last executing test programs: 13m8.563304553s ago: executing program 0 (id=532): socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x328, 0x3a8, 0x3a8, 0x328, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @local, [0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0xfd, 0x2, 0x19}, 0x0, 0xa8, 0xd0, 0x700}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@private1, @private1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xffffffff], 'dvmrp0\x00', 'pimreg\x00', {}, {0xff}, 0x67, 0xb7, 0x1, 0x41}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x400000, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0xffffffff}}, 0x10) 13m7.997212999s ago: executing program 0 (id=536): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) unshare(0x22020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000000), 0x4) 13m7.494040434s ago: executing program 0 (id=537): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 13m5.494579458s ago: executing program 0 (id=541): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000140)=0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x1f, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 13m5.071081478s ago: executing program 0 (id=545): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x121) 13m4.121402513s ago: executing program 0 (id=549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000000000)={0x7, 0xa, 0x1ff, 0x731, 0x6}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x274) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 12m48.97146327s ago: executing program 32 (id=549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000000000)={0x7, 0xa, 0x1ff, 0x731, 0x6}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x274) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 8m14.258325814s ago: executing program 1 (id=1519): epoll_create1(0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m8.85905828s ago: executing program 1 (id=1529): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x800, 0x0) syz_clone3(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffd, 0xf, 0x10, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 8m1.684768919s ago: executing program 1 (id=1556): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 7m51.135346659s ago: executing program 1 (id=1570): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1810002, &(0x7f00000035c0)=ANY=[], 0x1, 0x1d4, &(0x7f0000000540)="$eJzs28uO0lAcx/FfS2lnxvtt48rEhW6kypDo7JwH8AXcTWbqZGJHjbiBmCgb38KFj+HON/EFINEnqGkpgSItvYT795NAD4f+eg4J/3JKUgHYWTejZ0OG6lErCIIvDyS9fiXJyozaS5kggIUJjGHRp7Fnd+9lpwBshtqf2f1OaoH/HDVMzgLAJhsc16J1wC9D+v3382k/ftRzrh8Gx6ZUi19M5G1pL1e+Z0Tb+5bUn8g7Sh7A+JqyfvkxzD9SMr+fd/7x+AdT+YN5wfCSKdQzo83jh8n8FUlXJV2TdF3Sjfha65ak2zPGP5sa/17O+QNVhN++RqInV9km842MHZzsfFg9by5872mhUcfqcf5Zybwd55slss5E/rDk+E6cb5y+989S93pZ8uhANvO/+i9mbv2nGv99WKX+rYr1D+yydqf79sT3vY/FG2apFI1daYwWkmFPeJqen/q28jkvr7G/HtNIb6z4xARg4dxPlx/cdqf75OLy5Nw79941W0cvWofN1vMjN1qXu1VW5wDW2fhHP9/+lvR90XMCAAAAAAAAAAAAAADF3JF0N/1tbjwBAAAAtsgybida9WcEAAAAAAAAAAAAAAAAAAAAtsW/AAAA//93Uzzt") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, 0x0, 0x0, 0x8000c61) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000001b00)={0x6, 0x48574653, 0x1, @stepwise={0x9, 0x2, 0xfffffff8, 0x58, 0x9, 0x7b}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x0, 0x7fff7fec}]}) r3 = getpid() write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x17, 0x2, {0xa, './mnt/test'}}, 0x13) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 7m45.260809107s ago: executing program 1 (id=1583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd09, 0x4, 0x10003, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x3, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x6, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x1, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0xbf, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x9, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) 7m42.587715454s ago: executing program 1 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000180)=""/192, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m27.381039283s ago: executing program 33 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000180)=""/192, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m22.411146699s ago: executing program 4 (id=1776): write(0xffffffffffffffff, &(0x7f0000000000)="dea89f5333f32ef93170239e923c2ce66f6d48d12c2ae0e5", 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x6}, 0x0}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@resgid}, {@nodioread_nolock}, {@data_writeback}, {@journal_async_commit}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_role}], 0x2c}, 0x0, 0x525, &(0x7f0000000440)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m21.634067336s ago: executing program 4 (id=1782): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x68}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) syz_usb_connect$uac2(0x5, 0xa5, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000081e04003040000102030109029300030108100a080b01020107200909040000000101200009"], &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0}) 6m18.179537159s ago: executing program 4 (id=1790): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 6m11.573509422s ago: executing program 4 (id=1806): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 6m10.030821464s ago: executing program 4 (id=1810): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f00000000c0)=""/18, 0x12) read(r0, &(0x7f0000000500)=""/10, 0xa) 6m5.316735528s ago: executing program 4 (id=1817): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 6m3.294066483s ago: executing program 34 (id=1817): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 5m37.963141633s ago: executing program 2 (id=1879): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000180)='./file0\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m35.570689426s ago: executing program 2 (id=1884): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000000540)=0x119) getuid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x3d, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x4}, {0x7, 0x0, 0x81, 0xc556}, {0x6}]}) 5m30.566054573s ago: executing program 2 (id=1893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 5m28.664887853s ago: executing program 2 (id=1894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x7a72908f1ea4fa1d}, @TCA_TBF_BURST={0x8, 0x6, 0xfff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x89, 0x6, 0x7f, 0x1000}, {0x1, 0x0, 0x9, 0x800, 0x1, 0x3}, 0x3, 0x10, 0x150}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) socket$unix(0x1, 0x5, 0x0) 5m19.705676397s ago: executing program 2 (id=1912): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x4204000c, 0x0, 0x0) 5m17.381088367s ago: executing program 2 (id=1917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) read(r3, &(0x7f0000000000)=""/1000, 0x3e8) 5m2.273697342s ago: executing program 35 (id=1917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) read(r3, &(0x7f0000000000)=""/1000, 0x3e8) 4m8.969131815s ago: executing program 7 (id=2063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000005c0)=""/4096, 0x1a, 0x1000, 0x1}, 0x28) ioctl$KVM_NMI(r2, 0xae9a) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a0000000212", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x6}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x5, 0x7fff, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0x1d, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8], 0x6000, 0x302000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m8.486906498s ago: executing program 7 (id=2066): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000070001000200000009"], 0x50) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000003010101000000000000000a00000408000c40"], 0x24}, 0x1, 0x0, 0x0, 0x48085}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES8=r0, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32=r1], 0x50) epoll_create1(0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x200) 4m8.161544744s ago: executing program 7 (id=2070): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)=ANY=[@ANYBLOB="2c0000000104e7ffffff000000000020050000050500010001000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x4008014}, 0x20000000) 4m6.857298435s ago: executing program 7 (id=2072): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 3m56.82520732s ago: executing program 7 (id=2087): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040000) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x36f, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x70, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 3m49.334797795s ago: executing program 7 (id=2105): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m48.714299094s ago: executing program 36 (id=2105): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m7.138965992s ago: executing program 3 (id=2441): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x303000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet6_SIOCADDRT(r1, 0x8915, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m1.646391542s ago: executing program 3 (id=2454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000003c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x40003}}, 0x5c) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m0.605171571s ago: executing program 3 (id=2456): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 59.606865569s ago: executing program 3 (id=2458): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, 0x0, 0x40800) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x15, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x4d) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000cc0)=""/93, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000fc0)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0xfffffffe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x10012, r1, 0x10000) 59.217559997s ago: executing program 3 (id=2459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x2) 58.10979198s ago: executing program 3 (id=2461): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 42.733032548s ago: executing program 37 (id=2461): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 22.808611791s ago: executing program 9 (id=2533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 20.250914212s ago: executing program 9 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6369, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17.239891514s ago: executing program 8 (id=2544): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20023, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247, 0x1, @discrete={0x10000}}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f0000002400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) 16.7028872s ago: executing program 9 (id=2546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x25, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='measure', 0x7) 14.667827076s ago: executing program 6 (id=2548): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) r1 = fanotify_init(0x200, 0x1000) r2 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(r1, 0x1, 0x18, r2, 0x0) sendfile(r2, r0, &(0x7f0000000000), 0xe429) 14.605119619s ago: executing program 9 (id=2549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r3, 0x0, &(0x7f0000000280)) 13.335798459s ago: executing program 8 (id=2550): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 13.334909849s ago: executing program 6 (id=2559): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x303000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet6_SIOCADDRT(r2, 0x8915, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 12.085556638s ago: executing program 8 (id=2552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) 10.874895376s ago: executing program 8 (id=2554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$dri(0x0, 0x78, 0xa02) 7.867511738s ago: executing program 8 (id=2556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x28, 0x0, 0xefff}, 0x28) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r3, 0x3, 0x0) 7.798912751s ago: executing program 6 (id=2557): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 6.496315023s ago: executing program 5 (id=2560): add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000280)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x102, @tick=0x7, 0x4, {0x7, 0x6}, 0x2, 0x1, 0x7}) syz_open_dev$loop(&(0x7f0000000140), 0x440, 0x46080) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) 6.484976264s ago: executing program 6 (id=2561): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)={0x1, 0x0, [{0x1000, 0x31, &(0x7f0000000100)=""/49}]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) 4.774986835s ago: executing program 5 (id=2562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x515e, 0xfffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000000c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.482820966s ago: executing program 5 (id=2563): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 3.482646486s ago: executing program 6 (id=2564): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) inotify_init1(0x180c00) write$cgroup_devices(r1, 0x0, 0x9) 3.367996891s ago: executing program 9 (id=2565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0xb0090198) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000280)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0xa}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@uni_xlateno}, {@fat=@check_strict}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) 2.386459838s ago: executing program 5 (id=2566): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xfb, @empty, 0xff}}, 0x6, 0x7, 0x3f8, 0x1, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 874.189729ms ago: executing program 6 (id=2567): unshare(0x60000000) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51a, 0x1, 0xffffffff, 0x80000fb, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000300)='./file0\x00', 0x0}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x12) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) lseek(r0, 0x0, 0x3) 873.681249ms ago: executing program 8 (id=2568): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000005200), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x200, 0x5, 0x6, 0x3ff}, {0xa, 0x6, 0xfb, 0x7f}, {0x9, 0xa, 0x1, 0x7}, {0x1, 0x80, 0x7f, 0x9}, {0x5, 0x2, 0x1, 0x8}, {0x0, 0x2, 0x80, 0x6}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r3, 0x800}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)={0x27}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 602.703592ms ago: executing program 9 (id=2569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x8000, @loopback, 0x40}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f0000000780)=""/4110, 0x100e) 93.860136ms ago: executing program 5 (id=2570): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x303000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet6_SIOCADDRT(r2, 0x8915, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 0s ago: executing program 5 (id=2571): unshare(0x20000400) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x12084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53, 0x2000, 0x1040002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd481, 0x4000, 0x2, 0x389, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f73, 0x8, 0x2, 0x1c9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2004, 0x200, 0xfffffff5, 0xec}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 9344] input: syz1 as /devices/virtual/input/input11 [ 414.492238][ T26] audit: type=1804 audit(2000000153.679:607): pid=9350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1257" name="bus" dev="ramfs" ino=53618 res=1 errno=0 [ 414.585028][ T26] audit: type=1804 