last executing test programs: 11m17.628272043s ago: executing program 32 (id=22): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x493b, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) 11m5.465966041s ago: executing program 0 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents(r4, 0x0, 0x537) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 11m5.200972074s ago: executing program 0 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$incfs_id(&(0x7f0000000240)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x2) setxattr$incfs_metadata(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) 11m4.541613332s ago: executing program 0 (id=83): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 11m3.847193074s ago: executing program 0 (id=94): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xae, 0x200, 0x0, 0x0, 0x2, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d306e6d602000000000000000000010001", [0x204]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000380)='\\', 0x1, 0x3000}]) 11m2.275656102s ago: executing program 0 (id=89): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0xffffffff}, 0x1c) 11m1.435269966s ago: executing program 0 (id=92): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x26020480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 11m0.349835111s ago: executing program 33 (id=92): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x26020480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 10m46.790546642s ago: executing program 2 (id=143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfff}], 0x0, 0x0, 0x0}) 10m46.600888979s ago: executing program 2 (id=144): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000000280)={0x0, 0xaef4, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000300)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 10m44.854204113s ago: executing program 2 (id=148): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000c80)='./file1\x00', 0x10048, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x320c000, &(0x7f0000000300)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT, @ANYRES32], 0x2, 0xc36, &(0x7f0000003180)="$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") r0 = creat(&(0x7f0000000580)='./file2\x00', 0x58) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) syz_usb_connect$uac1(0x2, 0xa5, 0x0, 0x0) rmdir(0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000280)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') 10m42.840237229s ago: executing program 2 (id=158): mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10000, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000440)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@utf8}]}, 0x0, 0x2aa, &(0x7f0000000580)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 10m40.473555368s ago: executing program 2 (id=161): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0x10000040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x20000000000006) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) vmsplice(r3, &(0x7f00000002c0)=[{&(0x7f0000000400)='}w', 0x2}], 0x1, 0x5) 10m38.075207488s ago: executing program 2 (id=170): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000580)={0x8, 0x86e, 0x0, &(0x7f0000000340)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 10m37.413383286s ago: executing program 34 (id=170): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000580)={0x8, 0x86e, 0x0, &(0x7f0000000340)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 9m26.999303284s ago: executing program 1 (id=551): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000100001"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x80000001004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m26.745113657s ago: executing program 1 (id=552): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/223, 0xdf, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 9m26.13676411s ago: executing program 1 (id=557): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="0100004000000000000810000000180001801400020077"], 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m25.725145396s ago: executing program 1 (id=562): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 9m25.535050052s ago: executing program 1 (id=564): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 9m25.030383167s ago: executing program 1 (id=567): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x3, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x2, "3eccd8000000000000000010000000040100"}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x65, 0xfe, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) 9m24.399218402s ago: executing program 35 (id=567): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x3, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x2, "3eccd8000000000000000010000000040100"}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x65, 0xfe, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) 9m6.352823318s ago: executing program 5 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) fsopen(0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0xb3ed0e663dbd11dd, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x13, r2, 0x2000) 9m6.182387953s ago: executing program 5 (id=646): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/4098}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 9m5.202528669s ago: executing program 5 (id=649): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc899, 0xc000, 0x9, 0x20002fa}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m4.840196181s ago: executing program 5 (id=652): socket$inet(0x2, 0x4000000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000045}, 0x8000) 9m2.855373996s ago: executing program 5 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) 9m2.46733209s ago: executing program 5 (id=658): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m47.155538185s ago: executing program 36 (id=658): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m26.520818544s ago: executing program 4 (id=1284): fsopen(0x0, 0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x5, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0xffffffff, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x6, 0x800, 0xffff, 0x6, 0xfa75, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x4, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x7fffffff, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x2f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0xf, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x62, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x200001, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x9, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x18}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) fsopen(0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 6m26.174831234s ago: executing program 4 (id=1290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x4006, 0x0, 0x1}]}, 0x10) 6m24.930912573s ago: executing program 4 (id=1293): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c40), 0x0, &(0x7f0000000d00)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xcdfd}}, @mark={{0x14, 0x1, 0x24, 0x698}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x60}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @mark={{0x14, 0x1, 0x24, 0xc855}}], 0x48}}, {{&(0x7f0000000f80)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}}], 0x5, 0x4000084) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000200)=@isdn={0x22, 0x5, 0x40, 0xff, 0x3}, 0x80, 0x0}}], 0x2, 0x0) 6m21.256403617s ago: executing program 4 (id=1303): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000000100)='./bus\x00', 0x44) shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x4000) lstat(&(0x7f00000001c0)='.\x00', &(0x7f00000003c0)) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) mkdir(&(0x7f0000000e40)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 6m20.248617295s ago: executing program 4 (id=1305): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x401, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES32=r1], 0x20) 6m15.41952229s ago: executing program 4 (id=1318): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_conn_req={{0x2, 0x5, 0x4}, {0x6, 0x4}}, @l2cap_disconn_rsp={{0x7, 0xb9, 0x4}, {0x80ad, 0xffc4}}]}}, 0x19) syz_usbip_server_init(0x1) 6m14.520413108s ago: executing program 37 (id=1318): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_conn_req={{0x2, 0x5, 0x4}, {0x6, 0x4}}, @l2cap_disconn_rsp={{0x7, 0xb9, 0x4}, {0x80ad, 0xffc4}}]}}, 0x19) syz_usbip_server_init(0x1) 5m50.085291266s ago: executing program 9 (id=1319): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000000100)='./bus\x00', 0x44) shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x4000) lstat(&(0x7f00000001c0)='.\x00', &(0x7f00000003c0)) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) mkdir(&(0x7f0000000e40)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 5m45.554476024s ago: executing program 9 (id=1400): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r3, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={r4, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r5, 0x7}, 0x8) 5m44.145903798s ago: executing program 9 (id=1403): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000300)="2cd889f0", 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)=[0x4], 0x0, 0x0, 0x1}}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x2, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 5m43.034976026s ago: executing program 38 (id=1403): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000300)="2cd889f0", 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)=[0x4], 0x0, 0x0, 0x1}}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x2, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 9.260766816s ago: executing program 3 (id=2389): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 8.004978617s ago: executing program 7 (id=2390): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r4, 0x6a98047402e98331, 0x70bd2e, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) 7.911448665s ago: executing program 3 (id=2391): accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x80800) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) 5.987540254s ago: executing program 8 (id=2393): socket$packet(0x11, 0xa, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r5, 0x25, 0x2, @val=@netkit={@void, @value=r2}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e000000000077eef46608000a00", @ANYRES32=r1], 0x3c}}, 0x8000) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x4, @multicast1, @multicast2}}}}}}, 0x0) 5.723960617s ago: executing program 7 (id=2394): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240012800b0001006272696467650000140002800500070006"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 5.700982609s ago: executing program 8 (id=2395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r2 = getpid() r3 = epoll_create1(0x80000) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) shutdown(r4, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000140)={0x60000008}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000180)={r1, r0, 0x6}) 4.847320464s ago: executing program 3 (id=2397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) 4.657485131s ago: executing program 6 (id=2398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x4000) close(r3) 4.640121292s ago: executing program 8 (id=2399): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 4.486748676s ago: executing program 7 (id=2400): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) ioctl$COMEDI_LOCK(r0, 0x6405) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x1508, 0x1, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x8}, 0x4, 0x1, 0x1, 0xc, 0x1b, 'syz1\x00', "2c2ab4d3dd31b49cf02ce9427abfe4621f75102e271e84246d9a56f9942b2dcd", "0160d107ad0330e39d3639a9419c926192c56afe282eee7e7d8094fef80304e5", [{0xfffd, 0x14a0, {0x1, 0x9}}, {0x3}, {0x9, 0x20, {0x0, 0x4}}, {0x3, 0x0, {0x1, 0x4}}, {0x9, 0x2, {0x2, 0x2}}, {0x1, 0x696a, {0x3, 0x8}}, {0x0, 0x6, {0x1, 0xfff}}, {0x89f6, 0x1, {0x7, 0x5}}, {0x6, 0x8, {0x3, 0x4}}, {0x401, 0x5, {0x3, 0x6}}, {0xb, 0xb0a0, {0x0, 0x3}}, {0x3, 0x9, {0x2, 0xd8e}}, {0x4, 0x9, {0x3, 0x3}}, {0x2, 0x7fff, {0x2, 0x3}}, {0xe, 0x2, {0x0, 0xc}}, {0x4, 0x9, {0x3}}, {0x3, 0x1, {0x3, 0x8}}, {0x101, 0x5, {0x2, 0x6}}, {0x7, 0x1000, {0x2, 0x460}}, {0x20e, 0x5, {0x0, 0x7fff}}, {0xbc9, 0xb, {0x1, 0xff}}, {0x0, 0x1, {0x2, 0xb}}, {0x7, 0x401, {0x3, 0x5}}, {0x5, 0x10, {0x0, 0x10001}}, {0x8, 0x0, {0x3, 0xae}}, {0x80, 0x9, {0x2, 0x6}}, {0x7fc0, 0x7, {0x2, 0x3}}, {0x101, 0x101, {0x2, 0x3}}, {0x1, 0xfff9, {0x2, 0x4}}, {0x7, 0x400, {0x2}}, {0x9, 0xb0, {0x1, 0x4}}, {0x7ff, 0xb438, {0x0, 0x1}}, {0x6, 0x3, {0x0, 0x5}}, {0xa0e, 0x6, {0x1, 0x2}}, {0x4, 0x7, {0x2, 0x3}}, {0x9, 0x0, {0x0, 0x5}}, {0x768f, 0xd, {0x0, 0x1}}, {0x200, 0x0, {0x2, 0x4}}, {0x6, 0x2, {0x0, 0x8}}, {0xa8d8, 0x800, {0x2, 0x10001}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x2, 0x5, 0x39, 0x800, 0x6, 'syz1\x00', "9fc52f6daecb2651ede80bfbaf0169f27357dfaf59e3f49647fda1a9d37843fc", "559bbf6debe2ebfdd525ea32a68c5783d8996045641a1172c381199cf4a1a5d1", [{0x1800, 0x2, {0x3, 0x8bf1}}, {0x4, 0x5}, {0x8, 0x2, {0x3}}, {0x3, 0x8, {0x1, 0xd}}, {0x6, 0x2, {0x0, 0x5}}, {0x8, 0x7f, {0x3, 0x1}}, {0xffff, 0x7, {0x3, 0x2}}, {0x0, 0x9, {0x0, 0x1}}, {0x7, 0x8, {0x1, 0x3}}, {0x3, 0x3, {0x2, 0x7fffffff}}, {0x0, 0x6, {0x0, 0x3}}, {0x800, 0x0, {0x1, 0x8}}, {0xffff, 0x1, {0x1, 0x1}}, {0x60c2, 0x3, {0x1, 0x1ff}}, {0x3, 0x6, {0x2, 0xa0d}}, {0x4, 0x6, {0x0, 0x6}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x5}}, {0xb3, 0x8, {0x2, 0x4332d02f}}, {0x3, 0x29, {0x1, 0xfffffffa}}, {0x2, 0x0, {0x1, 0x100}}, {0x7, 0x2, {0x0, 0x101}}, {0xfff8, 0x6, {0x1, 0xc}}, {0x3ff, 0x6, {0x0, 0x2}}, {0xd, 0x5, {0x0, 0x7}}, {0x2, 0x7, {0x1, 0x800000}}, {0xa2, 0x4, {0x3, 0x1ff}}, {0x56, 0x7, {0x1, 0x87b2}}, {0x5, 0x5, {0x2}}, {0xffff, 0x800, {0x0, 0x100}}, {0x5, 0x1, {0x2, 0x101}}, {0x0, 0x5, {0x2, 0x7e70}}, {0x4, 0x9088, {0x3, 0xb31}}, {0x7fff, 0x2, {0x0, 0x2}}, {0x2, 0x535, {0x1, 0x7}}, {0x81, 0x9f, {0x0, 0x8d2}}, {0x25a0, 0xfc5b, {0x2, 0x1}}, {0x100, 0xfffb, {0x1}}, {0x9, 0x80, {0x0, 0x2}}, {0x9, 0x8, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xb249}, 0xe, 0x3, 0xffff, 0x3fe1, 0x1e, 'syz1\x00', "9adaa18042571dea59f5204a8800ce87b0b7e7afb9f4dc385a5a8ebf9f8dce8a", "79f5a09f8ca8fec775d971787dc27a5510fa497f9c6fbd78cc2f86f2f3a27f3b", [{0x8, 0x7, {0x1, 0x2c00}}, {0x100, 0x4180, {0x3, 0x1000}}, {0x4, 0x9, {0x0, 0x81}}, {0x100, 0x3, {0x0, 0x4}}, {0x9a, 0x0, {0x1}}, {0x7ff, 0xfff, {0x3, 0x100}}, {0x2c00, 0x0, {0x3, 0x9}}, {0x3, 0x3bbf, {0x0, 0x9}}, {0x7, 0x117, {0x2, 0x7fffffff}}, {0x2, 0x4, {0x0, 0x7}}, {0x76, 0x0, {0x0, 0x400}}, {0x81, 0x121, {0x3, 0x8e}}, {0x1, 0x0, {0x3, 0x6}}, {0x0, 0x4, {0x3, 0x9}}, {0xfffd, 0x4120}, {0x1ff, 0xa18c, {0x1, 0xa}}, {0x9, 0x0, {0x2, 0xd0000000}}, {0x3183, 0x400, {0x1, 0x8}}, {0xffff, 0x17f5, {0x0, 0x8c45}}, {0x46b, 0x3ff, {0x0, 0x41806f89}}, {0x1, 0x2, {0x0, 0x1}}, {0x7, 0x8, {0x3, 0x800000}}, {0x2, 0x200, {0x1, 0x3}}, {0x7, 0xa, {0x1, 0x6}}, {0x1, 0x5, {0x3, 0x926a}}, {0x5, 0x0, {0x3, 0x767}}, {0x6, 0x7f, {0x3, 0x3}}, {0x5, 0x1, {0x2}}, {0x6, 0x9, {0x1, 0x6}}, {0x5, 0x8, {0x1, 0x7}}, {0x3, 0x502, {0x0, 0x5}}, {0x9, 0x80, {0x3, 0x9}}, {0x6, 0xbe, {0x0, 0x4}}, {0x800, 0x4, {0x3, 0x8000}}, {0x7fff, 0xc}, {0xb, 0xfff8, {0x1, 0x2}}, {0x7, 0x7, {0x0, 0x3}}, {0x9, 0xdf, {0x3, 0x3}}, {0x8, 0x1, {0x3, 0xffffffff}}, {0x3, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0xfe, 0x3, 0x9c25, 0x8, 0x26, 'syz0\x00', "4886d29e77655b438621e28bc67f52dab4cc155bac1840a853b099076563ea73", "2dac0df0cdd4197241fab61e2c24aa339c6bdcbc99501e276caf677cd82587c8", [{0x800, 0x7ff, {0x2, 0x1}}, {0x8, 