT4-fs (loop6): Total free blocks count 0 [ 269.958990][ T28] EXT4-fs (loop6): Free/Dirty block details [ 269.985233][ T28] EXT4-fs (loop6): free_blocks=0 [ 269.995018][ T28] EXT4-fs (loop6): dirty_blocks=986 [ 270.000345][ T28] EXT4-fs (loop6): Block reservation details [ 270.035362][ T28] EXT4-fs (loop6): i_reserved_data_blocks=784 [ 270.104672][ T28] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 202 with error 28 [ 270.206102][ T8441] overlayfs: failed to clone upperpath [ 270.234498][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 270.243665][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.256020][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.265939][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.273964][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.296741][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.304348][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.591092][ T8444] chnl_net:caif_netlink_parms(): no params data found [ 270.919702][ T8444] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.945581][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.970002][ T8444] device bridge_slave_0 entered promiscuous mode [ 270.988233][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.003182][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.011756][ T8444] device bridge_slave_1 entered promiscuous mode [ 271.101901][ T8444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.185783][ T8444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.298542][ T8444] team0: Port device team_slave_0 added [ 271.349667][ T8444] team0: Port device team_slave_1 added [ 271.444672][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.474307][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.540825][ T8444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.682197][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.691601][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.788559][ T8444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.938553][ T8444] device hsr_slave_0 entered promiscuous mode [ 272.003789][ T8444] device hsr_slave_1 entered promiscuous mode [ 272.056519][ T8444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.064162][ T8444] Cannot create hsr debugfs directory [ 272.385476][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 272.676611][ T8508] kvm: pic: level sensitive irq not supported [ 272.676813][ T8508] kvm: pic: non byte read [ 272.702870][ T8511] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000006 [ 272.765725][ T8508] kvm: pic: level sensitive irq not supported [ 272.765798][ T8508] kvm: pic: non byte read [ 272.780875][ T8444] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 272.854165][ T8444] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 272.906235][ T8444] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 272.974805][ T8444] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 273.203202][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.242929][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.257807][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.318468][ T8444] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.347638][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.386425][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.415815][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.422941][ T6191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.463669][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.514287][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.536642][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.566347][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.573622][ T7991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.653744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.674817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.747606][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.770060][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.830741][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.877504][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.958212][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.017904][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.046599][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.078685][ T8444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.109365][ T8444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.133911][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.149743][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.179076][ T8537] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1330'. [ 274.194804][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1330'. [ 274.465273][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 274.817071][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.829554][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.854433][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.083863][ T8553] loop4: detected capacity change from 0 to 16 [ 275.128135][ T8553] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 275.202898][ T26] audit: type=1326 audit(1784218525.225:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.4.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ddc79de59 code=0x7ffc0000 [ 275.295036][ T26] audit: type=1326 audit(1784218525.225:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.4.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ddc79de59 code=0x7ffc0000 [ 275.385156][ T26] audit: type=1326 audit(1784218525.225:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.4.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ddc79de59 code=0x7ffc0000 [ 275.471522][ T26] audit: type=1326 audit(1784218525.225:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.4.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f1ddc79de59 code=0x7ffc0000 [ 275.537011][ T26] audit: type=1326 audit(1784218525.225:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.4.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ddc79de59 code=0x7ffc0000 [ 275.615142][ T26] audit: type=1326 audit(1784218525.225:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.4.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1ddc79de59 code=0x7ffc0000 [ 275.670140][ T26] audit: type=1326 audit(1784218525.255:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.4.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1ddc79de59 code=0x7ffc0000 [ 276.230099][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.246841][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.366362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.385848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.428449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.455602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.504210][ T8444] device veth0_vlan entered promiscuous mode [ 276.545015][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 276.565705][ T8444] device veth1_vlan entered promiscuous mode [ 276.593195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.626815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.666103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.707991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.740671][ T8444] device veth0_macvtap entered promiscuous mode [ 276.770116][ T8586] device vlan2 entered promiscuous mode [ 276.790814][ T8586] device syz_tun entered promiscuous mode [ 276.833701][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 276.954026][ T8444] device veth1_macvtap entered promiscuous mode [ 277.033406][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.053036][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.081051][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.093039][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.113989][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.128060][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.151411][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.176112][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.189158][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.227640][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.281769][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.317144][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.332999][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.376259][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.405115][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.435368][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.475181][ T4319] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 277.498006][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.526724][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.554131][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.573608][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.591929][ T8444] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.612738][ T8444] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.645163][ T8444] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.653948][ T8444] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.673018][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.700216][ T4319] usb 3-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 277.760150][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.837594][ T4319] usb 3-1: config 0 descriptor?? [ 277.888349][ T4319] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 277.941274][ T8614] loop6: detected capacity change from 0 to 512 [ 277.951644][ T4995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.965108][ T4995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.048266][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.094592][ T7989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.108643][ T7989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.131800][ T4319] usb 3-1: USB disconnect, device number 5 [ 278.173505][ T8614] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 278.213406][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.256114][ T8614] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.267112][ T8626] IPv6: Can't replace route, no match found [ 278.617539][ T7736] EXT4-fs (loop6): unmounting filesystem. [ 278.626648][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 278.963880][ T8648] loop2: detected capacity change from 0 to 256 [ 279.059416][ T26] audit: type=1800 audit(1784218529.085:103): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1362" name="file2" dev="loop2" ino=1048622 res=0 errno=0 [ 280.125051][ T7] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 280.321150][ T7] usb 8-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.380406][ T7] usb 8-1: config 1 interface 0 has no altsetting 0 [ 280.408003][ T7] usb 8-1: string descriptor 0 read error: -22 [ 280.419585][ T7] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.438232][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.637643][ T8695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1375'. [ 280.882068][ T7] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 280.935283][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:0926:3333.0002/input/input10 [ 281.398749][ T8708] netlink: 'syz.6.1378': attribute type 1 has an invalid length. [ 281.498142][ T8708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.507029][ T8710] bond1: Error: No native XDP support for the current bonding mode [ 281.756249][ T7] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 281.845446][ T7] usb 8-1: USB disconnect, device number 2 [ 282.194563][ T8720] fido_id[8720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 283.432064][ T26] audit: type=1326 audit(1784218533.455:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 283.471051][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.506047][ T26] audit: type=1326 audit(1784218533.455:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 283.576512][ T8761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.608035][ T8761] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.621663][ T26] audit: type=1326 audit(1784218533.455:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 