last executing test programs: 12m31.418537086s ago: executing program 3 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x30, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) 12m28.394283178s ago: executing program 3 (id=736): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x340}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff00000000080008008307"], 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x0) 12m27.770414875s ago: executing program 3 (id=738): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 12m27.598284233s ago: executing program 3 (id=740): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) setreuid(0x0, 0x0) mremap(&(0x7f0000040000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12m25.927428695s ago: executing program 3 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xa482, 0xec5, 0x1}}]}]}]}, 0x4c}}, 0x0) 12m19.61305131s ago: executing program 3 (id=760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f0000000700)='\"A\xbb@\xcc\xb1Yg\x00\x00\x0e\x00\x00J\x00\xed\xab\x18\xde\x1f\xf9\xf9\xc3\xa8\x99\xd2\xa1\x96\xa6\xac\x0f\x14\x92\xc4\xe6S>,,\xb7\xdf\xc5\x7fl\x89l\x8cy\xb6\xfb0\x0eA\r\xff\x83!\xff%$\x83_ \x83(\x91\xfb\xef\xe6\xf8\x8f\xbbQ\xe5\xbf1\x14\xf6Ko\xa5:\x05\\/\v\xa8RT\xc3FEctW\x99\xe7\xe8\xe4\xf8\x83\xe0\xe7\xc1}\nv\xff\xd7\xf8\xfdg\xd2\xecG\x02pvJ\xed\x0f\xebp\xec\xf5\"\xb8\xd7\xf05\'\xf7\xc86\x13wt!\xbe\xc7F3p\xdd\xa6x\xd9U\x85\x82\xc9\xf7\x91\xa4+\xc7y+ \x13e\xe3\xf1m]\x14\xe2\xe4\x98\xb1\xa0\x80\xbb|\x978^\xc1\x1e\xed\x95\xf5UP\xf8\xe2v\x1e\xd6)b\x19\xd0_BXD\xfd(\x9b\xc7\xa4\x1f0\a\xbe\x061\a\x00\x00\x00\x00\x00\x00\x00\x1a\x9e\xc2,`A\xe1\xd0\xa5\x95+ -?\xa35\xd2\xacI\x00\x86\xc0\x06.Y\xb0\x96\xa7zZ\xff@}lP)g>%o\xe0T\xdf\x12M\x7f$\x1cGHa\xf3i\xcb\x89\x8f\xe9\xb6v\x8a\xb5\x15\xe6\x9e\xb4\xed\x92\xd6\\\xbb\x97;B\xe1h\xcdg\x81\a\x00bZ-\xb3|E\xf2\x9a\x04\x1e\x87\xd1S\xd2+\xe5Lk\xba_l\xb7k\xca&\x89\vG\xfc_i\xd3\xb9Dg/\x9b(V2Y\x87\x88\x04\x1e_1\xa0\xb5J\xcb\x023\x8b\x15\xc8c\xb9\x00rEQn\xa7w\x9a\xc3\xe7\x9b\xa8$x\xeceAv \x17y\x01f\x9c\x18\x8f6\xbb\t\xe8S\xf9y\xde\xb0\xbe9O\fB\xa9\xd4Molg\x8f_\x19e?\xcb\"\xb2\xbd$]\xc7oD{\xa0', 0x7) fallocate(r3, 0x0, 0x800657, 0x40000b7) 12m18.181512992s ago: executing program 32 (id=760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f0000000700)='\"A\xbb@\xcc\xb1Yg\x00\x00\x0e\x00\x00J\x00\xed\xab\x18\xde\x1f\xf9\xf9\xc3\xa8\x99\xd2\xa1\x96\xa6\xac\x0f\x14\x92\xc4\xe6S>,,\xb7\xdf\xc5\x7fl\x89l\x8cy\xb6\xfb0\x0eA\r\xff\x83!\xff%$\x83_ \x83(\x91\xfb\xef\xe6\xf8\x8f\xbbQ\xe5\xbf1\x14\xf6Ko\xa5:\x05\\/\v\xa8RT\xc3FEctW\x99\xe7\xe8\xe4\xf8\x83\xe0\xe7\xc1}\nv\xff\xd7\xf8\xfdg\xd2\xecG\x02pvJ\xed\x0f\xebp\xec\xf5\"\xb8\xd7\xf05\'\xf7\xc86\x13wt!\xbe\xc7F3p\xdd\xa6x\xd9U\x85\x82\xc9\xf7\x91\xa4+\xc7y+ \x13e\xe3\xf1m]\x14\xe2\xe4\x98\xb1\xa0\x80\xbb|\x978^\xc1\x1e\xed\x95\xf5UP\xf8\xe2v\x1e\xd6)b\x19\xd0_BXD\xfd(\x9b\xc7\xa4\x1f0\a\xbe\x061\a\x00\x00\x00\x00\x00\x00\x00\x1a\x9e\xc2,`A\xe1\xd0\xa5\x95+ -?\xa35\xd2\xacI\x00\x86\xc0\x06.Y\xb0\x96\xa7zZ\xff@}lP)g>%o\xe0T\xdf\x12M\x7f$\x1cGHa\xf3i\xcb\x89\x8f\xe9\xb6v\x8a\xb5\x15\xe6\x9e\xb4\xed\x92\xd6\\\xbb\x97;B\xe1h\xcdg\x81\a\x00bZ-\xb3|E\xf2\x9a\x04\x1e\x87\xd1S\xd2+\xe5Lk\xba_l\xb7k\xca&\x89\vG\xfc_i\xd3\xb9Dg/\x9b(V2Y\x87\x88\x04\x1e_1\xa0\xb5J\xcb\x023\x8b\x15\xc8c\xb9\x00rEQn\xa7w\x9a\xc3\xe7\x9b\xa8$x\xeceAv \x17y\x01f\x9c\x18\x8f6\xbb\t\xe8S\xf9y\xde\xb0\xbe9O\fB\xa9\xd4Molg\x8f_\x19e?\xcb\"\xb2\xbd$]\xc7oD{\xa0', 0x7) fallocate(r3, 0x0, 0x800657, 0x40000b7) 10m19.69779812s ago: executing program 2 (id=993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b703000000000000850000007d000000bf0900000000000066090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m16.821915905s ago: executing program 2 (id=997): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = semget$private(0x0, 0x4000000009, 0x0) semctl$SEM_STAT_ANY(r1, 0x1, 0x14, &(0x7f0000000080)=""/106) semop(r1, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x202}, {}], 0x3) semop(r1, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) 10m14.694426208s ago: executing program 2 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x800005, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ustat(0x7, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0xf00, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 10m13.129892546s ago: executing program 2 (id=1004): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @rand_addr, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) 10m11.300530215s ago: executing program 2 (id=1006): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) 10m9.081951832s ago: executing program 2 (id=1020): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 9m53.994349797s ago: executing program 33 (id=1020): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 7m6.263658536s ago: executing program 0 (id=1339): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000006c0)) 7m4.911375015s ago: executing program 0 (id=1342): fchdir(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ustat(0xb, 0x0) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100", @ANYRESDEC, @ANYRESOCT, @ANYRES32=r1], 0xa8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 7m2.337311647s ago: executing program 0 (id=1346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x20, 0x8, 0x5b}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 7m1.195729906s ago: executing program 0 (id=1349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[@ANYBLOB='de=0x00000000800000b1,norock,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000401,norock,showassoc,hide,hide,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000001000,check=strict,iocharset=cp949,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0xff, 0xa4a, &(0x7f00000007c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400000005010000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x6c, r4}, 0x38) 6m59.312547938s ago: executing program 0 (id=1360): r0 = syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,noquota,nointegrity,errors=continue,iocharset=cp863,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,uid=', @ANYRESHEX=0xee01, @ANYBLOB="0000bbaa213ca1750a73593e8b6b51ec762e74cada46036fb2cd30b777e4a35afadbbd049c95b9880c70e694709bce9011b4c0460c95d9e0cc473d9f4f1841cdaff7b2a25ff3baddc86b3ab69e93b6beea217b6ff816e2f122cb63010bce65149c059d20b376f3696de010eb1b9ca12fc97b85d273e059e8c625da1575d7ac7d39571c4447ebadc4da39b8bcdf520b21994c5b02d448852f9765d56ffcedca0ad05a7fd150d8028a6997510bf1bf9871f25c4ab5966143ab5fbf218f99d125b00c5ebf68a5ad9dd56d7a"], 0x24, 0x61b6, &(0x7f00000075c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) syz_open_dev$vcsn(0x0, 0x4, 0x1c7100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x413, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r3) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 6m57.219041419s ago: executing program 0 (id=1357): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 6m42.180642582s ago: executing program 34 (id=1357): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2m48.012167136s ago: executing program 1 (id=1763): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 2m43.333806277s ago: executing program 1 (id=1775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r4, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 2m41.62641444s ago: executing program 1 (id=1770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2m39.669196865s ago: executing program 1 (id=1781): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m38.524822064s ago: executing program 1 (id=1776): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f0000000000)) 2m35.549318912s ago: executing program 1 (id=1782): shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) sync() r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x420000, 0x82, 0x8}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x9c0000, 0x20000001, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9a0907, 0x9, '\x00', @p_u16=&(0x7f0000000240)}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 2m20.099831726s ago: executing program 35 (id=1782): shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) sync() r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x420000, 0x82, 0x8}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x9c0000, 0x20000001, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9a0907, 0x9, '\x00', @p_u16=&(0x7f0000000240)}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 1m56.662555144s ago: executing program 6 (id=1836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000840000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000300000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x5eb0, 0xc000, 0x0, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m55.430596396s ago: executing program 6 (id=1838): add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x96) 1m52.437094125s ago: executing program 6 (id=1840): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0xff, 0x654, &(0x7f0000000a40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semget$private(0x0, 0x4000, 0x555) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) 1m51.251122616s ago: executing program 6 (id=1843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002"], 0x3c}}, 0x0) 1m44.691148709s ago: executing program 6 (id=1853): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB], 0x3, 0x6ae, &(0x7f0000000e40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r4, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 1m41.914248598s ago: executing program 6 (id=1857): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffff9, 0x1, 0x3ff}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) 1m24.616665142s ago: executing program 36 (id=1857): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000001c0)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffff9, 0x1, 0x3ff}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) 25.723886004s ago: executing program 7 (id=1943): syz_mount_image$fuse(0x0, 0x0, 0x4028, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x5c) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) 22.859880597s ago: executing program 7 (id=1937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 17.954533648s ago: executing program 4 (id=1941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x7f, @private0, 0x41}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x4, 0x80000) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000180)={[{@grpquota}, {@delalloc}, {@nolazytime}, {@debug}, {@noblock_validity}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 17.784124625s ago: executing program 7 (id=1942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, &(0x7f0000000d00)={0x11, 0x1a, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x4}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 17.522093436s ago: executing program 5 (id=1946): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f000000a5c0)='./file0\x00', &(0x7f000000a600)) 16.705251431s ago: executing program 7 (id=1947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) 16.702839732s ago: executing program 8 (id=1948): syz_mount_image$fuse(0x0, 0x0, 0x4028, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x5c) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) 16.689779522s ago: executing program 5 (id=1949): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setitimer(0x2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 16.624133355s ago: executing program 4 (id=1950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 14.65077245s ago: executing program 8 (id=1951): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_open_dev$admmidi(&(0x7f0000000140), 0x1f, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) 14.016182257s ago: executing program 5 (id=1952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 10.860638923s ago: executing program 8 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 10.828515774s ago: executing program 4 (id=1954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) 10.751713058s ago: executing program 5 (id=1955): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x23f}, &(0x7f00000000c0)=0x8) 9.112278478s ago: executing program 4 (id=1956): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 9.05677785s ago: executing program 7 (id=1957): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x8a73, 0x8, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 7.247975518s ago: executing program 8 (id=1958): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) connect$qrtr(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 7.188070071s ago: executing program 5 (id=1959): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1020809, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES8], 0x2, 0x202, &(0x7f00000003c0)="$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") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) 6.407331184s ago: executing program 4 (id=1960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) socket$qrtr(0x2a, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) close_range(r3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0) 5.274006763s ago: executing program 8 (id=1961): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0x3, 0x7fff}, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 5.261918574s ago: executing program 7 (id=1962): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 5.260635073s ago: executing program 5 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r4, r4, &(0x7f0000001000), 0xffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 5.226680045s ago: executing program 4 (id=1964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) 0s ago: executing program 8 (id=1965): r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x80, 0xfffffff9, 0x9}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) kernel console output (not intermixed with test programs): .337056][ T8657] bridge_slave_1: entered promiscuous mode [ 384.444516][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.488339][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.684157][ T8657] team0: Port device team_slave_0 added [ 384.756503][ T8657] team0: Port device team_slave_1 added [ 384.818330][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.832343][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.865842][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.876672][ T5810] Bluetooth: hci0: command tx timeout [ 384.891437][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.986343][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.012948][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.260380][ T8657] hsr_slave_0: entered promiscuous mode [ 385.277629][ T8657] hsr_slave_1: entered promiscuous mode [ 385.290426][ T8657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.298084][ T8657] Cannot create hsr debugfs directory [ 386.038239][ T8657] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.071790][ T8657] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.124396][ T8657] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.143155][ T8657] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.416021][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.473470][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.534363][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.541580][ T7145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.599481][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.607893][ T7145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.018827][ T5810] Bluetooth: hci0: command tx timeout [ 388.677118][ T7140] hsr_slave_0: left promiscuous mode [ 388.700153][ T7140] hsr_slave_1: left promiscuous mode [ 388.786269][ T7140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.846909][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.896165][ T7140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.918574][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.962337][ T7140] bridge_slave_1: left allmulticast mode [ 388.968079][ T7140] bridge_slave_1: left promiscuous mode [ 388.997738][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.028858][ T5810] Bluetooth: hci0: command tx timeout [ 389.189286][ C0] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 389.191535][ T7140] bridge_slave_0: left allmulticast mode [ 389.319685][ T8750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.414165][ T7140] bridge_slave_0: left promiscuous mode [ 389.816584][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.004799][ T7140] veth1_macvtap: left allmulticast mode [ 390.014642][ T7140] veth1_macvtap: left promiscuous mode [ 390.039671][ T7140] veth0_macvtap: left promiscuous mode [ 390.045441][ T7140] veth1_vlan: left promiscuous mode [ 390.079240][ T7140] veth0_vlan: left promiscuous mode [ 390.561722][ T7140] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 390.573642][ T7140] bridge1 (unregistering): left promiscuous mode [ 390.580330][ T7140] bridge1 (unregistering): left allmulticast mode [ 390.633962][ T7140] bond1 (unregistering): Released all slaves [ 391.184970][ T7140] team0 (unregistering): Port device team_slave_1 removed [ 391.260446][ T7140] team0 (unregistering): Port device team_slave_0 removed [ 391.371568][ T8792] loop0: detected capacity change from 0 to 1024 [ 391.379768][ T8792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.392041][ T7140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.421575][ T8792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.439666][ T7140] bond_slave_1 (unregistering): left promiscuous mode [ 391.446512][ T7140] bond_slave_1 (unregistering): left allmulticast mode [ 391.538543][ T7140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.555228][ T7140] bond_slave_0 (unregistering): left promiscuous mode [ 391.565698][ T7140] bond_slave_0 (unregistering): left allmulticast mode [ 391.665265][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.154680][ T7140] team0 (unregistering): Port device bond0 removed [ 392.333051][ T7140] bond0 (unregistering): Released all slaves [ 393.551803][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.793125][ T8828] loop2: detected capacity change from 0 to 1024 [ 394.914066][ T8609] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 395.276551][ T8840] lo speed is unknown, defaulting to 1000 [ 395.968002][ T8657] veth0_vlan: entered promiscuous mode [ 396.066951][ T8657] veth1_vlan: entered promiscuous mode [ 396.192562][ T8657] veth0_macvtap: entered promiscuous mode [ 396.252771][ T8657] veth1_macvtap: entered promiscuous mode [ 396.260479][ T5847] IPVS: starting estimator thread 0... [ 397.202882][ T7140] IPVS: stop unused estimator thread 0... [ 397.209536][ T8849] IPVS: using max 16 ests per chain, 38400 per kthread [ 397.255493][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.382542][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.443918][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.638842][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.737512][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.557271][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.675532][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.511376][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.573845][ T8657] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.560958][ T8657] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.576319][ T8657] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.638771][ T8657] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.063368][ T7140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.110825][ T7140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.738413][ T7140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.746565][ T7140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.370381][ T8909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.390106][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 406.985545][ T8922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.776794][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 411.319407][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'. [ 414.247770][ T27] audit: type=1326 audit(1763654832.370:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d4f8f749 code=0x7ffc0000 [ 414.536501][ T27] audit: type=1326 audit(1763654832.370:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d4f8f749 code=0x7ffc0000 [ 414.615061][ T27] audit: type=1326 audit(1763654832.390:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f29d4f8f749 code=0x7ffc0000 [ 414.764114][ T27] audit: type=1326 audit(1763654832.630:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d4f8f749 code=0x7ffc0000 [ 414.788252][ T27] audit: type=1326 audit(1763654832.630:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d4f8f749 code=0x7ffc0000 [ 414.956296][ T27] audit: type=1326 audit(1763654832.640:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.2.833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29d4f8f749 code=0x0 [ 414.978628][ T27] audit: type=1326 audit(1763654832.730:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29d4f8f749 code=0x7ffc0000 [ 415.091003][ T27] audit: type=1326 audit(1763654832.730:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d4f8f749 code=0x7ffc0000 [ 415.618816][ T27] audit: type=1326 audit(1763654832.730:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d4f8f749 code=0x7ffc0000 [ 415.886890][ T27] audit: type=1326 audit(1763654832.890:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f29d4f8f749 code=0x7ffc0000 [ 416.682833][ T967] IPVS: starting estimator thread 0... [ 416.702107][ T9041] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 416.767067][ T9048] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 416.789037][ T9046] IPVS: using max 16 ests per chain, 38400 per kthread [ 416.822989][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 416.831777][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 418.158965][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 418.451939][ T9060] tipc: Enabled bearer , priority 10 [ 420.235632][ T9079] lo speed is unknown, defaulting to 1000 [ 422.519943][ T9089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.848'. [ 422.580581][ T9089] IPv6: sit1: Disabled Multicast RS [ 422.586806][ T9089] sit1: entered allmulticast mode [ 422.765286][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 422.765301][ T27] audit: type=1326 audit(1763654840.890:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 422.833450][ T27] audit: type=1326 audit(1763654840.930:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 422.888884][ T27] audit: type=1326 audit(1763654840.930:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 422.947871][ T27] audit: type=1326 audit(1763654840.930:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 422.973572][ T27] audit: type=1326 audit(1763654840.930:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 423.001454][ T27] audit: type=1326 audit(1763654840.930:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 423.024667][ T27] audit: type=1326 audit(1763654840.930:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 423.052889][ T27] audit: type=1326 audit(1763654840.930:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 423.128752][ T27] audit: type=1326 audit(1763654840.930:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 423.188739][ T27] audit: type=1326 audit(1763654840.930:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 423.388778][ T5847] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 423.630490][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.654692][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.674224][ T5847] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 423.686143][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.702656][ T5847] usb 1-1: config 0 descriptor?? [ 424.227942][ T5847] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 424.445206][ T9116] lo speed is unknown, defaulting to 1000 [ 424.595504][ T5847] usb 1-1: USB disconnect, device number 7 [ 426.228971][ T5178] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 426.467564][ T5178] usb 2-1: Using ep0 maxpacket: 16 [ 426.475152][ T5178] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.485636][ T5178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.496796][ T5178] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.506027][ T5178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.515572][ T5178] usb 2-1: Product: syz [ 426.521546][ T5178] usb 2-1: Manufacturer: syz [ 426.526308][ T5178] usb 2-1: SerialNumber: syz [ 427.100250][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 427.125227][ T5178] usb 2-1: 0:2 : does not exist [ 427.140607][ T5178] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 427.227321][ T5178] usb 2-1: USB disconnect, device number 3 [ 427.329473][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 427.343654][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.367785][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 427.382068][ T8] usb 1-1: config 246 has an invalid interface number: 233 but max is 0 [ 427.402126][ T8] usb 1-1: config 246 has no interface number 0 [ 427.422675][ T8] usb 1-1: config 246 interface 233 has no altsetting 0 [ 427.439713][ T8] usb 1-1: New USB device found, idVendor=0b05, idProduct=18f0, bcdDevice=af.9c [ 427.648874][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.657236][ T8] usb 1-1: Product: syz [ 427.663231][ T8] usb 1-1: Manufacturer: ࠌ [ 427.668076][ T8] usb 1-1: SerialNumber: syz [ 428.774000][ T8] usb 1-1: USB disconnect, device number 8 [ 431.544227][ T9167] lo speed is unknown, defaulting to 1000 [ 434.764996][ T9199] netlink: 'syz.1.872': attribute type 4 has an invalid length. [ 435.469739][ T5847] lo speed is unknown, defaulting to 1000 [ 435.873374][ T9208] netlink: 'syz.4.874': attribute type 21 has an invalid length. [ 435.969605][ T9208] netlink: 132 bytes leftover after parsing attributes in process `syz.4.874'. [ 437.036601][ T9219] loop4: detected capacity change from 0 to 1024 [ 437.129926][ T9219] ext4: Unknown parameter 'hash' [ 437.881181][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'. [ 439.060637][ T9248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.882'. [ 439.117956][ T9248] IPv6: sit1: Disabled Multicast RS [ 439.189170][ T9251] netlink: 64 bytes leftover after parsing attributes in process `syz.2.881'. [ 439.316419][ T9248] sit1: entered allmulticast mode [ 440.395924][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.423055][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.369716][ T9263] netlink: 'syz.0.885': attribute type 21 has an invalid length. [ 441.377782][ T9263] netlink: 132 bytes leftover after parsing attributes in process `syz.0.885'. [ 441.711839][ T9272] syzkaller0: entered promiscuous mode [ 441.717537][ T9272] syzkaller0: entered allmulticast mode [ 443.674261][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 444.369247][ T27] audit: type=1326 audit(1763654861.740:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217fd8f749 code=0x7ffc0000 [ 444.427861][ T27] audit: type=1326 audit(1763654861.740:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217fd8f749 code=0x7ffc0000 [ 444.459269][ T27] audit: type=1326 audit(1763654861.780:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f217fd8f749 code=0x7ffc0000 [ 444.774113][ T27] audit: type=1326 audit(1763654861.780:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217fd8f749 code=0x7ffc0000 [ 446.413397][ T27] audit: type=1326 audit(1763654861.780:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217fd8f749 code=0x7ffc0000 [ 446.496682][ T27] audit: type=1326 audit(1763654861.780:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f217fd8f749 code=0x7ffc0000 [ 446.520024][ T27] audit: type=1326 audit(1763654861.780:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217fd8f749 code=0x7ffc0000 [ 446.543462][ T27] audit: type=1326 audit(1763654861.780:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217fd8f749 code=0x7ffc0000 [ 446.566160][ T27] audit: type=1326 audit(1763654861.780:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f217fd8f749 code=0x7ffc0000 [ 446.596967][ T27] audit: type=1326 audit(1763654861.780:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217fd8f749 code=0x7ffc0000 [ 446.739443][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.746825][ T9305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.755872][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.763147][ T9305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.809641][ T9316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.896'. [ 446.826245][ T9305] infiniband syz0: set active [ 446.871509][ T9305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.087123][ T9316] IPv6: sit1: Disabled Multicast RS [ 447.093596][ T9316] sit1: entered allmulticast mode [ 448.219135][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 448.257405][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 448.629337][ T9332] tipc: Started in network mode [ 448.644710][ T9332] tipc: Node identity 7f000001, cluster identity 4711 [ 448.684773][ T9332] tipc: Enabled bearer , priority 10 [ 449.442853][ T9332] netlink: 104 bytes leftover after parsing attributes in process `syz.4.901'. [ 449.808877][ T787] tipc: Node number set to 2130706433 [ 449.817672][ T9332] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 449.873042][ T9332] tipc: Enabled bearer , priority 10 [ 449.976814][ T9330] lo speed is unknown, defaulting to 1000 [ 450.062822][ T9347] netlink: 'syz.0.905': attribute type 4 has an invalid length. [ 451.168327][ T9358] vlan2: entered promiscuous mode [ 451.212339][ T9358] vlan2: entered allmulticast mode [ 451.266361][ T9358] hsr_slave_1: entered allmulticast mode [ 455.770505][ T9427] netlink: 36 bytes leftover after parsing attributes in process `syz.2.911'. [ 455.969726][ T9407] IPv6: sit1: Disabled Multicast RS [ 455.976457][ T9407] sit1: entered allmulticast mode [ 458.274601][ T9443] Falling back ldisc for ttyS3. [ 458.278304][ T9435] bridge3: entered promiscuous mode [ 458.288188][ T9435] bridge3: entered allmulticast mode [ 459.411529][ T9462] netlink: 'syz.2.918': attribute type 4 has an invalid length. [ 460.567143][ T9461] loop0: detected capacity change from 0 to 16 [ 460.846406][ T9461] erofs: (device loop0): mounted with root inode @ nid 36. [ 460.961615][ T9461] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 