0x7, {0x1, 0x5}}, {0xff68, 0x217f, {0x3, 0x7f}}, {0x5c, 0x5, {0x0, 0x6}}, {0x8001, 0x3, {0x1}}, {0x6, 0xa, {0x1, 0xf0000000}}, {0x81, 0xfffd, {0x2, 0x5}}, {0x1, 0x0, {0x2, 0xfae}}, {0x9, 0x8, {0xd14d209d1884419, 0x4}}, {0x50a2, 0x0, {0x0, 0x6}}, {0x9, 0x5, {0x3, 0x6}}, {0x1ce5, 0x1, {0x1, 0x8}}, {0x1, 0x4ce, {0x1, 0x1}}, {0xe317, 0x6, {0x1, 0x1a}}, {0x769d, 0x0, {0x0, 0x7fff}}, {0x5, 0x0, {0x0, 0xb4c9}}, {0x87f, 0x40, {0x3}}, {0x2, 0x100, {0x3, 0x5}}, {0x8, 0x9, {0x2, 0x5}}, {0x101, 0x6, {0x1, 0x6}}, {0x2, 0x101, {0x3, 0x40}}, {0x485e, 0x7, {0x0, 0x4}}, {0x5, 0x8000, {0x3, 0x3712}}, {0x3, 0xd8, {0x1, 0xc}}, {0x0, 0x3, {0x0, 0x875}}, {0xc, 0x200, {0x3, 0x8}}, {0x5, 0xfffa, {0x0, 0x7ff}}, {0x0, 0xcc1, {0x2, 0x2}}, {0x90fc, 0x9, {0x2, 0xffffffff}}, {0x7, 0x1, {0x2, 0x1}}, {0xa, 0x0, {0x3, 0xd}}, {0x9, 0xfffd, {0x2, 0x1}}, {0x9, 0x0, {0xd20c460d8476fc89, 0xfffffffd}}, {0xce, 0x0, {0x3, 0x9}}, {0x5, 0x4, {0x3, 0x7}}, {0x2e, 0x205a, {0x0, 0x1}}, {0x2, 0x3, {0x3, 0xc}}, {0x8, 0x8, {0x3, 0x7}}, {0x4, 0xb, {0x1, 0x4}}, {0xfff9, 0x0, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x5, 0x7, 0x4, 0xd, 0xe, 'syz1\x00', "378c9251613448636ec37d8d9dd05e6ec1013de1c3ad37742b3ae1f74d7a483d", "16b067138357e0909d50f56156f63a1595678155f0da62a386d9e43d80cc7ea1", [{0x101, 0x4, {0x0, 0x1}}, {0x7f, 0xad, {0x2, 0x7}}, {0xfffa, 0x3, {0x0, 0x1}}, {0x3ff, 0xa, {0x2, 0x9}}, {0x2, 0x6, {0x3, 0x7f}}, {0x9, 0x9, {0x0, 0x9}}, {0x0, 0x9, {0x2, 0x5}}, {0x5, 0x3, {0x0, 0x5}}, {0x101, 0xfff, {0x3, 0x7fffffff}}, {0x3, 0x9, {0x3, 0x7}}, {0x4, 0xbf2, {0x3, 0x8}}, {0xa0, 0x9, {0x1, 0x3ff}}, {0x4, 0x3, {0x3, 0x3}}, {0x7, 0x401, {0x1, 0x31}}, {0x2, 0x5, {0x3, 0x6a9f}}, {0x9, 0x2, {0x1, 0x9}}, {0x8, 0x2, {0x0, 0xe}}, {0xfff9, 0xf982, {0x2, 0x1}}, {0x6, 0x9, {0x1, 0x8e9}}, {0xeb, 0x9001, {0x0, 0x6}}, {0xffff, 0xe1, {0xfb554788f9dac68d}}, {0x7f, 0x3, {0x0, 0x603}}, {0x6, 0x4, {0x3, 0x800}}, {0x5, 0x81, {0x3, 0x8}}, {0x8, 0x523e, {0x3, 0x2}}, {0x8, 0x9b6, {0x0, 0x4ec0}}, {0x5, 0x3, {0x2, 0x200}}, {0xecf, 0x4, {0x2, 0x2}}, {0x8, 0xffff, {0x0, 0x800}}, {0x6, 0xc000, {0x0, 0x2412}}, {0x9, 0x5, {0x0, 0x80}}, {0x9, 0x1, {0x2, 0x2}}, {0x1, 0xfffc, {0x1, 0xd}}, {0x7, 0x3, {0x1, 0x81}}, {0xa, 0x4, {0x2, 0x800}}, {0xde0f, 0x3, {0x0, 0x1}}, {0x3, 0x8, {0x1, 0xea26}}, {0xb999, 0x800, {0x7c48ba8a6319ef8e, 0x8}}, {0x2, 0x7, {0x2, 0x8}}, {0x0, 0x1ff, {0x4, 0xfff}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xff, 0x3, 0x1, 0x75c0, 0x12, 'syz1\x00', "27c357d600d6e0ce33e318b4a9445dc21dd01a1a893f7cafddf3ab22c7654ac5", "502e137d0dcce16db6a5db2b658b3e81cdce03f39f972ebf9d7668c80d5124b3", [{0x7ff, 0x8000, {0x1, 0x3}}, {0x6, 0x7, {0x0, 0x8000}}, {0x80, 0x3, {0x3, 0x2}}, {0x9, 0x10, {0x3, 0x8}}, {0x4, 0x5, {0x2, 0xfd2}}, {0x2, 0x7fff, {0x2, 0x3}}, {0xffff, 0xf, {0x3, 0x4}}, {0x7db, 0x8001, {0x0, 0x40}}, {0x8, 0x100, {0x0, 0x3}}, {0x7, 0x80f, {0x2, 0x1ff}}, {0x9, 0x2, {0x3, 0xffffffbe}}, {0xcc66, 0x6, {0x9fc5eccf7c7a9e07, 0x4}}, {0x5, 0x6, {0x3, 0x3}}, {0xfffb, 0x6, {0x0, 0x1000}}, {0xb, 0x1, {0x0, 0x4}}, {0xf, 0xff, {0x2, 0x80000000}}, {0x2, 0x8, {0x3, 0xfffffffa}}, {0xc, 0x1000, {0x2, 0x9}}, {0x8, 0x9598, {0x3, 0x5}}, {0x5, 0x10, {0x1, 0x101}}, {0x9, 0x2, {0x1, 0x73d}}, {0xbf6e, 0x7ff, {0x0, 0x8e}}, {0x3, 0xa, {0x1, 0xfffffff7}}, {0x3, 0x1, {0x2, 0x9}}, {0x400, 0xf800, {0x2, 0x7}}, {0x4, 0x8000, {0x0, 0x6}}, {0x1, 0x1, {0x2, 0x6}}, {0x4, 0x5f83, {0x3, 0x3}}, {0x0, 0x3, {0x3, 0xc8}}, {0x9dc, 0xbdc, {0x2, 0x7}}, {0x41fa, 0xf, {0x1, 0x9a}}, {0x3, 0x5, {0x2, 0x144}}, {0xfffd, 0xe, {0x3, 0x10001}}, {0x9, 0xc, {0x2, 0xb}}, {0x0, 0xfff8, {0x1, 0x1}}, {0xa, 0x101, {0x3, 0xfff}}, {0x8, 0x7, {0x2, 0x1}}, {0xe, 0x0, {0x2, 0x7ff}}, {0x7f17, 0x6, {0x1, 0x81}}, {0x295, 0x11, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x40b4}, 0x40, 0xb, 0x2, 0x8, 0x15, 'syz0\x00', "d87f3eba32db69e75efbee28a08cc128db73a387206beb408720a810453e9647", "23e26a05842faf629ba616fe3e6072d5c3f9d05ecf26692ec898ccda1575db65", [{0x6, 0x8000, {0x0, 0x5}}, {0x5, 0x9, {0x0, 0xe0}}, {0x6, 0x200, {0x2, 0x5}}, {0x6cd6, 0x401, {0x1, 0x9}}, {0x0, 0x3, {0x2, 0xfffffffc}}, {0x6fe1, 0x6, {0x0, 0x6}}, {0x0, 0x94, {0x2, 0x1}}, {0x1, 0x6, {0x3, 0x400}}, {0xf800, 0x100, {0x0, 0x6}}, {0x8, 0x200, {0x1}}, {0x3, 0x83, {0x3, 0x2}}, {0x831b, 0x5, {0x1, 0xc5d8}}, {0x2, 0xf, {0x3, 0x7}}, {0xe, 0x1ff, {0x1, 0x9}}, {0x5, 0x9}, {0x401, 0x3, {0x3, 0xf}}, {0x10, 0x5, {0x0, 0xff}}, {0xd454, 0x1000, {0x1, 0x5}}, {0x772, 0x6, {0x3, 0x4}}, {0x7ff, 0x8000, {0x3, 0x9}}, {0xde6e, 0x1, {0x2, 0x80}}, {0x0, 0x1, {0x0, 0x4}}, {0x4, 0x5, {0x0, 0x7fffffff}}, {0x4, 0x2, {0x2, 0x9}}, {0xbd82, 0x0, {0x2, 0x9}}, {0xfc01, 0x6, {0x3, 0x8}}, {0x1, 0x5b1c, {0x3, 0xffffcfd0}}, {0x5, 0x8, {0x1, 0x6}}, {0x9, 0x5, {0x1, 0xfffffffd}}, {0x3ff, 0x7, {0x2, 0x101}}, {0x7fff, 0x2, {0x0, 0x7}}, {0x7f, 0x4, {0x0, 0x5}}, {0x3a, 0x7, {0x1, 0x200000}}, {0x7fff, 0x5, {0x1, 0x6}}, {0x8, 0x8, {0x2, 0x8}}, {0xf, 0x5acf, {0x3}}, {0x5, 0x5, {0x0, 0xbec}}, {0x2, 0x1, {0x2, 0x3ff}}, {0x3e, 0xff96, {0x3, 0xa6e}}, {0xa, 0x4, {0x1, 0x100}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x5, 0xf7, 0x691, 0x1, 0x24, 'syz0\x00', "0ce49199bc82ed5d11140ca6c16756c2ac9e589211c032479334e80446a05786", "ca162a19c3255c23dca9a13f911ce4bb9a195787ca0713d9e9a9c7e8efc7ec5a", [{0x1, 0x7, {0x3, 0x2}}, {0x6, 0x401, {0x2, 0x6}}, {0x2eb, 0x9d27, {0x3, 0x8}}, {0x3, 0x56, {0x1, 0x4}}, {0x4, 0xa59d, {0x1, 0xe46}}, {0xfffd, 0xf77c, {0x0, 0xa}}, {0xfffc, 0x3eef, {0x2, 0x4}}, {0x7, 0x9, {0x1, 0x9}}, {0x2, 0xfff, {0x1, 0xfffffff7}}, {0x5, 0xffff, {0x1, 0xb03a}}, {0x7ff, 0xff, {0x0, 0x8}}, {0x5, 0x8, {0x0, 0x8001}}, {0x3, 0x2, {0x1, 0x4}}, {0x7, 0x401, {0x0, 0x7fffffff}}, {0x1, 0x5, {0x1, 0x7}}, {0x149, 0x6}, {0x8001, 0x8, {0x1, 0x7fff}}, {0x0, 0x4, {0x3}}, {0x4, 0x6, {0x1}}, {0x3, 0x9, {0x2, 0x2}}, {0x8e3, 0x7fff, {0x2, 0x38}}, {0xfffa, 0x1, {0x0, 0x8}}, {0x2, 0x3, {0x1, 0x77}}, {0x100, 0xec4, {0x387ab4415f93248f, 0x9}}, {0x3, 0x2, {0x1, 0x9}}, {0x4, 0x4, {0x3, 0xfff}}, {0x4, 0x1, {0x2}}, {0x101, 0xa, {0x2, 0x100}}, {0x6, 0x9, {0x2, 0x8}}, {0x365e, 0xffff, {0x2, 0x7}}, {0x4, 0x3, {0x3, 0x9}}, {0x7, 0xbd1, {0x2, 0x7}}, {0x2, 0x8000, {0x3, 0x5}}, {0x6, 0xff, {0x2, 0x7}}, {0x240, 0x7, {0x1, 0xc3}}, {0x4087, 0x10, {0x3, 0x2}}, {0xc, 0x800, {0x0, 0x367}}, {0xfff7, 0xf, {0x2, 0x1}}, {0x6, 0x1, {0x3, 0xc525}}, {0x0, 0x0, {0x0, 0xf}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x8, 0x1, 0x9, 0x7, 0x26, 'syz1\x00', "01b022b776924a7d9f233f423e0033e91c9774478cabe0f0514b59a9e1580c12", "9e2f42fbe6c1937e283d9f0581250ffe2b1e2c9e7055e984c83887ff46ba5fbf", [{0x4, 0x2143, {0x2, 0x7}}, {0x65a, 0x40, {0x3, 0x10000}}, {0x9711, 0x7, {0x0, 0xff}}, {0x9, 0x40, {0x1, 0x6}}, {0x0, 0x9, {0x3, 0x3}}, {0x800, 0x0, {0x2, 0x7}}, {0x3, 0x8000, {0x2, 0xffff0000}}, {0x6, 0xe9be, {0x2, 0xfffffffb}}, {0x4250, 0x5, {0x0, 0x1f}}, {0x5, 0x8001, {0x0, 0x7}}, {0x5, 0x2, {0x0, 0xffffffff}}, {0x7, 0xd, {0x3, 0xfffffff9}}, {0x150, 0x89a, {0x1, 0x9}}, {0x6, 0x5, {0x1, 0x6}}, {0x5, 0xc, {0x2, 0xfffffff7}}, {0x401, 0x81, {0x1, 0x101}}, {0x7ff, 0x3, {0x2, 0x7c}}, {0x6aae, 0x1, {0x2, 0x2}}, {0x5, 0x81, {0x4, 0x2}}, {0x2, 0x98f, {0x3, 0x2c1}}, {0x0, 0x9, {0x1, 0x1ff}}, {0x7f, 0x7, {0x0, 0x8}}, {0xff, 0x80, {0x3, 0x5}}, {0x8, 0x6, {0x1, 0x5}}, {0x40, 0x7, {0x1, 0x400}}, {0x1000, 0x7, {0x1, 0xb}}, {0x6, 0x101, {0x1, 0xf}}, {0x8, 0xfbb, {0x3, 0x1}}, {0x8, 0x6, {0x2, 0x8000}}, {0x9, 0x6, {0x3, 0x3ff}}, {0xf, 0xfffc, {0x2, 0x2c2}}, {0x9, 0x2, {0x2, 0x4}}, {0xff9d, 0x9, {0x3, 0x3}}, {0x5, 0xdcc, {0x2, 0xe}}, {0x9, 0x0, {0x2, 0xe}}, {0xb, 0x0, {0x1, 0x101}}, {0x40, 0x4, {0x1, 0x6}}, {0x9, 0x8, {0x2, 0xff}}, {0x9, 0x9, {0x2, 0x81}}, {0x3, 0x3, {0x2, 0x20002000}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000480)={0x119, 0x0, 'client0\x00', 0x0, "238ce6e7702b9338", "a62585ae77772caa7965bb840c7f2db4f3b148f5dc746d2d46fc3b04b44115e0", 0x1, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000002140)={{0x7, 0x8}, {0x8, 0x8}, 0x8, 0x3, 0x8}) syz_emit_ethernet(0x56, &(0x7f0000000340)={@link_local, @random="0000fc00f5d6", @void, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4e, 0x1, 0x4, [{@multicast2, 0x4}]}, @timestamp_prespec={0x44, 0x4, 0xe5, 0x3, 0x2}, @generic={0x86, 0x2}, @lsrr={0x83, 0x17, 0xb7, [@empty, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, @private=0xa010101, @broadcast]}]}}, {0x11, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) 4.259427416s ago: executing program 7 (id=2401): socket(0xa, 0x1, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 3.000631037s ago: executing program 6 (id=2402): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x2) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xfffffffd, 0x2) r1 = socket(0x2, 0xa, 0x0) getpeername$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x36, 0x0, 0x0) 2.977388148s ago: executing program 7 (id=2403): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_io_uring_setup(0x117, &(0x7f0000000240)={0x0, 0x4a2d, 0x0, 0xff7fffff, 0xdd}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1, 0xc}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 2.915362804s ago: executing program 8 (id=2404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5, 0xfff, 0x8, 0x4}, 0x4}, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) recvfrom(r4, 0x0, 0x0, 0x20, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x90000005}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 2.716095262s ago: executing program 6 (id=2405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 2.573824714s ago: executing program 6 (id=2406): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x400c091) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@cswp={0x58, 0x114, 0x7, {{0x5}, &(0x7f00000003c0)=0xdf, 0x0, 0x55, 0x5, 0x4, 0x8, 0x30, 0x2}}], 0x58}, 0x0) 1.275362418s ago: executing program 3 (id=2407): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.262320439s ago: executing program 6 (id=2408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x28) 1.198373635s ago: executing program 7 (id=2409): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = memfd_create(&(0x7f0000000080)='_\xea\xf5\xbe\xa3k0\x15\x11\x90\xf9l\xd2,\xce+n\x10E9\xcbFm\xab\xbcBd\xa2QF\xd7+e', 0xe) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, 0x0) timer_settime(r2, 0x1, &(0x7f0000001040)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40000000000, 0x400000000003, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3cf2a278, 0x0, 0x400000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x75b3}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000e80)={{r1}, "7a23a25fdf2d866a60e29ad921ac8527f0f103255c9369918a667c30921bc8b2d4f79ff0d3bec890971b41f4e97e738f49c397194ae3fe872a6955e0f2f493a288c44bb8645b2e6f81e710d9e45b3ef83d126db625dc11b796fc2d785b3564af68140276f9039c3e01f4739883dbf66fc14d269e76b6cf498d2e2561752e6bbabb95cf95da4295628cbf8093aabeb61baad8231576f3f9356859714b56c5e506bbcd2b46adee11662083a81e0955787f9128d7b01668b02fdde0c915c3165a6eb65c3091b0a989cb10f37231da347a37782a0233d7db5d57c0f1a9caf9d21787c1c0c84f7adfb1e7f15363187bc34fd03acce971fc37f2efe7897aeb8be39a7f202ef675eb302876f667f64110d6989c89de0fdbbf424fcf2329934418762801ee86554ded47b654308fc061d11cd8f29603b515acae9eb3c62f1fd4016d4cff0737361e754c7e100f1a346b1bb92ad2b0ee909e74bb478e26b8ac0d46e002c53c1b2deae81e3727a23c904a8e2eacfac3599cee34137c09f63e88ad8a8f6640703c659172207f25b9ab8289546c32a6c20c29aef214d106f6bcca1da8e1703a5d527904de56ed8429330e605a237cea88f464bbf2dc9e669ac0ef083893d0b8720f5dc2dbc1c7824cd64aeeb0d2522936a3321e5b76a598bae506d494f6db2aca80e571baaac8eaeed63200ff83e01964a0db31135cccb93a577a8d37b602f5e262065ac88cdd3408fbc6aa3283e03b24ea333286a366a1e3e69e3a03dc5e3dc51aa25ed5fdc39a3b75abbb3eed70ffdfecd26992feb21db706465993f0c168e3a3b756e9bd2a5c8753b908c37b55ca4bb43781998c3a16caed705ce18b13a4f6524e6fcbfa25a770c091cdb9cb08f2b640418a7d52afc28e1f6d226657e180f2634970adfca413253833722cfe1eb0040756af7470a8aa8f0e8b747de70eba6a0ec58d09218453ed0796af79e7daae4ccb089fe0f00e848156ac6995bed2e5fe8a6b5dbf8f1ba05b0e5872e42e02910598aed479aa0b55b07138bf1d1b8c0dbe06390c61f1d832583a79b0924b128603ed955c65b3df30445f2188c6e4899ce790e6891f25c3ec3de27683e2b036941dba131dc279bbba15d11089c18df29798557ce3db0f6e77955617786f7d14d768c84e7a3a3354838ce540a48e567532bfa73b4c4943e5a3711a1fc21ce2c1fc35cd15b48edcad12e6023f45eb5efb76f9422a22b2c103307ec12e81327a279d83062d0eb11ac949d00405a944e2cdf7780c8d2ed134a6e0514e803e3e3e497784a778f61e4bb06a43450c34df78fd26e83b26cbfcf381b7c5c37aa72ea8babea9faac394851afab0b9914dc907bac16c979b5f1bd1818b0c111a13a9841b9963e9b799f703b9912dfe3bce3014a6f72ce6b2a20f4f9d0c50033fb8c2b4fc24f1ae8b52c2133f7cfef2358219102856fd87cf274b35338086452c07bab42cf11914b4bd865be8c5ead2ceaae16b268a8a47b7deedf8afb08915fc0c15b13b6283bca73d85a81a8285d9b2aac6f4ba8de574e3a0824031d425abee540276f70dad29ad94fa815fc1ffaeba756791fd7a45e3c27de406b11b50dacac72c9cb991f602d74b1c51963e6171cfc325e91b7edb82665030b75b505be7cc04397b4e2ade34b751f2c83525de698a7132e00a72d1b3bfe62b449a838bdfd4dd0b0344349da1fbdc05837094ba536205b32424db011f76a78336ef8206c9d67cea8986e62570b0432446ddaa6d02e34079179c2abf9880b269b154fbe4a1355e8e120fa747a241b9f919da35fd48ca879743a092c5ddf75be4da686e4d685d2d1086bb0d13ae11cd364c1d8b95f11bb563a7e27cd9cfca90a68815ee76c069fcfdd19446e41524ff699eadfab7ac91edddde821752f74d6d4c932b30063d64bbdf781d1abccedaaa0bb043462a27c47ac25b10b576ab923f8746b023a02716e8906afb3f55e7159ea57fc2626871e356effbb633275dd1150c13490f83d2e956bb072681fb506a09f365ff941ebff214e9a0de7a1551f97be631227c378055ac3f5f0fcdcfb30ef8d3e615b8e3afd43382eabaa3c8b05416f825b67880dd4b853d55adfd0b73f051c93fdb7c9247147abb17690e76ee439d567eb4d2cf4506c7246dbf04653727f29724b80930356483560df46e2afa0f01792125569224e34d6212ef9b3270a18be0ffc51927eeb62624cb4827a4bf0d3d9eb7c7199cb014c5497f4146668159b1a4601933ecb29eaa1194c8b12d96b7344f069afe0de75564a2d9f373b5de4a0f808c001a223bbf7ddbf7df1aa28bf615df3f30d98b462f8f2eef4c39ca3b69289b600cab067ed1f853c6f585771dc6038755204b88547df9181b6e49efce8b56bd1695ded9368db04b65851c06def0fc5a254a25300d13f48bd0ae7b93c2e6f40d4603222af205cd3e2cd945b18220f30f95016693ae76f0c04c8cb0b69ffb60788e5427fa5090616e48d4798f61c43119148037646e4b5de6093237432e4046659b94934c49b649b72ee080b8252d433731a833e915026f869a32821026c60484e9c5efa9f43a966186fdf0baa91824c2d081cbe30e5ba0bfbbb17d9864f231847c62241c7ff08decd5aa00def733c372f96bfdd512111cbc114c00537f40a04e293c8846d86eeca8536cb951ad3a3ee9e8ea5d828f68dff49704e2c8c4492c61eccad6da970b9327016c260984cc1fa0a15e836b606bcfc9e80dd99aac0d3f92355fe7e82a425bc7aa22b1412d3bd7e9d8569c0c3df25d38688031eae188fcacad6b644d0477d65fac96252736027e4acd69a34931eaa638396c3f3cc720d662c20769d8770556ec867fa40e87a50783c18dd7fad3a74b6894dadfc9e97bc79708a8aee7667334fec47357894c9a26878807dc13a1e5f5a8b6fcb033c72e01395cea8be3bd48955a314e0b32744dbe3a3b6246bce57967fc0f83f964ab0ad1549e4d2412f77916b818ca286bebf258a0395f2179234724fb9bea0f37f6e9dae82af29c233995772aa08f770a6270c9d1637fcebd2a15d10f97ee9f29f3391b3ebef2123c48b58dab4cceb9a1c5f1e7e439065796ef6c45027857c2b75346607fb9d53b45fa0a7d5492a93b7051d05c363d236ddf4d8ef525cb1de89f8b3cbc53e9f288d7cbbbde55078322cdd0f7683bed76f6ba7c83a6b5abd65050805eadde476860121b2a4e6d2dbed34cf2daa83b931d8fce56702d725ac05f7289de622e1990670e8893f2b0eda0e1becad5c5ece13de8bbfb6b0f15ad30171a7030a76c8aaa32de196f242271fcae4264ba2d963ab38e3a5aae18d1d6f1f4ab3de4c64c8e635c974d56e7b0c079036b38dc13e5e4d5b1826e556f1ffa500d46ac3267f444cc9b6b3f7cfe53ec1c9234654a110c806edbb135a92c116d329f9dc076f5a3974329c2e7c08757fd8899484217fbfbc08ae51097e965495cba571ea4078654465d22c7977d492aac7926b9eb16b969dba7ba5d6716c69ea0a2fcaac1021e7572c57a463e2a374892746f85c9ca26954e378518309ba06569ea4be706fd6954f6b4519db60fbab811c1efe52c9fff4f3cdad3d08ddaf4267b07598f4a327cdd8b7b05ba00b247c7951c018cae61c83a74b5ac94f0d5cc5b312f9bc337b7827358557aed23c1baababc2574d2cee8b64d62df364b8cf976d8eb13975634b2cffada49bf53fa19a9f418af08c50456887da565e304e88cf7c8b9042fcd6f0732c9e93bd17f59354239341