283.648299][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 283.676889][ T8761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.718164][ T26] audit: type=1326 audit(1784218533.455:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 283.820098][ T26] audit: type=1326 audit(1784218533.455:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 283.935873][ T26] audit: type=1326 audit(1784218533.455:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 284.037285][ T26] audit: type=1326 audit(1784218533.455:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 284.132086][ T26] audit: type=1326 audit(1784218533.455:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 284.220998][ T26] audit: type=1326 audit(1784218533.455:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 284.391901][ T26] audit: type=1326 audit(1784218533.455:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ece997bd7 code=0x7ffc0000 [ 285.531200][ T8793] loop7: detected capacity change from 0 to 512 [ 285.713992][ T8793] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 285.773581][ T8793] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.666996][ T8444] EXT4-fs (loop7): unmounting filesystem. [ 286.822910][ T8838] loop7: detected capacity change from 0 to 512 [ 286.870416][ T8838] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 286.885152][ T4340] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 286.902277][ T8838] FAT-fs (loop7): Filesystem has been set read-only [ 287.075044][ T4340] usb 5-1: Using ep0 maxpacket: 32 [ 287.094540][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.136565][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.197281][ T4340] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 287.232266][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.289098][ T4340] usb 5-1: config 0 descriptor?? [ 287.737007][ T4340] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 287.774568][ T4340] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 287.824813][ T4340] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 287.965915][ T4340] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 288.014716][ T8858] loop2: detected capacity change from 0 to 1024 [ 288.370326][ T4340] ft260 0003:0403:6030.0003: failed to retrieve status: -32 [ 288.646368][ T8834] i2c i2c-1: adapter quirk: comb msg only to same addr (addr 0x05d6, size 0, write) [ 288.689142][ T4318] usb 5-1: USB disconnect, device number 5 [ 288.706989][ T8876] fido_id[8876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0403:6030.0003/report_descriptor': No such file or directory [ 290.088457][ T8916] loop6: detected capacity change from 0 to 512 [ 290.136862][ T8916] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.195939][ T8916] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 290.245523][ T8916] EXT4-fs (loop6): orphan cleanup on readonly fs [ 290.263869][ T8916] __quota_error: 303 callbacks suppressed [ 290.263888][ T8916] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 290.282841][ T8916] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 290.299172][ T8916] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 290.311855][ T8916] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 290.336048][ T8916] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.1433: corrupted inode contents [ 290.352101][ T8916] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.1433: mark_inode_dirty error [ 290.375680][ T8916] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.1433: corrupted inode contents [ 290.422276][ T8916] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.1433: mark_inode_dirty error [ 290.500821][ T8916] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.1433: corrupted inode contents [ 290.551407][ T8916] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 290.574353][ T8916] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.1433: corrupted inode contents [ 290.630177][ T8916] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.1433: mark_inode_dirty error [ 290.681214][ T8916] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 290.722452][ T8935] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 290.731687][ T8916] EXT4-fs (loop6): 1 truncate cleaned up [ 290.746682][ T8916] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 290.962369][ T7736] EXT4-fs (loop6): unmounting filesystem. [ 291.169325][ T8944] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 291.736169][ T8969] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 293.652865][ T9023] loop6: detected capacity change from 0 to 512 [ 293.709746][ T9023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.833517][ T9023] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 293.848140][ T9023] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.915913][ T6180] wlan1: Trigger new scan to find an IBSS to join [ 294.011263][ T9037] tipc: Failed to remove unknown binding: 66,0,0/0:2437109987/2437109988 [ 294.283238][ T7736] EXT4-fs (loop6): unmounting filesystem. [ 294.869514][ T9056] xt_hashlimit: size too large, truncated to 1048576 [ 298.208156][ T9095] loop6: detected capacity change from 0 to 512 [ 298.297783][ T9095] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1487: inode has both inline data and extents flags [ 298.373572][ T9101] binder: 9100:9101 ioctl c0306201 200000000080 returned -14 [ 298.386136][ T9101] binder: 9100:9101 ioctl c0306201 2000000003c0 returned -14 [ 298.403689][ T9095] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1487: couldn't read orphan inode 15 (err -117) [ 298.425940][ T9095] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 298.611897][ T7736] EXT4-fs (loop6): unmounting filesystem. [ 298.884482][ T8818] wlan1: Trigger new scan to find an IBSS to join [ 300.124643][ T4997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.284985][ C0] sched: RT throttling activated [ 304.135866][ T9136] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 304.215864][ T9136] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.268116][ T7] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 304.305402][ T7] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 304.315995][ T9136] bond2: (slave gretap1): making interface the new active one [ 304.359133][ T9136] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 304.435544][ T8817] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 304.586877][ T9136] syz.1.1502 (9136) used greatest stack depth: 18128 bytes left [ 304.648353][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 304.795423][ T8817] bond0: (slave bond_slave_0): interface is now down [ 304.808720][ T8817] bond0: (slave bond_slave_1): interface is now down [ 304.845178][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 304.852531][ T7] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 64 [ 304.903345][ T7] usb 3-1: config 1 interface 0 has no altsetting 0 [ 304.916578][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 304.955854][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.975808][ T7] usb 3-1: Product: syz [ 304.980062][ T7] usb 3-1: Manufacturer: syz [ 305.015552][ T7] usb 3-1: SerialNumber: syz [ 305.049000][ T9139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.096121][ T9157] device batadv_slave_1 entered promiscuous mode [ 305.122535][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1509'. [ 305.142427][ T9157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.416757][ T7] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 305.447032][ T9157] device batadv_slave_1 left promiscuous mode [ 305.454663][ T9157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.465489][ T7] usb 3-1: USB disconnect, device number 6 [ 305.507885][ T4509] udevd[4509]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 305.532774][ T7] usblp0: removed [ 305.557982][ T4509] udevd[4509]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 306.372599][ T9174] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 306.430354][ T9170] loop6: detected capacity change from 0 to 1024 [ 306.546223][ T9170] hfsplus: failed to load root directory [ 306.732788][ T9179] xt_hashlimit: size too large, truncated to 1048576 [ 307.407783][ T4340] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 307.580485][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1524'. [ 307.595203][ T4340] usb 5-1: Using ep0 maxpacket: 16 [ 307.602487][ T4340] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 307.621981][ T9199] netlink: 'syz.6.1524': attribute type 30 has an invalid length. [ 307.630423][ T4340] usb 5-1: config 0 has no interface number 0 [ 307.647000][ T4340] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 307.666715][ T9199] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.675880][ T9199] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.684639][ T9199] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.693472][ T9199] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.705259][ T4340] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 307.733338][ T4340] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 307.744319][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1524'. [ 307.753499][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.773227][ T4340] usb 5-1: Product: syz [ 307.781324][ T9202] netlink: 'syz.6.1524': attribute type 30 has an invalid length. [ 307.795067][ T4340] usb 5-1: Manufacturer: syz [ 307.799773][ T4340] usb 5-1: SerialNumber: syz [ 307.832344][ T4340] usb 5-1: config 0 descriptor?? [ 307.857102][ T9191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.864447][ T9191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.124676][ T9191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.142305][ T9191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.366529][ T4340] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 308.874369][ T9221] device bridge1 entered promiscuous mode [ 309.270694][ T9230] loop2: detected capacity change from 0 to 256 [ 309.301789][ T9230] exfat: Deprecated parameter 'utf8' [ 309.991405][ T4340] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 310.012447][ T4340] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 310.027927][ T9243] loop2: detected capacity change from 0 to 512 [ 310.044071][ T4340] asix: probe of 5-1:0.34 failed with error -71 [ 310.085684][ T9243] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 310.088359][ T4340] usb 5-1: USB disconnect, device number 6 [ 310.140882][ T9243] EXT4-fs (loop2): 1 truncate cleaned up [ 310.155230][ T9243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 310.237408][ T26] audit: type=1804 audit(1784218560.265:417): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1539" name="/newroot/317/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 310.794367][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1541'. [ 311.121055][ T9255] loop4: detected capacity change from 0 to 4096 [ 311.494166][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 311.913367][ T26] audit: type=1326 audit(1784218561.935:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.7.1549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1a959de59 code=0x0 [ 312.049854][ T26] audit: type=1326 audit(1784218561.945:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.7.1549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fa1a9597bd7 code=0x0 [ 312.153048][ T26] audit: type=1326 audit(1784218561.945:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.7.1549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1a959de59 code=0x0 [ 312.284146][ T26] audit: type=1326 audit(1784218561.985:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.7.1549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7fa1a955e68e code=0x0 [ 313.065379][ T9307] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 313.787969][ T9320] netlink: 'syz.4.1562': attribute type 4 has an invalid length. [ 313.879941][ T9320] netlink: 'syz.4.1562': attribute type 17 has an invalid length. [ 313.953754][ T9320] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 314.012276][ T9324] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 314.253301][ T9329] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 314.382436][ T9331] device bridge3 entered promiscuous mode [ 314.421001][ T9331] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 314.806968][ T9334] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 314.951999][ T9334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.104768][ T9341] bond3: (slave ip6gretap1): making interface the new active one [ 315.137977][ T9341] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 315.149484][ T7978] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 317.187745][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.194446][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.338447][ T9381] device veth11 entered promiscuous mode [ 317.356047][ T9381] bond3: (slave veth11): Enslaving as an active interface with a down link [ 317.598099][ T9387] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 318.387869][ T9411] loop4: detected capacity change from 0 to 256 [ 318.410963][ T9411] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 318.432269][ T9411] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 318.474149][ T9411] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 318.555045][ T33] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 318.688317][ T26] audit: type=1800 audit(1784218568.715:422): pid=9414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1596" name="file1" dev="loop4" ino=1048629 res=0 errno=0 [ 318.767048][ T33] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.806585][ T33] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.849120][ T33] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 318.895501][ T33] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 318.919581][ T33] usb 7-1: SerialNumber: syz [ 319.153811][ T33] usb 7-1: 0:2 : does not exist [ 319.199318][ T33] usb 7-1: USB disconnect, device number 2 [ 319.468398][ T4509] udevd[4509]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.501150][ T8817] Bluetooth: hci5: Frame reassembly failed (-84) [ 320.840144][ T9453] loop7: detected capacity change from 0 to 2048 [ 320.892075][ T9453] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 320.981856][ T9453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.505570][ T4285] Bluetooth: hci5: command 0x1003 tx timeout [ 321.514278][ T4290] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 321.678905][ T9471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1615'. [ 322.534053][ T9482] infiniband syz0: set down [ 322.554233][ T9482] infiniband syz0: added ipvlan1 [ 322.733174][ T9482] RDS/IB: syz0: added [ 322.784764][ T9482] smc: adding ib device syz0 with port count 1 [ 322.854430][ T9482] smc: ib device syz0 port 1 has pnetid [ 323.227277][ T7972] tipc: Left network mode [ 325.365338][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 325.583971][ T22] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 325.610420][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.655198][ T22] usb 5-1: Product: syz [ 325.669840][ T22] usb 5-1: Manufacturer: syz [ 325.674568][ T22] usb 5-1: SerialNumber: syz [ 325.926032][ T22] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 325.972646][ T22] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 326.274422][ T26] audit: type=1326 audit(1784218576.295:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5ece997bd7 code=0x0 [ 326.688843][ T7972] device hsr_slave_0 left promiscuous mode [ 326.739895][ T7972] device hsr_slave_1 left promiscuous mode [ 326.771234][ T7972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.820528][ T7972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.846021][ T7972] device bridge_slave_1 left promiscuous mode [ 326.865237][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.900699][ T7972] device bridge_slave_0 left promiscuous mode [ 326.935345][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.441333][ T9544] loop7: detected capacity change from 0 to 4096 [ 327.448038][ T22] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71 [ 327.473864][ T22] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 327.504896][ T22] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 327.554647][ T22] lan78xx: probe of 5-1:1.0 failed with error -71 [ 327.582247][ T22] usb 5-1: USB disconnect, device number 7 [ 328.982243][ T8444] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 329.010493][ T8444] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 329.167763][ T7972] bond2 (unregistering): (slave geneve2): Releasing active interface [ 329.664817][ T7972] bond2 (unregistering): Released all slaves [ 329.694579][ T7972] bond1 (unregistering): (slave dummy0): Releasing active interface [ 329.718612][ T7972] bond1 (unregistering): Released all slaves [ 330.193981][ T9595] loop6: detected capacity change from 0 to 764 [ 330.928265][ T7972] team0 (unregistering): Port device team_slave_1 removed [ 330.990098][ T7972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.048527][ T7972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.513437][ T7972] bond0 (unregistering): Released all slaves [ 331.624149][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1630'. [ 331.642308][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1641'. [ 331.681684][ T9581] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1640'. [ 333.328778][ T9620] device bridge0 entered promiscuous mode [ 334.409514][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1657'. [ 334.497970][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1657'. [ 335.053915][ T9658] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1661'. [ 336.190189][ T9680] loop6: detected capacity change from 0 to 512 [ 336.330557][ T9680] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1668: invalid indirect mapped block 10 (level 1) [ 336.355567][ T9680] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1668: invalid indirect mapped block 8 (level 1) [ 336.426714][ T9680] EXT4-fs (loop6): 1 truncate cleaned up [ 336.449217][ T9680] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 336.766996][ T9697] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 336.778448][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1672'. [ 336.790249][ T6051] udevd[6051]: incorrect ext4 checksum on /dev/loop6 [ 336.819808][ T9680] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm syz.6.1668: bg 0: bad block bitmap checksum [ 336.954731][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1672'. [ 337.048901][ T7736] EXT4-fs (loop6): unmounting filesystem. [ 337.506763][ T9717] binder: 9712:9717 ioctl c0306201 200000000000 returned -14 [ 337.643091][ T9723] loop7: detected capacity change from 0 to 2048 [ 337.928197][ T9723] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 338.812800][ T9735] EXT4-fs (loop7): shut down requested (1) [ 339.130190][ T8444] EXT4-fs (loop7): unmounting filesystem. [ 339.137631][ T9741] tipc: Failed to remove unknown binding: 66,1,1/0:559443331/559443333 [ 339.200140][ T9741] tipc: Failed to remove unknown binding: 66,1,1/0:559443331/559443333 [ 339.265833][ T9741] tipc: Failed to remove unknown binding: 66,1,1/0:559443331/559443333 [ 340.813544][ T9765] loop4: detected capacity change from 0 to 512 [ 340.823673][ T9765] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 340.949134][ T9765] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1689: invalid indirect mapped block 32768 (level 2) [ 341.145883][ T9765] EXT4-fs (loop4): Remounting filesystem read-only [ 341.173722][ T9765] EXT4-fs (loop4): 1 orphan inode deleted [ 342.105137][ T9765] EXT4-fs (loop4): 1 truncate cleaned up [ 342.110891][ T9765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 342.237470][ T9765] EXT4-fs (loop4): shut down requested (1) [ 342.432583][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 343.127462][ T9800] netlink: 'syz.1.1697': attribute type 1 has an invalid length. [ 343.342484][ T9803] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.392333][ T9803] bond3: (slave bond4): making interface the new active one [ 343.521391][ T9814] Bluetooth: MGMT ver 1.22 [ 343.686322][ T9803] bond3: (slave bond4): Enslaving as an active interface with an up link [ 344.429994][ T9812] dccp_close: ABORT with 76 bytes unread [ 344.770776][ T9828] overlayfs: failed to clone upperpath [ 345.560916][ T9834] xt_hashlimit: max too large, truncated to 1048576 [ 345.568446][ T9834] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 345.668348][ T9844] sctp: [Deprecated]: syz.1.1707 (pid 9844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.668348][ T9844] Use struct sctp_sack_info instead [ 345.825569][ T4318] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 346.025247][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 346.037937][ T4318] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.095103][ T4318] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.151692][ T4318] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 346.196046][ T4318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.212438][ T4318] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 346.232120][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.275650][ T4318] usb 3-1: config 0 descriptor?? [ 346.567606][ T9861] netlink: 'syz.7.1710': attribute type 4 has an invalid length. [ 346.660656][ T9861] netlink: 'syz.7.1710': attribute type 4 has an invalid length. [ 346.714408][ T4318] hid (null): nested delimiters [ 346.732721][ T4318] hid (null): report_id 24797 is invalid [ 346.750036][ T4318] hid (null): bogus close delimiter [ 346.953476][ T4363] usb 3-1: USB disconnect, device number 7 [ 347.400393][ T9884] sock: sock_set_timeout: `syz.6.1716' (pid 9884) tries to set negative timeout [ 347.962849][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1721'. [ 348.109081][ T9896] loop7: detected capacity change from 0 to 8192 [ 348.138407][ T9900] bond4: (slave ipip0): The slave device specified does not support setting the MAC address [ 348.160965][ T9896] loop7: p1 p2 p3 < > p4 < p5 p6 > [ 348.166417][ T9896] loop7: partition table partially beyond EOD, truncated [ 348.173824][ T9896] loop7: p1 start 30976 is beyond EOD, truncated [ 348.181516][ T9896] loop7: p3 start 327168 is beyond EOD, truncated [ 348.189194][ T9896] loop7: p5 start 30976 is beyond EOD, truncated [ 348.256348][ T9900] bond4: (slave ipip0): Error -95 calling set_mac_address [ 348.949137][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 348.949475][ T6051] udevd[6051]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 348.972081][ T6066] udevd[6066]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 349.533528][ T9942] loop2: detected capacity change from 0 to 512 [ 349.618758][ T9942] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1733: iget: bad i_size value: 38620345925642 [ 349.677207][ T9942] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1733: couldn't read orphan inode 15 (err -117) [ 349.720330][ T9942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 349.864252][ T9954] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1733: bg 0: block 5: invalid block bitmap [ 349.887648][ T9954] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 228 with error 28 [ 349.903184][ T9954] EXT4-fs (loop2): This should not happen!! Data will be lost [ 349.903184][ T9954] [ 349.940872][ T9954] EXT4-fs (loop2): Total free blocks count 0 [ 349.952851][ T9954] EXT4-fs (loop2): Free/Dirty block details [ 349.959488][ T9954] EXT4-fs (loop2): free_blocks=0 [ 350.016978][ T9954] EXT4-fs (loop2): dirty_blocks=232 [ 350.022300][ T9954] EXT4-fs (loop2): Block reservation details [ 350.072853][ T9954] EXT4-fs (loop2): i_reserved_data_blocks=232 [ 350.276343][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 351.630342][T10014] netlink: 'syz.4.1752': attribute type 4 has an invalid length. [ 351.703413][T10019] netlink: 'syz.4.1752': attribute type 4 has an invalid length. [ 352.768530][T10024] No such timeout policy "syz1" [ 352.932094][T10027] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 353.013173][T10027] EXT4-fs (loop8): unable to read superblock [ 353.427266][T10036] device bridge4 entered promiscuous mode [ 353.464643][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1757'. [ 356.126753][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1769'. [ 356.591864][ T26] audit: type=1326 audit(1784218606.585:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.7.