audit(2000000153.679:608): pid=9350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1257" name="bus" dev="ramfs" ino=53618 res=1 errno=0 [ 414.887653][ T9356] fuse: Bad value for 'fd' [ 415.844710][ T9386] netlink: 'syz.3.1265': attribute type 2 has an invalid length. [ 418.551968][ T9405] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 421.075588][ T9450] device syzkaller0 entered promiscuous mode [ 422.346823][ T26] audit: type=1804 audit(2000000161.529:609): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1284" name="bus" dev="ramfs" ino=53704 res=1 errno=0 [ 422.465794][ T26] audit: type=1804 audit(2000000161.529:610): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1284" name="bus" dev="ramfs" ino=53704 res=1 errno=0 [ 423.604174][ T26] audit: type=1804 audit(2000000162.789:611): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1300" name="bus" dev="ramfs" ino=53177 res=1 errno=0 [ 423.763485][ T26] audit: type=1804 audit(2000000162.819:612): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1300" name="bus" dev="ramfs" ino=53177 res=1 errno=0 [ 423.825953][ T9483] loop2: detected capacity change from 0 to 128 [ 423.945156][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 424.166636][ T9483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 424.298068][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1292'. [ 424.690054][ T9483] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 427.880200][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 428.036071][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 430.543673][ T9575] netlink: 'syz.5.1317': attribute type 3 has an invalid length. [ 430.581868][ T9575] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.1317'. [ 430.789299][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1322'. [ 431.049014][ T9587] xt_cgroup: path and classid specified [ 432.529603][ T9605] loop4: detected capacity change from 0 to 256 [ 432.574257][ T9607] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.583155][ T9607] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.591935][ T9607] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.600793][ T9607] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.622359][ T9605] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 432.706964][ T26] audit: type=1800 audit(2000000171.889:613): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1328" name="file1" dev="loop4" ino=1048618 res=0 errno=0 [ 432.738716][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 432.998604][ T9620] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1331'. [ 434.119111][ T9630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.143576][ T126] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 436.386209][ T126] usb 2-1: config 0 has no interfaces? [ 436.392277][ T126] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 436.437634][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.448654][ T126] usb 2-1: config 0 descriptor?? [ 436.578153][ T9649] tipc: Started in network mode [ 436.618997][ T9649] tipc: Node identity 4, cluster identity 4711 [ 436.655514][ T9649] tipc: Node number set to 4 [ 437.744517][ T126] usb 2-1: USB disconnect, device number 6 [ 440.041570][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.047940][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.213470][ T9686] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 440.217038][ T9685] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 442.718496][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 443.122544][ T9713] netlink: 'syz.3.1362': attribute type 8 has an invalid length. [ 443.401922][ T9723] xt_TCPMSS: Only works on TCP SYN packets [ 444.981817][ T9747] loop4: detected capacity change from 0 to 512 [ 445.066824][ T9747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 445.139425][ T9747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 445.811106][ T9747] EXT4-fs (loop4): can't mount with commit=1, fs mounted w/o journal [ 446.672099][ T9759] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1373'. [ 447.061253][ T9765] loop4: detected capacity change from 0 to 512 [ 447.090537][ T9765] EXT4-fs: Ignoring removed mblk_io_submit option [ 447.144451][ T9765] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 447.374930][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1380'. [ 447.466462][ T9780] device bond1 entered promiscuous mode [ 450.286402][ T9815] device geneve3 entered promiscuous mode [ 451.029431][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 451.124438][ T9824] sctp: [Deprecated]: syz.3.1390 (pid 9824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.124438][ T9824] Use struct sctp_sack_info instead [ 453.130746][ T9820] device syz_tun left promiscuous mode [ 453.513515][ T9839] loop2: detected capacity change from 0 to 512 [ 453.778685][ T9839] EXT4-fs: Mount option(s) incompatible with ext2 [ 453.816435][ T9833] netlink: 'syz.3.1403': attribute type 4 has an invalid length. [ 453.834775][ T9833] netlink: 'syz.3.1403': attribute type 7 has an invalid length. [ 456.095531][ T9882] netlink: 'syz.4.1407': attribute type 1 has an invalid length. [ 456.250925][ T9882] bond5: (slave veth7): Enslaving as an active interface with a down link [ 456.521990][ T9885] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 457.580765][ T9900] loop4: detected capacity change from 0 to 256 [ 457.630691][ T9900] exfat: Deprecated parameter 'utf8' [ 457.647287][ T9900] exfat: Deprecated parameter 'namecase' [ 457.680687][ T9900] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 458.049310][ T9905] loop4: detected capacity change from 0 to 512 [ 458.100199][ T9905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 458.235011][ T9915] netlink: 'syz.5.1410': attribute type 4 has an invalid length. [ 458.481946][ T9915] netlink: 'syz.5.1410': attribute type 7 has an invalid length. [ 458.971104][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1415'. [ 461.351904][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 462.527892][ T9953] netlink: 'syz.1.1421': attribute type 2 has an invalid length. [ 462.536012][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 462.665576][ T9937] netlink: 'syz.2.1413': attribute type 30 has an invalid length. [ 462.864077][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1413'. [ 464.870334][ T9981] overlayfs: failed to clone upperpath [ 468.036027][T10010] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.045029][T10010] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.054200][T10010] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.063128][T10010] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.163454][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1441'. [ 470.665796][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 470.687854][T10039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.736492][T10039] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.809849][T10039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.968366][T10078] netlink: 'syz.4.1460': attribute type 2 has an invalid length. [ 474.122017][T10070] netlink: 'syz.1.1454': attribute type 1 has an invalid length. [ 477.578182][T10119] netlink: 'syz.3.1466': attribute type 1 has an invalid length. [ 477.609409][ T26] audit: type=1326 audit(2000000216.789:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10120 comm="syz.5.1467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa46a39e159 code=0x0 [ 477.616540][T10119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.840705][T10126] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 477.989468][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 478.380862][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 478.435967][ T7] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 478.559436][T10119] device bond2 entered promiscuous mode [ 478.643882][ T7] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 478.647535][T10119] device macvlan2 entered promiscuous mode [ 478.661341][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.669999][ T7] usb 2-1: Product: syz [ 478.677608][ T7] usb 2-1: Manufacturer: syz [ 478.690723][ T7] usb 2-1: SerialNumber: syz [ 478.711769][T10119] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 479.187827][T10142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.230749][T10142] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.285974][T10142] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 479.315336][T10142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.369625][ T8705] bond0 speed is unknown, defaulting to 1000 [ 479.539357][ T7] usb 2-1: Can't get UAC3 power state for id 10 [ 479.600291][ T7] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 479.627268][ T7] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 479.843370][ T7] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 479.923982][ T7] usb 2-1: USB disconnect, device number 7 [ 479.943334][ T4628] udevd[4628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.629592][ T7] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 481.989741][T10168] netlink: 'syz.5.1480': attribute type 1 has an invalid length. [ 483.028510][T10177] overlayfs: failed to clone upperpath [ 483.093194][T10172] bond2: (slave veth3): Enslaving as an active interface with a down link [ 483.174005][T10168] device veth0_to_bond left promiscuous mode [ 483.208869][T10168] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 484.976294][T10196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.033433][T10197] loop2: detected capacity change from 0 to 256 [ 485.041306][T10196] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.055616][T10196] batman_adv: batadv0: Interface activated: dummy0 [ 485.088289][T10196] batadv0: mtu less than device minimum [ 485.117143][T10196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.129667][T10196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.141955][T10196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.154283][T10196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.166496][T10196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.179165][T10196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.191436][T10196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.203647][T10196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.216672][T10196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.509680][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 485.574759][T10197] exfat: Deprecated parameter 'utf8' [ 485.794131][T10197] exfat: Deprecated parameter 'utf8' [ 485.987205][T10197] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 487.097777][T10211] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.106774][T10211] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.115799][T10211] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.125237][T10211] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.106333][T10232] fuse: Bad value for 'fd' [ 490.032121][T10244] fuse: Unknown parameter 'group_i' [ 490.926367][T10253] netlink: 'syz.3.1506': attribute type 13 has an invalid length. [ 491.001225][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 492.129704][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 492.378053][T10264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.580616][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 501.828019][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.836417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.414898][T10363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 505.953892][ T26] audit: type=1326 audit(2000000245.139:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.3.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda9ed9e159 code=0x0 [ 507.228708][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'. [ 507.310878][T10384] device macvtap1 entered promiscuous mode [ 507.337048][T10384] device batadv0 entered promiscuous mode [ 507.359158][T10384] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 507.407247][T10384] device batadv0 left promiscuous mode [ 507.899551][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 508.110892][ T7] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 508.144327][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.166163][ T7] usb 3-1: config 0 descriptor?? [ 508.190889][ T7] cp210x 3-1:0.0: cp210x converter detected [ 508.697589][T10407] loop4: detected capacity change from 0 to 40427 [ 508.757559][T10407] F2FS-fs (loop4): invalid crc value [ 508.787908][T10407] F2FS-fs (loop4): Found nat_bits in checkpoint [ 509.639527][ T7] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 509.653174][ T7] cp210x 3-1:0.0: querying part number failed [ 509.659350][T10407] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 509.682827][ T7] usb 3-1: cp210x converter now attached to ttyUSB0 [ 510.181959][ T4280] syz-executor: attempt to access beyond end of device [ 510.181959][ T4280] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 510.841626][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1530'. [ 514.156349][T10441] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1544'. [ 514.207229][T10441] xt_socket: unknown flags 0x40 [ 514.769425][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1556'. [ 515.729480][ T7] usb 3-1: USB disconnect, device number 9 [ 515.764081][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 515.772343][ T7] cp210x 3-1:0.0: device disconnected [ 516.508339][T10458] xt_CT: No such helper "pptp" [ 516.543412][T10446] bridge2: port 1(veth5) entered blocking state [ 516.726266][T10446] bridge2: port 1(veth5) entered disabled state [ 516.878557][T10464] fuse: Bad value for 'fd' [ 518.663446][T10446] device veth5 entered promiscuous mode [ 519.772090][T10448] bridge2: port 2(veth7) entered blocking state [ 519.778557][T10448] bridge2: port 2(veth7) entered disabled state [ 520.471614][T10448] device veth7 entered promiscuous mode [ 520.773200][T10481] bond0 speed is unknown, defaulting to 1000 [ 521.964133][T10513] trusted_key: encrypted_key: insufficient parameters specified [ 522.474026][T10519] xt_nat: multiple ranges no longer supported [ 526.915802][T10553] xt_CT: No such helper "pptp" [ 528.955660][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1579'. [ 529.801270][T10575] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 529.898747][T10575] CIFS: Attempting to mount \\127.0.0.1\share [ 530.018656][T10571] device syzkaller0 entered promiscuous mode [ 530.165075][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 530.226396][T10582] bridge1: port 1(veth9) entered blocking state [ 530.245296][T10582] bridge1: port 1(veth9) entered disabled state [ 530.270793][T10582] device veth9 entered promiscuous mode [ 530.299739][T10585] bond5: (slave veth0_to_bond): Releasing active interface [ 530.320355][T10585] bridge1: port 2(veth0_to_bond) entered blocking state [ 530.338797][T10585] bridge1: port 2(veth0_to_bond) entered disabled state [ 530.361385][T10585] device veth0_to_bond entered promiscuous mode [ 530.416722][T10581] bridge1: port 3(veth11) entered blocking state [ 530.435140][T10581] bridge1: port 3(veth11) entered disabled state [ 530.456971][T10581] device veth11 entered promiscuous mode [ 530.614843][T10575] CIFS: VFS: cifs_mount failed w/return code = -512 [ 531.823955][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1588'. [ 531.937819][T10604] loop4: detected capacity change from 0 to 512 [ 532.040121][T10604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 532.090438][T10604] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.990532][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 535.916251][T10657] netlink: 'syz.5.1602': attribute type 11 has an invalid length. [ 536.686336][T10663] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 