e959e0d2b9f00c20e03d513515b5509c50695276837df71c4288f9cb036d5f687503db8ea13105edf01f3c5fbc86ebf6fd4453137c9a48e49ddc99aea18e03751643110cb7bfb377d6561ebc68d504bbb12da3c60ee46c77dae3e2de41771e17ad5f1b8ad381f53182945c1f39cf2731ae62cee4f8d5976073cdcdce36fd34239c11e8fee1926b4e5b30fa0b12230fe479433b9d0fa9246820ddeb0b3f86cfa677bb5fa668aa00e94a4338f5e802d58dab9cc96ac5b23d0d9d6840cf3ac3de53ed6ccaaff36ffa5f0ff770da8756820c22d79bcaccc2cd46400e9f072cb52c61fe2c501b76b01d2d62f2755d13e56fa10d8a6ab26372283164e6c43149bd2d7d4f0dd2aced645a774fb87304b8f163ba5c599a984f34aa3eff099c855797b20edeb523700cbe217546ad2712acda5f5413a2f891cb2f9462854d6624008d0fef62262066f9517ffa76fc21f8be9bde00cbb27588f0fc8c4ee305c30d1044f1a6f01667c4d28f533829109d0eefaea9bdb57dc6112e6ad51f046a54e3672747c079e07acad0b9507c710bb7330793a79b4240296f5337ff9e15e2ae3325ce9c269e6459e4f6eb50deb587e4b1a9d029cc4138bd7e1bdb6f7b2f887d704e7a8745137556e00003f9b215ddf3f134a4be2a4af46a2404ea244becc5f72b82a92861e14f779b19f9ada116ddd9833d97cc85e1486ecce8f23b12d773b4bd24b8f1712dabec22fce837c4d665cc808c7adcb94086c5552035b9d564738a3da054c3baf7894815fd15629d93b7c933f2d648eb7441f0407faa62cd7a865eb1b1ee654fe063f851299585f292c3d635a09c2d52ec3916a39387e52d127c9f861c51ddc76abc952f78fd1d6c7c443ad8c260e14200428ceb32c99ba5c122db906c4f171ec1810c77423458d52e30ca117a432e3514cd03f76519adfe590aaa68b11b18bdde534cd12f06afc5e4249f17182a8a4d54322a58c953533bc2a8662628c7f7d72b5cc38100011ce20f8b97a73f75ac25a7d25a5fb5a7646d8fd39c3aee68c84a4c23e34bc660387f7ce6d1195e828d91a52cdc77343e61de7f01e91909fd3e343130eec766f9eb856610799cb00a46ad0df716b1d529e5c53d2734f7446aceca260b36c8c51a84c9ccd54e01843250e692934404e8ca6bb29c22bee5f91f383717d45d67008cd7c5cfefe372a7119f62da4b165bd341d6fad966f51fe2de097c60bee60417fe0f34e595714877700c3a20f544d464133c1c6618d99270746fbff723c299a9544ed242f835787abb932ac1ba22c7a6e696de129464ca9e7a32806b3533fd48d51414ea8b0369049f2bd47053dc4dcdab4592dba731bf6c09c17a63bc06fce81c9b8c4c5fb755d4d285ad44f16df1fbd520115c646f0ede87462616229d3b091623e5794706a3ce95f40a9a75933673b5fe5e522b19f6d7eab92c060f01d362951d276663b382f933c98f7ceebefa92d6650b1de380b807374f5a1264d716b5deebfb933118699c029509be803f3ba2f956719fc400c0babca442360a2e5dfe866b728075b5ec8db595297f769136694bafbf39749d082ba882cd1ec67e03440b16ad50a5e7818acf9749f336140639c1d363a86fc321ad3b3b03c3690b41f9d6b0cfc42f4ccc68b95fe3f1f77432441c21c95891b9e766e00b738eba1b4c6d2cd93991e8ca0566bbdd1ec981e8d7853e0226818a011fcae26686910583554aeb17c1d7168ff4104d4bd1ccf0a739c673b25caf27f01394ebe1473e4168b02644aa4e521675d9420cbc5af32a29f244b7048cf023bfc7bed743d26de746b23d237be272f132322162380d6e2067cb36c5c0dfcfcc99ec4ae10ae4dc407fbf0bbfc87496b59ac02db36cf72c7cb49cce2a3c7bdf3f6c06d2645ce13d91dbf59beb78c35860ed5f53384e496f1281629c6064da84699ebfe9cbf9c65a5e3e083044d115dfa3015d02624590b43578533d29c053c4859d3bec5989bd5529fee910ce9b9048e67157540e21cd97076de40c55895cf28"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140700000000000000001400020202000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) pipe(&(0x7f0000000000)) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x9b, 0xe1, 0xd9, 0x8, 0x644d, 0xcf2f, 0x3b94, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x50, 0x4, [{{0x9, 0x4, 0xb8, 0x6, 0x0, 0x8, 0x4, 0x50, 0xf9}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x10}) 1.127294751s ago: executing program 8 (id=2410): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0xffffff51}, 0x1, 0x0, 0x0, 0x2000c014}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) sendto$packet(r1, &(0x7f0000000280)="3562547ac6b644a1775d0e6cbf8eeccaa8afd8b5be55606900bc4d904906da590cd409", 0x23, 0x4c800, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x9, 0x6, @local}, 0x14) 1.126904971s ago: executing program 3 (id=2411): socket$kcm(0x10, 0x400000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000004c0), &(0x7f0000000700)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 225.24946ms ago: executing program 3 (id=2412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 224.25386ms ago: executing program 6 (id=2420): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = fsopen(&(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x9e, &(0x7f00000002c0)={0x0, 0xec25, 0x0, 0x0, 0x40000733}, &(0x7f00000006c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x25, 0x0, @fd, 0x6, &(0x7f0000000380)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): 021q: adding VLAN 0 to HW filter on device bond1 [ 232.543038][ T8879] team0: Port device team_slave_0 added [ 232.586903][ T8879] team0: Port device team_slave_1 added [ 232.649356][ T8879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.682522][ T8879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.729084][ T8879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.743540][ T8879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.750700][ T8879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.784354][ T8879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.214287][ T5084] Bluetooth: hci4: command tx timeout [ 233.588427][ T8879] hsr_slave_0: entered promiscuous mode [ 233.629922][ T8879] hsr_slave_1: entered promiscuous mode [ 233.639305][ T8879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.738050][ T8879] Cannot create hsr debugfs directory [ 234.610570][ T8999] bridge0: port 3(team0) entered blocking state [ 234.629584][ T8999] bridge0: port 3(team0) entered disabled state [ 234.637544][ T8999] team0: entered allmulticast mode [ 234.642806][ T8999] team_slave_1: entered allmulticast mode [ 234.662298][ T8999] team0: entered promiscuous mode [ 234.672499][ T8999] team_slave_1: entered promiscuous mode [ 234.687207][ T8999] bridge0: port 3(team0) entered blocking state [ 234.694236][ T8999] bridge0: port 3(team0) entered listening state [ 234.812829][ T8998] bridge1: entered promiscuous mode [ 234.900400][ T8998] bridge1: entered allmulticast mode [ 235.293543][ T5084] Bluetooth: hci4: command tx timeout [ 235.334938][ T8998] team0: Port device bridge1 added [ 235.354749][ T9001] geneve2: entered promiscuous mode [ 235.360137][ T9001] geneve2: entered allmulticast mode [ 235.639508][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.7.706'. [ 236.119298][ T8879] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 236.168980][ T8879] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 236.219490][ T8879] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 236.256735][ T8879] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 236.313374][ T9045] netlink: 'syz.6.712': attribute type 1 has an invalid length. [ 236.539834][ T9045] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 236.550784][ T9045] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 236.600718][ T9045] bond2: (slave vxcan3): making interface the new active one [ 236.616980][ T9045] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 236.661427][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.712'. [ 236.724814][ T9054] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 236.766894][ T9054] bond2 (unregistering): Released all slaves [ 236.846542][ T9051] loop4: detected capacity change from 0 to 256 [ 236.885956][ T9051] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.038443][ T8879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.089597][ T8879] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.147137][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.154330][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.249430][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.256695][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.380478][ T5084] Bluetooth: hci4: command tx timeout [ 237.555450][ T9077] netlink: 'syz.6.716': attribute type 13 has an invalid length. [ 237.929259][ T8879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.246931][ T9069] loop4: detected capacity change from 0 to 32768 [ 238.521563][ T9069] JBD2: Ignoring recovery information on journal [ 238.725988][ T9069] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 238.778421][ T9111] tipc: New replicast peer: 255.255.255.255 [ 238.804220][ T9111] tipc: Enabled bearer , priority 10 [ 238.835579][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.721'. [ 238.888387][ T9112] tipc: Disabling bearer [ 238.991820][ T8879] veth0_vlan: entered promiscuous mode [ 239.041058][ T8879] veth1_vlan: entered promiscuous mode [ 239.162978][ T8879] veth0_macvtap: entered promiscuous mode [ 239.201862][ T8879] veth1_macvtap: entered promiscuous mode [ 239.242563][ T9123] netlink: 'syz.7.722': attribute type 1 has an invalid length. [ 239.412663][ T9127] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.504327][ T9127] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 239.519742][ T5909] ocfs2: Unmounting device (7,4) on (node local) [ 239.564725][ T9127] bond1: (slave vxcan3): making interface the new active one [ 239.598697][ T9127] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 239.661884][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.722'. [ 239.720897][ T9123] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 239.772578][ T9123] bond1 (unregistering): Released all slaves [ 239.875383][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.907920][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.921639][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.953079][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.980456][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.003459][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.024371][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.036536][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.065387][ T8879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.139015][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.174606][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.203509][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.242299][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.264316][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.283457][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.313332][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.333349][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.355027][ T8879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.390691][ T9160] netlink: 'syz.7.731': attribute type 13 has an invalid length. [ 241.618046][ T8879] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.641980][ T8879] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.661163][ T8879] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.683559][ T8879] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.702042][ T9178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.733'. [ 242.044409][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.068640][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.179921][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.196628][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.573167][ T9205] xt_hashlimit: max too large, truncated to 1048576 [ 242.594838][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 245.344846][ T9251] netlink: 'syz.8.742': attribute type 13 has an invalid length. [ 246.144833][ T9278] netlink: 'syz.8.750': attribute type 1 has an invalid length. [ 246.181012][ T9278] gretap1: entered promiscuous mode [ 246.517450][ T9289] bridge1: entered promiscuous mode [ 246.554026][ T9289] bridge1: entered allmulticast mode [ 246.609044][ T9289] team0: Port device bridge1 added [ 246.634012][ T9295] bridge0: port 3(team0) entered blocking state [ 246.672035][ T9295] bridge0: port 3(team0) entered disabled state [ 246.711846][ T9295] team0: entered allmulticast mode [ 246.754460][ T9295] team_slave_0: entered allmulticast mode [ 246.760230][ T9295] team_slave_1: entered allmulticast mode [ 246.827001][ T9295] team0: entered promiscuous mode [ 246.888645][ T9295] team_slave_0: entered promiscuous mode [ 246.924177][ T9295] team_slave_1: entered promiscuous mode [ 246.931575][ T9295] bridge0: port 3(team0) entered blocking state [ 246.938130][ T9295] bridge0: port 3(team0) entered listening state [ 247.198735][ T9289] geneve2: entered promiscuous mode [ 247.223326][ T9289] geneve2: entered allmulticast mode [ 249.253961][ T9315] netlink: 32 bytes leftover after parsing attributes in process `syz.6.758'. [ 249.323088][ T9315] netlink: 32 bytes leftover after parsing attributes in process `syz.6.758'. [ 251.148275][ T9357] bridge2: entered promiscuous mode [ 251.175837][ T9357] bridge2: entered allmulticast mode [ 251.230048][ T9357] team0: Port device bridge2 added [ 251.285293][ T9364] bridge0: port 3(team0) entered blocking state [ 251.291690][ T9364] bridge0: port 3(team0) entered disabled state [ 251.324907][ T9364] team0: entered allmulticast mode [ 251.347533][ T9364] team_slave_0: entered allmulticast mode [ 251.375423][ T9364] team_slave_1: entered allmulticast mode [ 251.402445][ T9364] team0: entered promiscuous mode [ 251.419457][ T9364] team_slave_0: entered promiscuous mode [ 251.429354][ T9364] team_slave_1: entered promiscuous mode [ 251.445152][ T9364] bridge0: port 3(team0) entered blocking state [ 251.451580][ T9364] bridge0: port 3(team0) entered forwarding state [ 251.520170][ T9357] geneve2: entered promiscuous mode [ 251.560918][ T9357] geneve2: entered allmulticast mode [ 251.649911][ T9368] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.770'. [ 255.884182][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.890535][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.053995][ T9451] loop6: detected capacity change from 0 to 1024 [ 256.079056][ T9451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.125712][ T9451] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.181359][ T9451] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 256.193153][ T9451] System zones: 0-1, 3-36 [ 256.226157][ T9451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.345893][ T6678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.027219][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.7.801'. [ 257.911106][ T9483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.031720][ T9489] macvlan2: entered promiscuous mode [ 258.128732][ T9489] macvlan2: entered allmulticast mode [ 258.157013][ T9489] bond1: entered allmulticast mode [ 258.204203][ T9489] bond1: entered promiscuous mode [ 258.210071][ T9489] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 258.287968][ T9489] team0: Port device macvlan2 added [ 259.560830][ T9510] o2cb: This node has not been configured. [ 259.574126][ T9510] o2cb: Cluster check failed. Fix errors before retrying. [ 259.581312][ T9510] (syz.7.798,9510,0):user_dlm_register:674 ERROR: status = -22 [ 259.603139][ T9510] (syz.7.798,9510,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 260.945216][ T9543] loop8: detected capacity change from 0 to 32768 [ 261.059987][ T9543] JBD2: Ignoring recovery information on journal [ 261.175660][ T9571] loop6: detected capacity change from 0 to 16 [ 261.227007][ T9571] erofs: (device loop6): z_erofs_parse_cfgs: unidentified algorithms fff8, please upgrade kernel [ 261.261332][ T9543] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 261.913455][ T5831] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 262.107309][ T5831] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 262.126864][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.147103][ T5831] usb 7-1: Product: syz [ 262.151540][ T5831] usb 7-1: Manufacturer: syz [ 262.152105][ T8879] ocfs2: Unmounting device (7,8) on (node local) [ 262.167346][ T5831] usb 7-1: SerialNumber: syz [ 262.221399][ T5831] usb 7-1: config 0 descriptor?? [ 262.486385][ T5831] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 