461.004709][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 461.039728][ T9461] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 461.078845][ T9461] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 461.161345][ T9461] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 461.195809][ T9461] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 461.258155][ T9461] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 461.313296][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 461.484993][ T9481] netlink: 64 bytes leftover after parsing attributes in process `syz.4.923'. [ 462.057302][ T9482] loop2: detected capacity change from 0 to 1024 [ 462.117917][ T9482] EXT4-fs: Mount option(s) incompatible with ext2 [ 462.667054][ T9497] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 462.947178][ T9505] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 463.655431][ T9505] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 463.741240][ T9505] bond1: (slave xfrm1): making interface the new active one [ 463.797928][ T9505] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 463.849008][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 463.894807][ T9507] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 463.938769][ T9507] bond1 (unregistering): Released all slaves [ 464.093054][ T9494] syzkaller0: entered promiscuous mode [ 464.103789][ T9494] syzkaller0: entered allmulticast mode [ 467.185723][ T9545] netlink: 64 bytes leftover after parsing attributes in process `syz.1.936'. [ 471.710932][ T9517] netlink: 'syz.2.929': attribute type 10 has an invalid length. [ 471.718968][ T9517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.929'. [ 471.765750][ T9517] team0: Port device geneve0 added [ 471.785836][ T9526] netlink: 'syz.4.931': attribute type 1 has an invalid length. [ 471.887792][ T9528] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 472.521106][ T9564] netlink: 'syz.0.940': attribute type 3 has an invalid length. [ 473.013109][ T9530] veth3: entered promiscuous mode [ 473.046463][ T9530] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 475.500268][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 475.500286][ T27] audit: type=1326 audit(1763654893.610:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 475.695168][ T27] audit: type=1326 audit(1763654893.610:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 475.845593][ T27] audit: type=1326 audit(1763654893.610:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 476.242474][ T27] audit: type=1326 audit(1763654893.620:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 476.742788][ T27] audit: type=1326 audit(1763654893.620:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 476.898857][ T27] audit: type=1326 audit(1763654893.620:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 476.921584][ T27] audit: type=1326 audit(1763654893.620:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 478.559663][ T27] audit: type=1326 audit(1763654893.630:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 478.748987][ T9612] syz_tun: entered allmulticast mode [ 478.787693][ T27] audit: type=1326 audit(1763654893.630:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 478.976551][ T27] audit: type=1326 audit(1763654893.690:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 479.013605][ T9611] syz_tun: left allmulticast mode [ 479.335754][ T9578] Set syz1 is full, maxelem 65536 reached [ 479.893210][ T9616] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 483.297371][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 483.297387][ T27] audit: type=1326 audit(1763654901.420:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.1.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7fc00000 [ 485.229435][ T9701] xt_nfacct: accounting object `syz1' does not exist [ 488.048134][ T9717] xt_socket: unknown flags 0x50 [ 490.571535][ T9721] CIFS: Unable to determine destination address [ 491.159700][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.977'. [ 492.308832][ T5885] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 492.614896][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.722010][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.762504][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 492.817280][ T5885] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.848706][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.895570][ T5885] usb 1-1: config 0 descriptor?? [ 493.337062][ T5885] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 493.365186][ T9737] syz.4.983 (9737) used greatest stack depth: 17960 bytes left [ 493.718493][ T5885] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 494.066327][ T5885] usb 1-1: USB disconnect, device number 9 [ 494.095609][ T9733] usb 1-1: string descriptor 0 read error: -19 [ 494.237775][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.1.987'. [ 494.683037][ T9747] fido_id[9747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 502.291622][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.298128][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.039461][ T9808] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 503.299029][ T9808] usb 1-1: Using ep0 maxpacket: 32 [ 503.359047][ T9808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 168, changing to 11 [ 503.459617][ T9808] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 503.553438][ T9808] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 503.655241][ T9808] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.854077][ T9808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.862823][ T9808] usb 1-1: Product: syz [ 503.867043][ T9808] usb 1-1: Manufacturer: syz [ 503.887003][ T9808] usb 1-1: SerialNumber: syz [ 504.845918][ T9808] cdc_ncm 1-1:1.0: bind() failure [ 504.860655][ T9808] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 504.867531][ T9808] cdc_ncm 1-1:1.1: bind() failure [ 504.906865][ T9808] usb 1-1: USB disconnect, device number 10 [ 505.269163][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 505.893761][ T9849] UBIFS error (pid: 9849): cannot open "./file0", error -22 [ 506.873258][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'. [ 508.637671][ T9863] lo speed is unknown, defaulting to 1000 [ 516.719669][ T9918] netlink: 'syz.1.1025': attribute type 3 has an invalid length. [ 517.750084][ T9922] netlink: 'syz.0.1026': attribute type 1 has an invalid length. [ 517.865234][ T9926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.890867][ T9926] bond4: (slave bond5): making interface the new active one [ 517.899308][ T9926] bond4: (slave bond5): Enslaving as an active interface with an up link [ 517.984804][ T9922] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 518.008725][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1026'. [ 518.020337][ T9922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 522.855937][ T9977] netlink: 'syz.0.1041': attribute type 21 has an invalid length. [ 522.864146][ T9977] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 522.872336][ T9977] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1041'. [ 524.551192][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 524.818938][ T9993] loop4: detected capacity change from 0 to 1024 [ 524.839016][ T9998] Driver unsupported XDP return value 0 on prog (id 336) dev N/A, expect packet loss! [ 524.855658][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.867247][ T9993] ext4: Unknown parameter 'uid<00000000000000000000' [ 524.877623][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.888848][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 524.906525][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 524.924513][ T5800] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 524.932232][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 525.149578][ T9999] lo speed is unknown, defaulting to 1000 [ 525.171205][T10009] syzkaller0: entered promiscuous mode [ 525.214624][T10009] syzkaller0: entered allmulticast mode [ 526.336006][T10016] lo speed is unknown, defaulting to 1000 [ 527.033326][ T5810] Bluetooth: hci4: command tx timeout [ 529.863236][ T5810] Bluetooth: hci4: command tx timeout [ 530.038453][ T27] audit: type=1326 audit(1763654948.150:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 530.094122][ T27] audit: type=1326 audit(1763654948.190:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 530.117448][ T27] audit: type=1326 audit(1763654948.190:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 530.143144][ T27] audit: type=1326 audit(1763654948.190:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 530.166572][ T27] audit: type=1326 audit(1763654948.200:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 530.189545][ T27] audit: type=1326 audit(1763654948.200:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 530.212276][ T27] audit: type=1326 audit(1763654948.210:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 530.235535][ T27] audit: type=1326 audit(1763654948.340:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 530.246661][ T9999] chnl_net:caif_netlink_parms(): no params data found [ 530.275267][ T27] audit: type=1326 audit(1763654948.340:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 530.700480][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.707964][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.718488][ T9999] bridge_slave_0: entered allmulticast mode [ 530.727142][ T9999] bridge_slave_0: entered promiscuous mode [ 530.743595][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.753022][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.761338][ T9999] bridge_slave_1: entered allmulticast mode [ 530.771736][ T9999] bridge_slave_1: entered promiscuous mode [ 530.842741][ T9999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.856801][ T9999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.947627][ T9999] team0: Port device team_slave_0 added [ 530.966053][ T9999] team0: Port device team_slave_1 added [ 531.910510][ T5810] Bluetooth: hci4: command tx timeout [ 532.107071][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.152867][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.185853][ T9999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.209517][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.216540][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.253659][ T9999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.989558][ T5810] Bluetooth: hci4: command tx timeout [ 534.705116][ T9999] hsr_slave_0: entered promiscuous mode [ 535.356277][ T9999] hsr_slave_1: entered promiscuous mode [ 535.534491][ T9999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.561138][ T9999] Cannot create hsr debugfs directory [ 536.103688][T10083] loop4: detected capacity change from 0 to 1024 [ 536.970526][ T9999] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 537.001274][ T9999] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 538.088844][ T9999] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 538.463861][ T9999] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 538.763267][ T7127] hfsplus: b-tree write err: -5, ino 4 [ 539.337732][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.108020][ T9999] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.180768][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.187951][ T7145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.242747][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.250022][ T7145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.566495][ T9999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.576748][ T5800] Bluetooth: hci3: command 0x0405 tx timeout [ 540.579908][ T9999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 544.065890][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.134562][T10187] netlink: 'syz.1.1090': attribute type 21 has an invalid length. [ 547.143065][T10187] netlink: 'syz.1.1090': attribute type 1 has an invalid length. [ 547.151067][T10187] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1090'. [ 548.694623][ T9999] veth0_vlan: entered promiscuous mode [ 548.717696][ T9999] veth1_vlan: entered promiscuous mode [ 548.874354][ T9999] veth0_macvtap: entered promiscuous mode [ 548.886932][ T9999] veth1_macvtap: entered promiscuous mode [ 549.076958][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.088374][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.099109][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.113010][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.123388][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.134001][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.153656][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.901641][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.926851][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.966894][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.979318][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.991312][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.013773][ T9999] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.022684][ T9999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.044659][ T9999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.069198][ T9999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.489856][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1107'. [ 551.502525][ T7140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.540032][ T7140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.810539][ T7140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.843143][ T7140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.396227][T10229] netlink: 'syz.1.1101': attribute type 1 has an invalid length. [ 553.473114][T10229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.578480][T10229] veth5: entered promiscuous mode [ 555.310258][T10229] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 563.359568][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.365949][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.041331][T10318] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1125'. [ 569.374416][ T5810] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 569.746388][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.804762][T10350] atomic_op ffff88806dbb7198 conn xmit_atomic 0000000000000000 [ 574.630130][T10376] lo speed is unknown, defaulting to 1000 [ 575.697031][T10379] 9pnet_fd: Insufficient options for proto=fd [ 578.023072][T10402] tipc: Enabling of bearer rejected, already enabled [ 579.516161][ T5810] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 580.111482][T10423] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1154'. [ 585.254078][T10442] loop4: detected capacity change from 0 to 1764 [ 585.452683][ T8609] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 589.574839][T10456] wireguard0: entered promiscuous mode [ 589.580537][T10456] wireguard0: entered allmulticast mode [ 589.728987][T10467] lo speed is unknown, defaulting to 1000 [ 591.769353][T10485] netlink: 'syz.5.1171': attribute type 4 has an invalid length. [ 592.896222][T10500] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1174'. [ 592.905582][T10500] openvswitch: netlink: ct_state flags 