536.728149][T10663] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 536.782932][T10663] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 536.920538][T10663] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 537.471362][T10663] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 537.516783][T10663] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 537.614435][T10663] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 537.862797][T10679] fuse: Bad value for 'fd' [ 538.881331][T10690] tipc: Enabled bearer , priority 0 [ 539.499010][T10704] loop4: detected capacity change from 0 to 128 [ 539.577845][T10704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 539.819848][T10704] ext4 filesystem being mounted at /359/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 539.830982][T10701] xt_nat: multiple ranges no longer supported [ 541.126854][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 541.209521][ T4288] Bluetooth: hci0: unexpected subevent 0x19 length: 96 > 28 [ 541.216903][ T4288] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 546.315905][T10762] loop4: detected capacity change from 0 to 2048 [ 546.463557][T10763] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 546.549947][ T26] audit: type=1800 audit(2000000285.739:616): pid=10762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1633" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 546.864104][ T26] audit: type=1804 audit(2000000286.049:617): pid=10762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1633" name="/newroot/365/file2/file1" dev="loop4" ino=15 res=1 errno=0 [ 550.993353][T10799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 551.011940][T10799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 551.021317][T10799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 551.032679][T10799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 551.041327][T10799] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 551.049129][T10799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.312796][T10797] bond0 speed is unknown, defaulting to 1000 [ 552.153931][T10797] chnl_net:caif_netlink_parms(): no params data found [ 552.614215][T10797] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.669338][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.678151][T10797] device bridge_slave_0 entered promiscuous mode [ 552.757366][T10797] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.789707][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.829395][T10797] device bridge_slave_1 entered promiscuous mode [ 552.924674][T10797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.951144][T10797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.081014][T10799] Bluetooth: hci5: command 0x0409 tx timeout [ 553.168472][T10820] netlink: 'syz.4.1642': attribute type 21 has an invalid length. [ 553.246749][T10797] team0: Port device team_slave_0 added [ 553.583181][T10797] team0: Port device team_slave_1 added [ 553.964509][T10829] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 0 [ 554.000696][T10797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.007778][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.041667][T10797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.050891][T10819] Cannot find set identified by id 0 to match [ 554.069412][T10797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.076416][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.223225][T10797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.879449][T10797] device hsr_slave_0 entered promiscuous mode [ 554.904919][T10797] device hsr_slave_1 entered promiscuous mode [ 554.924307][T10797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.952906][T10797] Cannot create hsr debugfs directory [ 555.161160][T10799] Bluetooth: hci5: command 0x041b tx timeout [ 556.468197][T10797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 557.318706][T10849] sg_write: data in/out 287744/136 bytes for SCSI command 0x0-- guessing data in; [ 557.318706][T10849] program syz.4.1653 not setting count and/or reply_len properly [ 557.942084][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 558.375884][T10797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 558.417859][T10797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 558.487802][T10797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 559.601375][T10797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.632731][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 559.673582][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 559.692873][T10797] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.738962][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 559.759972][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 559.809857][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.817011][ T5394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.889533][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 559.939673][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 559.966807][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 560.020468][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.027624][ T5394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.063537][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 560.182929][T10797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 560.194271][T10797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.209688][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 560.218721][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 560.311753][T10869] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 560.555372][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 560.902075][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 560.920022][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 560.989501][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 561.003088][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 561.099212][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 561.118466][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 561.147553][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 561.451082][T10880] loop2: detected capacity change from 0 to 16 [ 561.771983][T10880] erofs: (device loop2): mounted with root inode @ nid 36. [ 561.806945][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 561.815381][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 562.953606][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.959994][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.425388][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 563.449674][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 563.462355][T10797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.934533][T10894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.954845][T10891] CIFS: Attempting to mount \\127.0.0.1\share [ 564.970675][T10911] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 565.648901][T10891] CIFS: VFS: Error connecting to socket. Aborting operation. [ 565.688630][ T26] audit: type=1800 audit(2000000304.869:618): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1670" name="memory_backed" dev="configfs" ino=58465 res=0 errno=0 [ 565.763863][ T26] audit: type=1800 audit(2000000304.899:619): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1670" name="zone_nr_conv" dev="configfs" ino=58466 res=0 errno=0 [ 565.831104][ T26] audit: type=1800 audit(2000000304.899:620): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1670" name="power" dev="configfs" ino=58467 res=0 errno=0 [ 565.943647][T10919] null_blk: disk nullb1 created [ 566.083330][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 566.148629][T10891] CIFS: VFS: cifs_mount failed w/return code = -4 [ 566.460714][T10916] ceph: No mds server is up or the cluster is laggy [ 566.507514][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 566.620130][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 566.635610][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 566.647527][T10797] device veth0_vlan entered promiscuous mode [ 566.810847][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 566.828220][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 566.862974][T10797] device veth1_vlan entered promiscuous mode [ 567.032415][ T4399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.160045][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 567.168800][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 567.187232][T10797] device veth0_macvtap entered promiscuous mode [ 567.263497][ T4399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.301844][T10797] device veth1_macvtap entered promiscuous mode [ 567.329048][T10797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.351724][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 567.365406][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 567.397989][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 567.426675][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 567.497031][ T4399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.540257][T10797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.547811][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 567.563953][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 567.582901][T10797] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.605829][T10797] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.617725][T10797] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.635416][T10797] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.741219][ T4399] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.089537][ T126] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 568.108616][ T5405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.139455][ T5405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.156123][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 568.285775][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.289774][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 568.303356][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.335912][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.345911][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 568.355770][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.433160][ T126] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 568.469296][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.139489][ T126] usb 3-1: Product: syz [ 569.143901][ T126] usb 3-1: Manufacturer: syz [ 569.148511][ T126] usb 3-1: SerialNumber: syz [ 569.180281][ T4399] tipc: Disabling bearer [ 569.187113][ T4399] tipc: Left network mode [ 570.240393][ T126] usb 3-1: 0:2 : does not exist [ 570.250883][ T126] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 570.903772][ T126] usb 3-1: USB disconnect, device number 10 [ 571.180365][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1684'. [ 573.092400][ T4399] device ip6gretap0 left promiscuous mode [ 573.374360][T10984] netlink: 'syz.3.1685': attribute type 1 has an invalid length. [ 573.431748][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1685'. [ 573.511475][T11009] device syzkaller0 left promiscuous mode [ 577.697125][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1699'. [ 577.894852][T11070] team0: Device erspan0 is up. Set it down before adding it as a team port [ 578.885800][ T4316] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 579.112973][ T4316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 579.139383][T10963] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 579.153929][ T4316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.164776][T11092] netlink: 'syz.3.1705': attribute type 10 has an invalid length. [ 579.182719][ T4316] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 579.352679][ T4316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.417075][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1706'. [ 579.951826][ T4316] usb 7-1: config 0 descriptor?? [ 580.083367][T10963] usb 3-1: unable to get BOS descriptor or descriptor too short [ 580.139957][T10963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.189083][T10963] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.228478][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 580.279820][T10963] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 580.339421][T10963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.368223][ T4316] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 580.386084][T10963] usb 3-1: Product: syz [ 580.399496][T10963] usb 3-1: Manufacturer: syz [ 580.404244][T10963] usb 3-1: SerialNumber: syz [ 580.863986][ T4316] isku 0003:1E7D:319C.0004: couldn't init struct isku_device [ 580.874578][ T4316] isku 0003:1E7D:319C.0004: couldn't install keyboard [ 580.886512][ T4316] isku: probe of 0003:1E7D:319C.0004 failed with error -71 [ 581.015745][ T4316] usb 7-1: USB disconnect, device number 2 [ 581.800643][T10963] usb 3-1: cannot find UAC_HEADER [ 581.935181][T10963] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 581.949984][T11112] fido_id[11112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 582.040421][T10963] usb 3-1: USB disconnect, device number 11 [ 582.280044][ T4399] device veth7 left promiscuous mode [ 582.290956][T11113] udevd[11113]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.321078][ T4399] bridge2: port 2(veth7) entered disabled state [ 582.381683][ T4399] device veth5 left promiscuous mode [ 582.389560][ T4399] bridge2: port 1(veth5) entered disabled state [ 582.538913][ T4399] device hsr_slave_0 left promiscuous mode [ 582.829911][T11138] loop4: detected capacity change from 0 to 512 [ 582.866847][T11138] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 582.922131][T11138] EXT4-fs error (device loop4): ext4_init_orphan_info:623: comm syz.4.1715: orphan file block 0: bad magic [ 583.020948][T11138] EXT4-fs (loop4): mount failed [ 583.638028][ T4399] bond2 (unregistering): (slave bond0): Releasing active interface [ 583.650201][ T4399] bond2 (unregistering): Released all slaves [ 583.665784][ T4399] bond1 (unregistering): Released all slaves [ 585.460604][ T4399] bond0 (unregistering): Released all slaves [ 585.604213][ T4399] smc: removing net device lo with user defined pnetid SYZ0 [ 585.618704][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1713'. [ 585.721519][T11138] ip6tnl0: Caught tx_queue_len zero misconfig [ 585.780821][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'. [ 585.857378][T11157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 585.874401][T11157] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.916620][T11157] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.966258][T11157] bond2: (slave veth0_to_bond): Releasing active interface [ 586.023361][T11157] bond0: (slave bond_slave_0): Releasing backup interface [ 586.052020][T11157] bond0: (slave bond_slave_1): Releasing backup interface [ 586.105939][T11157] team0: Port device team_slave_0 removed [ 586.113740][T11157] team0: Port device team_slave_1 removed [ 586.123623][T11157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.141561][T11157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.151098][T11157] bridge0: port 3(macvlan2) entered disabled state [ 586.280769][T11157] bond2: (slave veth3): Releasing active interface [ 586.875994][T11147] device syzkaller0 entered promiscuous mode [ 589.612215][T11203] loop4: detected capacity change from 0 to 16 [ 589.638767][T11203] erofs: (device loop4): mounted with root inode @ nid 36. [ 589.766853][T11204] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 599.782947][T11293] loop6: detected capacity change from 0 to 1024 [ 599.899491][T11293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.009898][T11293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c018, mo2=0102] [ 600.018122][T11293] System