262.693212][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.815'. [ 262.725289][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.8.815'. [ 262.813604][ T9590] macsec0: Caught tx_queue_len zero misconfig [ 264.545976][ T5831] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 264.623406][ T5831] usb 7-1: USB disconnect, device number 4 [ 264.814380][ C0] bridge0: port 3(team0) entered learning state [ 267.105769][ T9645] loop4: detected capacity change from 0 to 4096 [ 267.229482][ T9638] loop6: detected capacity change from 0 to 32768 [ 267.514907][ T9647] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.548501][ T9645] NILFS (loop4): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 267.575788][ T9638] JBD2: Ignoring recovery information on journal [ 267.627696][ T9645] NILFS (loop4): error -5 getting root inode [ 267.797252][ T9613] Set syz1 is full, maxelem 65536 reached [ 267.821936][ T9638] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 268.392729][ T9656] loop4: detected capacity change from 0 to 4096 [ 268.427712][ T9656] ext4: Unknown parameter 'uid>00000000000000000000' [ 268.700285][ T6678] ocfs2: Unmounting device (7,6) on (node local) [ 268.917258][ T9667] loop8: detected capacity change from 0 to 128 [ 268.953701][ T9667] FAT-fs (loop8): bogus sectors per cluster 0 [ 268.981068][ T9667] FAT-fs (loop8): Can't find a valid FAT filesystem [ 269.193177][ T9671] lo: Caught tx_queue_len zero misconfig [ 270.401374][ T9692] batadv_slave_0: entered promiscuous mode [ 270.408327][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.8.851'. [ 270.417784][ T9692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.484430][ T9694] nfs: Unknown parameter 'fs' [ 271.191707][ T9692] batadv_slave_0 (unregistering): left promiscuous mode [ 271.209561][ T9692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.456306][ T5084] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 271.691759][ T9705] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.847'. [ 272.122305][ T9712] xt_TCPMSS: Only works on TCP SYN packets [ 273.512874][ T9727] netlink: 'syz.7.854': attribute type 39 has an invalid length. [ 273.548451][ T9730] o2cb: This node has not been configured. [ 273.578743][ T9733] loop6: detected capacity change from 0 to 1024 [ 273.583422][ T9730] o2cb: Cluster check failed. Fix errors before retrying. [ 273.595478][ T9730] (syz.8.853,9730,0):user_dlm_register:674 ERROR: status = -22 [ 273.610271][ T9733] EXT4-fs: Ignoring removed orlov option [ 273.624197][ T9730] (syz.8.853,9730,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 273.659746][ T9733] EXT4-fs: inline encryption not supported [ 273.702103][ T9733] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 273.787938][ T9735] binder_alloc: 9734: binder_alloc_buf size 1024 failed, no address space [ 273.800225][ T9733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.813266][ T9735] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 274.067222][ T6678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.317390][ T9751] netlink: 'syz.7.862': attribute type 39 has an invalid length. [ 274.841303][ T9758] Driver unsupported XDP return value 0 on prog (id 94) dev N/A, expect packet loss! [ 275.067579][ T9761] lo: Caught tx_queue_len zero misconfig [ 275.075257][ T9761] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 275.168872][ T9766] binder_alloc: 9765: binder_alloc_buf size 1024 failed, no address space [ 275.193447][ T9766] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 275.533493][ T5084] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 275.543849][ T5084] Bluetooth: hci4: Injecting HCI hardware error event [ 275.554358][ T5084] Bluetooth: hci4: hardware error 0x00 [ 276.985876][ C0] bridge0: port 3(team0) entered learning state [ 277.613562][ T5084] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 277.678182][ T9788] netlink: 14 bytes leftover after parsing attributes in process `syz.4.876'. [ 277.868976][ T9788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.901792][ T9788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.925147][ T9788] bond0 (unregistering): Released all slaves [ 278.447373][ T9796] o2cb: This node has not been configured. [ 278.461526][ T9796] o2cb: Cluster check failed. Fix errors before retrying. [ 278.469160][ T9796] (syz.6.877,9796,1):user_dlm_register:674 ERROR: status = -22 [ 278.477805][ T9796] (syz.6.877,9796,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 279.072220][ T9816] nfs: Unknown parameter 'fs' [ 279.978620][ T9820] bridge0: port 3(team0) entered disabled state [ 279.985113][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.992408][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.677645][ T9821] team0: left allmulticast mode [ 280.682578][ T9821] team_slave_0: left allmulticast mode [ 280.718855][ T9821] team_slave_1: left allmulticast mode [ 280.725243][ T9821] team0: left promiscuous mode [ 280.730194][ T9821] team_slave_0: left promiscuous mode [ 280.854717][ T9821] team_slave_1: left promiscuous mode [ 280.861692][ T9821] bridge0: port 3(team0) entered disabled state [ 280.966071][ T9821] bridge_slave_1: left allmulticast mode [ 280.971877][ T9821] bridge_slave_1: left promiscuous mode [ 280.993554][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.022007][ T9821] bridge_slave_0: left allmulticast mode [ 281.050648][ T9821] bridge_slave_0: left promiscuous mode [ 281.058980][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.144531][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.7.895'. [ 283.068285][ T9858] nfs: Unknown parameter 'fs' [ 283.935153][ T9865] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 287.472966][ T27] audit: type=1800 audit(1771900430.968:109): pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.912" name="/" dev="fuse" ino=4 res=0 errno=0 [ 291.213492][ T27] audit: type=1326 audit(1771900434.708:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.4.933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6877d9c629 code=0x0 [ 293.214313][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.8.941'. [ 294.893402][ C0] bridge0: port 3(team0) entered forwarding state [ 294.899887][ C0] bridge0: topology change detected, propagating [ 295.413595][T10024] fuse: Bad value for 'fd' [ 296.025322][T10044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.952'. [ 300.789442][T10117] loop4: detected capacity change from 0 to 512 [ 300.916533][T10117] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 300.953805][T10117] EXT4-fs (loop4): group descriptors corrupted! [ 301.265321][T10128] netlink: 'syz.6.975': attribute type 1 has an invalid length. [ 301.303066][T10128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.393373][T10128] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 301.417533][T10128] bond2: entered allmulticast mode [ 301.477776][T10128] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 302.743822][T10152] netlink: 24 bytes leftover after parsing attributes in process `syz.8.984'. [ 303.182059][T10162] IPVS: Scheduler module ip_vs_ not found [ 306.758948][ T5084] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 306.771000][T10203] x_tables: duplicate underflow at hook 2 [ 307.829167][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 307.854705][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1011'. [ 309.112862][T10258] loop4: detected capacity change from 0 to 256 [ 309.158301][T10258] loop4: detected capacity change from 0 to 512 [ 309.235569][T10258] EXT4-fs (loop4): 1 truncate cleaned up [ 309.261759][T10258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.454806][ T5909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.274989][T10292] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 311.301280][T10292] CIFS mount error: No usable UNC path provided in device string! [ 311.301280][T10292] [ 311.312385][T10292] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 311.653467][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 311.811686][ T27] audit: type=1326 audit(1771900455.308:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 311.870415][ T27] audit: type=1326 audit(1771900455.338:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 311.905676][ T27] audit: type=1326 audit(1771900455.338:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 311.939460][ T27] audit: type=1326 audit(1771900455.338:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 311.962951][ T27] audit: type=1326 audit(1771900455.338:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 311.992952][ T27] audit: type=1326 audit(1771900455.338:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 312.030551][ T27] audit: type=1326 audit(1771900455.338:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 312.532906][ T27] audit: type=1326 audit(1771900455.348:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 313.963352][ T27] audit: type=1326 audit(1771900455.348:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 314.042083][ T27] audit: type=1326 audit(1771900455.348:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.7.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 314.151090][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1035'. [ 314.179176][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1035'. [ 315.026548][T10323] bridge0: port 3(team0) entered disabled state [ 315.033102][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.040994][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.835224][T10323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.906220][T10323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.942706][T10356] Invalid ELF header magic: != ELF [ 316.208308][T10364] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 316.220724][T10364] ref_ctr increment failed for inode: 0x19e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805fb44280 [ 316.286876][T10362] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 316.308886][T10362] ref_ctr decrement failed for inode: 0x19e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805fb44280 [ 316.492476][T10323] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.502063][T10323] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.520645][T10323] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.540035][T10323] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.730310][T10367] ip_vti0: Master is either lo or non-ether device [ 316.875175][T10373] netlink: 'syz.7.1052': attribute type 1 has an invalid length. [ 316.907214][T10373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.950889][T10373] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 316.972182][T10373] bond2: (slave ip6gretap1): making interface the new active one [ 316.981718][T10373] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 317.303283][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.309734][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.376887][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 318.376902][ T27] audit: type=1326 audit(1771900461.878:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.7.1063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x0 [ 318.480585][T10389] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.488187][T10389] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.802031][T10389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.302238][T10389] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.311960][T10389] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.326636][T10389] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.335769][T10389] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.474505][T10389] syz.8.1060 (10389) used greatest stack depth: 20040 bytes left [ 320.318963][T10419] loop4: detected capacity change from 0 to 2048 [ 320.548040][T10419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.576914][T10419] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.306682][T10419] fs-verity: sha512 using implementation "sha512-avx2" [ 321.481085][ T5909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.601938][T10447] batadv_slave_1: entered promiscuous mode [ 321.621796][T10447] loop4: detected capacity change from 0 to 512 [ 321.662889][T10447] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.784728][T10446] batadv_slave_1: left promiscuous mode [ 321.944011][T10452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.085390][T10454] loop4: detected capacity change from 0 to 4096 [ 322.095129][T10454] EXT4-fs: Ignoring removed nobh option [ 322.102171][T10454] EXT4-fs: Ignoring removed oldalloc option [ 322.116047][T10452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.137682][T10454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.297448][ T5909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.832252][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1087'. [ 324.212386][ T8891] udevd[8891]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 325.333497][T10497] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 325.781988][T10510] lo speed is unknown, defaulting to 1000 [ 325.796310][T10510] lo speed is unknown, defaulting to 1000 [ 325.808623][T10510] lo speed is unknown, defaulting to 1000 [ 325.820554][T10510] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 325.884665][T10510] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 326.066055][T10510] lo speed is unknown, defaulting to 1000 [ 326.437241][T10510] lo speed is unknown, defaulting to 1000 [ 326.685695][T10510] lo speed is unknown, defaulting to 1000 [ 326.726155][T10510] lo speed is unknown, defaulting to 1000 [ 326.733831][T10510] lo speed is unknown, defaulting to 1000 [ 327.078035][T10531] loop4: detected capacity change from 0 to 164 [ 327.201344][ T8891] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.442674][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1110'. [ 327.641252][T10538] team1: entered promiscuous mode [ 327.678168][T10538] team1: entered allmulticast mode [ 327.924425][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 329.088389][T10571] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.113767][T10571] bond3: (slave lo): Enslaving as an active interface with an up link [ 329.150228][T10571] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 330.291407][T10597] netlink: 'syz.8.1127': attribute type 1 has an invalid length. [ 335.749733][ T27] audit: type=1326 audit(2000000000.670:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10645 comm="syz.7.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7fc00000 [ 335.846037][ T5808] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 336.028120][T10661] overlayfs: failed to resolve './file0': -2 [ 336.045832][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.066591][ T5808] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 336.085931][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.104117][ T5808] usb 5-1: config 0 descriptor?? [ 336.112687][ T5808] pwc: Askey VC010 type 2 USB webcam detected. [ 336.373683][ T27] audit: type=1326 audit(2000000001.290:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10645 comm="syz.7.