00030000 unsupported [ 594.043076][T10511] xt_l2tp: v2 doesn't support IP mode [ 595.894903][T10525] fuse: Bad value for 'fd' [ 596.843830][T10527] netlink: 'syz.5.1180': attribute type 298 has an invalid length. [ 597.762318][ T9808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 597.788343][T10531] syzkaller0: entered promiscuous mode [ 597.794521][T10531] syzkaller0: entered allmulticast mode [ 597.994725][ T9808] usb 5-1: Using ep0 maxpacket: 16 [ 598.534351][ T9808] usb 5-1: device descriptor read/all, error -71 [ 598.832536][T10539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.866453][ T5810] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 606.709098][T10590] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1196'. [ 606.725763][T10590] openvswitch: netlink: ct_state flags 00030000 unsupported [ 609.254376][ T5810] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 609.254943][T10596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.676969][T10610] tipc: New replicast peer: 255.255.255.255 [ 611.689292][T10610] tipc: Enabled bearer , priority 10 [ 612.860345][ T5810] Bluetooth: hci3: unexpected event for opcode 0x080d [ 616.813407][T10651] netlink: 'syz.4.1213': attribute type 4 has an invalid length. [ 616.924830][T10652] netlink: 'syz.5.1212': attribute type 3 has an invalid length. [ 618.296339][ T5810] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 618.305782][ T5810] Bluetooth: hci3: Injecting HCI hardware error event [ 618.315581][ T5800] Bluetooth: hci3: hardware error 0x00 [ 619.649265][T10648] fuse: Bad value for 'fd' [ 619.792177][T10653] netlink: 'syz.4.1213': attribute type 4 has an invalid length. [ 622.478886][ T5800] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 624.460004][T10686] loop5: detected capacity change from 0 to 1024 [ 624.509632][T10686] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 624.581636][T10686] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.1224: Invalid block bitmap block 0 in block_group 0 [ 624.610142][T10686] Quota error (device loop5): write_blk: dquota write failed [ 624.618238][T10686] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 624.629471][T10686] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1224: Failed to acquire dquot type 0 [ 624.641669][ T5800] Bluetooth: hci3: Opcode 0x206c failed: -110 [ 624.671036][T10686] EXT4-fs error (device loop5): ext4_free_blocks:6676: comm syz.5.1224: Freeing blocks not in datazone - block = 0, count = 4096 [ 624.698416][T10686] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1224: Invalid inode bitmap blk 0 in block_group 0 [ 624.720704][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.727118][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.744479][ T1075] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 624.768063][T10686] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 624.778193][T10686] EXT4-fs (loop5): 1 orphan inode deleted [ 624.790958][T10686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.027254][ T1075] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u4:6: Failed to release dquot type 0 [ 625.873571][T10692] loop4: detected capacity change from 0 to 512 [ 627.029386][ T5800] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 627.675854][ T8505] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 627.929228][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.858767][T10740] team_slave_0: entered promiscuous mode [ 633.865094][T10740] team_slave_1: entered promiscuous mode [ 634.016420][T10740] vlan2: entered promiscuous mode [ 634.021634][T10740] team0: entered promiscuous mode [ 634.837689][T10747] binder: 10746:10747 ioctl c0306201 0 returned -14 [ 639.260142][T10793] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1250'. [ 643.071917][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 647.307756][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 647.999592][T10867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 649.179234][T10871] binder: 10870:10871 ioctl c0306201 0 returned -14 [ 649.361199][T10876] netlink: 'syz.5.1270': attribute type 1 has an invalid length. [ 649.495249][T10876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 649.518035][T10878] macvlan2: entered promiscuous mode [ 649.523611][T10878] macvlan2: entered allmulticast mode [ 649.531046][T10878] bond1: entered promiscuous mode [ 649.537071][T10878] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 649.569860][T10878] bond1: left promiscuous mode [ 650.200739][T10876] bond1: (slave gretap1): making interface the new active one [ 650.250366][T10876] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 662.555188][T10967] lo speed is unknown, defaulting to 1000 [ 671.129957][T11019] loop0: detected capacity change from 0 to 1024 [ 671.261570][T11023] syzkaller0: entered promiscuous mode [ 671.267246][T11023] syzkaller0: entered allmulticast mode [ 671.438912][ T27] audit: type=1800 audit(1763655089.550:195): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1305" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 673.820337][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 676.895674][T11057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.368345][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.479803][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.716625][T11131] syzkaller0: entered promiscuous mode [ 686.722708][T11131] syzkaller0: entered allmulticast mode [ 686.729370][T11133] loop5: detected capacity change from 0 to 128 [ 695.239193][T11195] loop0: detected capacity change from 0 to 1764 [ 696.842991][T11204] loop5: detected capacity change from 0 to 1024 [ 696.900080][T11206] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 697.001677][ T27] audit: type=1800 audit(1763655115.100:196): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1352" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 697.207317][T11206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 697.342336][T11206] erspan0: entered allmulticast mode [ 697.533291][T11206] bond3: (slave erspan0): making interface the new active one [ 697.648128][T11206] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 697.739271][T11213] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 697.877602][T11214] veth7: entered promiscuous mode [ 697.945358][T11214] bond3: (slave veth7): Enslaving as an active interface with a down link [ 698.119240][T11202] loop0: detected capacity change from 0 to 32768 [ 698.280229][T11202] find_entry called with index = 0 [ 698.288459][T11202] read_mapping_page failed! [ 698.325807][T11202] ERROR: (device loop0): txCommit: [ 698.325807][T11202] [ 698.487175][T11202] read_mapping_page failed! [ 698.569903][T11202] ERROR: (device loop0): txCommit: [ 698.569903][T11202] [ 698.801732][T11229] xt_connbytes: Forcing CT accounting to be enabled [ 698.809006][T11229] Cannot find set identified by id 0 to match [ 699.240599][ T1072] read_mapping_page failed! [ 699.280055][ T1072] ERROR: (device loop0): txCommit: [ 699.280055][ T1072] [ 699.448864][ T1072] jfs_write_inode: jfs_commit_inode failed! [ 700.945143][ T8851] IPVS: starting estimator thread 0... [ 701.088909][T11244] IPVS: using max 18 ests per chain, 43200 per kthread [ 701.113116][T11248] loop4: detected capacity change from 0 to 2048 [ 701.319630][T11248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.261888][T11257] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1363: bg 0: block 234: padding at end of block bitmap is not set [ 702.290944][T11257] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 702.303669][T11257] EXT4-fs (loop4): This should not happen!! Data will be lost [ 702.303669][T11257] [ 702.313500][T11257] EXT4-fs (loop4): Total free blocks count 0 [ 702.319617][T11257] EXT4-fs (loop4): Free/Dirty block details [ 702.325551][T11257] EXT4-fs (loop4): free_blocks=0 [ 702.330642][T11257] EXT4-fs (loop4): dirty_blocks=3440 [ 702.335962][T11257] EXT4-fs (loop4): Block reservation details [ 702.342058][T11257] EXT4-fs (loop4): i_reserved_data_blocks=215 [ 702.604402][ T7140] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1388 with error 28 [ 706.882165][T11280] smc: net device bond0 applied user defined pnetid SYZ2 [ 706.891081][T11280] smc: net device bond0 erased user defined pnetid SYZ2 [ 708.203061][T11298] fuse: Bad value for 'fd' [ 715.652395][T11334] syzkaller0: entered promiscuous mode [ 715.701393][T11337] loop4: detected capacity change from 0 to 512 [ 716.609268][T11334] syzkaller0: entered allmulticast mode [ 717.126275][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 717.143306][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 717.152251][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 717.488429][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 717.502595][ T5810] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 717.554255][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 718.583018][T11343] lo speed is unknown, defaulting to 1000 [ 719.265670][T11358] netlink: 'syz.5.1389': attribute type 1 has an invalid length. [ 719.463073][T11362] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 719.485077][T11362] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 719.556858][T11358] gretap2: entered promiscuous mode [ 719.582224][T11358] bond2: (slave gretap2): making interface the new active one [ 719.617373][T11358] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 719.673742][ T5810] Bluetooth: hci5: command tx timeout [ 719.873991][T11358] macvlan2: entered promiscuous mode [ 719.892567][T11358] macvlan2: entered allmulticast mode [ 719.909739][T11358] bond2: entered promiscuous mode [ 719.997410][T11358] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 720.041479][T11358] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 720.057756][T11358] bond2: left promiscuous mode [ 720.563537][T11343] chnl_net:caif_netlink_parms(): no params data found [ 721.545618][T11343] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.566418][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.758633][ T5810] Bluetooth: hci5: command tx timeout [ 721.764492][T11343] bridge_slave_0: entered allmulticast mode [ 721.803020][T11343] bridge_slave_0: entered promiscuous mode [ 721.827085][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.837926][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.389557][T11343] bridge_slave_1: entered allmulticast mode [ 722.500898][T11343] bridge_slave_1: entered promiscuous mode [ 722.605781][T11343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.703776][T11343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.001630][T11343] team0: Port device team_slave_0 added [ 723.042479][T11343] team0: Port device team_slave_1 added [ 723.153187][T11343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.294552][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.673081][T11343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.349628][ T5810] Bluetooth: hci5: command tx timeout [ 724.449067][T11343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.456084][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.567401][T11343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.767045][T11343] hsr_slave_0: entered promiscuous mode [ 724.789254][T11343] hsr_slave_1: entered promiscuous mode [ 724.796058][T11343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.351319][T11343] Cannot create hsr debugfs directory [ 726.364397][T11343] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 726.389849][ T5810] Bluetooth: hci5: command tx timeout [ 726.411127][T11343] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 726.464116][T11343] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 726.500741][T11343] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 726.789644][T11343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.840519][T11343] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.871102][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.878498][ T7127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.926144][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.933386][ T7127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.361742][T11343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.379191][T11463] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1411'. [ 728.414525][T11463] bond0: entered allmulticast mode [ 728.432932][T11463] bond_slave_0: entered allmulticast mode [ 728.455442][T11463] bond_slave_1: entered allmulticast mode [ 729.077409][T11343] veth0_vlan: entered promiscuous mode [ 729.151319][T11343] veth1_vlan: entered promiscuous mode [ 729.837774][T11343] veth0_macvtap: entered promiscuous mode [ 729.920723][T11343] veth1_macvtap: entered promiscuous mode [ 730.049463][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.069500][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.088585][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.108760][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.124408][T11478] loop4: detected capacity change from 0 to 4096 [ 730.129205][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.158706][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.178649][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.196061][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.209974][T11343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.276379][T11478] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 730.303396][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.328857][T11478] ntfs3: loop4: Failed to load $Extend (-22). [ 730.335134][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.348442][T11478] ntfs3: loop4: Failed to initialize $Extend. [ 730.365662][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.384438][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.395957][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.410781][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.431173][T11343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.465866][T11343] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.491053][T11343] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.506027][T11343] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.526328][T11343] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.645917][T11484] syzkaller0: entered promiscuous mode [ 730.661853][T11484] syzkaller0: entered allmulticast mode [ 731.150344][ T7127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.194218][ T7127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.316663][ T7126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.365559][ T7126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.693333][T11504] delete_channel: no stack [ 735.547827][T11512] netlink: 'syz.5.1420': attribute type 1 has an invalid length. [ 736.446299][T11508] lo speed is unknown, defaulting to 1000 [ 736.592116][T11512] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 736.631810][T11512] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 736.780880][T11528] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 737.008960][T11530] sch_tbf: burst 6 is lower than device lo mtu (11337746) ! [ 737.412982][T11512] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 737.805941][T11539] loop5: detected capacity change from 0 to 1024 [ 738.722178][T11539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.858020][ T27] audit: type=1800 audit(1763655156.980:197): pid=11539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1428" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 738.940337][T11539] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4031: comm syz.5.1428: Allocating blocks 385-513 which overlap fs metadata [ 738.991070][T11536] EXT4-fs (loop5): pa ffff8880789cbbc8: logic 16, phys. 129, len 24 [ 738.999921][T11536] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 739.488808][ T9999] Trying to write to read-only block-device loop5 [ 739.515304][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.290187][ T9811] IPVS: starting estimator thread 0... [ 742.511993][T11575] IPVS: using max 18 ests per chain, 43200 per kthread [ 743.383309][T11581] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 743.948745][T11595] loop5: detected capacity change from 0 to 512 [ 746.176549][T11613] xt_hashlimit: overflow, try lower: 17592186044416/9 [ 747.595115][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.601632][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.904877][T11626] loop5: detected capacity change from 0 to 512 [ 748.668004][T11521] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 748.925548][T11626] loop5: detected capacity change from 0 to 512 [ 748.942791][T11626] EXT4-fs: Ignoring removed oldalloc option [ 750.078996][T11644] loop6: detected capacity change from 0 to 512 [ 751.138143][T11648] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1454'. [ 753.633142][T11659] tipc: Can't bind to reserved service type 2 [ 753.806573][T11659] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1457'. [ 757.620582][T11692] netlink: 'syz.4.1464': attribute type 1 has an invalid length. [ 759.076304][T11700] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 759.145764][T11700] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 759.228130][T11707] sch_tbf: burst 6 is lower than device lo mtu (18) ! [ 759.275472][T11692] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 760.189008][T11692] bond2: (slave gretap1): making interface the new active one [ 760.198088][T11692] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 764.236503][T11734] Bluetooth: MGMT ver 1.22 [ 765.098225][T11739] netlink: 'syz.5.1478': attribute type 8 has an invalid length. [ 765.175797][T11742] loop6: detected capacity change from 0 to 764 [ 765.211859][T11742] rock: directory entry would overflow storage [ 765.238291][T11742] rock: sig=0x4654, size=5, remaining=4 [ 766.272976][T11753] netlink: 'syz.1.1483': attribute type 1 has an invalid length. [ 766.790422][T11760] isofs: Unable to find the ".." directory for NFS. [ 767.193018][T11762] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 767.205554][T11762] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 769.373465][T11753] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 769.443027][T11772] bond4: (slave gretap2): making interface the new active one [ 769.484506][T11772] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 770.486047][T11785] loop5: detected capacity change from 0 to 2048 [ 770.539426][T11787] tipc: Enabled bearer , priority 0 [ 770.557476][T11726] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 771.178323][T11787] syzkaller0: entered promiscuous mode [ 771.201144][T11787] syzkaller0: entered allmulticast mode [ 771.302550][T11787] tipc: Resetting bearer [ 771.325277][T11786] tipc: Resetting bearer [ 771.407299][T11786] tipc: Disabling bearer [ 771.528361][T11805] tipc: Started in network mode [ 771.547732][T11805] tipc: Node identity 0e62d54f8335, cluster identity 4711 [ 771.580185][T11805] tipc: Enabled bearer , priority 0 [ 771.603890][T11809] syzkaller0: entered promiscuous mode [ 771.618895][T11809] syzkaller0: entered allmulticast mode [ 771.635243][T11808] netlink: 'syz.6.1493': attribute type 1 has an invalid length. [ 771.714265][T11815] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 771.726576][T11815] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 771.814805][T11805] tipc: Resetting bearer [ 771.841842][T11818] tipc: Enabled bearer , priority 0 [ 771.894773][T11804] tipc: Resetting bearer [ 771.953269][T11804] tipc: Disabling bearer [ 771.963468][T11813] syzkaller0: entered promiscuous mode [ 771.969486][T11813] syzkaller0: entered allmulticast mode [ 771.984930][T11808] gretap1: entered promiscuous mode [ 772.251991][T11808] bond1: (slave gretap1): making interface the new active one [ 772.589691][T11808] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 772.736018][T11822] tipc: Resetting bearer [ 772.770112][T11812] tipc: Resetting bearer [ 773.022309][T11812] tipc: Disabling bearer [ 776.377730][T11842] loop6: detected capacity change from 0 to 1024 [ 776.703565][T11842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 776.725164][T11842] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 776.737647][T11842] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 776.801359][T11842] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 776.814471][T11842] EXT4-fs (loop6): orphan cleanup on readonly fs [ 776.942335][T11842] EXT4-fs error (device loop6): ext4_read_inode_bitmap:168: comm syz.6.1501: Inode bitmap for bg 0 marked uninitialized [ 776.956084][T11842] EXT4-fs (loop6): Remounting filesystem read-only [ 776.964211][T11842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 777.093650][ T5793] jfs_flush_journal: synclist not empty [ 777.116872][ T5793] metapage: ffff88801cadfc98: 00001000 00000000 00000024 00000000 [ 777.139297][ T5793] metapage: ffff88801cadfca8: 7baa1a28 ffff8880 7baa1a28 ffff8880 [ 777.147239][ T5793] metapage: ffff88801cadfcb8: 00000004 00000000 00000000 00000000 [ 777.185817][ T5793] metapage: ffff88801cadfcc8: 5a86d000 ffff8880 00000024 00000000 [ 777.535462][T11343] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.558982][ T5793] metapage: ffff88801cadfcd8: 00000000 dead4ead ffffffff 00000000 [ 777.606018][ T5793] metapage: ffff88801cadfce8: ffffffff ffffffff 96ff4280 ffffffff [ 777.670781][ T5793] metapage: ffff88801cadfcf8: 907d85d0 ffffffff 00000000 00000000 [ 777.734154][ T5793] metapage: ffff88801cadfd08: 8ae3f3e0 ffffffff 00000200 00000000 [ 777.793990][ T5793] metapage: ffff88801cadfd18: 1cadfd18 ffff8880 1cadfd18 ffff8880 [ 777.830918][ T5793] metapage: ffff88801cadfd28: 016a1b40 ffffea00 79726000 ffff8880 [ 777.840145][ T5793] metapage: ffff88801cadfd38: 00001000 000000f0 00000001 00000000 [ 777.850838][ T5793] metapage: ffff88801cadfd48: 7baa1800 ffff8880 [ 777.865700][ T5793] page: ffffea00016a1b40: 00fff5000000822c ffffea000152a708 [ 777.875830][ T5793] page: ffffea00016a1b50: ffffea0000e9bf48 ffff88804e4a0658 [ 777.892803][ T5793] page: ffffea00016a1b60: 0000000000000024 ffff88801cadfc98 [ 777.943661][ T5793] page: ffffea00016a1b70: 00000002ffffffff ffff88802100a000 [ 779.339063][T11860] netlink: 'syz.4.1507': attribute type 4 has an invalid length. [ 779.346882][T11860] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1507'. [ 779.391593][T11858] syz.5.1506: attempt to access beyond end of device [ 779.391593][T11858] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 779.404587][T11858] FAT-fs (loop11): unable to read boot sector [ 780.776392][T11862] loop5: detected capacity change from 0 to 4096 [ 780.885035][T11726] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 785.650285][T11897] loop5: detected capacity change from 0 to 1024 [ 786.191889][T11897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 786.204494][T11897] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 786.214976][T11897] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 786.240180][T11897] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 786.248788][T11897] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 786.258253][T11897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 786.630772][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.158403][ T1126] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.880071][T11921] xt_TCPMSS: Only works on TCP SYN packets [ 788.449799][ T1126] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.372154][ T1126] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.410760][ T1126] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.755179][T11962] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 795.755179][T11962] The task syz.6.1530 (11962) triggered the difference, watch for misbehavior. [ 795.923153][ T27] audit: type=1326 audit(1763655214.050:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 795.987853][ T27] audit: type=1326 audit(1763655214.050:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 796.200468][ T1126] tipc: Disabling bearer [ 796.361598][ T1126] tipc: Disabling bearer [ 796.482009][ T27] audit: type=1326 audit(1763655214.080:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 796.592888][ T1126] tipc: Left network mode [ 796.706445][ T27] audit: type=1326 audit(1763655214.080:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 796.729780][ T27] audit: type=1326 audit(1763655214.080:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 796.798287][T11972] loop6: detected capacity change from 0 to 512 [ 796.835687][ T27] audit: type=1326 audit(1763655214.080:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 796.980110][ T27] audit: type=1326 audit(1763655214.080:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 797.289774][ T27] audit: type=1326 audit(1763655214.080:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 797.489162][ T27] audit: type=1326 audit(1763655214.080:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 797.584108][ T27] audit: type=1326 audit(1763655214.080:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11965 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 798.349145][T11990] syz.4.1535[11990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.349295][T11990] syz.4.1535[11990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.365344][T11990] loop4: detected capacity change from 0 to 128 [ 798.437171][T11990] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 799.924293][T11990] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 800.008893][T11990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 801.253327][ T8657] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 802.660147][ T1126] bond4: (slave gretap1): Releasing backup interface [ 802.741866][T12016] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.751427][T12016] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.760256][T12016] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.769092][T12016] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.456151][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 804.532733][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 806.895505][ T1126] bond0: (slave wlan1): Releasing backup interface [ 807.059962][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 807.059980][ T27] audit: type=1326 audit(1763655225.190:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 807.116085][ T27] audit: type=1326 audit(1763655225.190:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 807.268905][ T27] audit: type=1326 audit(1763655225.210:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 807.360200][ T27] audit: type=1326 audit(1763655225.210:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 807.448849][ T27] audit: type=1326 audit(1763655225.210:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 807.555129][ T27] audit: type=1326 audit(1763655225.220:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 807.579341][ T27] audit: type=1326 audit(1763655225.220:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 807.614630][ T27] audit: type=1326 audit(1763655225.220:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 807.642593][ T27] audit: type=1326 audit(1763655225.230:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 808.259097][ T27] audit: type=1326 audit(1763655225.230:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 808.446349][T12091] loop5: detected capacity change from 0 to 2048 [ 809.043665][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.095289][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.430233][ T1126] hsr_slave_0: left promiscuous mode [ 809.492931][ T1126] hsr_slave_1: left promiscuous mode [ 809.523551][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.539269][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.556499][ T1126] vxlan0: left allmulticast mode [ 809.565818][ T1126] vxlan0: left promiscuous mode [ 809.579070][ T1126] bridge0: port 3(vxlan0) entered disabled state [ 809.742502][ T1126] bridge_slave_1: left allmulticast mode [ 809.784939][ T1126] bridge_slave_1: left promiscuous mode [ 809.816529][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.857165][ T1126] bridge_slave_0: left allmulticast mode [ 809.871540][ T1126] bridge_slave_0: left promiscuous mode [ 809.882775][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.753703][ T1126] bond_slave_0: left promiscuous mode [ 810.759817][ T1126] bond_slave_1: left promiscuous mode [ 810.836642][ T1126] veth1_macvtap: left promiscuous mode [ 810.853706][ T1126] veth0_macvtap: left promiscuous mode [ 810.871698][ T1126] veth1_vlan: left promiscuous mode [ 810.891159][ T1126] veth0_vlan: left promiscuous mode [ 812.232657][ T1126] infiniband syz0: set down [ 812.995257][ T1126] bond4 (unregistering): (slave bond5): Releasing backup interface [ 813.006671][ T1126] bond5 (unregistering): Released all slaves [ 813.213471][ T1126] bond4 (unregistering): Released all slaves [ 813.367128][ T1126] bond3 (unregistering): (slave macvlan2): Releasing active interface [ 813.384104][ T1126] bond3 (unregistering): Released all slaves [ 813.575858][ T1126] bond1 (unregistering): (slave bond2): Releasing backup interface [ 813.583958][ T1126] bond2 (unregistering): left promiscuous mode [ 813.593236][ T1126] bond2 (unregistering): Released all slaves [ 813.785530][ T1126] bond1 (unregistering): Released all slaves [ 813.887602][ T1126] team0 (unregistering): Port device geneve0 removed [ 814.427180][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 814.493348][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 814.559017][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.629771][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.455440][ T1126] bond0 (unregistering): Released all slaves [ 815.462519][T11907] smc: removing ib device syz0 [ 815.569340][T12125] bond3: (slave erspan0): Releasing active interface [ 815.576118][T12125] bond3: (slave erspan0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:16 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 815.594268][T12125] bond3: (slave ip6gretap1): making interface the new active one [ 815.675183][T12125] tipc: Resetting bearer [ 815.750011][T12125] bond2: (slave veth5): Releasing backup interface [ 815.806946][T12125] bond3: (slave ip6gretap1): Releasing active interface [ 815.854710][T12125] bond3: (slave veth7): Releasing active interface [ 815.895939][T12125] bond4: (slave bridge3): Releasing active interface [ 815.936104][T12125] bond4: (slave