zones: 0-1, 3-12 [ 600.120117][T11293] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 602.276823][T11291] EXT4-fs error (device loop6): ext4_discard_preallocations:5124: comm syz.6.1745: Error -117 loading buddy information for 4294961127 [ 602.419450][T11293] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.1745: Invalid inode table block 5 in block_group 0 [ 602.473365][T11293] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 602.589763][T11293] EXT4-fs error (device loop6): ext4_ext_truncate:4475: inode #18: comm syz.6.1745: mark_inode_dirty error [ 602.630680][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 602.661943][T11293] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.1745: Invalid inode table block 5 in block_group 0 [ 602.676079][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 602.727285][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 602.732003][T11293] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 602.762315][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 602.801146][T11293] EXT4-fs error (device loop6): ext4_truncate:4325: inode #18: comm syz.6.1745: mark_inode_dirty error [ 602.816930][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 602.849209][T11293] EXT4-fs error (device loop6) in ext4_setattr:5695: Corrupt filesystem [ 602.866305][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 602.914267][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 603.048441][T10797] EXT4-fs (loop6): unmounting filesystem. [ 608.093030][T10963] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 608.320828][T10963] usb 5-1: config index 0 descriptor too short (expected 100, got 68) [ 608.369627][T10963] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 608.435256][T10963] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 608.662783][T10963] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.799431][T10963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 608.807900][T10963] usb 5-1: SerialNumber: syz [ 608.934570][T11375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 609.154522][T11375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 609.645479][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.699413][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.758106][T10963] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 610.024023][ T4273] usb 5-1: USB disconnect, device number 7 [ 610.075357][ T4273] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 610.504502][T11445] netlink: 276 bytes leftover after parsing attributes in process `syz.6.1770'. [ 610.558869][T11445] tipc: Enabling of bearer rejected, failed to enable media [ 612.497313][T11477] batman_adv: batadv0: Interface deactivated: dummy0 [ 612.504376][T11477] batman_adv: batadv0: Removing interface: dummy0 [ 612.516127][T11477] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 612.524963][T11477] bond2: (slave veth0_to_bond): Releasing active interface [ 612.571088][T11477] bond1: (slave geneve2): Releasing active interface [ 612.633347][T11473] loop4: detected capacity change from 0 to 512 [ 612.706925][T11473] EXT4-fs (loop4): Unsupported encryption level 190 [ 613.290226][T11496] wg1 speed is unknown, defaulting to 1000 [ 613.317671][T11496] wg1 speed is unknown, defaulting to 1000 [ 613.332047][T11496] wg1 speed is unknown, defaulting to 1000 [ 613.887445][T11496] infiniband syz2: set down [ 613.892493][T11496] infiniband syz2: added wg1 [ 613.957445][ T4273] wg1 speed is unknown, defaulting to 1000 [ 614.261425][T11496] infiniband syz2: Couldn't open port 1 [ 614.299282][T11496] RDS/IB: syz2: added [ 614.304680][T11496] smc: adding ib device syz2 with port count 1 [ 614.311987][T11496] smc: ib device syz2 port 1 has pnetid [ 614.321752][T11496] wg1 speed is unknown, defaulting to 1000 [ 614.419316][ T8708] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 614.431015][T11496] wg1 speed is unknown, defaulting to 1000 [ 614.526666][T11496] wg1 speed is unknown, defaulting to 1000 [ 614.620196][T11496] wg1 speed is unknown, defaulting to 1000 [ 614.651114][ T8708] usb 5-1: Using ep0 maxpacket: 8 [ 614.658289][ T8708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.714824][T11496] wg1 speed is unknown, defaulting to 1000 [ 614.719266][ T8708] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.815413][ T8708] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 614.851026][ T8708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.908920][T10964] wg1 speed is unknown, defaulting to 1000 [ 614.927631][ T8708] usb 5-1: Product: syz [ 614.967582][ T8708] usb 5-1: Manufacturer: syz [ 614.994320][ T8708] usb 5-1: SerialNumber: syz [ 616.555711][ T8708] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 616.765912][ T8708] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 616.825152][ T8708] usb 5-1: USB disconnect, device number 8 [ 616.840335][T11308] udevd[11308]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.612689][T11563] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 619.636335][T11563] lo: Caught tx_queue_len zero misconfig [ 619.674996][T11563] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 623.347448][T11596] loop4: detected capacity change from 0 to 2048 [ 623.417311][T11596] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 623.559860][T11596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.771048][T11606] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.780126][T11606] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.789458][T11606] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.800600][T11606] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.947758][T11606] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 624.408703][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.415940][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.602805][ T4280] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 624.786084][ T4280] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 627.584721][ T26] audit: type=1326 audit(2000000366.769:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.5.1813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46a39e159 code=0x7ffc0000 [ 627.941648][ T26] audit: type=1326 audit(2000000366.809:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.5.1813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46a39e159 code=0x7ffc0000 [ 628.300367][ T26] audit: type=1326 audit(2000000366.809:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.5.1813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46a39e159 code=0x7ffc0000 [ 628.519887][T11643] netlink: 'syz.3.1814': attribute type 1 has an invalid length. [ 628.618118][ T26] audit: type=1326 audit(2000000366.809:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.5.1813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46a39e159 code=0x7ffc0000 [ 628.982205][ T26] audit: type=1326 audit(2000000366.809:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.5.1813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa46a39e159 code=0x7ffc0000 [ 629.367095][ T26] audit: type=1326 audit(2000000366.809:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.5.1813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46a39e159 code=0x7ffc0000 [ 629.700833][ T26] audit: type=1326 audit(2000000366.819:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.5.1813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46a39e159 code=0x7ffc0000 [ 630.729177][ T26] audit: type=1326 audit(2000000366.819:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.5.1813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46a39e159 code=0x7ffc0000 [ 631.105900][ T26] audit: type=1326 audit(2000000366.819:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.5.1813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa46a39e159 code=0x7ffc0000 [ 631.199180][ T26] audit: type=1326 audit(2000000366.829:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.5.1813" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46a39e159 code=0x7ffc0000 [ 631.551211][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1820'. [ 631.650574][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1820'. [ 632.649071][T11688] overlayfs: failed to clone lowerpath [ 632.695375][T11688] overlayfs: failed to clone lowerpath [ 632.824249][T10799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.836911][T10799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.846961][T10799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.858422][T10799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.866765][T10799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 632.874485][T10799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.046088][T11695] bond0 speed is unknown, defaulting to 1000 [ 633.153355][T11695] wg1 speed is unknown, defaulting to 1000 [ 634.923245][T10799] Bluetooth: hci1: command 0x0409 tx timeout [ 635.406344][T11715] tmpfs: Unknown parameter 'quota' [ 637.100827][T11695] chnl_net:caif_netlink_parms(): no params data found [ 637.128215][T10799] Bluetooth: hci1: command 0x041b tx timeout [ 639.449632][T10799] Bluetooth: hci1: command 0x040f tx timeout [ 641.276622][T11695] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.300743][T11695] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.342569][T11695] device bridge_slave_0 entered promiscuous mode [ 641.435662][T11771] jffs2: notice: (11771) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 641.452757][T11695] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.452821][T11695] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.453918][T11695] device bridge_slave_1 entered promiscuous mode [ 641.617424][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 641.617441][ T26] audit: type=1800 audit(2000000380.800:690): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1846" name=8006 dev="sda1" ino=2054 res=0 errno=0 [ 641.621097][T11780] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 642.141282][T11695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.357648][T11695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.528072][T11695] team0: Port device team_slave_0 added [ 642.537842][T10799] Bluetooth: hci1: command 0x0419 tx timeout [ 642.598855][T11695] team0: Port device team_slave_1 added [ 642.790844][T11695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.828640][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.976455][T11695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.989295][T11695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.996282][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.023054][T11695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.569499][T11796] tipc: Enabling of bearer rejected, failed to enable media [ 643.896085][T11695] device hsr_slave_0 entered promiscuous mode [ 644.715554][T11695] device hsr_slave_1 entered promiscuous mode [ 644.732667][T11695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.778739][T11695] Cannot create hsr debugfs directory [ 644.979357][T11431] tipc: Disabling bearer [ 644.985430][T11431] tipc: Disabling bearer [ 645.025971][T11431] tipc: Left network mode [ 645.554511][T11835] Cannot find add_set index 0 as target [ 646.447862][T11832] net_ratelimit: 11 callbacks suppressed [ 646.447880][T11832] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 646.498134][T11847] loop6: detected capacity change from 0 to 1024 [ 646.548257][T11833] netlink: 'syz.3.1856': attribute type 9 has an invalid length. [ 649.122298][T11885] sctp: [Deprecated]: syz.5.1863 (pid 11885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 649.122298][T11885] Use struct sctp_sack_info instead [ 650.190587][T11695] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 650.309183][T11695] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 650.330395][T11695] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 651.229049][T11695] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 651.721633][T11695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.778644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 651.801360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 651.845249][T11695] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.166080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.206287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.234441][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.244202][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.298626][T11926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1872'. [ 652.350041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.384656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.415667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.435178][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.442362][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.477338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.535057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.696028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 652.718877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.961701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 652.978517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 653.075580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 653.147888][T11695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 653.299384][T11695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.311511][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 653.321536][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 653.330262][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 653.423082][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.408580][T11431] device veth11 left promiscuous mode [ 655.424559][T11431] bridge1: port 3(veth11) entered disabled state [ 655.741879][T11431] device veth0_to_bond left promiscuous mode [ 655.877151][T11431] bridge1: port 2(veth0_to_bond) entered disabled state [ 655.886486][T11431] device veth9 left promiscuous mode [ 655.897112][T11431] bridge1: port 1(veth9) entered disabled state [ 655.925893][T11431] device hsr_slave_0 left promiscuous mode [ 655.944383][T11431] device hsr_slave_1 left promiscuous mode [ 657.827736][T11431] bond5 (unregistering): (slave veth7): Releasing active interface [ 657.880152][T11431] bond5 (unregistering): Released all slaves [ 658.119612][T11431] bond4 (unregistering): (slave veth5): Releasing backup interface [ 658.155369][T11431] bond4 (unregistering): Released all slaves [ 658.191298][T11431] bond3 (unregistering): Released all slaves [ 658.336472][T11431] bond2 (unregistering): Released all slaves [ 659.729450][T11431] bond1 (unregistering): Released all slaves [ 662.044490][T11994] futex_wake_op: syz.3.1889 tries to shift op by 144; fix this program [ 665.157125][T11431] bond0 (unregistering): Released all slaves [ 665.881290][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 666.023577][T11970] netlink: 'syz.5.1883': attribute type 1 has an invalid length. [ 666.031810][T10964] bond0 speed is unknown, defaulting to 1000 [ 666.451618][T12005] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1892'. [ 666.559480][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.587700][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.629711][T11695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.748307][T12038] sch_tbf: burst 4095 is lower than device syzkaller0 mtu (65589) ! [ 669.755506][T12039] jffs2: notice: (12039) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 671.936228][T12038] tipc: Enabled bearer , priority 0 [ 673.381960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 673.400752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 674.094080][T12097] overlayfs: failed to clone lowerpath [ 674.227358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 