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95ee99c629 code=0x7fc00000 [ 336.609288][ T5808] pwc: recv_control_msg error -32 req 02 val 2b00 [ 336.708088][ T5808] pwc: recv_control_msg error -32 req 02 val 2700 [ 336.817884][ T5808] pwc: recv_control_msg error -32 req 02 val 2c00 [ 336.939194][ T5808] pwc: recv_control_msg error -32 req 04 val 1000 [ 336.996642][ T5808] pwc: recv_control_msg error -32 req 04 val 1300 [ 337.010669][ T5808] pwc: recv_control_msg error -32 req 04 val 1400 [ 337.022648][ T5808] pwc: recv_control_msg error -32 req 02 val 2000 [ 337.034508][ T5808] pwc: recv_control_msg error -32 req 02 val 2100 [ 337.759015][ T5808] pwc: recv_control_msg error -71 req 02 val 2500 [ 337.810497][ T5808] pwc: recv_control_msg error -71 req 02 val 2400 [ 337.827160][ T5808] pwc: recv_control_msg error -71 req 02 val 2600 [ 337.841440][ T5808] pwc: recv_control_msg error -71 req 02 val 2900 [ 337.848964][ T5808] pwc: recv_control_msg error -71 req 02 val 2800 [ 337.856725][ T5808] pwc: recv_control_msg error -71 req 04 val 1100 [ 337.864313][ T5808] pwc: recv_control_msg error -71 req 04 val 1200 [ 337.985205][ T5808] pwc: Registered as video103. [ 338.022616][ T5808] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 338.090976][ T5808] usb 5-1: USB disconnect, device number 8 [ 339.603352][ T5808] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 339.996248][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 340.008304][ T5808] usb 5-1: config 222 has an invalid interface number: 31 but max is 0 [ 340.027108][ T5808] usb 5-1: config 222 has no interface number 0 [ 340.081182][ T5808] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 340.160843][ T5808] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 340.247343][ T5808] usb 5-1: config 222 interface 31 has no altsetting 0 [ 340.348380][ T5808] usb 5-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 340.623400][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.658714][ T5808] usb 5-1: Product: syz [ 340.662931][ T5808] usb 5-1: Manufacturer: syz [ 340.883449][ T5808] usb 5-1: SerialNumber: syz [ 340.894925][T10704] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 340.959485][T10729] dummy0: Caught tx_queue_len zero misconfig [ 341.696210][ T5808] ldusb 5-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 341.752115][ T5808] usb 5-1: USB disconnect, device number 9 [ 341.786977][ T5808] ldusb 5-1:222.31: LD USB Device #0 now disconnected [ 341.829408][T10739] capability: warning: `syz.8.1166' uses 32-bit capabilities (legacy support in use) [ 341.844335][T10739] fuse: Bad value for 'fd' [ 341.934403][T10744] tipc: Failed to remove unknown binding: 66,0,0/0:4167986648/4167986650 [ 341.947032][T10744] tipc: Failed to remove unknown binding: 66,0,0/0:4167986648/4167986649 [ 341.956889][T10744] tipc: Failed to remove unknown binding: 66,0,0/0:4167986648/4167986650 [ 341.965675][T10744] tipc: Failed to remove unknown binding: 66,0,0/0:4167986648/4167986649 [ 343.988159][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1174'. [ 343.999954][T10761] vlan2: entered promiscuous mode [ 344.005158][T10761] bridge0: entered promiscuous mode [ 344.010595][T10761] vlan2: entered allmulticast mode [ 344.017194][T10761] bridge0: entered allmulticast mode [ 344.105493][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1175'. [ 344.114618][T10766] bond0: option arp_all_targets: invalid value (172) [ 344.199614][T10761] team0: left allmulticast mode [ 344.215954][T10761] team_slave_1: left allmulticast mode [ 344.228684][T10761] team0: left promiscuous mode [ 344.240014][T10761] team_slave_1: left promiscuous mode [ 344.253534][T10761] bridge0: port 3(team0) entered disabled state [ 344.272168][T10761] bridge_slave_0: left allmulticast mode [ 344.278406][T10761] bridge_slave_0: left promiscuous mode [ 344.320626][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.362774][T10761] bridge_slave_1: left allmulticast mode [ 344.371031][T10761] bridge_slave_1: left promiscuous mode [ 344.380505][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.449927][T10761] bond0: (slave bond_slave_0): Releasing backup interface [ 344.486885][T10761] bond0: (slave bond_slave_1): Releasing backup interface [ 344.540880][T10761] team0: Port device team_slave_1 removed [ 344.549823][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.558062][T10761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.574598][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.588650][T10761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.607764][T10761] bond1: (slave ip6gretap1): Releasing active interface [ 344.615640][T10761] ip6gretap1: left promiscuous mode [ 344.621202][T10761] ip6gretap1: left allmulticast mode [ 344.645363][T10761] team0: Port device bridge1 removed [ 344.658122][T10761] bond2: (slave ip6gretap2): Releasing active interface [ 346.248065][T10805] lo speed is unknown, defaulting to 1000 [ 349.397319][T10862] loop4: detected capacity change from 0 to 1024 [ 349.515868][T10862] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 349.537221][T10862] hfsplus: xattr searching failed [ 349.745687][T10868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.830556][T10868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.840204][ T27] audit: type=1326 audit(2000000022.762:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 349.862978][ T27] audit: type=1326 audit(2000000022.762:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 349.885585][ T27] audit: type=1326 audit(2000000022.762:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 349.910823][ T27] audit: type=1326 audit(2000000022.762:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 349.942605][ T27] audit: type=1326 audit(2000000022.762:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 349.968328][ T27] audit: type=1326 audit(2000000022.762:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 349.990803][ T27] audit: type=1326 audit(2000000022.762:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 350.013810][ T27] audit: type=1326 audit(2000000022.762:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 350.037001][ T27] audit: type=1326 audit(2000000022.762:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 350.059845][ T27] audit: type=1326 audit(2000000022.762:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 350.388965][T10880] loop4: detected capacity change from 0 to 256 [ 350.412985][T10880] FAT-fs (loop4): Directory bread(block 64) failed [ 350.427639][T10880] FAT-fs (loop4): Directory bread(block 65) failed [ 350.479295][T10880] FAT-fs (loop4): Directory bread(block 66) failed [ 350.491704][T10880] FAT-fs (loop4): Directory bread(block 67) failed [ 350.504948][T10880] FAT-fs (loop4): Directory bread(block 68) failed [ 350.518611][T10880] FAT-fs (loop4): Directory bread(block 69) failed [ 350.533859][T10880] FAT-fs (loop4): Directory bread(block 70) failed [ 350.540491][T10880] FAT-fs (loop4): Directory bread(block 71) failed [ 350.554017][T10880] FAT-fs (loop4): Directory bread(block 72) failed [ 350.561519][T10880] FAT-fs (loop4): Directory bread(block 73) failed [ 351.613475][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 355.153473][T10930] netlink: 'syz.6.1226': attribute type 10 has an invalid length. [ 355.176397][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 355.176410][ T27] audit: type=1326 audit(2000000028.102:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.8.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 355.225569][T10930] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 355.273483][ T27] audit: type=1326 audit(2000000028.102:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.8.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 355.361126][T10938] netlink: 'syz.4.1230': attribute type 11 has an invalid length. [ 358.358436][T10976] tipc: Failed to remove unknown binding: 66,0,0/0:3890316685/3890316687 [ 358.381040][T10976] tipc: Failed to remove unknown binding: 66,0,0/0:3890316685/3890316686 [ 358.409878][T10976] tipc: Failed to remove unknown binding: 66,0,0/0:3890316685/3890316687 [ 358.419368][T10976] tipc: Failed to remove unknown binding: 66,0,0/0:3890316685/3890316686 [ 358.820301][T10983] loop4: detected capacity change from 0 to 1024 [ 359.277016][T10983] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1242'. [ 361.002727][T11027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1257'. [ 362.108209][T11047] lo: entered allmulticast mode [ 362.115905][T11047] lo: left allmulticast mode [ 363.187269][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1267'. [ 363.261782][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1268'. [ 363.548633][T11056] bridge2: port 1(veth3) entered blocking state [ 363.615540][T11056] bridge2: port 1(veth3) entered disabled state [ 363.697821][T11056] veth3: entered allmulticast mode [ 363.876837][T11056] veth3: entered promiscuous mode [ 363.883425][T11056] bridge2: port 1(veth3) entered blocking state [ 363.890018][T11056] bridge2: port 1(veth3) entered forwarding state [ 363.947443][T11061] bond3: (slave lo): Releasing backup interface [ 363.974905][T11061] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 364.057528][T11061] bond0: (slave bond_slave_0): Releasing backup interface [ 364.072651][T11061] bond0: (slave bond_slave_1): Releasing backup interface [ 364.225511][T11061] team0: Port device team_slave_0 removed [ 364.322359][T11061] team0: Port device team_slave_1 removed [ 364.336301][T11061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.351329][T11061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.599616][T11061] team0: Port device bridge1 removed [ 364.688911][T11061] bond1: left allmulticast mode [ 364.719016][T11061] bond1: left promiscuous mode [ 364.812952][T11061] team0: Port device macvlan2 removed [ 365.062311][T11061] bond2: (slave ip6gretap1): Releasing active interface [ 365.081475][ T49] bridge2: port 1(veth3) entered disabled state [ 365.252158][T11064] bridge2: port 2(veth5) entered blocking state [ 365.261232][T11064] bridge2: port 2(veth5) entered disabled state [ 365.271920][T11064] veth5: entered allmulticast mode [ 365.290638][T11064] veth5: entered promiscuous mode [ 365.412017][T11064] bridge2: port 2(veth5) entered blocking state [ 365.418466][T11064] bridge2: port 2(veth5) entered forwarding state [ 365.437823][ T59] bridge2: port 2(veth5) entered disabled state [ 366.265837][ T27] audit: type=1326 audit(2000000039.192:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6877d9c629 code=0x7ffc0000 [ 366.326484][ T27] audit: type=1326 audit(2000000039.192:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6877d9c629 code=0x7ffc0000 [ 366.372879][ T27] audit: type=1326 audit(2000000039.212:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6877d9c629 code=0x7ffc0000 [ 366.436678][ T27] audit: type=1326 audit(2000000039.212:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6877d9c629 code=0x7ffc0000 [ 366.500380][ T27] audit: type=1326 audit(2000000039.212:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6877d9c629 code=0x7ffc0000 [ 366.553836][ T27] audit: type=1326 audit(2000000039.212:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6877d5cece code=0x7ffc0000 [ 366.598792][ T27] audit: type=1326 audit(2000000039.222:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6877d9c629 code=0x7ffc0000 [ 366.668706][ T27] audit: type=1326 audit(2000000039.222:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6877d9c629 code=0x7ffc0000 [ 366.724072][ T27] audit: type=1326 audit(2000000039.222:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6877d9c629 code=0x7ffc0000 [ 366.783572][ T27] audit: type=1326 audit(2000000039.222:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6877d9c629 code=0x7ffc0000 [ 368.254064][T11121] input: syz1 as /devices/virtual/input/input6 [ 372.413357][ T27] kauditd_printk_skb: 110 callbacks suppressed [ 372.413373][ T27] audit: type=1804 audit(2000000045.332:316): pid=11167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1300" name="bus" dev="ramfs" ino=28111 res=1 errno=0 [ 372.575852][ T27] audit: type=1804 audit(2000000045.402:317): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1300" name="bus" dev="ramfs" ino=28111 res=1 errno=0 [ 373.634624][T11176] loop4: detected capacity change from 0 to 2048 [ 373.730725][T11176] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.158383][ T5909] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 374.172391][ T5909] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 375.557892][T11193] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1307'. [ 377.603317][T11214] UBIFS error (pid: 11214): cannot open "ubifs", error -22 [ 378.782743][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.809752][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.720624][T11241] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 382.159189][T11254] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 382.860956][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.880489][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.890868][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.904024][ T49] tipc: Left network mode [ 382.924287][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.933155][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 382.944355][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 384.336521][T11259] lo speed is unknown, defaulting to 1000 [ 384.596242][T11297] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1331'. [ 385.455663][ T5084] Bluetooth: hci1: command tx timeout [ 385.495800][T11313] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 386.940286][T11259] chnl_net:caif_netlink_parms(): no params data found [ 387.177609][T11344] bridge0: entered promiscuous mode [ 387.377788][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.395521][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.411148][T11259] bridge_slave_0: entered allmulticast mode [ 387.430536][T11259] bridge_slave_0: entered promiscuous mode [ 387.451407][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.472968][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.494988][T11259] bridge_slave_1: entered allmulticast mode [ 387.514699][T11259] bridge_slave_1: entered promiscuous mode [ 387.748433][ T5775] Bluetooth: hci1: command tx timeout [ 388.606918][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.646695][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.909862][T11259] team0: Port device team_slave_0 added [ 388.952137][T11259] team0: Port device team_slave_1 added [ 389.030057][ T49] hsr_slave_0: left promiscuous mode [ 389.046094][ T49] hsr_slave_1: left promiscuous mode [ 389.060548][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.084027][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.111656][ T49] team0: left allmulticast mode [ 389.121698][ T49] team_slave_0: left allmulticast mode [ 389.141984][ T49] team_slave_1: left allmulticast mode [ 389.163644][ T49] team0: left promiscuous mode [ 389.168479][ T49] team_slave_0: left promiscuous mode [ 389.221029][ T49] team_slave_1: left promiscuous mode [ 389.227044][ T49] bridge0: port 3(team0) entered disabled state [ 389.242160][ T49] bridge_slave_1: left allmulticast mode [ 389.249794][ T49] bridge_slave_1: left promiscuous mode [ 389.262377][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.272958][ T49] bridge_slave_0: left allmulticast mode [ 389.279151][ T49] bridge_slave_0: left promiscuous mode [ 389.285426][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.354915][ T49] team0 (unregistering): Port device bridge2 removed [ 389.450548][ T49] bond1 (unregistering): (slave bridge1): Releasing active interface [ 389.787401][ T5775] Bluetooth: hci1: command tx timeout [ 389.907386][ T27] audit: type=1326 audit(2000000062.682:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.6.1352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x0 [ 390.555650][ T49] bond1 (unregistering): Released all slaves [ 391.391796][ T49] team0 (unregistering): Port device team_slave_1 removed [ 391.451221][ T49] team0 (unregistering): Port device team_slave_0 removed [ 391.853452][ T5775] Bluetooth: hci1: command tx timeout [ 392.560846][T11407] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 393.303879][T11389] netlink: 798 bytes leftover after parsing attributes in process `syz.8.1354'. [ 393.362495][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.386100][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.642951][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.770915][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.969420][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.423338][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.662737][T11259] hsr_slave_0: entered promiscuous mode [ 395.706304][ T27] audit: type=1326 audit(2000000068.632:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.6.