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a959de59 code=0x7ffc0000 [ 356.618394][ T26] audit: type=1326 audit(1784218606.605:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.7.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a959de59 code=0x7ffc0000 [ 356.643852][ T26] audit: type=1326 audit(1784218606.605:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.7.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a959de59 code=0x7ffc0000 [ 356.670594][ T26] audit: type=1326 audit(1784218606.605:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.7.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a959de59 code=0x7ffc0000 [ 356.705371][ T26] audit: type=1326 audit(1784218606.605:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.7.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa1a959de59 code=0x7ffc0000 [ 356.796291][ T26] audit: type=1326 audit(1784218606.605:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.7.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a959de59 code=0x7ffc0000 [ 356.831673][ T26] audit: type=1326 audit(1784218606.615:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.7.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a959de59 code=0x7ffc0000 [ 356.914977][ T26] audit: type=1326 audit(1784218606.655:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.7.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a959de59 code=0x7ffc0000 [ 357.025216][ T26] audit: type=1326 audit(1784218606.655:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.7.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a959de59 code=0x7ffc0000 [ 357.145210][ T26] audit: type=1326 audit(1784218606.655:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10096 comm="syz.7.1773" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa1a959de59 code=0x7ffc0000 [ 357.227164][T10111] tipc: Started in network mode [ 357.248671][T10111] tipc: Node identity 4, cluster identity 4711 [ 357.289580][T10111] tipc: Node number set to 4 [ 357.327768][T10116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.438156][T10116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.504872][T10116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.577507][T10116] device bridge_slave_0 left promiscuous mode [ 357.625444][T10116] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.689001][T10116] device bridge_slave_1 left promiscuous mode [ 357.707444][T10116] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.740324][T10116] bond0: (slave bond_slave_0): Releasing backup interface [ 357.813745][T10116] bond0: (slave bond_slave_1): Releasing backup interface [ 358.212871][T10116] team0: Port device team_slave_0 removed [ 358.253069][T10116] team0: Port device team_slave_1 removed [ 358.301099][T10116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.329016][T10116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.366496][T10116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.388177][T10116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.462211][T10128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 358.503095][T10128] device ip6gretap1 entered promiscuous mode [ 358.594761][T10149] loop2: detected capacity change from 0 to 1024 [ 358.657956][T10149] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 358.694953][T10149] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 358.883476][T10145] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1788'. [ 360.235288][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 361.737532][T10232] loop4: detected capacity change from 0 to 512 [ 361.855100][T10232] FAT-fs (loop4): Directory bread(block 199916) failed [ 361.879706][T10232] FAT-fs (loop4): Directory bread(block 199917) failed [ 361.919538][T10232] FAT-fs (loop4): Directory bread(block 199918) failed [ 361.993850][T10232] FAT-fs (loop4): Directory bread(block 199919) failed [ 362.045164][T10232] FAT-fs (loop4): Directory bread(block 199920) failed [ 362.072915][T10232] FAT-fs (loop4): Directory bread(block 199921) failed [ 362.103310][T10232] FAT-fs (loop4): Directory bread(block 199922) failed [ 362.125148][T10232] FAT-fs (loop4): Directory bread(block 199923) failed [ 366.358615][ C0] hrtimer: interrupt took 2085751 ns [ 368.849238][T10348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.946798][T10348] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 369.310775][T10348] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 369.408324][T10348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 369.486568][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 369.513816][T10348] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 369.712685][T10348] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 369.847753][T10348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.935141][T10348] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 370.000485][T10348] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 370.009771][T10361] fuse: Bad value for 'fd' [ 371.006431][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout [ 371.425413][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout [ 371.905633][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.991896][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1859'. [ 372.298078][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 372.422561][T10413] fuse: Bad value for 'fd' [ 372.801609][T10415] overlayfs: failed to clone upperpath [ 372.936472][T10422] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1867'. [ 373.025189][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 373.356819][T10429] bond1: (slave ip6gretap1): making interface the new active one [ 373.420061][T10429] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 373.509681][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 373.589993][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'. [ 374.419085][T10428] device bond4 entered promiscuous mode [ 374.485203][T10428] 8021q: adding VLAN 0 to HW filter on device bond4 [ 374.853370][T10438] device veth3 entered promiscuous mode [ 374.941819][T10438] bond4: (slave veth3): Enslaving as an active interface with an up link [ 375.095241][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 375.115565][T10450] overlayfs: failed to clone upperpath [ 375.154976][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 378.631930][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.638390][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.381827][T10566] loop2: detected capacity change from 0 to 512 [ 382.553402][T10566] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 382.598688][T10566] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 386.566823][T10605] loop4: detected capacity change from 0 to 8192 [ 386.586340][T10614] loop2: detected capacity change from 0 to 512 [ 386.677684][T10614] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 386.904432][T10614] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 387.035535][T10614] __quota_error: 39 callbacks suppressed [ 387.035558][T10614] Quota error (device loop2): write_blk: dquota write failed [ 387.123527][T10614] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 387.183678][T10614] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1924: Failed to acquire dquot type 0 [ 387.296172][T10614] EXT4-fs (loop2): 1 truncate cleaned up [ 387.301926][T10614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 388.224700][T10614] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 388.427041][T10614] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (3d380020) [ 388.511774][ T4509] udevd[4509]: incorrect ext4 checksum on /dev/loop2 [ 388.762661][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 388.893632][ T4509] udevd[4509]: incorrect ext4 checksum on /dev/loop2 [ 389.417049][T10652] loop6: detected capacity change from 0 to 128 [ 389.496352][T10652] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 389.600786][T10654] netlink: 'syz.4.1936': attribute type 11 has an invalid length. [ 389.927323][T10652] loop6: detected capacity change from 128 to 1 [ 390.017985][T10652] syz.6.1935: attempt to access beyond end of device [ 390.017985][T10652] loop6: rw=2049, sector=94, nr_sectors = 1 limit=1 [ 390.134764][T10652] Buffer I/O error on dev loop6, logical block 94, lost sync page write [ 390.195215][T10652] UDF-fs: warning (device loop6): udf_update_inode: IO error syncing udf inode [0000005e] [ 390.256808][T10652] syz.6.1935: attempt to access beyond end of device [ 390.256808][T10652] loop6: rw=2049, sector=115, nr_sectors = 1 limit=1 [ 394.095948][ T7736] syz-executor: attempt to access beyond end of device [ 394.095948][ T7736] loop6: rw=2049, sector=83, nr_sectors = 1 limit=1 [ 394.176846][ T7736] Buffer I/O error on dev loop6, logical block 83, lost sync page write [ 394.926234][T10694] netlink: 'syz.6.1948': attribute type 1 has an invalid length. [ 395.125267][T10694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.294601][T10697] bond2: (slave ip6gretap1): making interface the new active one [ 395.358158][T10697] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 395.385934][ T7970] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 396.066003][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 399.929643][T10735] loop2: detected capacity change from 0 to 512 [ 399.992135][T10735] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1958: invalid indirect mapped block 4294967295 (level 1) [ 400.075088][T10735] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1958: invalid indirect mapped block 4294967295 (level 1) [ 400.121998][T10735] EXT4-fs (loop2): 2 truncates cleaned up [ 400.129208][T10735] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 400.505176][ T33] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 400.696963][ T33] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.709232][ T33] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 400.719961][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.770575][ T33] usb 3-1: config 0 descriptor?? [ 400.828648][ T33] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 400.923580][T10710] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.935127][T10710] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.974293][T10710] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.984015][T10710] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.079146][T10753] loop4: detected capacity change from 0 to 256 [ 401.091241][T10747] usb 3-1: USB disconnect, device number 8 [ 401.107196][T10739] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 401.172898][T10753] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963609d, utbl_chksum : 0xe619d30d) [ 401.395535][T10710] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.404505][T10710] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.413808][T10710] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.423172][T10710] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.555035][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1956'. [ 401.588407][T10730] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.626383][T10730] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 401.720470][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 401.883169][ T26] audit: type=1326 audit(1784218907.903:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.6.1961" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x0 [ 402.053022][T10764] device gretap2 entered promiscuous mode [ 403.561397][T10792] loop2: detected capacity change from 0 to 128 [ 403.652114][T10792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 403.686475][T10792] ext4 filesystem being mounted at /396/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.753988][T10792] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 404.876145][T10792] fscrypt: loop2: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 405.890627][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 