674.248333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 674.280443][T11695] device veth0_vlan entered promiscuous mode [ 674.289970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 674.320397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 674.352826][T11695] device veth1_vlan entered promiscuous mode [ 674.393386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 674.453469][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.492850][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.534998][T11695] device veth0_macvtap entered promiscuous mode [ 674.563324][T11695] device veth1_macvtap entered promiscuous mode [ 674.612605][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.667033][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.713285][T11695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.731268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 674.746294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 674.754755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 674.772145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 674.786496][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.822049][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.853887][T11695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.890134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 674.920738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 674.947487][T11695] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.963687][T11695] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.982828][T11695] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.010333][T11695] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.247827][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.264377][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.286764][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 675.312801][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.341444][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.363569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 675.515341][ T26] audit: type=1326 audit(2000000414.702:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.7.1818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502459e159 code=0x7ffc0000 [ 675.641104][ T26] audit: type=1326 audit(2000000414.742:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.7.1818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502459e159 code=0x7ffc0000 [ 675.736019][T12123] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 675.742741][ T26] audit: type=1326 audit(2000000414.742:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.7.1818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502459e159 code=0x7ffc0000 [ 675.871719][ T26] audit: type=1326 audit(2000000414.742:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.7.1818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f502459e159 code=0x7ffc0000 [ 676.092808][ T26] audit: type=1326 audit(2000000414.742:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.7.1818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502459e159 code=0x7ffc0000 [ 676.133336][ T26] audit: type=1326 audit(2000000414.742:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.7.1818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502459e159 code=0x7ffc0000 [ 677.412341][ T26] audit: type=1326 audit(2000000414.742:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.7.1818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502459e159 code=0x7ffc0000 [ 677.488347][ T26] audit: type=1326 audit(2000000414.742:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.7.1818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502459e159 code=0x7ffc0000 [ 677.518817][ T26] audit: type=1326 audit(2000000414.742:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.7.1818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f502459e159 code=0x7ffc0000 [ 677.637153][T10799] Bluetooth: hci5: command 0x0406 tx timeout [ 677.869512][ T26] audit: type=1326 audit(2000000414.742:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.7.1818" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502459e159 code=0x7ffc0000 [ 682.172061][T12183] loop6: detected capacity change from 0 to 512 [ 682.508474][T12185] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 684.548850][T12183] syz.6.1924 (12183): drop_caches: 3 [ 685.311286][T12196] loop7: detected capacity change from 0 to 40427 [ 685.509032][T12196] F2FS-fs (loop7): Fix alignment : done, start(4096) end(16896) block(12288) [ 685.532654][T12196] F2FS-fs (loop7): Unrecognized mount option "noinlin*šxattr" or missing value [ 685.798799][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.805139][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.602473][T12269] overlayfs: failed to clone lowerpath [ 695.865427][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 695.877128][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 695.885714][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 695.912524][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 695.922496][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 695.932606][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 696.073489][T12315] wg1 speed is unknown, defaulting to 1000 [ 696.305695][T12326] nftables ruleset with unbound set [ 697.956238][T10799] Bluetooth: hci2: command 0x0409 tx timeout [ 700.035647][T10799] Bluetooth: hci2: command 0x041b tx timeout [ 701.801953][T12367] comedi comedi0: aio_aio12_8: I/O port conflict (0x59,32) [ 702.425757][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 702.649353][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 704.084326][T12315] chnl_net:caif_netlink_parms(): no params data found [ 704.435499][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 705.339389][T12315] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.526417][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 705.526433][ T26] audit: type=1800 audit(2000000444.713:750): pid=12398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1979" name="bus" dev="ramfs" ino=61330 res=0 errno=0 [ 705.622508][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.043163][T12315] device bridge_slave_0 entered promiscuous mode [ 706.135025][T12315] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.215797][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.271272][T12315] device bridge_slave_1 entered promiscuous mode [ 711.250469][T12470] loop6: detected capacity change from 0 to 64 [ 711.521861][T12315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.756998][T12315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.792298][T12315] team0: Port device team_slave_0 added [ 711.805487][T12315] team0: Port device team_slave_1 added [ 711.831700][T12315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.838944][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.865592][T12315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.880800][T12315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.888014][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.919005][T12315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.004302][T12315] device hsr_slave_0 entered promiscuous mode [ 712.011652][T12315] device hsr_slave_1 entered promiscuous mode [ 714.354114][T12315] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 714.661834][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2001'. [ 716.032712][T12315] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 716.068561][T12315] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 716.120504][T12315] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 717.982184][T12315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.055332][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 718.070438][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 718.207649][T12315] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.005381][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 719.025009][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 719.098671][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.105875][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.160165][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 719.219532][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 719.270908][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.278104][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.346594][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 720.266808][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 720.317616][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 720.353172][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 720.593108][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 721.162726][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 721.260359][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 721.269741][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 721.278705][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 721.290220][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 721.329180][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 721.343805][T11419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 722.243065][T12315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 723.607407][T12583] xt_hashlimit: size too large, truncated to 1048576 [ 723.614397][T12583] xt_hashlimit: max too large, truncated to 1048576 [ 725.169241][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 725.186249][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 725.220923][T12315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.351387][T12616] create_pit_timer: 4 callbacks suppressed [ 725.352773][T12616] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 725.431067][T12610] kvm: pic: non byte read [ 725.456179][T12610] kvm: pic: level sensitive irq not supported [ 725.456323][T12610] kvm: pic: non byte read [ 725.544436][T12610] kvm: pic: level sensitive irq not supported [ 725.761756][T12610] kvm: pic: non byte read [ 725.979070][T12610] kvm: pic: level sensitive irq not supported [ 725.979146][T12610] kvm: pic: non byte read [ 730.782521][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 730.832760][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 730.859165][T12315] device veth0_vlan entered promiscuous mode [ 730.897314][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 730.928117][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 730.988805][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 731.019096][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 731.071530][T12315] device veth1_vlan entered promiscuous mode [ 731.162693][ T8704] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 731.955722][ T8704] usb 8-1: config index 0 descriptor too short (expected 100, got 68) [ 731.975209][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 731.983549][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 732.002054][ T8704] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 732.049936][ T8704] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 732.074914][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 732.104795][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 732.122371][ T8704] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.154814][T12315] device veth0_macvtap entered promiscuous mode [ 732.170751][ T8704] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 732.194542][T12315] device veth1_macvtap entered promiscuous mode [ 732.201333][ T8704] usb 8-1: SerialNumber: syz [ 732.238495][T12674] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 732.278452][T12315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.300972][T12315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.321671][T12315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.358922][T12315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.399796][T12315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.421647][T11433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 732.441633][T11433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 732.456960][T11433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 732.474683][T11433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 732.494085][T12315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.513197][T12315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.533898][T12315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.555376][T12315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.572363][T12315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.591846][T12674] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 732.646928][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 733.239329][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 733.291760][T12674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.292887][T12315] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.318041][T12674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.354924][T12315] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.384330][T12315] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.408482][T12315] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.531985][ T8704] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 733.615069][ T8704] usb 8-1: USB disconnect, device number 2 [ 733.622028][ T8704] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 733.722146][ T26] audit: type=1800 audit(2000000472.915:751): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2033" name="bus" dev="ramfs" ino=64220 res=0 errno=0 [ 733.857813][ T5410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.884366][ T5410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.918258][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 734.021847][ T5405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.048548][ T5405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.250620][T12703] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6731] was attempted by " [ 734.328518][T12704] loop6: detected capacity change from 0 to 40427 [ 734.442593][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 734.451410][T12704] F2FS-fs (loop6): invalid crc value [ 734.549101][T12704] F2FS-fs (loop6): Found nat_bits in checkpoint [ 734.638381][T12704] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 740.206526][T12739] lo: Caught tx_queue_len zero misconfig [ 740.225060][T12739] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 740.343743][T12742] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 741.564912][T12748] loop6: detected capacity change from 0 to 4096 [ 741.696206][T12748] ntfs3: loop6: failed to replay log file. Can't mount rw! [ 742.551794][T12737] loop8: detected capacity change from 0 to 32768 [ 742.873358][T10952] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 743.076279][ T26] audit: type=1800 audit(2000000482.275:752): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2052" name="bus" dev="ramfs" ino=64495 res=0 errno=0 [ 743.099135][T10952] usb 7-1: config index 0 descriptor too short (expected 100, got 68) [ 743.123220][T10952] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 743.198141][T10952] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 743.547070][T10952] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 743.563226][T10952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 743.572750][T10952] usb 7-1: SerialNumber: syz [ 743.587338][T12764] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 743.774192][T12772] futex_wake_op: syz.7.2058 tries to shift op by 144; fix this program [ 743.808001][T12764] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 744.723730][T12764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.732634][T12764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.004360][T10952] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 