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 395.729484][T11259] hsr_slave_1: entered promiscuous mode [ 395.749476][T11259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.763459][T11259] Cannot create hsr debugfs directory [ 395.769818][ T27] audit: type=1326 audit(2000000068.632:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.6.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 395.853633][ T27] audit: type=1326 audit(2000000068.632:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.6.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 395.914531][ T27] audit: type=1326 audit(2000000068.652:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.6.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa85695cece code=0x7ffc0000 [ 395.943830][ T27] audit: type=1326 audit(2000000068.652:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.6.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 395.966966][ T27] audit: type=1326 audit(2000000068.652:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.6.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 396.007963][ T27] audit: type=1326 audit(2000000068.652:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.6.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 396.086667][T11432] netlink: 'syz.8.1366': attribute type 10 has an invalid length. [ 396.109636][T11432] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 396.176406][ T27] audit: type=1326 audit(2000000068.652:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.6.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 396.243377][ T27] audit: type=1326 audit(2000000068.662:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.6.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 396.323962][ T27] audit: type=1326 audit(2000000068.662:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11424 comm="syz.6.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 396.994314][T11453] overlayfs: failed to clone upperpath [ 397.030911][T11259] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 397.068769][T11259] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 397.081044][T11259] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 397.093966][T11259] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 398.023034][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.355490][T11259] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.367762][T11466] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 398.376453][T11466] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 398.385144][T11466] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 398.556448][T11259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.566900][T11259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.586035][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.593166][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.415363][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.422551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.719371][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.269471][T10357] IPVS: starting estimator thread 0... [ 401.364369][T11509] IPVS: using max 20 ests per chain, 48000 per kthread [ 401.929516][T11528] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1383'. [ 402.155732][T11259] veth0_vlan: entered promiscuous mode [ 402.209991][T11259] veth1_vlan: entered promiscuous mode [ 402.313552][T11259] veth0_macvtap: entered promiscuous mode [ 402.368475][T11259] veth1_macvtap: entered promiscuous mode [ 402.666911][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.709254][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.750338][T11259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.779132][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.199921][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.215919][T11259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.344494][T11259] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.353599][T11259] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.374922][T11259] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.384021][T11259] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.290018][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.376006][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.386874][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.399600][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.477202][T11552] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1389'. [ 405.362846][T11562] loop9: detected capacity change from 0 to 2048 [ 405.477725][T11562] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.779428][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 408.779443][ T27] audit: type=1326 audit(2000000081.702:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.7.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 408.878377][ T27] audit: type=1326 audit(2000000081.702:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.7.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 408.902658][ T27] audit: type=1326 audit(2000000081.702:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.7.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 408.956946][ T27] audit: type=1326 audit(2000000081.702:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.7.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 409.011666][ T27] audit: type=1326 audit(2000000081.702:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.7.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 409.083370][ T27] audit: type=1326 audit(2000000081.712:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.7.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95ee95cece code=0x7ffc0000 [ 409.147906][ T27] audit: type=1326 audit(2000000081.712:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.7.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 409.153651][T11259] UDF-fs: error (device loop9): udf_read_inode: (ino 1) failed !bh [ 409.219236][ T27] audit: type=1326 audit(2000000081.712:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.7.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 409.236317][T11259] UDF-fs: error (device loop9): udf_read_inode: (ino 1) failed !bh [ 409.283142][ T27] audit: type=1326 audit(2000000081.712:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.7.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 409.414032][ T27] audit: type=1326 audit(2000000081.712:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.7.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 410.571428][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.514983][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.755372][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.799856][T11639] ptrace attach of "./syz-executor exec"[8879] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ /dev/cpu/#/msr /sys/kernel/debug/binder/stats"[11639] [ 411.996876][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.433071][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.453208][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.464909][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.482800][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.494214][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 412.501634][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.897369][ T23] IPVS: starting estimator thread 0... [ 412.913852][T11666] IPVS: rr: FWM 3 0x00000003 - no destination available [ 413.003601][T11667] IPVS: using max 20 ests per chain, 48000 per kthread [ 413.257314][T11655] chnl_net:caif_netlink_parms(): no params data found [ 413.612693][T11655] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.621336][T11655] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.629993][T11655] bridge_slave_0: entered allmulticast mode [ 413.639842][T11655] bridge_slave_0: entered promiscuous mode [ 413.689466][T11655] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.709689][T11655] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.729445][T11655] bridge_slave_1: entered allmulticast mode [ 413.750314][T11655] bridge_slave_1: entered promiscuous mode [ 413.857244][ T27] kauditd_printk_skb: 83 callbacks suppressed [ 413.857258][ T27] audit: type=1326 audit(2000000086.782:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 413.881227][T11655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.925906][ T27] audit: type=1326 audit(2000000086.822:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 414.003425][ T27] audit: type=1326 audit(2000000086.832:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 414.015665][T11655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.073364][ T27] audit: type=1326 audit(2000000086.832:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 414.143224][ T27] audit: type=1326 audit(2000000086.832:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44e395cece code=0x7ffc0000 [ 414.212496][ T27] audit: type=1326 audit(2000000086.832:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 414.259608][T11655] team0: Port device team_slave_0 added [ 414.271216][ T27] audit: type=1326 audit(2000000086.832:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 414.310568][T11655] team0: Port device team_slave_1 added [ 414.315145][ T27] audit: type=1326 audit(2000000086.842:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 414.410119][ T27] audit: type=1326 audit(2000000086.842:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 414.501714][ T27] audit: type=1326 audit(2000000086.842:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f44e399c629 code=0x7ffc0000 [ 414.575329][ T5775] Bluetooth: hci1: command tx timeout [ 414.599171][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1418'. [ 414.608552][T11655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.615991][T11655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.642831][T11655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.767815][T11655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.792111][T11655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.893903][T11655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.962449][ T12] hsr_slave_0: left promiscuous mode [ 415.022134][ T12] hsr_slave_1: left promiscuous mode [ 415.038800][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.052937][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.100557][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.128631][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.172562][ T12] bridge_slave_1: left allmulticast mode [ 415.185395][ T12] bridge_slave_1: left promiscuous mode [ 415.211842][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.252493][ T12] bridge_slave_0: left allmulticast mode [ 415.258917][ T12] bridge_slave_0: left promiscuous mode [ 415.284679][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.424450][ T12] veth1_macvtap: left promiscuous mode [ 415.430091][ T12] veth0_macvtap: left promiscuous mode [ 415.436290][ T12] veth1_vlan: left promiscuous mode [ 415.441653][ T12] veth0_vlan: left promiscuous mode [ 416.653506][ T5775] Bluetooth: hci1: command tx timeout [ 417.562872][T11741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.421248][ T12] team0 (unregistering): Port device team_slave_1 removed [ 418.536215][ T12] team0 (unregistering): Port device team_slave_0 removed [ 418.619670][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.735372][ T5775] Bluetooth: hci1: command tx timeout [ 418.744216][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.297641][ T12] bond0 (unregistering): Released all slaves [ 419.432123][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1420'. [ 419.441298][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1420'. [ 419.462514][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1426'. [ 419.560562][T11752] netlink: 'syz.6.1432': attribute type 1 has an invalid length. [ 419.591001][T11752] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 419.725792][T11655] hsr_slave_0: entered promiscuous mode [ 419.793938][T11655] hsr_slave_1: entered promiscuous mode [ 420.258119][T11655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.430989][T11655] Cannot create hsr debugfs directory [ 420.526450][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1437'. [ 420.655127][T11772] bridge3: port 1(veth9) entered blocking state [ 420.674045][T11772] bridge3: port 1(veth9) entered disabled state [ 420.681022][T11772] veth9: entered allmulticast mode [ 420.704282][T11772] veth9: entered promiscuous mode [ 420.786872][T11773] bridge3: port 2(veth11) entered blocking state [ 420.803014][T11773] bridge3: port 2(veth11) entered disabled state [ 420.820856][ T5775] Bluetooth: hci1: command tx timeout [ 420.828814][T11773] veth11: entered allmulticast mode [ 420.836161][T11773] veth11: entered promiscuous mode [ 422.049364][T11799] VFS: Mount too revealing [ 422.419727][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1443'. [ 422.445019][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1443'. [ 423.102195][T11822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.467156][T11655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 423.514326][T11655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 423.545290][T11655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 423.576133][T11655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.934937][T11844] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1450'. [ 424.082977][T11850] netlink: 'syz.7.1451': attribute type 1 has an invalid length. [ 424.280254][T11850] bond4: entered promiscuous mode [ 424.321699][T11850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 424.353632][T11862] netlink: 'syz.6.1452': attribute type 3 has an invalid length. [ 424.377088][T11862] netlink: 'syz.6.1452': attribute type 3 has an invalid length. [ 424.514901][T11853] bond4: (slave bridge4): making interface the new active one [ 424.542674][T11853] bridge4: entered promiscuous mode [ 424.557604][T11853] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 424.598078][T11855] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.646204][T11855] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 424.954464][T11655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.013351][T11655] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.048740][T11870] bridge_slave_0: left allmulticast mode [ 425.063443][T11870] bridge_slave_0: left promiscuous mode [ 425.070096][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.100731][T11870] bridge_slave_1: left allmulticast mode [ 425.112557][T11870] bridge_slave_1: left promiscuous mode [ 425.118661][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.140086][T11870] bond0: (slave bond_slave_0): Releasing backup interface [ 425.156530][T11870] bond0: (slave bond_slave_1): Releasing backup interface [ 425.177500][T11870] team0: Port device team_slave_0 removed [ 425.191633][T11870] team0: Port device team_slave_1 removed [ 425.200335][T11870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.212170][T11870] bond0: (slave wlan1): Releasing backup interface [ 425.257089][T11872] team0: Mode changed to "loadbalance" [ 425.263075][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1456'. [ 425.302824][T11875] vlan0: entered promiscuous mode [ 425.311778][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.319004][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.368563][T11876] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 425.387383][T11878] bond5 (unregistering): (slave gretap0): Releasing backup interface [ 425.401365][T11878] bond5 (unregistering): Released all slaves [ 425.419403][T11870] tipc: Started in network mode [ 425.424460][T11870] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 425.431836][T11870] tipc: Enabled bearer , priority 0 [ 425.441220][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.448403][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.973382][T11894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.617049][ T1614] tipc: Node number set to 11578026 [ 426.663063][T11655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.728160][T11901] vlan1: entered promiscuous mode [ 426.740680][T11901] bridge0: entered promiscuous mode [ 426.786452][T11901] vlan1: entered allmulticast mode [ 426.791629][T11901] bridge0: entered allmulticast mode [ 426.818155][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1459'. [ 426.989864][T11655] veth0_vlan: entered promiscuous mode [ 427.113117][T11655] veth1_vlan: entered promiscuous mode [ 427.220275][T11655] veth0_macvtap: entered promiscuous mode [ 427.282801][T11655] veth1_macvtap: entered promiscuous mode [ 427.371232][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.433365][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.480386][T11655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.537014][T11655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.611535][T11655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.665932][T11655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.755170][T11655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.805503][T11655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.126808][T11655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.313396][T11655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.559889][T11922] netlink: 'syz.8.1463': attribute type 3 has an invalid length. [ 428.918406][T11922] netlink: 'syz.8.1463': attribute type 3 has an invalid length. [ 429.306765][T11943] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1467'. [ 429.335137][T11943] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1467'. [ 429.370945][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.400773][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.501618][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1468'. [ 429.647615][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.675123][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.069771][T11963] veth9: left allmulticast mode [ 430.080271][T11963] veth9: left promiscuous mode [ 430.099168][T11963] bridge3: port 1(veth9) entered disabled state [ 430.130468][T11963] veth11: left allmulticast mode [ 430.149865][T11963] veth11: left promiscuous mode [ 430.163774][T11963] bridge3: port 2(veth11) entered disabled state [ 430.210376][T11963] bond4: (slave bridge4): Releasing backup interface [ 430.223776][T11963] bridge4: left promiscuous mode [ 432.262682][T11994] xt_TCPMSS: Only works on TCP SYN packets [ 432.547339][T12004] overlayfs: failed to clone upperpath [ 432.568591][T12004] overlayfs: failed to resolve './file1': -2 [ 432.812525][T12009] sch_fq: defrate 0 ignored. [ 433.100553][T12016] xt_socket: unknown flags 0x50 [ 436.581791][T12063] xt_TCPMSS: Only works on TCP SYN packets [ 437.448461][T12061] loop3: detected capacity change from 0 to 4096 [ 437.468980][T12061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 437.613610][T12061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.783419][T12061] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 438.045795][T11655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.460174][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1496'. [ 439.576290][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1498'. [ 439.616265][T12101] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.625684][T12101] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.634501][T12101] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.643354][T12101] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.656312][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1498'. [ 440.178586][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.185894][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.031646][T12135] openvswitch: netlink: Message has 4 unknown bytes. [ 441.906471][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1514'. [ 442.364798][T12161] xt_socket: unknown flags 0x50 [ 443.045267][T12165] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 443.709257][T12178] openvswitch: netlink: Message has 4 unknown bytes. [ 445.161145][T12193] team0: Mode changed to "loadbalance" [ 445.201781][T12200] vlan0: entered promiscuous mode [ 445.257841][T12200] team0: Port device vlan0 added [ 445.376362][T12193] tipc: Started in network mode [ 445.399028][T12193] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 445.428356][T12193] tipc: Enabled bearer , priority 0 [ 445.603399][T12213] loop3: detected capacity change from 0 to 2048 [ 445.692568][T12213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.618341][T10358] tipc: Node number set to 11578026 [ 446.760877][T12209] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 446.856473][T12209] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 446.908626][T12209] EXT4-fs (loop3): This should not happen!! Data will be lost [ 446.908626][T12209] [ 446.922917][T12209] EXT4-fs (loop3): Total free blocks count 0 [ 446.932082][T12209] EXT4-fs (loop3): Free/Dirty block details [ 446.942025][T12209] EXT4-fs (loop3): free_blocks=4096 [ 446.950019][T12209] EXT4-fs (loop3): dirty_blocks=16 [ 446.965673][T12209] EXT4-fs (loop3): Block reservation details [ 446.991676][T12209] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 447.868972][T11655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.285752][T12253] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1536'. [ 448.391830][T12252] bond0: (slave wlan1): Releasing backup interface [ 448.452941][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1536'. [ 448.466014][T12253] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1536'. [ 448.639916][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 449.406132][T12300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1550'. [ 450.850241][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 451.567834][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1553'. [ 452.001268][T12335] loop3: detected capacity change from 0 to 512 [ 452.018800][T12335] EXT4-fs: Ignoring removed i_version option [ 452.602492][T12333] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 452.661936][T12333] ref_ctr increment failed for inode: 0x4f1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078699c80 [ 452.674217][T12335] EXT4-fs (loop3): 1 truncate cleaned up [ 452.680532][T12335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.794796][T12338] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 452.833460][T12338] ref_ctr decrement failed for inode: 0x4f1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078699c80 [ 453.084843][T11655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.093454][ T5833] kernel write not supported for file bpf-prog (pid: 5833 comm: kworker/0:6) [ 461.102013][T12454] overlayfs: failed to clone upperpath [ 462.331534][T12469] netlink: 'syz.7.1584': attribute type 1 has an invalid length. [ 462.361865][T12469] 8021q: adding VLAN 0 to HW filter on device bond5 [ 462.499746][T12472] bridge_slave_0: left allmulticast mode [ 462.543778][T12472] bridge_slave_0: left promiscuous mode [ 462.549744][T12472] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.615849][T12472] bridge_slave_1: left allmulticast mode [ 462.636171][T12472] bridge_slave_1: left promiscuous mode [ 462.642017][T12472] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.734319][T12472] bond0: (slave bond_slave_0): Releasing backup interface [ 462.783534][T12472] bond0: (slave bond_slave_1): Releasing backup interface [ 462.901657][T12472] team0: Port device team_slave_0 removed [ 462.946249][T12472] team0: Port device team_slave_1 removed [ 462.975269][T12472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.982732][T12472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.029105][T12472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.047588][T12472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.119305][T12474] team0: Mode changed to "loadbalance" [ 463.180809][T12475] vlan0: entered promiscuous mode [ 463.241240][T12475] team0: Port device vlan0 added [ 463.275170][T12477] bond5: (slave gretap1): making interface the new active one [ 463.296481][T12477] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 463.382533][T12477] syz.7.1584 (12477) used greatest stack depth: 19504 bytes left [ 465.134379][T12507] capability: warning: `syz.6.1590' uses deprecated v2 capabilities in a way that may be insecure [ 466.564333][ T1614] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 466.668548][T12536] netlink: get zone limit has 4 unknown bytes [ 466.783625][ T1614] usb 4-1: Using ep0 maxpacket: 32 [ 466.892917][ T1614] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.061695][ T1614] usb 4-1: too many endpoints for config 0 interface 0 altsetting 9: 33, using maximum allowed: 30 [ 467.243404][ T1614] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 467.276764][ T1614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 467.311114][ T1614] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 467.358568][ T1614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.406175][ T1614] usb 4-1: config 0 descriptor?? [ 468.226756][T12513] loop3: detected capacity change from 0 to 8192 [ 468.303589][ T1614] usb 4-1: USB disconnect, device number 2 [ 471.412331][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 473.071160][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 473.408262][T12644] bond1: (slave vcan1): refused to change device type [ 473.578575][T12663] overlayfs: failed to clone upperpath [ 473.728431][T12668] vxcan4: entered allmulticast mode [ 475.246974][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1628'. [ 476.842076][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1626'. [ 479.614301][ T5809] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 479.823308][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 479.836014][ T5809] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 479.861748][ T5809] usb 4-1: config 0 has no interface number 0 [ 479.871328][ T5809] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 479.895297][ T5809] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 479.918998][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.928662][ T5809] usb 4-1: Product: syz [ 479.932856][ T5809] usb 4-1: Manufacturer: syz [ 479.938210][ T5809] usb 4-1: SerialNumber: syz [ 479.949568][ T5809] usb 4-1: config 0 descriptor?? [ 479.972840][T12730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 480.089712][T12756] tipc: Enabled bearer , priority 14 [ 480.099377][T12756] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1641'. [ 480.109476][T12756] 0ªX¹¦À: renamed from caif0 [ 480.121360][T12756] tipc: Disabling bearer [ 480.131832][T12756] 0ªX¹¦À: entered allmulticast mode [ 480.139350][T12756] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 480.224724][T12730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 480.334106][T12768] tipc: Enabling of bearer rejected, failed to enable media [ 480.743681][T12781] netlink: 'syz.8.1646': attribute type 1 has an invalid length. [ 480.763713][T12783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.784064][T12781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.888643][T12781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.910552][T12781] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 480.924754][T12781] bond2: (slave vti0): Error -95 calling set_mac_address [ 480.960451][T12787] bond2: (slave gretap1): making interface the new active one [ 480.975439][T12787] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 481.266789][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1650'. [ 481.805349][ T5809] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 481.816637][ T5809] asix: probe of 4-1:0.188 failed with error -71 [ 481.828937][ T5809] usb 4-1: USB disconnect, device number 3 [ 483.892383][T12840] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 484.025662][T12840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.149613][T12847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.175514][T12847] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 484.201396][T12847] bond2: (slave vti0): Error -95 calling set_mac_address [ 484.304939][T12849] bond2: (slave gretap1): making interface the new active one [ 484.327479][T12849] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 484.684976][T12871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1667'. [ 488.790440][T12929] tipc: Enabled bearer , priority 10 [ 488.812478][T12929] tipc: Enabled bearer , priority 0 [ 490.357553][T12964] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1686'. [ 491.602753][T12990] xt_nat: multiple ranges no longer supported [ 492.381192][T12998] loop3: detected capacity change from 0 to 256 [ 492.464678][T12998] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 492.611766][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1695'. [ 494.779486][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 494.779500][ T27] audit: type=1326 audit(2000000426.698:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 494.842886][ T27] audit: type=1326 audit(2000000426.698:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 494.887987][ T27] audit: type=1326 audit(2000000426.698:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 494.957434][ T27] audit: type=1326 audit(2000000426.698:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 495.053785][ T27] audit: type=1326 audit(2000000426.698:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 495.127395][ T27] audit: type=1326 audit(2000000426.708:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa85699c629 code=0x7ffc0000 [ 495.192201][ T27] audit: type=1326 audit(2000000426.708:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa85699c392 code=0x7ffc0000 [ 495.310664][ T27] audit: type=1326 audit(2000000426.728:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa85695cece code=0x7ffc0000 [ 495.399186][ T27] audit: type=1326 audit(2000000426.768:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa85699c457 code=0x7ffc0000 [ 495.475550][ T27] audit: type=1326 audit(2000000426.768:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa85695cece code=0x7ffc0000 [ 498.447792][T13094] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1717'. [ 498.677399][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1717'. [ 500.614954][T13129] netlink: 'syz.8.1724': attribute type 10 has an invalid length. [ 500.645816][T13129] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 501.619966][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.627474][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.663338][T13154] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1730'. [ 