gretap2): Releasing active interface [ 816.066738][T12138] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1564'. [ 816.786795][T12126] team0: Unable to change to the same mode the team is in [ 817.087429][ T8851] infiniband syz0: ib_query_port failed (-19) [ 824.176808][T12157] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 827.484022][T12180] xt_HMARK: spi-set and port-set can't be combined [ 834.412061][T12232] syzkaller0: entered promiscuous mode [ 834.417816][T12232] syzkaller0: entered allmulticast mode [ 836.076681][T12248] netlink: 'syz.1.1587': attribute type 11 has an invalid length. [ 836.925243][ T1126] IPVS: stop unused estimator thread 0... [ 839.505343][T12277] loop6: detected capacity change from 0 to 2048 [ 839.750219][T12285] loop4: detected capacity change from 0 to 512 [ 839.782067][T12285] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 841.517073][T12285] EXT4-fs (loop4): 1 truncate cleaned up [ 841.524595][T12285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.560621][T12277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.892970][ T8657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.600528][T11343] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.519000][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 845.135529][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 845.135816][ T27] audit: type=1326 audit(1763655263.080:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 846.854212][ T27] audit: type=1326 audit(1763655263.090:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 846.957673][ T27] audit: type=1326 audit(1763655263.100:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 847.118203][ T27] audit: type=1326 audit(1763655263.100:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 847.147704][ T27] audit: type=1326 audit(1763655263.110:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 848.335427][ T27] audit: type=1326 audit(1763655263.120:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 849.146633][ T27] audit: type=1326 audit(1763655263.120:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 849.217997][ T27] audit: type=1326 audit(1763655263.120:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cd78f749 code=0x7ffc0000 [ 851.098221][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 851.979358][T12351] Cannot find del_set index 286 as target [ 852.803751][T12364] geneve2: entered promiscuous mode [ 852.856067][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 853.107778][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 855.476149][T12397] loop6: detected capacity change from 0 to 512 [ 855.603179][T12397] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1616: inode has both inline data and extents flags [ 855.771539][T12397] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1616: couldn't read orphan inode 15 (err -117) [ 855.804998][T12397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.048228][T11343] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.872691][T12425] loop6: detected capacity change from 0 to 128 [ 858.916370][T12425] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 858.932367][T12425] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 860.696918][ T27] audit: type=1800 audit(1763655278.820:282): pid=12425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1619" name="file1" dev="loop6" ino=94 res=0 errno=0 [ 861.492220][T12430] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 861.611170][T12430] batman_adv: batadv0: Adding interface: dummy0 [ 861.638997][T12430] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.696014][T12437] loop6: detected capacity change from 0 to 256 [ 861.704045][T12430] batman_adv: batadv0: Interface activated: dummy0 [ 861.746004][T12432] batadv0: mtu less than device minimum [ 861.779031][T12432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 861.792648][T12432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 861.805375][T12432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 861.818072][T12432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 861.830821][T12432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 861.843411][T12432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 861.856019][T12432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 861.868820][T12432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 861.881491][T12432] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 861.929592][T12430] netlink: 'syz.5.1623': attribute type 10 has an invalid length. [ 861.935802][T12437] FAT-fs (loop6): Directory bread(block 64) failed [ 861.945017][T12437] FAT-fs (loop6): Directory bread(block 65) failed [ 861.957522][T12437] FAT-fs (loop6): Directory bread(block 66) failed [ 861.964607][T12437] FAT-fs (loop6): Directory bread(block 67) failed [ 861.971732][T12437] FAT-fs (loop6): Directory bread(block 68) failed [ 861.978332][T12437] FAT-fs (loop6): Directory bread(block 69) failed [ 861.986272][T12437] FAT-fs (loop6): Directory bread(block 70) failed [ 861.996934][T12430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.004314][T12437] FAT-fs (loop6): Directory bread(block 71) failed [ 862.018154][T12437] FAT-fs (loop6): Directory bread(block 72) failed [ 862.027011][T12437] FAT-fs (loop6): Directory bread(block 73) failed [ 862.046338][T12430] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 865.228789][T12464] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 865.236024][T12464] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 865.806783][T12464] vhci_hcd vhci_hcd.0: Device attached [ 865.869455][T12471] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 865.876153][T12471] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 865.918992][T12471] vhci_hcd vhci_hcd.0: Device attached [ 865.939108][T12464] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 865.945712][T12464] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 865.971098][ T23] usb 42-1: SetAddress Request (2) to port 0 [ 865.978043][T12464] vhci_hcd vhci_hcd.0: Device attached [ 865.985528][ T23] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 865.994852][T12471] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 866.001517][T12471] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 866.015412][T12471] vhci_hcd vhci_hcd.0: Device attached [ 866.027019][T12464] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 866.037817][T12464] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 867.460035][T12490] xt_HMARK: spi-set and port-set can't be combined [ 868.089753][T12475] vhci_hcd: connection closed [ 868.122929][ T1072] vhci_hcd: stop threads [ 868.133530][T12472] vhci_hcd: connection closed [ 868.133740][T12468] vhci_hcd: connection reset by peer [ 868.145888][T12480] vhci_hcd: connection closed [ 868.176239][ T1072] vhci_hcd: release socket [ 868.186201][ T1072] vhci_hcd: disconnect device [ 868.211736][ T1072] vhci_hcd: stop threads [ 868.216165][ T1072] vhci_hcd: release socket [ 868.245390][ T1072] vhci_hcd: disconnect device [ 868.269165][ T1072] vhci_hcd: stop threads [ 868.291950][ T1072] vhci_hcd: release socket [ 868.316923][ T1072] vhci_hcd: disconnect device [ 868.334312][ T1072] vhci_hcd: stop threads [ 868.371222][ T1072] vhci_hcd: release socket [ 868.425558][ T1072] vhci_hcd: disconnect device [ 870.479373][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.588958][T12521] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1641'. [ 870.681864][T12521] unsupported nlmsg_type 40 [ 871.977312][T12521] syz_tun: entered allmulticast mode [ 872.017209][ T23] usb 42-1: device descriptor read/8, error -110 [ 872.209265][T12521] dvmrp8: entered allmulticast mode [ 872.934915][T12519] syz_tun: left allmulticast mode [ 872.969128][ T23] usb usb42-port1: attempt power cycle [ 873.190249][ T9] vhci_hcd: vhci_device speed not set [ 874.447201][T12558] geneve2: entered promiscuous mode [ 874.939663][ T23] usb usb42-port1: unable to enumerate USB device [ 880.669416][T12605] netlink: 'syz.4.1658': attribute type 4 has an invalid length. [ 880.956039][T12607] netlink: 'syz.4.1658': attribute type 4 has an invalid length. [ 881.177326][T12617] netlink: 'syz.5.1661': attribute type 10 has an invalid length. [ 881.192950][T12617] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1661'. [ 881.203035][T12617] team0: entered allmulticast mode [ 881.208423][T12617] team_slave_0: entered allmulticast mode [ 881.218692][T12617] team_slave_1: entered allmulticast mode [ 881.229641][T12617] bridge0: port 3(team0) entered blocking state [ 881.252656][T12617] bridge0: port 3(team0) entered disabled state [ 881.306716][T12617] bridge0: port 3(team0) entered blocking state [ 881.313564][T12617] bridge0: port 3(team0) entered forwarding state [ 886.727113][T12672] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 887.847790][T12682] tipc: Started in network mode [ 887.874528][T12682] tipc: Node identity e657e363e8cb, cluster identity 4711 [ 887.904198][T12682] tipc: Enabled bearer , priority 0 [ 887.931956][T12686] syzkaller0: entered promiscuous mode [ 887.952322][T12686] syzkaller0: entered allmulticast mode [ 889.031438][ T9] tipc: Node number set to 245162851 [ 889.089344][T12690] tipc: Resetting bearer [ 889.179094][T12681] tipc: Resetting bearer [ 889.421988][T12681] tipc: Disabling bearer [ 890.280509][ T9811] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 890.568920][ T9811] usb 6-1: Using ep0 maxpacket: 32 [ 890.620964][ T9811] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 890.638903][ T9811] usb 6-1: config 0 has no interface number 0 [ 890.645180][ T9811] usb 6-1: config 0 interface 2 has no altsetting 0 [ 890.673058][ T9811] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 890.717380][ T9811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.745151][ T9811] usb 6-1: Product: syz [ 890.758597][ T9811] usb 6-1: Manufacturer: syz [ 890.774346][ T9811] usb 6-1: SerialNumber: syz [ 890.792198][ T9811] usb 6-1: config 0 descriptor?? [ 891.050704][T12712] loop7: detected capacity change from 0 to 16384 [ 891.212859][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 891.290060][T12737] loop7: detected capacity change from 16384 to 0 [ 892.231881][ T9811] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 892.564073][ T9811] usb 6-1: USB disconnect, device number 2 [ 892.690543][T12760] tipc: Enabling of bearer rejected, already enabled [ 893.290586][T12762] udevd[12762]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.327986][T12778] loop5: detected capacity change from 0 to 512 [ 894.360661][T12778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 894.407063][T12778] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 894.417206][T12778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 894.652706][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.283689][ T5799] Process accounting resumed [ 899.333737][T12804] Process accounting resumed [ 902.110816][ T5794] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 902.533673][ T5794] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 902.760266][ T9811] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 903.097741][ T9811] usb 5-1: Using ep0 maxpacket: 32 [ 903.169669][ T9811] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 903.219995][ T9811] usb 5-1: config 0 has no interface number 0 [ 903.248716][ T9811] usb 5-1: config 0 interface 2 has no altsetting 0 [ 903.282011][ T9811] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 903.313295][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.330094][ T5794] usb 6-1: Product: syz [ 903.330130][ T9811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.334311][ T5794] usb 6-1: Manufacturer: syz [ 903.347035][ T5794] usb 6-1: SerialNumber: syz [ 903.361930][ T5794] usb 6-1: config 0 descriptor?? [ 903.398214][ T9811] usb 5-1: Product: syz [ 903.428767][ T9811] usb 5-1: Manufacturer: syz [ 903.433446][ T9811] usb 5-1: SerialNumber: syz [ 903.455271][ T9811] usb 5-1: config 0 descriptor?? [ 903.618757][ T5794] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 903.744318][ T9811] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 903.939812][ T9811] usb 5-1: USB disconnect, device number 4 [ 909.957266][T12756] udevd[12756]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 914.699988][ T5794] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 915.917760][ T5794] usb 6-1: USB disconnect, device number 3 [ 921.617748][T12908] netlink: 'syz.4.1720': attribute type 10 has an invalid length. [ 921.693616][T12908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1720'. [ 921.743898][T12908] team0: entered promiscuous mode [ 921.790423][T12908] team_slave_0: entered promiscuous mode [ 921.830952][T12908] team_slave_1: entered promiscuous mode [ 921.836914][T12908] team0: entered allmulticast mode [ 921.918640][T12908] team_slave_0: entered allmulticast mode [ 921.933579][T12908] team_slave_1: entered allmulticast mode [ 921.953356][T12908] bridge0: port 3(team0) entered blocking state [ 922.236859][T12908] bridge0: port 3(team0) entered disabled state [ 922.250022][T12908] bridge0: port 3(team0) entered blocking state [ 922.256488][T12908] bridge0: port 3(team0) entered forwarding state [ 923.339958][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 927.718367][T12958] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 932.361745][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.529948][T12990] netlink: 'syz.6.1735': attribute type 4 has an invalid length. [ 935.308954][T12993] netlink: 'syz.6.1735': attribute type 4 has an invalid length. [ 935.692737][T13008] netlink: 'syz.1.1740': attribute type 12 has an invalid length. [ 937.500331][T13017] netlink: 'syz.1.1740': attribute type 12 has an invalid length. [ 938.476004][T13027] loop5: detected capacity change from 0 to 1024 [ 938.546435][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 938.563739][T12153] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 938.582700][T13034] macvtap1: entered promiscuous mode [ 938.648943][T13034] team0: entered promiscuous mode [ 938.753520][T13034] macvtap1: entered allmulticast mode [ 938.778688][T13034] team0: entered allmulticast mode [ 938.798530][T13034] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 938.887691][T13037] team0: left allmulticast mode [ 938.906327][T13037] team0: left promiscuous mode [ 940.928675][ T27] audit: type=1326 audit(1763655358.530:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 940.953627][ T27] audit: type=1326 audit(1763655358.570:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 940.977159][ T27] audit: type=1326 audit(1763655358.630:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 941.368845][ T27] audit: type=1326 audit(1763655358.630:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 941.463522][ T27] audit: type=1326 audit(1763655358.680:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 941.560914][ T27] audit: type=1326 audit(1763655358.760:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 941.747883][ T27] audit: type=1326 audit(1763655358.760:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 942.699066][ T27] audit: type=1326 audit(1763655358.790:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 942.833218][ T27] audit: type=1326 audit(1763655358.860:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 942.867645][ T27] audit: type=1326 audit(1763655358.860:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa4f8f749 code=0x7ffc0000 [ 943.150445][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1753'. [ 944.804594][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1753'. [ 947.093169][T13104] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 947.100715][T13104] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 947.107695][T13104] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 947.114833][T13104] comedi comedi3: 8255: I/O port conflict (0x5c942399,4) [ 947.122306][T13104] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 947.129651][T13104] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 947.137196][T13104] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 947.144135][T13104] comedi comedi3: 8255: I/O port conflict (0x200001,4) [ 947.153489][T13104] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 947.160559][T13104] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 947.167311][T13104] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 947.174216][T13104] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 947.181325][T13104] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 947.189745][T13104] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 947.198081][T13104] comedi comedi3: 8255: I/O port conflict (0x20000000,4) [ 947.207548][T13104] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 947.214449][T13104] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 947.221679][T13104] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 947.228750][T13104] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 947.235563][T13104] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffd,4) [ 953.230284][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 956.154700][T13165] orangefs_mount: mount request failed with -4 [ 959.816819][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1778'. [ 960.517411][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1778'. [ 974.466425][T13325] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 974.473046][T13325] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 974.520341][T13330] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 974.536306][T13325] vhci_hcd vhci_hcd.0: Device attached [ 974.609567][T13334] loop4: detected capacity change from 0 to 2048 [ 974.713780][T13325] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 974.720397][T13325] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 974.743735][ T9815] vhci_hcd: vhci_device speed not set [ 974.778803][T13325] vhci_hcd vhci_hcd.0: Device attached [ 974.818951][ T9815] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 974.857834][T13325] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(11) [ 974.864551][T13325] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 974.886646][T13330] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(14) [ 974.893334][T13330] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 975.027447][T13334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.161103][T13330] vhci_hcd vhci_hcd.0: Device attached [ 975.223023][T13325] vhci_hcd vhci_hcd.0: Device attached [ 975.525937][T13351] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 975.820750][T13325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 975.903262][T13364] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 975.922659][T13364] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 975.935689][T13364] EXT4-fs (loop4): This should not happen!! Data will be lost [ 975.935689][T13364] [ 975.945546][T13364] EXT4-fs (loop4): Total free blocks count 0 [ 975.951753][T13364] EXT4-fs (loop4): Free/Dirty block details [ 975.957859][T13364] EXT4-fs (loop4): free_blocks=2415919504 [ 975.967009][T13364] EXT4-fs (loop4): dirty_blocks=16 [ 975.972390][T13364] EXT4-fs (loop4): Block reservation details [ 975.978493][T13364] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 976.003853][T13365] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 976.960907][T13347] vhci_hcd: connection closed [ 976.962797][T13343] vhci_hcd: connection closed [ 976.964470][ T7126] vhci_hcd: stop threads [ 976.967571][T13338] vhci_hcd: connection closed [ 976.977355][T13328] vhci_hcd: connection reset by peer [ 976.996880][ T7126] vhci_hcd: release socket [ 977.009226][ T7126] vhci_hcd: disconnect device [ 977.068321][T13372] ip6t_srh: unknown srh match flags 4000 [ 977.195386][ T7126] vhci_hcd: stop threads [ 977.263446][ T7126] vhci_hcd: release socket [ 977.316981][ T7126] vhci_hcd: disconnect device [ 977.382017][ T7126] vhci_hcd: stop threads [ 977.425996][ T7126] vhci_hcd: release socket [ 977.485707][ T7126] vhci_hcd: disconnect device [ 977.598815][ T7126] vhci_hcd: stop threads [ 977.607616][ T7126] vhci_hcd: release socket [ 977.627836][ T7126] vhci_hcd: disconnect device [ 979.241964][T13382] loop4: detected capacity change from 0 to 1024 [ 979.683325][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 980.098819][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 980.114935][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 980.123419][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 980.133791][ T5810] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 980.141532][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 980.347937][T13387] lo speed is unknown, defaulting to 1000 [ 980.367466][ T9815] vhci_hcd: vhci_device speed not set [ 981.693836][T13387] chnl_net:caif_netlink_parms(): no params data found [ 982.120664][T13387] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.157927][T13387] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.166379][T13387] bridge_slave_0: entered allmulticast mode [ 982.180398][T13387] bridge_slave_0: entered promiscuous mode [ 982.202051][T13387] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.218865][T13387] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.229629][ T5810] Bluetooth: hci2: command tx timeout [ 982.248378][T13387] bridge_slave_1: entered allmulticast mode [ 982.256351][T13387] bridge_slave_1: entered promiscuous mode [ 983.156131][T13387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.174934][T13387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.521895][ T5810] Bluetooth: hci2: command tx timeout [ 986.408004][T13387] team0: Port device team_slave_0 added [ 988.682880][ T5810] Bluetooth: hci2: command tx timeout [ 988.702151][T13387] team0: Port device team_slave_1 added [ 990.727672][ T5810] Bluetooth: hci2: command tx timeout [ 992.320909][T13451] Process accounting resumed [ 992.647361][T13387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.655377][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.689534][T13387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.833235][T13387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.699815][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.711615][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.281736][T13469] Process accounting resumed [ 994.369555][T13387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.571805][T13478] loop6: detected capacity change from 0 to 2048 [ 994.662418][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 994.662436][ T27] audit: type=1804 audit(1763655412.770:295): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1833" name="/newroot/194/file1" dev="fuse" ino=1 res=1 errno=0 [ 994.786185][T13387] hsr_slave_0: entered promiscuous mode [ 994.846762][T13387] hsr_slave_1: entered promiscuous mode [ 994.890631][T13478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.505527][T13489] net_ratelimit: 13 callbacks suppressed [ 995.511421][T13489] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 996.010278][T11343] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.593402][T13387] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 997.641825][T13387] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 997.716009][T13387] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 997.765559][T13387] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 998.112219][T13387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.156107][T13387] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.205093][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.212355][T12049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.250979][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.258178][T12049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.291621][T13518] Process accounting resumed [ 999.540482][T13387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.539432][T13548] loop4: detected capacity change from 0 to 1024 [ 1003.591433][T13551] loop6: detected capacity change from 0 to 1024 [ 1003.735827][T13387] veth0_vlan: entered promiscuous mode [ 1003.774716][T13387] veth1_vlan: entered promiscuous mode [ 1004.578246][T13387] veth0_macvtap: entered promiscuous mode [ 1004.663187][T13387] veth1_macvtap: entered promiscuous mode [ 1004.743916][T13554] syzkaller0: entered promiscuous mode [ 1004.749547][T13554] syzkaller0: entered allmulticast mode [ 1004.771289][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.783108][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.808525][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.828938][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.847060][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.859115][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.919971][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.981939][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.005503][T13387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.666842][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.757739][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.798492][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.498638][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.518578][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.536864][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.547273][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.565306][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.577623][T13387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.475581][T13569] Process accounting resumed [ 1010.788151][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1843'. [ 1010.815046][T13387] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.831879][T13387] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.846193][T13387] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.863152][T13387] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.144232][ T7127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.159810][ T7127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.191075][ T7140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.199384][ T7140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.372492][T13578] loop6: detected capacity change from 0 to 1024 [ 1013.482337][ T1103] hfsplus: b-tree write err: -5, ino 4 [ 1016.493308][T13604] loop5: detected capacity change from 0 to 2048 [ 1018.074411][T13614] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1018.850231][T13619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1856'. [ 1018.869406][ T5799] Process accounting resumed [ 1019.320281][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1856'. [ 1019.355392][T13622] Process accounting resumed [ 1026.934958][T13674] befs: (nullb0): invalid magic header [ 1031.765244][ T23] Process accounting resumed [ 1032.456380][T13700] Process accounting resumed [ 1033.939861][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1033.954014][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1033.963139][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1033.973255][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1033.982764][ T5810] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1033.990613][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1034.134897][T13712] lo speed is unknown, defaulting to 1000 [ 1036.996226][T13712] chnl_net:caif_netlink_parms(): no params data found [ 1037.004987][ T5800] Bluetooth: hci6: command tx timeout [ 1039.427167][ T5810] Bluetooth: hci6: command tx timeout [ 1041.848521][ T5810] Bluetooth: hci6: command tx timeout [ 1041.862018][ T9] hid-generic FFFF:0008:0003.0003: item fetching failed at offset 3/5 [ 1041.871776][ T9] hid-generic: probe of FFFF:0008:0003.0003 failed with error -22 [ 1041.880149][ T9815] Process accounting resumed [ 1042.018804][T13761] Process accounting resumed [ 1042.100733][T13757] loop7: detected capacity change from 0 to 2048 [ 1042.290054][T13757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.351587][T13712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.380170][T13712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.402954][T13712] bridge_slave_0: entered allmulticast mode [ 1043.037301][T13781] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1043.460062][T13712] bridge_slave_0: entered promiscuous mode [ 1043.474717][T13387] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.511329][T13712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.654969][T13712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.662921][T13712] bridge_slave_1: entered allmulticast mode [ 1043.670938][T13712] bridge_slave_1: entered promiscuous mode [ 1043.908927][ T5810] Bluetooth: hci6: command tx timeout [ 1044.784502][T13788] loop7: detected capacity change from 0 to 1024 [ 1044.865746][T13712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.921839][T13712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.747149][T13712] team0: Port device team_slave_0 added [ 1048.503782][T13712] team0: Port device team_slave_1 added [ 1050.572067][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1899'. [ 1050.581171][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1899'. [ 1050.759458][T13712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.766508][T13712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.830627][T13712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.885694][T13712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.908813][T13712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.162001][T13712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.724776][T13827] loop4: detected capacity change from 0 to 1764 [ 1052.241071][T13823] netlink: 'syz.4.1900': attribute type 3 has an invalid length. [ 1052.260381][T13823] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1052.782091][T13712] hsr_slave_0: entered promiscuous mode [ 1052.789411][T13712] hsr_slave_1: entered promiscuous mode [ 1052.796779][T13712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1052.806722][T13712] Cannot create hsr debugfs directory [ 1054.824794][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.553822][ T1103] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.753037][ T1103] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.705849][T13879] loop5: detected capacity change from 0 to 256 [ 1063.714697][T13879] exfat: Deprecated parameter 'namecase' [ 1063.723152][T13879] exfat: Deprecated