745.597578][ T4321] usb 7-1: USB disconnect, device number 3 [ 745.644350][ T4321] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 745.681252][T12784] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.690179][T12784] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.699050][T12784] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.707801][T12784] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.723927][T12784] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 746.117577][T12802] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 746.440437][T12811] tipc: Enabling of bearer rejected, failed to enable media [ 747.147258][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2070'. [ 747.840108][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.846483][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.417364][T12889] loop7: detected capacity change from 0 to 2048 [ 756.565299][T12889] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 756.716439][T12889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.716068][T12212] udevd[12212]: symlink '../../loop7' '/dev/disk/by-diskseq/266.tmp-b7:7' failed: Read-only file system [ 757.807561][T12212] udevd[12212]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system [ 757.878026][T11695] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 757.903944][T12212] udevd[12212]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system [ 757.929776][T11695] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 758.745363][T12874] Set syz1 is full, maxelem 65536 reached [ 759.612354][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 760.772452][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2091'. [ 760.873823][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2091'. [ 765.323668][T12212] udevd[12212]: symlink '../../loop7' '/dev/disk/by-diskseq/266.tmp-b7:7' failed: Read-only file system [ 765.418835][ T4393] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.747921][ T4393] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.040992][ T4393] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.824526][ T4393] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.998580][T12990] loop6: detected capacity change from 0 to 512 [ 770.015869][T12990] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 770.051787][T12990] EXT4-fs (loop6): 1 truncate cleaned up [ 770.057526][T12990] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 770.205442][T10797] EXT4-fs (loop6): unmounting filesystem. [ 771.477881][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 771.490408][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 771.499868][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 771.510148][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 771.518875][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 771.526365][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 771.729741][T13021] wg1 speed is unknown, defaulting to 1000 [ 771.801564][T12335] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 772.041807][T12335] usb 9-1: Using ep0 maxpacket: 16 [ 772.055737][T12335] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 772.226339][T12335] usb 9-1: New USB device found, idVendor=05ac, idProduct=021e, bcdDevice= 0.00 [ 772.393401][T12335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.606673][T12335] usb 9-1: config 0 descriptor?? [ 773.037637][T12335] usbhid 9-1:0.0: can't add hid device: -71 [ 773.071975][T12335] usbhid: probe of 9-1:0.0 failed with error -71 [ 773.291479][T12335] usb 9-1: USB disconnect, device number 2 [ 773.381787][T13047] sctp: [Deprecated]: syz.3.2115 (pid 13047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 773.381787][T13047] Use struct sctp_sack_info instead [ 773.563520][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 774.536619][T13021] chnl_net:caif_netlink_parms(): no params data found [ 775.164024][T13021] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.200466][T13021] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.253229][T13021] device bridge_slave_0 entered promiscuous mode [ 775.286988][T13021] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.300400][T13021] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.419864][T13021] device bridge_slave_1 entered promiscuous mode [ 775.641452][T10799] Bluetooth: hci1: command 0x041b tx timeout [ 778.153278][T10799] Bluetooth: hci1: command 0x040f tx timeout [ 778.183298][T13086] loop6: detected capacity change from 0 to 128 [ 778.269327][T13086] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 778.319454][T13021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.321507][T13086] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 778.342146][T13021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.555284][T13021] team0: Port device team_slave_0 added [ 779.385976][T13021] team0: Port device team_slave_1 added [ 779.551955][ T4393] device hsr_slave_0 left promiscuous mode [ 779.671194][ T4393] device hsr_slave_1 left promiscuous mode [ 779.797315][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.899001][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.022376][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.120247][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.191190][T10799] Bluetooth: hci1: command 0x0419 tx timeout [ 780.247923][ T4393] device bridge_slave_1 left promiscuous mode [ 780.346198][ T4393] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.007205][ T26] audit: type=1326 audit(2000000520.058:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.5.2131" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa46a39e159 code=0x0 [ 781.072685][T10797] EXT4-fs (loop6): unmounting filesystem. [ 781.091325][ T4393] device bridge_slave_0 left promiscuous mode [ 781.221174][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.577418][ T4393] device veth1_macvtap left promiscuous mode [ 781.604638][ T4393] device veth0_macvtap left promiscuous mode [ 781.610784][ T4393] device veth1_vlan left promiscuous mode [ 781.681160][ T4393] device veth0_vlan left promiscuous mode [ 783.152199][T13130] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[13131] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[13130] [ 783.241043][T10952] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 783.721279][T10952] usb 7-1: Using ep0 maxpacket: 8 [ 783.728157][T10952] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.893024][T10952] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 790.236214][T10952] usb 7-1: string descriptor 0 read error: -32 [ 790.290643][T10952] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 790.304308][T10952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.356573][T10952] usb 7-1: can't set config #1, error -32 [ 790.388965][ T4393] team0 (unregistering): Port device team_slave_1 removed [ 790.508083][ T4393] team0 (unregistering): Port device team_slave_0 removed [ 790.622615][ T4393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.746062][ T4393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.661888][ T4393] bond0 (unregistering): Released all slaves [ 791.896773][T13021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.939095][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.948610][ T4321] usb 7-1: USB disconnect, device number 4 [ 792.097207][T13021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.721498][T13021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.728504][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.220958][T13021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.543200][T13021] device hsr_slave_0 entered promiscuous mode [ 796.430825][T13021] device hsr_slave_1 entered promiscuous mode [ 796.446090][T13198] block device autoloading is deprecated and will be removed. [ 796.510871][T13021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.519010][T13021] Cannot create hsr debugfs directory [ 798.643210][T13021] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 798.754065][T13021] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 798.777552][T13021] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 798.812584][T13021] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 799.102103][T13021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.672889][T11418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 799.780201][T11418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 799.941697][T13021] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.016432][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 800.039707][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 800.064003][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.071334][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.087191][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 800.184014][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 800.193839][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 800.920743][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.927934][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.421769][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 801.452971][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 801.827402][T13021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 801.911911][T13021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 803.688957][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 804.560947][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 805.490520][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 806.276669][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 806.301577][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 806.325337][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 806.357289][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 806.379324][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 806.549541][T13289] sctp: [Deprecated]: syz.8.2164 (pid 13289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.549541][T13289] Use struct sctp_sack_info instead [ 806.781526][T13021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.865020][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 806.933366][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 807.075602][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 807.083370][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 807.918300][T13304] fuse: Bad value for 'group_id' [ 808.673471][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.679944][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.759579][T12017] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 808.832615][T13311] loop8: detected capacity change from 0 to 128 [ 808.846399][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 808.856645][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 808.916858][T13314] jffs2: notice: (13314) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 808.953824][T13311] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 808.969842][T12017] usb 7-1: Using ep0 maxpacket: 8 [ 808.971151][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 808.977050][T12017] usb 7-1: config 2 has an invalid interface number: 241 but max is 0 [ 808.995411][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 809.144452][T13021] device veth0_vlan entered promiscuous mode [ 809.172623][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 809.180821][T12017] usb 7-1: config 2 has no interface number 0 [ 809.187615][T12017] usb 7-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 809.376364][T12017] usb 7-1: config 2 interface 241 has no altsetting 0 [ 809.456855][T12017] usb 7-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 809.535948][T12017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.592121][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 809.619067][T12017] usb 7-1: Product: syz [ 809.711837][T12017] usb 7-1: Manufacturer: syz [ 809.716544][T12017] usb 7-1: SerialNumber: syz [ 809.743433][T12017] ti_usb_3410_5052 7-1:2.241: TI USB 3410 1 port adapter converter detected [ 809.777306][T13021] device veth1_vlan entered promiscuous mode [ 809.794205][T12017] ti_usb_3410_5052 7-1:2.241: missing endpoints [ 809.858444][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 809.890737][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 809.978388][T13021] device veth0_macvtap entered promiscuous mode [ 810.065618][T13021] device veth1_macvtap entered promiscuous mode [ 810.806002][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 810.827873][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 811.026114][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 811.105267][T13340] virtio-fs: tag not found [ 811.326264][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 812.124037][T13021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.169319][T13021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.372616][T13021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.444662][T13021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.832455][T12017] usb 7-1: USB disconnect, device number 5 [ 813.109261][T12696] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 813.134098][T13021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.303219][T12696] usb 9-1: Using ep0 maxpacket: 8 [ 813.313957][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 813.420595][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 813.449799][T12696] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 813.458890][T12696] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 813.475159][T12696] usb 9-1: Product: syz [ 813.480358][T12696] usb 9-1: Manufacturer: syz [ 813.488164][T13021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.504603][T12696] usb 9-1: SerialNumber: syz [ 813.512401][T12696] usb 9-1: config 0 descriptor?? [ 813.527648][T12696] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 813.534881][T13021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.565345][T13021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.576107][T13021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.596472][T13021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.661251][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 814.069687][T12696] gspca_zc3xx: reg_w_i err -110 [ 814.107545][T12696] gspca_zc3xx: probe of 9-1:0.0 failed with error -110 [ 814.160902][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 814.186805][T13021] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.199582][T13021] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.209348][T13021] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.218535][T13021] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.077028][ T5410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.088083][ T5410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.111399][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 816.182305][ T14] usb 9-1: USB disconnect, device number 3 [ 816.224035][ T5392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.257903][ T5392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.323951][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 820.879403][T13423] input: syz1 as /devices/virtual/input/input12 [ 821.228796][T10799] Bluetooth: hci2: command 0x0406 tx timeout [ 821.377029][T13414] Set syz1 is full, maxelem 65536 reached [ 823.644289][T13449] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2201'. [ 824.032741][T13462] loop8: detected capacity change from 0 to 8 [ 824.309172][T13462] SQUASHFS error: zlib decompression failed, data probably corrupt [ 824.317865][T13462] SQUASHFS error: Failed to read block 0x9b: -5 [ 824.324353][T13462] SQUASHFS error: Unable to read metadata cache entry [99] [ 824.331773][T13462] SQUASHFS error: Unable to read inode 0x127 [ 824.579878][T13277] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 824.835952][T13468] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 826.744667][T13492] device syzkaller0 entered promiscuous mode [ 826.762774][T13487] loop6: detected capacity change from 0 to 8192 [ 826.776920][T13487] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 832.779617][T13549] netlink: 'syz.5.2222': attribute type 4 has an invalid length. [ 841.472231][T13625] loop9: detected capacity change from 0 to 1024 [ 843.080430][T13638] ip_tables: iptables: counters copy to user failed while replacing table [ 844.437111][ T26] audit: type=1800 audit(2000000583.631:754): pid=13645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2245" name="bus" dev="ramfs" ino=69158 res=0 errno=0 [ 848.432265][T13677] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2255'. [ 850.227982][T13693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2257'. [ 852.043239][T13709] loop8: detected capacity change from 0 to 32768 [ 852.050524][T13709] XFS: noikeep mount option is deprecated. [ 852.102668][T13709] XFS (loop8): Mounting V5 Filesystem [ 852.221358][T13709] XFS (loop8): Ending clean mount [ 852.249235][T13709] XFS (loop8): Quotacheck needed: Please wait. [ 852.562134][T13709] XFS (loop8): Quotacheck: Done. [ 853.100288][T12315] XFS (loop8): Unmounting Filesystem [ 855.620924][ T26] audit: type=1804 audit(2000000594.822:755): pid=13762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2270" name="bus" dev="ramfs" ino=68105 res=1 errno=0 [ 855.695083][T13763] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4279] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[13763] [ 856.332268][ T26] audit: type=1804 audit(2000000594.822:756): pid=13762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2270" name="bus" dev="ramfs" ino=68105 res=1 errno=0 [ 858.820287][T13806] loop6: detected capacity change from 0 to 32768 [ 858.828832][T13806] XFS: noikeep mount option is deprecated. [ 861.444582][T13806] XFS (loop6): Mounting V5 Filesystem [ 861.526575][T13806] XFS (loop6): Ending clean mount [ 861.585395][T13806] XFS (loop6): Quotacheck needed: Please wait. [ 861.667899][T13806] XFS (loop6): Quotacheck: Done. [ 862.380527][T13840] loop9: detected capacity change from 0 to 512 [ 862.387801][T13840] EXT4-fs: Ignoring removed orlov option [ 862.393496][T13840] ext4: Bad value for 'data' [ 862.397511][T10797] XFS (loop6): Unmounting Filesystem [ 866.091589][T13863] overlayfs: failed to clone lowerpath [ 870.113415][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.107496][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.483892][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 871.515665][ T4321] MPTCP: addr_signal error, add_addr=2, echo=1 [ 874.924319][T13949] device syzkaller0 entered promiscuous mode [ 875.069856][T13956] overlayfs: failed to clone upperpath [ 876.814088][T10799] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 876.823108][T10799] Bluetooth: hci0: Injecting HCI hardware error event [ 876.836436][ T4288] Bluetooth: hci0: hardware error 0x00 [ 877.099078][T13998] MPTCP: kernel_bind error, err=-98 [ 877.139102][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 877.161098][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 877.618397][T13999] overlayfs: failed to clone lowerpath [ 878.885624][T14010] tipc: Started in network mode [ 878.921169][T14010] tipc: Node identity ac1414aa, cluster identity 4711 [ 878.962318][T14010] tipc: New replicast peer: 172.20.20.187 [ 878.973696][T14010] tipc: Enabled bearer , priority 10 [ 878.986432][ T4288] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 879.484018][T14023] wg1 speed is unknown, defaulting to 1000 [ 879.532081][T14026] netlink: 'syz.8.2329': attribute type 1 has an invalid length. [ 879.989054][T14032] bond1: (slave bridge1): making interface the new active one [ 880.025220][T14032] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 880.101474][T14039] IPVS: Error connecting to the multicast addr [ 880.295568][ T4321] tipc: Node number set to 2886997162 [ 883.138202][T14093] wg1 speed is unknown, defaulting to 1000 [ 883.151795][T14085] device syzkaller0 entered promiscuous mode [ 883.870025][ T26] audit: type=1326 audit(2000000623.073:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.9.2348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0687d9e159 code=0x7ffc0000 [ 883.935391][ T26] audit: type=1326 audit(2000000623.103:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.9.2348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0687d9e159 code=0x7ffc0000 [ 883.985575][ T26] audit: type=1326 audit(2000000623.103:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.9.2348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0687d9e159 code=0x7ffc0000 [ 884.045241][ T26] audit: type=1326 audit(2000000623.103:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.9.2348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0687d9e159 code=0x7ffc0000 [ 884.175040][ T26] audit: type=1326 audit(2000000623.103:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.9.2348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0687d9e159 code=0x7ffc0000 [ 884.200269][ T4260] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 884.556726][ T4260] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.701309][ T4260] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 884.785294][ T26] audit: type=1326 audit(2000000623.103:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.9.2348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0687d5e98e code=0x7ffc0000 [ 884.890761][ T26] audit: type=1326 audit(2000000623.113:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.9.2348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0687d9ddeb code=0x7ffc0000 [ 884.903578][ T4260] usb 10-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 884.975734][ T4260] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.994097][ T4260] usb 10-1: Product: syz [ 885.002094][ T4260] usb 10-1: Manufacturer: syz [ 885.017083][ T4260] usb 10-1: SerialNumber: syz [ 885.100567][ T26] audit: type=1326 audit(2000000623.113:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.9.2348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0687d9ddeb code=0x7ffc0000 [ 885.297107][ T4260] sisusb 10-1:1.0: Invalid USB2VGA device [ 885.456083][ T4260] sisusb: probe of 10-1:1.0 failed with error -22 [ 885.777496][ T26] audit: type=1326 audit(2000000623.133:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.9.2348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0687d9ddeb code=0x7ffc0000 [ 886.341518][ T4260] usb 10-1: USB disconnect, device number 2 [ 886.416221][ T26] audit: type=1326 audit(2000000623.133:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.9.2348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0687d9ddeb code=0x7ffc0000 [ 888.768966][T14145] jffs2: notice: (14145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 889.907880][T14145] wg1 speed is unknown, defaulting to 1000 [ 890.123640][T14153] netlink: 'syz.5.2346': attribute type 1 has an invalid length. [ 890.288324][T14153] bond3: (slave bridge2): making interface the new active one [ 890.318598][T14153] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 892.294264][T14178] xt_CT: You must specify a L4 protocol and not use inversions on it [ 896.216114][T14209] loop9: detected capacity change from 0 to 512 [ 896.283753][T14209] EXT4-fs (loop9): Test dummy encryption mode enabled [ 896.437553][T14209] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.2371: inode has both inline data and extents flags [ 897.106454][T14209] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.2371: couldn't read orphan inode 15 (err -117) [ 897.247939][T14209] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 898.679198][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 898.801450][T14209] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 899.166395][T13021] EXT4-fs (loop9): unmounting filesystem. [ 900.901155][T14263] loop6: detected capacity change from 0 to 256 [ 904.259848][T14290] loop9: detected capacity change from 0 to 256 [ 904.364597][T14290] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 904.532007][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 904.532021][ T26] audit: type=1800 audit(2000000643.734:818): pid=14290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2389" name="file1" dev="loop9" ino=1048655 res=0 errno=0 [ 905.430382][T14302] loop8: detected capacity change from 0 to 512 [ 910.512643][T14338] tipc: Enabling of bearer rejected, failed to enable media [ 911.853103][T14358] loop6: detected capacity change from 0 to 512 [ 912.618729][T14364] ip_tables: iptables: counters copy to user failed while replacing table [ 913.724979][T13688] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 914.685122][ T4288] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 914.696001][ T4288] Bluetooth: hci5: Injecting HCI hardware error event [ 914.708905][T10799] Bluetooth: hci5: hardware error 0x00 [ 916.383106][T14387] loop9: detected capacity change from 0 to 512 [ 916.713191][T14387] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #2: comm syz.9.2412: missing EA_INODE flag [ 916.722219][T14393] netlink: 'syz.6.2413': attribute type 1 has an invalid length. [ 916.777028][T14387] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.2412: error while reading EA inode 2 err=-117 [ 916.815056][T14387] EXT4-fs (loop9): 1 orphan inode deleted [ 916.836209][T14387] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 916.977460][T14397] Illegal XDP return value 4294967274 on prog (id 171) dev N/A, expect packet loss! [ 917.621928][T13021] EXT4-fs (loop9): unmounting filesystem. [ 917.788597][T14411] IPVS: set_ctl: invalid protocol: 137 172.30.0.7:20001 [ 917.865259][T10799] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 918.775079][ T8708] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 918.977888][ T8708] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 920.305068][ T8708] usb 9-1: config 0 interface 0 has no altsetting 0 [ 920.356035][ T8708] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 920.428181][ T8708] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 920.473510][ T8708] usb 9-1: Product: syz [ 920.511454][ T8708] usb 9-1: Manufacturer: syz [ 920.531805][ T8708] usb 9-1: SerialNumber: syz [ 920.565780][ T8708] usb 9-1: config 0 descriptor?? [ 920.620853][ T8708] usb 9-1: selecting invalid altsetting 0 [ 920.978576][T14424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.041679][T14424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.189214][T14460] syz.6.2425 sent an empty control message without MSG_MORE. [ 921.203220][ T8708] usb 9-1: USB disconnect, device number 4 [ 923.792602][T14476] overlayfs: missing 'lowerdir' [ 925.825370][T14514] loop6: detected capacity change from 0 to 512 [ 930.109821][T14559] netlink: 'syz.8.2445': attribute type 1 has an invalid length. [ 930.264297][T14559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 930.431705][T14563] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 930.965909][T14570] device bridge2 entered promiscuous mode [ 931.172862][T14570] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 931.810872][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.817251][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.955393][T11408] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 935.148814][T14609] FAULT_INJECTION: forcing a failure. [ 935.148814][T14609] name failslab, interval 1, probability 0, space 0, times 0 [ 935.212354][T14609] CPU: 0 PID: 14609 Comm: syz.8.2457 Not tainted syzkaller #0 [ 935.219867][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 935.230031][T14609] Call Trace: [ 935.233428][T14609] [ 935.236381][T14609] dump_stack_lvl+0x188/0x24e [ 935.241132][T14609] ? show_regs_print_info+0x12/0x12 [ 935.246357][T14609] ? load_image+0x410/0x410 [ 935.251104][T14609] ? __might_sleep+0xd0/0xd0 [ 935.255762][T14609] ? __lock_acquire+0x7c40/0x7c40 [ 935.260839][T14609] should_fail_ex+0x390/0x4c0 [ 935.265677][T14609] should_failslab+0x5/0x20 [ 935.270258][T14609] slab_pre_alloc_hook+0x59/0x300 [ 935.275363][T14609] ? ntfs_init_fs_context+0x1d1/0x490 [ 935.280752][T14609] __kmem_cache_alloc_node+0x4f/0x270 [ 935.286124][T14609] ? ntfs_init_fs_context+0x1d1/0x490 [ 935.291690][T14609] kmalloc_trace+0x26/0xe0 [ 935.296121][T14609] ntfs_init_fs_context+0x1d1/0x490 [ 935.301344][T14609] alloc_fs_context+0x628/0x7d0 [ 935.306291][T14609] __se_sys_fsopen+0xa0/0x2c0 [ 935.311007][T14609] do_syscall_64+0x4c/0xa0 [ 935.315552][T14609] ? clear_bhb_loop+0x60/0xb0 [ 935.320382][T14609] ? clear_bhb_loop+0x60/0xb0 [ 935.325099][T14609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.331073][T14609] RIP: 0033:0x7f101cb9e159 [ 935.335497][T14609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.355377][T14609] RSP: 002b:00007f101dafa028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 935.363976][T14609] RAX: ffffffffffffffda RBX: 00007f101ce25fa0 RCX: 00007f101cb9e159 [ 935.371976][T14609] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 935.380055][T14609] RBP: 00007f101cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 935.388031][T14609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.396014][T14609] R13: 00007f101ce26038 R14: 00007f101ce25fa0 R15: 00007ffe162c5e98 [ 935.403998][T14609] [ 937.079881][T14631] loop9: detected capacity change from 0 to 2048 [ 937.239898][T14631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 942.556633][T14673] loop9: detected capacity change from 0 to 1024 [ 942.590382][T14673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 943.443327][T14672] loop6: detected capacity change from 0 to 131072 [ 943.459548][T14672] F2FS-fs (loop6): invalid crc value [ 943.531273][T14672] F2FS-fs (loop6): Found nat_bits in checkpoint [ 943.562656][T14672] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 943.595014][T14672] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 944.817018][T14685] overlayfs: missing 'lowerdir' [ 945.170884][T14685] CacheFiles: Failed to register: -95 [ 946.424422][T14692] loop8: detected capacity change from 0 to 2048 [ 947.084273][T14692] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 947.343692][T14707] tipc: Started in network mode [ 947.348677][T14707] tipc: Node identity 76984f6fa358, cluster identity 4711 [ 947.356190][T14707] tipc: Enabled bearer , priority 0 [ 947.364891][T14707] device syzkaller0 entered promiscuous mode [ 947.384388][T14707] tipc: Resetting bearer [ 947.394706][T14706] tipc: Resetting bearer [ 947.524978][T14706] tipc: Disabling bearer [ 948.211427][T14690] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 948.228893][T14690] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 948.241644][T14690] EXT4-fs (loop8): This should not happen!! Data will be lost [ 948.241644][T14690] [ 948.251396][T14690] EXT4-fs (loop8): Total free blocks count 0 [ 948.257520][T14690] EXT4-fs (loop8): Free/Dirty block details [ 948.263551][T14690] EXT4-fs (loop8): free_blocks=4096 [ 948.268963][T14690] EXT4-fs (loop8): dirty_blocks=64 [ 948.274152][T14690] EXT4-fs (loop8): Block reservation details [ 948.280409][T14690] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 948.406408][ T5385] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 950.704170][T14743] sd 0:0:1:0: PR command failed: 1026 [ 950.709864][T14743] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 950.716774][T14743] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 953.693674][T14780] loop9: detected capacity change from 0 to 2048 [ 953.977533][T14780] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 954.772736][T14777] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 