409.640182][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 409.764371][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 410.371225][T10895] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 410.386002][T10895] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 410.712004][T10901] netlink: 'syz.4.1999': attribute type 4 has an invalid length. [ 411.186834][T10910] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2001'. [ 413.593308][T10934] fuse: Bad value for 'fd' [ 415.016349][T10929] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.023737][T10929] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.047886][T10929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.223170][T10929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.830163][T10929] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.845949][T10929] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.855531][T10929] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.864448][T10929] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.300322][T10967] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 420.322518][T10967] EXT4-fs (loop8): unable to read superblock [ 421.458446][T10954] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.467527][T10954] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.182270][T10954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.809079][T10954] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.818607][T10954] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.827790][T10954] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.836975][T10954] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.178820][T10958] device bridge0 left promiscuous mode [ 423.201565][T10958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.230789][T10958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.251766][T10958] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.271200][T10958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.287791][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2009'. [ 423.344525][T10962] bridge4: port 1(dummy0) entered blocking state [ 423.365744][T10962] bridge4: port 1(dummy0) entered disabled state [ 423.407645][T10962] device dummy0 entered promiscuous mode [ 423.431971][T10962] bridge4: mtu less than device minimum [ 423.448487][T10963] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 423.463497][T10963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2009'. [ 423.483394][T10963] bridge4: port 1(dummy0) entered blocking state [ 423.490147][T10963] bridge4: port 1(dummy0) entered forwarding state [ 423.520616][T10963] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 423.532578][T10963] bridge4: port 1(dummy0) entered disabled state [ 423.976353][ T26] audit: type=1326 audit(1784218930.003:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.1.2024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f317899de59 code=0x0 [ 429.502209][T11033] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 429.580010][T11033] device bond5 entered promiscuous mode [ 429.586217][T11033] 8021q: adding VLAN 0 to HW filter on device bond5 [ 429.758920][T11033] bond5: (slave bridge1): making interface the new active one [ 429.773148][T11033] device bridge1 entered promiscuous mode [ 429.794746][T11033] device bridge1 left promiscuous mode [ 429.892919][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 432.001795][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 432.965255][T11065] fuse: Bad value for 'fd' [ 433.177519][T11068] loop6: detected capacity change from 0 to 16 [ 433.228346][T11068] erofs: (device loop6): mounted with root inode @ nid 36. [ 433.439283][T11076] netlink: 'syz.7.2050': attribute type 1 has an invalid length. [ 437.878099][T11076] device bond2 entered promiscuous mode [ 437.926516][T11076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.045147][T11080] bond2: (slave erspan1): making interface the new active one [ 438.084443][T11080] device erspan1 entered promiscuous mode [ 438.132761][T11080] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 438.177218][T11086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.248377][T11086] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 438.311799][T11086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.392925][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 438.552802][T11103] tipc: Failed to remove unknown binding: 66,0,0/127:4286483668/4286483670 [ 438.581415][T11103] tipc: Failed to remove unknown binding: 66,0,0/127:4286483668/4286483669 [ 438.642602][T11105] tipc: Failed to remove unknown binding: 66,0,0/127:4286483668/4286483670 [ 438.653080][T11105] tipc: Failed to remove unknown binding: 66,0,0/127:4286483668/4286483669 [ 440.095997][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.102399][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.793998][T11133] overlayfs: failed to clone upperpath [ 442.668490][T11147] device bridge1 entered promiscuous mode [ 442.693332][T11147] team0: Port device bridge1 added [ 442.750291][T11147] bridge0: port 1(team0) entered blocking state [ 442.772250][T11147] bridge0: port 1(team0) entered disabled state [ 442.846462][T11147] device team0 entered promiscuous mode [ 442.862812][T11147] device team_slave_0 entered promiscuous mode [ 442.885630][T11147] device team_slave_1 entered promiscuous mode [ 443.318478][ T4285] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 447.345320][ T4285] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 447.356153][ T4285] Bluetooth: hci3: Injecting HCI hardware error event [ 447.378379][ T4290] Bluetooth: hci3: hardware error 0x00 [ 447.432921][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'. [ 447.562457][T11165] netlink: 'syz.1.2076': attribute type 1 has an invalid length. [ 447.642734][T11165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 448.225917][T11168] bond5: (slave veth9): Enslaving as an active interface with a down link [ 448.260888][T11165] device dummy0 left promiscuous mode [ 449.082345][T11165] bond5: (slave dummy0): making interface the new active one [ 449.248319][T11165] device dummy0 entered promiscuous mode [ 449.289020][T11165] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 449.355093][T11172] netlink: 'syz.1.2076': attribute type 10 has an invalid length. [ 449.387346][T11172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2076'. [ 449.417723][T11172] bond5: (slave dummy0): Releasing active interface [ 449.425315][ T4290] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 449.473707][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'. [ 449.536217][ T26] audit: type=1326 audit(1784218955.563:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.6.2083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ece99de59 code=0x0 [ 449.576569][T11176] device bond6 entered promiscuous mode [ 449.596413][T11176] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.660928][T11183] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.689535][T11183] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 449.731483][T11183] bond6: (slave sit2): Error -95 calling set_mac_address [ 450.487398][T11204] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2087'. [ 452.739062][T11218] netlink: 'syz.2.2091': attribute type 10 has an invalid length. [ 452.897505][T11218] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 460.899419][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2120'. [ 460.958964][T11306] device bond3 entered promiscuous mode [ 461.021377][T11306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.612458][T11306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.620426][T11306] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 461.632217][T11306] bond3: (slave sit1): Error -95 calling set_mac_address [ 463.313251][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2129'. [ 464.540630][T11332] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.598299][T11332] bond4: (slave bond5): Enslaving as an active interface with an up link [ 464.766207][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 464.808934][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 466.099222][T11364] bond1: option mode: unable to set because the bond device has slaves [ 466.242238][T11371] netlink: 'syz.6.2140': attribute type 1 has an invalid length. [ 466.377154][T11371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.463982][T11375] bond3: (slave ip6gretap2): making interface the new active one [ 466.537600][T11375] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 468.202788][T11406] loop2: detected capacity change from 0 to 4096 [ 468.313528][T11406] NILFS (loop2): invalid segment: Checksum error in segment payload [ 468.336949][T11406] NILFS (loop2): trying rollback from an earlier position [ 468.540539][T11406] NILFS (loop2): recovery complete [ 468.626581][T11416] netlink: 'syz.7.2153': attribute type 1 has an invalid length. [ 468.640775][T11418] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.704259][T11416] netlink: 'syz.7.2153': attribute type 2 has an invalid length. [ 474.472254][T11471] loop2: detected capacity change from 0 to 2048 [ 474.610956][T11471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.553806][T11500] netlink: 'syz.7.2176': attribute type 4 has an invalid length. [ 476.625556][T11501] netlink: 'syz.7.2176': attribute type 4 has an invalid length. [ 476.784287][ T4290] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 477.300204][T11507] bridge0: port 3(veth0_to_bond) entered blocking state [ 477.336580][T11507] bridge0: port 3(veth0_to_bond) entered disabled state [ 477.396819][T11507] device veth0_to_bond entered promiscuous mode [ 484.972506][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'. [ 484.984724][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'. [ 486.295293][T11603] delete_channel: no stack [ 486.303782][T11603] delete_channel: no stack [ 489.865703][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2220'. [ 489.978291][T11646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2220'. [ 490.832063][T11661] delete_channel: no stack [ 490.837960][T11661] delete_channel: no stack [ 491.115560][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 492.797501][T11687] device macvlan2 entered promiscuous mode [ 492.917030][T11687] device bond5 entered promiscuous mode [ 492.948003][T11687] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 493.009258][T11687] device bond5 left promiscuous mode [ 500.120670][T11766] netlink: 'syz.4.2258': attribute type 1 has an invalid length. [ 500.478933][T11767] bond6: (slave veth7): Enslaving as an active interface with a down link [ 500.615295][T11769] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 501.507939][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.514354][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.692547][T11815] netlink: 'syz.1.2271': attribute type 4 has an invalid length. [ 505.966988][T11824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2276'. [ 506.080770][T11826] netlink: 'syz.7.2275': attribute type 1 has an invalid length. [ 506.453922][T11827] bond6: (slave veth5): Enslaving as an active interface with a down link [ 507.763606][T11856] device wlan1 entered promiscuous mode [ 515.415846][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2316'. [ 517.256689][T11972] netlink: 'syz.6.2321': attribute type 6 has an invalid length. [ 517.544746][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2322'. [ 521.766428][T12010] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 521.996245][T12010] 8021q: adding VLAN 0 to HW filter on device bond7 [ 523.438289][ T26] audit: type=1326 audit(1784219029.463:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.6.2342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 523.512595][ T26] audit: type=1326 audit(1784219029.493:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.6.2342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 523.639912][ T26] audit: type=1326 audit(1784219029.493:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.6.2342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 