parameter 'namecase' [ 1063.729094][T13879] exfat: Deprecated parameter 'namecase' [ 1064.316313][ T1103] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.371019][T13887] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1915'. [ 1065.887232][ T1103] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.451704][T13712] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1071.505586][T13712] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1071.679436][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 1071.957981][T13712] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1071.999812][T13712] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1073.780443][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 1074.544955][T13908] bond3 (unregistering): Released all slaves [ 1074.574194][T13921] loop5: detected capacity change from 0 to 65 [ 1074.848837][ T1103] tipc: Left network mode [ 1074.948222][T13931] loop7: detected capacity change from 0 to 256 [ 1081.370074][T13952] loop5: detected capacity change from 0 to 256 [ 1082.465187][T13712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.488949][T13712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.507114][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.514361][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.590560][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.597855][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.953196][T13967] lo speed is unknown, defaulting to 1000 [ 1085.706837][ T1103] bond1: (slave gretap1): Releasing active interface [ 1085.960232][T13712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.368020][ T1103] hsr_slave_0: left promiscuous mode [ 1086.380747][ T1103] hsr_slave_1: left promiscuous mode [ 1086.390013][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.397528][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.411044][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.420967][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.436413][ T1103] bridge_slave_1: left allmulticast mode [ 1086.445366][ T1103] bridge_slave_1: left promiscuous mode [ 1086.451847][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.461791][ T1103] bridge_slave_0: left allmulticast mode [ 1086.467506][ T1103] bridge_slave_0: left promiscuous mode [ 1086.475003][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.608767][ T1103] veth1_macvtap: left promiscuous mode [ 1086.614380][ T1103] veth0_macvtap: left promiscuous mode [ 1086.620720][ T1103] veth1_vlan: left promiscuous mode [ 1086.626107][ T1103] veth0_vlan: left promiscuous mode [ 1086.904442][ T1103] bond1 (unregistering): Released all slaves [ 1087.635856][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 1087.717081][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 1087.800609][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.877565][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.744237][ T1103] bond0 (unregistering): Released all slaves [ 1089.283831][T13712] veth0_vlan: entered promiscuous mode [ 1089.336758][T13712] veth1_vlan: entered promiscuous mode [ 1089.396122][ T1103] IPVS: stop unused estimator thread 0... [ 1089.468822][T13712] veth0_macvtap: entered promiscuous mode [ 1089.493337][T13712] veth1_macvtap: entered promiscuous mode [ 1089.520979][T13712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.532905][T13712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.545810][T13712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.563501][T13712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.576697][T13712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.587688][T13712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.606413][T13712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.618909][T13712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.640273][T13712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.666181][T13712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.689994][T13712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.700348][T13712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.712313][T13712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.722686][T13712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.733403][T13712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.749248][T13712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.768021][T13712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.787211][T13712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.813670][T13712] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.844258][T13712] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.868704][T13712] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.877492][T13712] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.015022][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.030312][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.066034][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.075994][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.208222][T14034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1944'. [ 1093.320673][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1937'. [ 1096.009318][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1937'. [ 1096.370348][T14067] loop5: detected capacity change from 0 to 512 [ 1098.065202][T14077] loop4: detected capacity change from 0 to 1024 [ 1098.076776][T14077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1098.099269][T13867] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1098.167754][T14077] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 1098.389356][T14077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.480121][T14085] netlink: 'syz.7.1942': attribute type 4 has an invalid length. [ 1099.384482][ T8657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.713906][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1109.487255][T14146] loop5: detected capacity change from 0 to 16 [ 1110.100586][T14161] qnx4: no qnx4 filesystem (no root dir). [ 1110.963230][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1962'. [ 1117.278849][ T29] INFO: task syz.1.1782:13206 blocked for more than 145 seconds. [ 1117.286668][ T29] Not tainted syzkaller #0 [ 1117.573513][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.640804][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1117.664170][ T29] task:syz.1.1782 state:D stack:27496 pid:13206 ppid:5791 flags:0x00004004 [ 1117.714609][ T29] Call Trace: [ 1117.832025][ T29] [ 1117.844153][ T29] __schedule+0x14d2/0x44d0 [ 1117.884473][ T29] ? asan.module_dtor+0x20/0x20 [ 1117.928431][ T29] ? mark_lock+0x94/0x320 [ 1117.997395][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1118.004040][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1118.009919][ T29] ? rwsem_down_read_slowpath+0x50e/0x840 [ 1118.015811][ T29] schedule+0xbd/0x170 [ 1118.060932][ T29] schedule_preempt_disabled+0x13/0x20 [ 1118.068164][ T29] rwsem_down_read_slowpath+0x4f8/0x840 [ 1118.098481][ T29] ? down_write_killable_nested+0x220/0x220 [ 1118.110187][ T29] ? read_lock_is_recursive+0x20/0x20 [ 1118.118210][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 1118.127510][ T29] down_read+0x98/0x2e0 [ 1118.138053][ T29] super_lock+0x167/0x360 [ 1118.280303][ T29] ? user_get_super+0x180/0x180 [ 1118.897010][ T29] ? __lock_acquire+0x7c80/0x7c80 [ 1118.906682][ T29] ? __rwlock_init+0x150/0x150 [ 1118.915425][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1118.921044][ T29] ? ksys_sync+0x150/0x150 [ 1118.925533][ T29] iterate_supers+0x80/0x170 [ 1118.930264][ T29] ksys_sync+0x95/0x150 [ 1118.934481][ T29] ? sync_filesystem+0x220/0x220 [ 1118.939513][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 1118.945547][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1118.950909][ T29] __ia32_sys_sync+0xe/0x20 [ 1118.958406][ T29] do_syscall_64+0x55/0xb0 [ 1118.962961][ T29] ? clear_bhb_loop+0x40/0x90 [ 1118.967804][ T29] ? clear_bhb_loop+0x40/0x90 [ 1118.972594][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.978590][ T29] RIP: 0033:0x7fd4cd78f749 [ 1118.983075][ T29] RSP: 002b:00007fd4ce660038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1118.991626][ T29] RAX: ffffffffffffffda RBX: 00007fd4cd9e5fa0 RCX: 00007fd4cd78f749 [ 1118.999986][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1119.008030][ T29] RBP: 00007fd4cd9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.016939][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.025258][ T29] R13: 00007fd4cd9e6038 R14: 00007fd4cd9e5fa0 R15: 00007ffed88f14f8 [ 1119.033390][ T29] [ 1119.054285][ T29] [ 1119.054285][ T29] Showing all locks held in the system: [ 1119.075774][ T29] 3 locks held by kworker/0:1/9: [ 1119.094978][ T29] 1 lock held by khungtaskd/29: [ 1119.106858][ T29] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1119.145693][ T29] 2 locks held by getty/5558: [ 1119.193740][ T29] #0: ffff88802cff70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1119.207712][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 1119.218335][ T29] 1 lock held by syz-executor/5790: [ 1119.224413][ T29] #0: ffff888025a2c0e0 (&type->s_umount_key#68){++++}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 1119.243431][ T29] 1 lock held by syz.1.1782/13206: [ 1119.248699][ T29] #0: ffff888025a2c0e0 (&type->s_umount_key#68){++++}-{3:3}, at: super_lock+0x167/0x360 [ 1119.267940][ T29] 6 locks held by dhcpcd/14191: [ 1119.273165][ T29] [ 1119.275540][ T29] ============================================= [ 1119.275540][ T29] [ 1119.316627][ T29] NMI backtrace for cpu 0 [ 1119.321082][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1119.328333][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1119.338437][ T29] Call Trace: [ 1119.341848][ T29] [ 1119.344831][ T29] dump_stack_lvl+0x16c/0x230 [ 1119.349575][ T29] ? show_regs_print_info+0x20/0x20 [ 1119.354836][ T29] ? load_image+0x3b0/0x3b0 [ 1119.359511][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 1119.364553][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1119.370772][ T29] ? _printk+0xd0/0x110 [ 1119.374993][ T29] ? load_image+0x3b0/0x3b0 [ 1119.379641][ T29] ? load_image+0x3b0/0x3b0 [ 1119.384292][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1119.390430][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1119.396488][ T29] watchdog+0xf41/0xf80 [ 1119.400711][ T29] ? watchdog+0x1e1/0xf80 [ 1119.405104][ T29] kthread+0x2fa/0x390 [ 1119.409226][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1119.414444][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1119.419095][ T29] ret_from_fork+0x48/0x80 [ 1119.423626][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1119.428273][ T29] ret_from_fork_asm+0x11/0x20 [ 1119.433105][ T29] [ 1119.438214][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1119.444071][ C1] NMI backtrace for cpu 1 [ 1119.444083][ C1] CPU: 1 PID: 5458 Comm: dhcpcd Not tainted syzkaller #0 [ 1119.444098][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1119.444108][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 1119.444136][ C1] Code: e0 23 7e 7e 65 8b 15 e1 23 7e 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 1c 16 00 00 00 74 4e 8b 91 f8 15 00 00 <83> fa 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc 15 00 00 49 c1 e1 [ 1119.444150][ C1] RSP: 0000:ffffc90003727af8 EFLAGS: 00000046 [ 1119.444165][ C1] RAX: ffffffff81b7f887 RBX: ffffea0000db7240 RCX: ffff88802a7a3c00 [ 1119.444178][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1119.444187][ C1] RBP: ffffea0000db7248 R08: ffffea0000db7247 R09: 1ffffd40001b6e48 [ 1119.444199][ C1] R10: dffffc0000000000 R11: fffff940001b6e49 R12: 1ffffd40001b6e49 [ 1119.444211][ C1] R13: dffffc0000000000 R14: 00fff000000a0108 R15: 1ffffd40001b6e48 [ 1119.444229][ C1] FS: 00007fe5deb79740(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1119.444243][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1119.444254][ C1] CR2: 00005629ab6ca000 CR3: 000000003070a000 CR4: 00000000003506e0 [ 1119.444268][ C1] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 1119.444278][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1119.444289][ C1] Call Trace: [ 1119.444294][ C1] [ 1119.444300][ C1] lru_add_fn+0x107/0x1720 [ 1119.444319][ C1] ? folio_memcg+0x127/0x480 [ 1119.444338][ C1] folio_batch_move_lru+0x2e7/0x6b0 [ 1119.444354][ C1] ? __mod_lruvec_page_state+0xa5/0x420 [ 1119.444383][ C1] ? folio_add_lru+0xd50/0xd50 [ 1119.444398][ C1] ? lru_add_drain_cpu+0x8c0/0x8c0 [ 1119.444413][ C1] ? __mod_lruvec_page_state+0xa5/0x420 [ 1119.444440][ C1] ? __mod_lruvec_page_state+0x23f/0x420 [ 1119.444465][ C1] ? folio_batch_add_and_move+0x9a/0x2b0 [ 1119.444481][ C1] ? folio_add_lru+0xd50/0xd50 [ 1119.444496][ C1] ? folio_add_lru+0x320/0xd50 [ 1119.444511][ C1] folio_add_lru+0x434/0xd50 [ 1119.444528][ C1] handle_mm_fault+0x34fb/0x4920 [ 1119.444555][ C1] ? handle_mm_fault+0xd1/0x4920 [ 1119.444586][ C1] ? lock_vma_under_rcu+0x526/0x650 [ 1119.444611][ C1] ? numa_migrate_prep+0x350/0x350 [ 1119.444645][ C1] ? do_user_addr_fault+0x1c3/0x12e0 [ 1119.444665][ C1] do_user_addr_fault+0xad0/0x12e0 [ 1119.444687][ C1] ? rcu_is_watching+0x15/0xb0 [ 1119.444710][ C1] exc_page_fault+0x67/0x110 [ 1119.444727][ C1] asm_exc_page_fault+0x26/0x30 [ 1119.444743][ C1] RIP: 0033:0x7fe5decd3b93 [ 1119.444755][ C1] Code: c5 fe 7f 47 40 c5 fe 7f 47 60 0f 01 d6 75 04 c5 f8 77 c3 c5 fc 77 c3 48 3b 15 69 07 08 00 73 77 40 0f b6 c6 48 89 d1 48 89 fa aa 48 89 d0 eb d9 66 0f 1f 44 00 00 c4 e2 79 78 c0 83 fa 10 7d [ 1119.444768][ C1] RSP: 002b:00007ffdab48b5c8 EFLAGS: 00010283 [ 1119.444781][ C1] RAX: 0000000000000000 RBX: 00007ffdab48b660 RCX: 0000000000002b18 [ 1119.444791][ C1] RDX: 00005629ab6c0e20 RSI: 0000000000000000 RDI: 00005629ab6ca000 [ 1119.444801][ C1] RBP: 0000000000008ab8 R08: 00007fe5ded4dac0 R09: 0000000000000000 [ 1119.444811][ C1] R10: 0000000000000004 R11: 0000000000000002 R12: 000000000000bcf8 [ 1119.444821][ C1] R13: 00005629ab697ec0 R14: 00007ffdab48bad8 R15: 0000000000000064 [ 1119.444840][ C1] [ 1119.637263][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1119.637284][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1119.637307][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1119.637321][ T29] Call Trace: [ 1119.637330][ T29] [ 1119.637340][ T29] dump_stack_lvl+0x16c/0x230 [ 1119.637380][ T29] ? show_regs_print_info+0x20/0x20 [ 1119.637413][ T29] ? load_image+0x3b0/0x3b0 [ 1119.637452][ T29] panic+0x2c0/0x710 [ 1119.637473][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1119.637511][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1119.637532][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1119.637562][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1119.637604][ T29] watchdog+0xf80/0xf80 [ 1119.637634][ T29] ? watchdog+0x1e1/0xf80 [ 1119.637670][ T29] kthread+0x2fa/0x390 [ 1119.637690][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1119.637719][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1119.637741][ T29] ret_from_fork+0x48/0x80 [ 1119.637767][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1119.637788][ T29] ret_from_fork_asm+0x11/0x20 [ 1119.637837][ T29] [ 1119.640200][ T29] Kernel Offset: disabled [ 1119.880600][ T29] Rebooting in 86400 seconds..