954.787432][T14777] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 954.799863][T14777] EXT4-fs (loop9): This should not happen!! Data will be lost [ 954.799863][T14777] [ 954.809690][T14777] EXT4-fs (loop9): Total free blocks count 0 [ 954.815939][T14777] EXT4-fs (loop9): Free/Dirty block details [ 954.822051][T14777] EXT4-fs (loop9): free_blocks=4096 [ 954.827337][T14777] EXT4-fs (loop9): dirty_blocks=64 [ 954.832858][T14777] EXT4-fs (loop9): Block reservation details [ 954.838995][T14777] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 954.976820][T11419] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 955.476523][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 955.498781][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 955.511006][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 955.527922][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 955.541128][T14805] sctp: [Deprecated]: syz.5.2494 (pid 14805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 955.541128][T14805] Use struct sctp_sack_info instead [ 955.579269][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 955.589175][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 957.070587][T14800] wg1 speed is unknown, defaulting to 1000 [ 957.744976][T10799] Bluetooth: hci3: command 0x0409 tx timeout [ 958.119100][T14819] loop9: detected capacity change from 0 to 164 [ 958.884398][T14827] rock: directory entry would overflow storage [ 958.890739][T14827] rock: sig=0x4f50, size=4, remaining=3 [ 958.896383][T14827] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 959.716698][T14831] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2500'. [ 959.805639][T10799] Bluetooth: hci3: command 0x041b tx timeout [ 961.230375][T14846] loop8: detected capacity change from 0 to 2048 [ 961.242051][T14846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 961.427157][T14800] chnl_net:caif_netlink_parms(): no params data found [ 961.865074][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 962.455931][T14800] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.718219][T14800] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.795183][T14870] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6731] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[14870] [ 962.837978][T14800] device bridge_slave_0 entered promiscuous mode [ 963.007482][T14800] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.394998][T14800] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.403180][T14800] device bridge_slave_1 entered promiscuous mode [ 963.412071][T14873] futex_wake_op: syz.9.2510 tries to shift op by 144; fix this program [ 963.721639][T14800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.910212][T14800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.944960][T10799] Bluetooth: hci3: command 0x0419 tx timeout [ 964.388827][T14800] team0: Port device team_slave_0 added [ 964.413349][T14800] team0: Port device team_slave_1 added [ 965.060326][T14800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.105037][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.882257][T14800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.110322][ T5410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.203784][T14800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.216010][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.414380][T14800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.521419][ T5410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.780220][ T5410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.877910][T14800] device hsr_slave_0 entered promiscuous mode [ 967.922653][T14800] device hsr_slave_1 entered promiscuous mode [ 968.646546][T14800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.674705][T14800] Cannot create hsr debugfs directory [ 968.829466][ T5410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.366067][T14941] socket: no more sockets [ 969.368262][T14939] sctp: [Deprecated]: syz.6.2515 (pid 14939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 969.368262][T14939] Use struct sctp_sack_info instead [ 969.418603][T14941] Failed to initialize the IGMP autojoin socket (err -23) [ 972.836004][T14991] device syzkaller0 entered promiscuous mode [ 972.858022][T14991] tipc: Enabled bearer , priority 0 [ 973.266290][T14997] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 973.635473][T14988] tipc: Resetting bearer [ 973.862810][T14988] tipc: Disabling bearer [ 974.266516][ T5410] tipc: Left network mode [ 975.303588][T12696] tipc: Node number set to 3586150255 [ 977.839625][T15024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 977.849619][T15024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 977.857667][T15024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 977.954128][T15030] loop6: detected capacity change from 0 to 256 [ 977.979270][T15030] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 979.803170][T15031] ima: policy update completed [ 979.986787][ T26] audit: type=1807 audit(2000000718.694:819): action=measure res=1 [ 979.994766][ T26] audit: type=1802 audit(2000000719.014:820): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.9.2546" res=1 errno=0 [ 980.245060][ T26] audit: type=1800 audit(2000000719.334:821): pid=13851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37952 res=0 errno=0 [ 980.335131][ T26] audit: type=1800 audit(2000000719.344:822): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37952 res=0 errno=0 [ 981.254671][ T26] audit: type=1800 audit(2000000720.454:823): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37952 res=0 errno=0 [ 981.366665][ T26] audit: type=1800 audit(2000000720.544:824): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38166 res=0 errno=0 [ 981.575030][ T26] audit: type=1800 audit(2000000720.564:825): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38166 res=0 errno=0 [ 981.845305][ T26] audit: type=1800 audit(2000000720.804:826): pid=14800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=46680 res=0 errno=0 [ 982.631877][ T26] audit: type=1800 audit(2000000720.804:827): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248345 res=0 errno=0 [ 982.837532][ T26] audit: type=1800 audit(2000000721.824:828): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38166 res=0 errno=0 [ 984.154000][T14800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 986.850380][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 986.850394][ T26] audit: type=1800 audit(2000000726.054:830): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37952 res=0 errno=0 [ 986.974003][T14800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 987.102767][ T26] audit: type=1800 audit(2000000726.304:831): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38273 res=0 errno=0 [ 987.113516][T14800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 987.199923][ T26] audit: type=1800 audit(2000000726.344:832): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38273 res=0 errno=0 [ 987.226772][T14800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 988.220284][ T26] audit: type=1800 audit(2000000727.424:833): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37952 res=0 errno=0 [ 990.100659][ T26] audit: type=1800 audit(2000000729.304:834): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37952 res=0 errno=0 [ 991.299994][T14800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.320230][ T26] audit: type=1800 audit(2000000730.524:835): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38273 res=0 errno=0 [ 991.519909][T14800] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.557951][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 991.663429][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 991.879293][ T26] audit: type=1800 audit(2000000731.084:836): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38166 res=0 errno=0 [ 993.512158][T15139] loop9: detected capacity change from 0 to 256 [ 993.538531][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.568938][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.833780][ T26] audit: type=1800 audit(2000000733.034:837): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37952 res=0 errno=0 [ 994.399786][ T26] audit: type=1800 audit(2000000733.594:838): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38166 res=0 errno=0 [ 994.688005][ T5410] ------------[ cut here ]------------ [ 994.694305][ T5410] WARNING: CPU: 1 PID: 5410 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180 [ 994.705508][ T5410] Modules linked in: [ 994.709425][ T5410] CPU: 1 PID: 5410 Comm: kworker/u4:28 Not tainted syzkaller #0 [ 994.717170][ T5410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 994.727662][ T5410] Workqueue: netns cleanup_net [ 994.732596][ T5410] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 994.739958][ T5410] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 17 19 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 19 81 00 e8 30 d2 c7 f7 <0f> 0b eb c5 48 c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 994.759639][ T5410] RSP: 0018:ffffc90004e8f6e8 EFLAGS: 00010293 [ 994.765853][ T5410] RAX: ffffffff89ba60b0 RBX: ffff8880547e95a8 RCX: ffff888074610000 [ 994.773957][ T5410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 994.781972][ T5410] RBP: 0000000000000000 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 994.790109][ T5410] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff8880547eaab0 [ 994.798142][ T5410] R13: 1ffff1100a8fd2b5 R14: ffff8880547ea228 R15: dffffc0000000000 [ 994.806249][ T5410] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 994.815234][ T5410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 994.821842][ T5410] CR2: 00007fa46b1556c8 CR3: 000000005e36c000 CR4: 00000000003506e0 [ 994.830414][ T5410] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 994.838563][ T5410] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 994.846693][ T5410] Call Trace: [ 994.850002][ T5410] [ 994.852962][ T5410] ? trace_drv_return_void+0x240/0x240 [ 994.858599][ T5410] unregister_netdevice_many_notify+0x13c4/0x1990 [ 994.865183][ T5410] ? unregister_netdevice_many+0x20/0x20 [ 994.871065][ T5410] ? mutex_unlock+0x10/0x10 [ 994.875648][ T5410] ? unregister_netdevice_queue+0x17c/0x330 [ 994.881836][ T5410] ? list_netdevice+0x640/0x640 [ 994.886998][ T5410] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 994.893624][ T5410] ? cfg80211_shutdown_all_interfaces+0x173/0x1c0 [ 994.900259][ T5410] ieee80211_remove_interfaces+0x44b/0x700 [ 994.906313][ T5410] ? ieee80211_unregister_hw+0x51/0x290 [ 994.912044][ T5410] ? ieee80211_do_stop+0x2020/0x2020 [ 994.917496][ T5410] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 994.923930][ T5410] ieee80211_unregister_hw+0x59/0x290 [ 994.929368][ T5410] mac80211_hwsim_del_radio+0x285/0x480 [ 994.935198][ T5410] ? rhashtable_remove_fast+0xc50/0xc50 [ 994.940808][ T5410] hwsim_exit_net+0x589/0x650 [ 994.945570][ T5410] ? hwsim_init_net+0x80/0x80 [ 994.950492][ T5410] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 994.956474][ T5410] cleanup_net+0x703/0xba0 [ 994.960968][ T5410] ? ops_free_list+0x3b0/0x3b0 [ 994.965800][ T5410] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 994.971928][ T5410] ? _raw_spin_unlock_irq+0x1f/0x40 [ 994.977207][ T5410] ? process_one_work+0x7b4/0x1160 [ 994.982438][ T5410] process_one_work+0x8ab/0x1160 [ 994.987464][ T5410] ? worker_detach_from_pool+0x240/0x240 [ 994.993133][ T5410] ? _raw_spin_lock_irq+0xb7/0xf0 [ 994.998229][ T5410] ? _raw_spin_lock_irqsave+0x100/0x100 [ 995.003807][ T5410] ? wq_worker_running+0x97/0x190 [ 995.008896][ T5410] worker_thread+0xaf5/0x12a0 [ 995.013635][ T5410] kthread+0x29d/0x330 [ 995.017757][ T5410] ? worker_clr_flags+0x1a0/0x1a0 [ 995.022830][ T5410] ? kthread_blkcg+0xd0/0xd0 [ 995.027568][ T5410] ret_from_fork+0x1f/0x30 [ 995.032114][ T5410] [ 995.035241][ T5410] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 995.042526][ T5410] CPU: 1 PID: 5410 Comm: kworker/u4:28 Not tainted syzkaller #0 [ 995.050174][ T5410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 995.060335][ T5410] Workqueue: netns cleanup_net [ 995.065163][ T5410] Call Trace: [ 995.068453][ T5410] [ 995.071716][ T5410] dump_stack_lvl+0x188/0x24e [ 995.076417][ T5410] ? memcpy+0x3c/0x60 [ 995.080497][ T5410] ? show_regs_print_info+0x12/0x12 [ 995.085710][ T5410] ? load_image+0x410/0x410 [ 995.090238][ T5410] panic+0x2d3/0x710 [ 995.094166][ T5410] ? bpf_jit_dump+0xd0/0xd0 [ 995.098775][ T5410] ? ret_from_fork+0x1f/0x30 [ 995.103383][ T5410] __warn+0x2f8/0x4f0 [ 995.107373][ T5410] ? ieee80211_link_release_channel+0x150/0x180 [ 995.113628][ T5410] ? ieee80211_link_release_channel+0x150/0x180 [ 995.119883][ T5410] report_bug+0x2ba/0x4f0 [ 995.124261][ T5410] ? ieee80211_link_release_channel+0x150/0x180 [ 995.130591][ T5410] handle_bug+0x3a/0x70 [ 995.134850][ T5410] exc_invalid_op+0x16/0x40 [ 995.139355][ T5410] asm_exc_invalid_op+0x16/0x20 [ 995.144215][ T5410] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 995.151089][ T5410] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 17 19 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 19 81 00 e8 30 d2 c7 f7 <0f> 0b eb c5 48 c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 995.170718][ T5410] RSP: 0018:ffffc90004e8f6e8 EFLAGS: 00010293 [ 995.176807][ T5410] RAX: ffffffff89ba60b0 RBX: ffff8880547e95a8 RCX: ffff888074610000 [ 995.184798][ T5410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 995.193004][ T5410] RBP: 0000000000000000 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 995.200989][ T5410] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff8880547eaab0 [ 995.209323][ T5410] R13: 1ffff1100a8fd2b5 R14: ffff8880547ea228 R15: dffffc0000000000 [ 995.217436][ T5410] ? ieee80211_link_release_channel+0x150/0x180 [ 995.223792][ T5410] ? ieee80211_link_release_channel+0x150/0x180 [ 995.230057][ T5410] ? trace_drv_return_void+0x240/0x240 [ 995.235535][ T5410] unregister_netdevice_many_notify+0x13c4/0x1990 [ 995.241970][ T5410] ? unregister_netdevice_many+0x20/0x20 [ 995.247618][ T5410] ? mutex_unlock+0x10/0x10 [ 995.252231][ T5410] ? unregister_netdevice_queue+0x17c/0x330 [ 995.258223][ T5410] ? list_netdevice+0x640/0x640 [ 995.263084][ T5410] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 995.269507][ T5410] ? cfg80211_shutdown_all_interfaces+0x173/0x1c0 [ 995.276038][ T5410] ieee80211_remove_interfaces+0x44b/0x700 [ 995.281865][ T5410] ? ieee80211_unregister_hw+0x51/0x290 [ 995.287438][ T5410] ? ieee80211_do_stop+0x2020/0x2020 [ 995.292926][ T5410] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 995.299356][ T5410] ieee80211_unregister_hw+0x59/0x290 [ 995.304748][ T5410] mac80211_hwsim_del_radio+0x285/0x480 [ 995.310492][ T5410] ? rhashtable_remove_fast+0xc50/0xc50 [ 995.316236][ T5410] hwsim_exit_net+0x589/0x650 [ 995.320930][ T5410] ? hwsim_init_net+0x80/0x80 [ 995.325664][ T5410] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 995.331507][ T5410] cleanup_net+0x703/0xba0 [ 995.335966][ T5410] ? ops_free_list+0x3b0/0x3b0 [ 995.340921][ T5410] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 995.346839][ T5410] ? _raw_spin_unlock_irq+0x1f/0x40 [ 995.352179][ T5410] ? process_one_work+0x7b4/0x1160 [ 995.357311][ T5410] process_one_work+0x8ab/0x1160 [ 995.362275][ T5410] ? worker_detach_from_pool+0x240/0x240 [ 995.368145][ T5410] ? _raw_spin_lock_irq+0xb7/0xf0 [ 995.373295][ T5410] ? _raw_spin_lock_irqsave+0x100/0x100 [ 995.379033][ T5410] ? wq_worker_running+0x97/0x190 [ 995.384081][ T5410] worker_thread+0xaf5/0x12a0 [ 995.388806][ T5410] kthread+0x29d/0x330 [ 995.392971][ T5410] ? worker_clr_flags+0x1a0/0x1a0 [ 995.398959][ T5410] ? kthread_blkcg+0xd0/0xd0 [ 995.403736][ T5410] ret_from_fork+0x1f/0x30 [ 995.408366][ T5410] [ 995.412516][ T5410] Kernel Offset: disabled [ 995.417059][ T5410] Rebooting in 86400 seconds..