523.777116][ T26] audit: type=1326 audit(1784219029.493:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.6.2342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 523.902738][ T26] audit: type=1326 audit(1784219029.493:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.6.2342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 524.019565][ T26] audit: type=1326 audit(1784219029.493:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.6.2342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 524.161467][ T26] audit: type=1326 audit(1784219029.503:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.6.2342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 524.291456][ T26] audit: type=1326 audit(1784219029.503:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.6.2342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 524.411957][ T26] audit: type=1326 audit(1784219029.503:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.6.2342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 524.574957][ T26] audit: type=1326 audit(1784219029.503:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.6.2342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 533.406543][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 533.658466][T12141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.773264][ T4285] Bluetooth: hci1: command 0x2016 tx timeout [ 538.051842][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 538.051892][ T26] audit: type=1326 audit(1784219044.073:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12192 comm="syz.6.2386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ece99de59 code=0x0 [ 540.011035][T12221] x_tables: duplicate underflow at hook 2 [ 541.185356][ T26] audit: type=1326 audit(1784219047.203:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 541.306587][ T26] audit: type=1326 audit(1784219047.233:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 541.335036][ T26] audit: type=1326 audit(1784219047.243:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 542.038849][ T26] audit: type=1326 audit(1784219047.243:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 542.447123][ T26] audit: type=1326 audit(1784219047.243:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 542.571831][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2397'. [ 543.105091][ T26] audit: type=1326 audit(1784219047.243:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 543.281779][ T26] audit: type=1326 audit(1784219047.243:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 543.474959][ T26] audit: type=1326 audit(1784219047.243:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 543.639686][ T26] audit: type=1326 audit(1784219047.253:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 543.807743][ T26] audit: type=1326 audit(1784219047.253:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 543.925323][ T26] audit: type=1326 audit(1784219047.253:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 544.035287][ T26] audit: type=1326 audit(1784219047.253:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 544.135166][ T26] audit: type=1326 audit(1784219047.253:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 544.225026][ T26] audit: type=1326 audit(1784219047.253:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 545.005000][ T26] audit: type=1326 audit(1784219047.253:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.6.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 547.769405][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2412'. [ 547.803595][T12296] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.814122][T12296] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.824655][T12296] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.835162][T12296] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.902323][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2412'. [ 547.986807][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2412'. [ 551.049636][T12341] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2427'. [ 551.141579][T12347] netlink: 'syz.4.2430': attribute type 1 has an invalid length. [ 551.185707][T12347] netlink: 'syz.4.2430': attribute type 4 has an invalid length. [ 551.243545][T12347] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2430'. [ 551.304527][T12349] netlink: 'syz.4.2430': attribute type 1 has an invalid length. [ 551.376132][T12349] netlink: 'syz.4.2430': attribute type 4 has an invalid length. [ 551.445447][T12349] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.2430'. [ 565.466739][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.473773][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.395449][T12450] 9pnet_fd: p9_fd_create_tcp (12450): problem connecting socket to 127.0.0.1 [ 570.635510][T12468] SET target dimension over the limit! [ 573.155118][T12494] trusted_key: encrypted_key: insufficient parameters specified [ 576.262474][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 576.275906][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 576.286139][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 576.294465][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 576.305983][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 576.315088][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 576.322346][T12513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2478'. [ 576.744494][T12513] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 576.772774][T12521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2478'. [ 576.824759][T12521] device bond8 entered promiscuous mode [ 576.837865][T12521] device bridge2 entered promiscuous mode [ 576.844246][T12521] 8021q: adding VLAN 0 to HW filter on device bond8 [ 576.867638][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 576.977164][ T7462] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.143919][ T7462] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.277526][ T7462] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.436897][ T7462] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.386211][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 579.106479][ T7462] tipc: Left network mode [ 579.609339][T12507] chnl_net:caif_netlink_parms(): no params data found [ 580.465223][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 581.885335][ T7462] bond1: (slave ip6gretap1): Releasing active interface [ 582.369469][T12507] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.586273][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 582.984969][T12507] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.025435][T12507] device bridge_slave_0 entered promiscuous mode [ 583.119055][T12589] netlink: 'syz.6.2497': attribute type 21 has an invalid length. [ 583.445429][T12507] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.478402][T12507] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.039290][T12507] device bridge_slave_1 entered promiscuous mode [ 584.252524][T12507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.322379][T12507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.625221][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 585.064038][T12507] team0: Port device team_slave_0 added [ 585.191817][T12507] team0: Port device team_slave_1 added [ 585.219601][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2503'. [ 585.510929][ T7462] bond2: (slave erspan1): Releasing active interface [ 585.537137][ T7462] device erspan1 left promiscuous mode [ 585.642915][T12613] bond4: (slave veth5): Enslaving as an active interface with an up link [ 585.697357][T12616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2504'. [ 585.919685][T12507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.930034][T12507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.001005][T12507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.197619][T12507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.214986][T12507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.436505][T12507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.129186][T12507] device hsr_slave_0 entered promiscuous mode [ 587.185729][T12507] device hsr_slave_1 entered promiscuous mode [ 587.235221][T12507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.283539][T12507] Cannot create hsr debugfs directory [ 588.681538][ T7462] device hsr_slave_0 left promiscuous mode [ 588.721939][ T7462] device hsr_slave_1 left promiscuous mode [ 588.734192][T12658] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 588.757992][ T7462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.821443][ T7462] device veth0_to_bond left promiscuous mode [ 588.845261][ T7462] bridge0: port 3(veth0_to_bond) entered disabled state [ 588.899379][ T7462] device bridge_slave_1 left promiscuous mode [ 588.930708][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.995764][ T7462] device bridge_slave_0 left promiscuous mode [ 589.002210][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.463822][ T7462] bond6 (unregistering): (slave veth5): Releasing active interface [ 589.803280][ T7462] bond6 (unregistering): Released all slaves [ 591.470166][ T7462] bond4 (unregistering): (slave bond5): Releasing backup interface [ 591.486163][ T7462] bond5 (unregistering): Released all slaves [ 591.515293][ T7462] bond4 (unregistering): Released all slaves [ 591.989038][ T7462] bond3 (unregistering): Released all slaves [ 592.429693][ T7462] bond2 (unregistering): Released all slaves [ 592.542070][ T7462] bond1 (unregistering): Released all slaves [ 594.094193][ T7462] team0 (unregistering): Port device team_slave_1 removed [ 594.230022][ T7462] team0 (unregistering): Port device team_slave_0 removed [ 594.362599][ T7462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.492368][ T7462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.144144][ T7462] bond0 (unregistering): Released all slaves [ 596.442440][T12507] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 596.645342][T12507] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 596.727672][T12507] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 596.746198][T12721] capability: warning: `syz.2.2530' uses 32-bit capabilities (legacy support in use) [ 596.803917][T12507] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 597.596239][T12507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.694754][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.707231][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.750137][T12507] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.150146][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 598.432751][T12730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2531'. [ 598.470221][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 598.496707][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.280400][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.287718][ T7985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.246970][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 602.344717][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 602.376994][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.416616][ T4997] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.418391][T12748] ./file0: Can't open blockdev [ 602.428498][ T4997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.569467][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 602.600160][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 602.658008][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 602.732312][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 602.817289][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 602.835133][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 602.883987][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 602.962646][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 602.985749][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 603.040103][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 603.086582][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 603.218013][T12760] bridge0: port 2(vlan3) entered blocking state [ 603.265329][T12760] bridge0: port 2(vlan3) entered disabled state [ 603.335449][T12760] device vlan3 entered promiscuous mode [ 603.367572][T12760] device bond0 entered promiscuous mode [ 603.373216][T12760] device bond_slave_0 entered promiscuous mode [ 603.441430][T12760] device bond_slave_1 entered promiscuous mode [ 603.471612][T12760] device netdevsim0 entered promiscuous mode [ 603.492387][T12507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 603.642569][T12770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2540'. [ 604.355723][T12784] SET target dimension over the limit! [ 606.980935][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 606.980952][ T26] audit: type=1326 audit(1784219113.003:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.6.2548" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 607.199472][ T26] audit: type=1326 audit(1784219113.063:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.6.2548" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 607.325087][ T26] audit: type=1326 audit(1784219113.103:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.6.2548" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 607.353828][ T26] audit: type=1326 audit(1784219113.103:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.6.2548" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 607.397898][ T26] audit: type=1326 audit(1784219113.103:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.6.2548" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 607.546010][ T26] audit: type=1326 audit(1784219113.103:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.6.2548" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 607.575538][ T26] audit: type=1326 audit(1784219113.103:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.6.2548" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 607.630129][ T26] audit: type=1326 audit(1784219113.103:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.6.2548" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 607.764225][ T26] audit: type=1326 audit(1784219113.103:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.6.2548" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 607.804889][ T26] audit: type=1326 audit(1784219113.103:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.6.2548" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 608.606007][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.654251][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.745450][T12507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.447385][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.476365][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.593853][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 614.615377][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 614.687355][T12507] device veth0_vlan entered promiscuous mode [ 614.695409][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 614.755831][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 614.831189][T12507] device veth1_vlan entered promiscuous mode [ 614.976933][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 615.019279][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 615.066686][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 615.111195][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 615.164625][T12507] device veth0_macvtap entered promiscuous mode [ 615.216529][T12507] device veth1_macvtap entered promiscuous mode [ 615.347426][T12507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.404911][T12507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.466573][T12507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.502985][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 615.517847][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 615.545926][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 615.587051][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 615.641111][T12507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.703879][T12507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.782183][T12507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.822462][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 615.851068][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 615.904554][T12507] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.943404][T12507] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.990024][T12507] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.044730][T12507] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.552247][ T9439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.604932][ T9439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.651315][ T7462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 616.766118][ T9439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.774146][ T9439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.835328][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 617.545103][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 617.545122][ T26] audit: type=1800 audit(1784219123.563:638): pid=12935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2576" name="bus" dev="ramfs" ino=65448 res=0 errno=0 [ 618.024693][T12949] device bridge_slave_0 left promiscuous mode [ 618.031202][T12949] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.046633][T12949] device bridge_slave_1 left promiscuous mode [ 618.053010][T12949] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.066015][T12949] bond0: (slave bond_slave_0): Releasing backup interface [ 618.086933][T12949] bond0: (slave bond_slave_1): Releasing backup interface [ 618.103003][T12949] team0: Port device team_slave_0 removed [ 618.110956][T12949] team0: Port device team_slave_1 removed [ 618.117208][T12949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.125817][T12949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.136934][T12949] bond1: (slave xfrm1): Releasing backup interface [ 618.146605][T12949] bond2: (slave bridge3): Releasing backup interface [ 618.155632][T12949] bond3: (slave ip6gretap1): Releasing active interface [ 618.166322][T12949] bond4: (slave veth3): Releasing backup interface [ 618.173754][T12949] device veth3 left promiscuous mode [ 618.180766][T12949] bond6: (slave veth7): Releasing active interface [ 618.544614][T12949] team0: Mode changed to "loadbalance" [ 618.925438][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2582'. [ 622.210163][T12971] bond9 (unregistering): Released all slaves [ 624.292086][T13027] netlink: 'syz.6.2599': attribute type 13 has an invalid length. [ 625.215381][T13026] tipc: Enabling of bearer rejected, failed to enable media [ 628.561958][T13073] netlink: 'syz.4.2610': attribute type 4 has an invalid length. [ 628.672638][T13080] netlink: 'syz.4.2610': attribute type 4 has an invalid length. [ 628.862950][T13073] netlink: 'syz.4.2610': attribute type 4 has an invalid length. [ 629.379961][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2615'. [ 629.523572][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.534418][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.220251][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 634.264943][T13134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2625'. [ 634.458593][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 634.505222][T13134] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2625'. [ 634.545219][T13136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2625'. [ 634.646662][T13134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2625'. [ 634.986495][ T26] audit: type=1326 audit(1784219141.003:639): auid=4294967295 uid=1982771711 gid=0 ses=4294967295 subj=unconfined pid=13141 comm="syz.4.2628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ddc79de59 code=0x0 [ 636.233857][T13172] random: crng reseeded on system resumption [ 639.193869][T13186] netlink: 'syz.4.2639': attribute type 4 has an invalid length. [ 639.323707][T13186] netlink: 'syz.4.2639': attribute type 4 has an invalid length. [ 641.922534][T13223] netlink: 'syz.2.2647': attribute type 49 has an invalid length. [ 641.946837][T13222] netlink: 'syz.6.2648': attribute type 1 has an invalid length. [ 642.465975][T13223] device veth0_to_bond entered promiscuous mode [ 643.994379][T13246] loop8: detected capacity change from 0 to 256 [ 644.695106][T10748] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 646.237390][T10748] usb 9-1: device descriptor read/all, error -71 [ 648.269968][T13276] loop8: detected capacity change from 0 to 1024 [ 649.712179][T13281] netlink: 'syz.6.2662': attribute type 1 has an invalid length. [ 649.855566][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'. [ 649.947541][T13281] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2662'. [ 650.021957][T13281] 8021q: adding VLAN 0 to HW filter on device bond5 [ 653.948034][T13341] netlink: 'syz.1.2674': attribute type 4 has an invalid length. [ 654.898704][T13341] netlink: 'syz.1.2674': attribute type 4 has an invalid length. [ 657.334491][T13382] trusted_key: encrypted_key: insufficient parameters specified [ 659.913961][T13427] Invalid option length (1040762) for dns_resolver key [ 660.398316][T13428] set match dimension is over the limit! [ 663.902243][T13467] 9pnet_fd: p9_fd_create_tcp (13467): problem connecting socket to 127.0.0.1 [ 667.675721][T13512] loop8: detected capacity change from 0 to 256 [ 667.720859][T13512] exfat: Unknown parameter 'errors}±2g®çôŠ%›öXm\' [ 668.680428][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2719'. [ 670.663270][T13559] MPTCP: kernel_bind error, err=-99 [ 671.559546][T13577] 9pnet_fd: p9_fd_create_unix (13577): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 677.966594][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 684.525091][T13648] device xfrm0 entered promiscuous mode [ 684.556431][T13648] team0: Device xfrm0 is of different type [ 684.668796][T13653] tipc: Enabled bearer , priority 0 [ 684.713994][T13655] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 684.791501][T13655] 8021q: adding VLAN 0 to HW filter on device bond6 [ 684.904088][T13655] device gretap3 entered promiscuous mode [ 684.928500][ T26] audit: type=1326 audit(1784219190.953:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.6.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 685.073545][T13655] bond6: (slave gretap3): making interface the new active one [ 685.133696][ T26] audit: type=1326 audit(1784219191.023:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.6.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 685.159855][T13655] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 685.159983][ T6206] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 685.397783][T13672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.437269][T13672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.468825][ T26] audit: type=1326 audit(1784219191.023:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.6.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 685.572902][T13672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.615240][T13672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.693699][ T26] audit: type=1326 audit(1784219191.023:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.6.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 685.725030][T13672] device geneve3 entered promiscuous mode [ 685.731708][ T26] audit: type=1326 audit(1784219191.023:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.6.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 687.003367][ T26] audit: type=1326 audit(1784219191.023:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.6.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 687.040331][ T26] audit: type=1326 audit(1784219191.023:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.6.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 687.207158][ T26] audit: type=1326 audit(1784219191.023:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.6.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 687.441177][ T26] audit: type=1326 audit(1784219191.023:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.6.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 687.484971][ T26] audit: type=1326 audit(1784219191.033:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.6.2752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5ece99de59 code=0x7ffc0000 [ 689.452359][T13713] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 691.171044][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.177485][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.699136][T13736] device gretap1 entered promiscuous mode [ 691.737234][T13736] batman_adv: batadv0: Adding interface: gretap1 [ 691.770145][T13736] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 691.918031][T13736] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 697.117686][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2778'. [ 698.404414][T13788] ================================================================== [ 698.412551][T13788] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240 [ 698.421717][T13788] Read of size 2 at addr ffff88802957edfb by task syz.2.2780/13788 [ 698.429710][T13788] [ 698.432075][T13788] CPU: 0 PID: 13788 Comm: syz.2.2780 Not tainted syzkaller #0 [ 698.439551][T13788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 698.449653][T13788] Call Trace: [ 698.453018][T13788] [ 698.456120][T13788] dump_stack_lvl+0x188/0x24e [ 698.460885][T13788] ? __lock_acquire+0x7c40/0x7c40 [ 698.465972][T13788] ? show_regs_print_info+0x12/0x12 [ 698.471208][T13788] ? load_image+0x410/0x410 [ 698.475762][T13788] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 698.481291][T13788] ? __virt_addr_valid+0x188/0x540 [ 698.486473][T13788] ? __virt_addr_valid+0x467/0x540 [ 698.491612][T13788] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 698.497894][T13788] print_report+0xa8/0x210 [ 698.502350][T13788] kasan_report+0x10b/0x140 [ 698.506951][T13788] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 698.513227][T13788] ieee80211_monitor_select_queue+0x23a/0x240 [ 698.519332][T13788] ? ieee80211_activate_links_work+0x60/0x60 [ 698.525340][T13788] netdev_core_pick_tx+0x12c/0x360 [ 698.530522][T13788] __dev_queue_xmit+0xb45/0x3810 [ 698.535507][T13788] ? __dev_queue_xmit+0x281/0x3810 [ 698.540640][T13788] ? netdev_core_pick_tx+0x360/0x360 [ 698.545946][T13788] ? virtio_net_hdr_to_skb+0x787/0x12a0 [ 698.551581][T13788] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 698.557844][T13788] packet_sendmsg+0x3b95/0x4de0 [ 698.562725][T13788] ? aa_sk_perm+0x950/0x950 [ 698.567300][T13788] ? __might_sleep+0xd0/0xd0 [ 698.571950][T13788] ? verify_lock_unused+0x140/0x140 [ 698.577175][T13788] ? aa_sk_perm+0x81f/0x950 [ 698.581719][T13788] ? aa_af_perm+0x340/0x340 [ 698.586238][T13788] ? packet_getsockopt+0x980/0x980 [ 698.591379][T13788] ? apparmor_socket_sendmsg+0x8a/0x330 [ 698.597006][T13788] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 698.602355][T13788] ? security_socket_sendmsg+0x7c/0xa0 [ 698.607883][T13788] ? packet_getsockopt+0x980/0x980 [ 698.613053][T13788] ____sys_sendmsg+0x5ed/0x9a0 [ 698.617919][T13788] ? __sys_sendmsg_sock+0x30/0x30 [ 698.622979][T13788] ? __import_iovec+0x306/0x510 [ 698.627880][T13788] ? import_iovec+0x6f/0xa0 [ 698.632408][T13788] ___sys_sendmsg+0x2a2/0x360 [ 698.637114][T13788] ? __sys_sendmsg+0x2a0/0x2a0 [ 698.641944][T13788] __se_sys_sendmsg+0x1c3/0x2b0 [ 698.646827][T13788] ? __x64_sys_sendmsg+0x80/0x80 [ 698.651798][T13788] ? lockdep_hardirqs_on+0x94/0x140 [ 698.657093][T13788] do_syscall_64+0x4c/0xa0 [ 698.661538][T13788] ? clear_bhb_loop+0x60/0xb0 [ 698.666246][T13788] ? clear_bhb_loop+0x60/0xb0 [ 698.670947][T13788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.676882][T13788] RIP: 0033:0x7f6935d9de59 [ 698.681377][T13788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.701050][T13788] RSP: 002b:00007f6933ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.709538][T13788] RAX: ffffffffffffffda RBX: 00007f6936025fa0 RCX: 00007f6935d9de59 [ 698.717528][T13788] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 698.725519][T13788] RBP: 00007f6935e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 698.733513][T13788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.741504][T13788] R13: 00007f6936026038 R14: 00007f6936025fa0 R15: 00007ffd0a971ec8 [ 698.749505][T13788] [ 698.752557][T13788] [ 698.754910][T13788] Allocated by task 13788: [ 698.759377][T13788] kasan_set_track+0x4b/0x70 [ 698.764017][T13788] __kasan_kmalloc+0x8e/0xa0 [ 698.768634][T13788] __kmalloc_node+0xb2/0x240 [ 698.773355][T13788] kvmalloc_node+0x6c/0x180 [ 698.777962][T13788] bpf_check+0x1ba/0x11000 [ 698.782452][T13788] bpf_prog_load+0x100e/0x1530 [ 698.787288][T13788] __sys_bpf+0x5b8/0x780 [ 698.791559][T13788] __x64_sys_bpf+0x78/0x90 [ 698.795997][T13788] do_syscall_64+0x4c/0xa0 [ 698.800444][T13788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.806366][T13788] [ 698.808704][T13788] Freed by task 13788: [ 698.812786][T13788] kasan_set_track+0x4b/0x70 [ 698.817407][T13788] kasan_save_free_info+0x27/0x40 [ 698.822447][T13788] ____kasan_slab_free+0x126/0x1f0 [ 698.827581][T13788] slab_free_freelist_hook+0x133/0x1b0 [ 698.833090][T13788] __kmem_cache_free+0xb6/0x200 [ 698.837962][T13788] bpf_check+0xae36/0x11000 [ 698.842488][T13788] bpf_prog_load+0x100e/0x1530 [ 698.847280][T13788] __sys_bpf+0x5b8/0x780 [ 698.851552][T13788] __x64_sys_bpf+0x78/0x90 [ 698.855997][T13788] do_syscall_64+0x4c/0xa0 [ 698.860440][T13788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.866356][T13788] [ 698.868703][T13788] The buggy address belongs to the object at ffff88802957c000 [ 698.868703][T13788] which belongs to the cache kmalloc-8k of size 8192 [ 698.882773][T13788] The buggy address is located 3579 bytes to the right of [ 698.882773][T13788] 8192-byte region [ffff88802957c000, ffff88802957e000) [ 698.896756][T13788] [ 698.899097][T13788] The buggy address belongs to the physical page: [ 698.905633][T13788] page:ffffea0000a55e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29578 [ 698.915805][T13788] head:ffffea0000a55e00 order:3 compound_mapcount:0 compound_pincount:0 [ 698.924142][T13788] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 698.932150][T13788] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017442280 [ 698.940754][T13788] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 698.949346][T13788] page dumped because: kasan: bad access detected [ 698.955786][T13788] page_owner tracks the page as allocated [ 698.961526][T13788] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13485, tgid 13484 (syz.6.2711), ts 667544350325, free_ts 657992196275 [ 698.985420][T13788] post_alloc_hook+0x173/0x1a0 [ 698.990280][T13788] get_page_from_freelist+0x206b/0x2180 [ 698.995856][T13788] __alloc_pages+0x1ec/0x4f0 [ 699.000470][T13788] alloc_slab_page+0x5d/0x180 [ 699.005193][T13788] new_slab+0x87/0x2d0 [ 699.009283][T13788] ___slab_alloc+0xbc5/0x1240 [ 699.013999][T13788] __kmem_cache_alloc_node+0x126/0x270 [ 699.019480][T13788] __kmalloc_node_track_caller+0xa0/0x240 [ 699.025226][T13788] __alloc_skb+0x226/0x7d0 [ 699.029685][T13788] netlink_dump+0x19f/0xcd0 [ 699.034274][T13788] netlink_recvmsg+0x68f/0xe00 [ 699.039087][T13788] ____sys_recvmsg+0x2c8/0x5b0 [ 699.043923][T13788] ___sys_recvmsg+0x210/0x590 [ 699.048634][T13788] do_recvmmsg+0x370/0x810 [ 699.053083][T13788] __x64_sys_recvmmsg+0x195/0x250 [ 699.058221][T13788] do_syscall_64+0x4c/0xa0 [ 699.062681][T13788] page last free stack trace: [ 699.067363][T13788] free_unref_page_prepare+0x8e5/0x9e0 [ 699.072848][T13788] free_unref_page+0x2e/0x3f0 [ 699.077546][T13788] __unfreeze_partials+0x188/0x1e0 [ 699.082685][T13788] put_cpu_partial+0x17c/0x250 [ 699.087475][T13788] qlist_free_all+0x76/0xe0 [ 699.091996][T13788] kasan_quarantine_reduce+0x144/0x160 [ 699.097487][T13788] __kasan_slab_alloc+0x1e/0x80 [ 699.102455][T13788] slab_post_alloc_hook+0x4b/0x490 [ 699.107585][T13788] kmem_cache_alloc+0x18b/0x2f0 [ 699.112453][T13788] getname_flags+0xb7/0x500 [ 699.117050][T13788] __x64_sys_execveat+0xa9/0xe0 [ 699.121956][T13788] do_syscall_64+0x4c/0xa0 [ 699.126398][T13788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.132320][T13788] [ 699.134659][T13788] Memory state around the buggy address: [ 699.140307][T13788] ffff88802957ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 699.148387][T13788] ffff88802957ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 699.156464][T13788] >ffff88802957ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 699.164540][T13788] ^ [ 699.172526][T13788] ffff88802957ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 699.180602][T13788] ffff88802957ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 699.188680][T13788] ================================================================== [ 699.241964][T13788] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 699.249267][T13788] CPU: 0 PID: 13788 Comm: syz.2.2780 Not tainted syzkaller #0 [ 699.256741][T13788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 699.266859][T13788] Call Trace: [ 699.270157][T13788] [ 699.273110][T13788] dump_stack_lvl+0x188/0x24e [ 699.277815][T13788] ? memcpy+0x3c/0x60 [ 699.281909][T13788] ? show_regs_print_info+0x12/0x12 [ 699.287129][T13788] ? load_image+0x410/0x410 [ 699.291672][T13788] panic+0x2d3/0x710 [ 699.295601][T13788] ? asm_common_interrupt+0x22/0x40 [ 699.300839][T13788] ? bpf_jit_dump+0xd0/0xd0 [ 699.305362][T13788] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 699.311300][T13788] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 699.317231][T13788] ? _raw_spin_unlock+0x40/0x40 [ 699.322094][T13788] check_panic_on_warn+0x80/0xa0 [ 699.327160][T13788] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 699.333427][T13788] end_report+0x66/0x110 [ 699.337722][T13788] kasan_report+0x118/0x140 [ 699.342275][T13788] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 699.348549][T13788] ieee80211_monitor_select_queue+0x23a/0x240 [ 699.354678][T13788] ? ieee80211_activate_links_work+0x60/0x60 [ 699.360693][T13788] netdev_core_pick_tx+0x12c/0x360 [ 699.365832][T13788] __dev_queue_xmit+0xb45/0x3810 [ 699.370780][T13788] ? __dev_queue_xmit+0x281/0x3810 [ 699.375908][T13788] ? netdev_core_pick_tx+0x360/0x360 [ 699.381206][T13788] ? virtio_net_hdr_to_skb+0x787/0x12a0 [ 699.386796][T13788] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 699.392987][T13788] packet_sendmsg+0x3b95/0x4de0 [ 699.397862][T13788] ? aa_sk_perm+0x950/0x950 [ 699.402421][T13788] ? __might_sleep+0xd0/0xd0 [ 699.407024][T13788] ? verify_lock_unused+0x140/0x140 [ 699.412268][T13788] ? aa_sk_perm+0x81f/0x950 [ 699.416800][T13788] ? aa_af_perm+0x340/0x340 [ 699.421344][T13788] ? packet_getsockopt+0x980/0x980 [ 699.426503][T13788] ? apparmor_socket_sendmsg+0x8a/0x330 [ 699.432061][T13788] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 699.437426][T13788] ? security_socket_sendmsg+0x7c/0xa0 [ 699.442915][T13788] ? packet_getsockopt+0x980/0x980 [ 699.448065][T13788] ____sys_sendmsg+0x5ed/0x9a0 [ 699.452863][T13788] ? __sys_sendmsg_sock+0x30/0x30 [ 699.457905][T13788] ? __import_iovec+0x306/0x510 [ 699.462816][T13788] ? import_iovec+0x6f/0xa0 [ 699.467336][T13788] ___sys_sendmsg+0x2a2/0x360 [ 699.472028][T13788] ? __sys_sendmsg+0x2a0/0x2a0 [ 699.476842][T13788] __se_sys_sendmsg+0x1c3/0x2b0 [ 699.481735][T13788] ? __x64_sys_sendmsg+0x80/0x80 [ 699.486690][T13788] ? lockdep_hardirqs_on+0x94/0x140 [ 699.491928][T13788] do_syscall_64+0x4c/0xa0 [ 699.496380][T13788] ? clear_bhb_loop+0x60/0xb0 [ 699.501113][T13788] ? clear_bhb_loop+0x60/0xb0 [ 699.505905][T13788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.511806][T13788] RIP: 0033:0x7f6935d9de59 [ 699.516225][T13788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.535839][T13788] RSP: 002b:00007f6933ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.544257][T13788] RAX: ffffffffffffffda RBX: 00007f6936025fa0 RCX: 00007f6935d9de59 [ 699.552310][T13788] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 699.560291][T13788] RBP: 00007f6935e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 699.568375][T13788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.576545][T13788] R13: 00007f6936026038 R14: 00007f6936025fa0 R15: 00007ffd0a971ec8 [ 699.584529][T13788] [ 699.588159][T13788] Kernel Offset: disabled [ 699.592495][T13788] Rebooting in 86400 seconds..