508.338066][T13236] bridge6: entered allmulticast mode [ 509.991772][T13254] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1751'. [ 511.283573][T13258] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 511.485666][T13275] netlink: 'syz.8.1758': attribute type 1 has an invalid length. [ 512.685923][T13292] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1761'. [ 513.140403][T13307] netlink: 'syz.8.1764': attribute type 4 has an invalid length. [ 513.440099][T13316] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 513.512043][T13325] ipt_REJECT: TCP_RESET invalid for non-tcp [ 518.877086][T13381] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 518.994438][T13386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.749747][T13486] netlink: 'syz.6.1801': attribute type 9 has an invalid length. [ 528.077766][T13519] netlink: 'syz.3.1806': attribute type 16 has an invalid length. [ 528.122747][T13519] netlink: 'syz.3.1806': attribute type 17 has an invalid length. [ 530.679499][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1816'. [ 532.113032][T13564] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 534.157745][T13588] netlink: zone id is out of range [ 534.163025][T13588] netlink: zone id is out of range [ 534.168763][T13588] netlink: zone id is out of range [ 534.182461][T13588] netlink: zone id is out of range [ 534.187960][T13588] netlink: zone id is out of range [ 534.196319][T13588] netlink: zone id is out of range [ 534.208512][T13588] netlink: zone id is out of range [ 534.219314][T13588] netlink: zone id is out of range [ 534.239509][T13588] netlink: zone id is out of range [ 534.252480][T13588] netlink: zone id is out of range [ 539.625734][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 540.368852][T13674] netlink: 'syz.8.1843': attribute type 9 has an invalid length. [ 542.253640][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 543.250173][T13710] overlayfs: failed to clone upperpath [ 543.828944][T13731] loop3: detected capacity change from 0 to 2048 [ 544.177258][T13731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.340092][T13736] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 545.721252][T11655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.056057][T13847] netlink: 'syz.7.1885': attribute type 1 has an invalid length. [ 554.225674][T13847] bond6: entered promiscuous mode [ 554.283159][T13847] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.375113][T13857] bond6: (slave bridge7): making interface the new active one [ 555.389368][T13857] bridge7: entered promiscuous mode [ 555.465529][T13857] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 560.146294][T13920] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 562.172326][T13953] xt_TCPMSS: Only works on TCP SYN packets [ 563.060553][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.067101][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.605182][T13980] xt_hashlimit: size too large, truncated to 1048576 [ 568.937889][T14010] syz.8.1917 (14010) used greatest stack depth: 16968 bytes left [ 572.503789][T14069] ptrace attach of "./syz-executor exec"[14071] was attempted by "./syz-executor exec"[14069] [ 575.821406][T14096] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1938'. [ 576.519546][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1939'. [ 576.866887][T14111] netlink: 63 bytes leftover after parsing attributes in process `syz.6.1939'. [ 576.881515][T14115] netlink: 'syz.7.1941': attribute type 1 has an invalid length. [ 576.968118][T14121] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1941'. [ 577.028051][T14121] 8021q: adding VLAN 0 to HW filter on device bond7 [ 577.131571][T14123] 8021q: adding VLAN 0 to HW filter on device bond7 [ 577.185062][T14123] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 577.222914][T14123] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 577.263599][T14123] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 577.298363][T14123] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 577.342339][T14123] bond7: (slave geneve0): making interface the new active one [ 577.373638][T14123] bond7: (slave geneve0): Enslaving as an active interface with an up link [ 577.768553][T14140] libceph: resolve '4..' (ret=-3): failed [ 584.377011][T14233] netlink: 'syz.6.1963': attribute type 1 has an invalid length. [ 584.436290][T14233] bond4: entered promiscuous mode [ 584.441799][T14233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.985962][T14233] bond4: (slave bridge4): making interface the new active one [ 585.329419][T14233] bridge4: entered promiscuous mode [ 585.357302][T14233] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 587.510811][T14292] netlink: 'syz.8.1978': attribute type 1 has an invalid length. [ 587.578067][T14292] bond3: entered promiscuous mode [ 587.690749][T14292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.528192][T14292] bond3: (slave bridge2): making interface the new active one [ 588.551586][T14292] bridge2: entered promiscuous mode [ 588.571666][T14292] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 588.674073][T14310] netlink: 'syz.6.1981': attribute type 21 has an invalid length. [ 589.123517][ T1614] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 589.308886][ T1614] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.319511][ T1614] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.329878][ T1614] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 589.339098][ T1614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 589.347150][ T1614] usb 4-1: SerialNumber: syz [ 589.563191][ T1614] usb 4-1: 0:2 : does not exist [ 589.601983][ T1614] usb 4-1: USB disconnect, device number 4 [ 589.632090][T14321] udevd[14321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.149791][T14339] netlink: 'syz.3.1988': attribute type 9 has an invalid length. [ 593.093525][T14390] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2000'. [ 595.995258][T14420] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 597.155721][T14436] loop3: detected capacity change from 0 to 128 [ 597.617992][T14444] libceph: resolve '4..' (ret=-3): failed [ 598.044854][T14436] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 598.193726][T14436] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 598.954038][T14459] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2012'. [ 599.379118][T11655] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 599.514348][T14465] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2016'. [ 600.892579][T14487] bad cache= option: no%e [ 600.892579][T14487] [ 600.899638][T14487] CIFS: VFS: bad cache= option: no%e [ 601.704888][ T28] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 601.913984][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2022'. [ 601.978382][ T28] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 602.018531][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.052476][ T28] usb 4-1: Product: syz [ 602.072429][ T28] usb 4-1: Manufacturer: syz [ 602.084731][ T28] usb 4-1: SerialNumber: syz [ 602.485781][ T28] net_ratelimit: 23 callbacks suppressed [ 602.485804][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 602.540041][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 605.016731][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 605.772598][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -71 [ 605.809863][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 605.826038][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 605.967830][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 606.059458][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 606.176826][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 606.261857][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 606.485132][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 606.579892][ T28] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 606.615812][ T28] lan78xx: probe of 4-1:1.0 failed with error -71 [ 606.636420][ T28] usb 4-1: USB disconnect, device number 5 [ 608.562370][T14599] netlink: 'syz.3.2042': attribute type 21 has an invalid length. [ 609.193853][T14607] bond4: (slave ip6gretap1): making interface the new active one [ 609.491211][T14607] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 616.607473][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2069'. [ 618.155311][T14752] x_tables: duplicate entry at hook 3 [ 618.176878][T14752] netlink: 'syz.3.2075': attribute type 16 has an invalid length. [ 618.195222][T14752] netlink: 'syz.3.2075': attribute type 17 has an invalid length. [ 618.400736][T14752] net_ratelimit: 2 callbacks suppressed [ 618.400745][T14752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.864684][T14774] tipc: Enabling of bearer rejected, failed to enable media [ 622.906464][T14803] UBIFS error (pid: 14803): cannot open "./file0", error -22 [ 624.501885][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.515908][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.462551][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2098'. [ 626.738189][T14848] bond3: (slave ip6gretap0): making interface the new active one [ 626.764683][T14848] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 626.828771][T14853] loop3: detected capacity change from 0 to 16 [ 626.871804][T14853] erofs: (device loop3): mounted with root inode @ nid 36. [ 626.991873][T14853] kvm: emulating exchange as write [ 628.035814][T14870] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2110'. [ 630.215265][T14878] loop3: detected capacity change from 0 to 32768 [ 630.370844][T14896] bond5: (slave ip6gretap0): making interface the new active one [ 630.567097][T14878] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 630.906474][T14896] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 631.289378][T14878] XFS (loop3): Ending clean mount [ 631.375600][T14878] XFS (loop3): Quotacheck needed: Please wait. [ 631.552956][T14878] XFS (loop3): Quotacheck: Done. [ 631.811559][T11655] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 633.170889][T14940] tipc: Started in network mode [ 633.210274][T14940] tipc: Node identity a2022d269eaa, cluster identity 4711 [ 633.245901][T14940] tipc: Enabled bearer , priority 0 [ 633.273927][T14941] syzkaller0: entered promiscuous mode [ 633.279440][T14941] syzkaller0: entered allmulticast mode [ 633.381751][T14941] tipc: Resetting bearer [ 633.450185][T14939] tipc: Resetting bearer [ 633.496383][T14939] tipc: Disabling bearer [ 633.978779][T14950] x_tables: duplicate entry at hook 3 [ 634.144699][T14950] netlink: 'syz.8.2128': attribute type 16 has an invalid length. [ 634.268766][T14950] netlink: 'syz.8.2128': attribute type 17 has an invalid length. [ 634.780197][T14950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.809716][T14950] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.839125][T14950] tipc: Resetting bearer [ 634.861152][T14950] tipc: Resetting bearer [ 634.921409][T14950] 0ªX¹¦À: left allmulticast mode [ 634.946883][T14950] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 638.167925][T14980] tipc: Enabling of bearer rejected, failed to enable media [ 638.181517][T14979] syzkaller0: entered promiscuous mode [ 638.189202][T14979] syzkaller0: entered allmulticast mode [ 638.992001][T15000] Device name cannot be null; rc = [-22] [ 639.597030][T14998] x_tables: duplicate entry at hook 3 [ 639.618664][T14998] netlink: 'syz.6.2142': attribute type 16 has an invalid length. [ 639.697385][T14998] netlink: 'syz.6.2142': attribute type 17 has an invalid length. [ 640.287368][T14998] tipc: Resetting bearer [ 640.328257][T14998] tipc: Resetting bearer [ 640.583791][T14998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.499927][T15018] loop3: detected capacity change from 0 to 2048 [ 641.521247][T15018] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.423822][T15042] loop3: detected capacity change from 0 to 256 [ 645.765641][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 645.765656][ T27] audit: type=1800 audit(2000000577.688:566): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2156" name="bus" dev="loop3" ino=1048658 res=0 errno=0 [ 645.824071][T15042] Trying to write to read-only block-device loop3 [ 645.852074][T15048] UBIFS error (pid: 15048): cannot open "./file0", error -22 [ 647.253077][T11655] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 647.269515][T11655] FAT-fs (loop3): Filesystem has been set read-only [ 647.287300][T11655] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 647.564954][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2162'. [ 648.202387][T15067] netlink: 'syz.8.2166': attribute type 11 has an invalid length. [ 648.539754][ T1002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.869296][ T1002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.171101][ T1002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.252445][T15084] netlink: 'syz.6.2161': attribute type 1 has an invalid length. [ 650.907320][T15081] netlink: 'syz.8.2169': attribute type 4 has an invalid length. [ 651.057861][ T1002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.818748][ T1002] tipc: Left network mode [ 652.662978][T15108] x_tables: duplicate entry at hook 3 [ 653.382025][T15110] netlink: 'syz.7.2171': attribute type 16 has an invalid length. [ 653.413518][T15110] netlink: 'syz.7.2171': attribute type 17 has an invalid length. [ 653.580651][T15110] tipc: Resetting bearer [ 653.718940][T15110] tipc: Resetting bearer [ 653.847827][T15110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 654.593442][T15117] netlink: 'syz.6.2174': attribute type 10 has an invalid length. [ 654.636074][T15117] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2174'. [ 654.660175][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 654.682925][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 654.692542][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 654.710625][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 654.720069][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 654.744306][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 654.766946][T15117] team0: Port device geneve0 added [ 655.835374][ T1002] bond2: (slave gretap1): Releasing active interface [ 656.815342][ T5084] Bluetooth: hci1: command tx timeout [ 658.355471][T15183] netlink: 'syz.7.2187': attribute type 16 has an invalid length. [ 658.473037][T15183] netlink: 'syz.7.2187': attribute type 17 has an invalid length. [ 658.674129][T15183] tipc: Resetting bearer [ 658.771472][T15183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.894719][ T5084] Bluetooth: hci1: command tx timeout [ 659.083114][ T1002] hsr_slave_0: left promiscuous mode [ 659.096255][ T1002] hsr_slave_1: left promiscuous mode [ 659.185029][ T1002] veth1_macvtap: left promiscuous mode [ 659.203221][ T1002] veth0_macvtap: left promiscuous mode [ 659.228236][ T1002] veth1_vlan: left promiscuous mode [ 659.949274][ T1002] bond2 (unregistering): Released all slaves [ 659.967790][ T1002] bond1 (unregistering): Released all slaves [ 660.256791][ T1002] team0 (unregistering): Port device vlan0 removed [ 661.053683][ T5084] Bluetooth: hci1: command tx timeout [ 662.651155][ T1002] bond0 (unregistering): Released all slaves [ 662.823625][T15128] chnl_net:caif_netlink_parms(): no params data found [ 663.193856][ T5084] Bluetooth: hci1: command tx timeout [ 663.421342][T15197] netlink: 'syz.7.2192': attribute type 5 has an invalid length. [ 664.365110][T15128] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.725538][T15128] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.797854][T15128] bridge_slave_0: entered allmulticast mode [ 664.839076][T15128] bridge_slave_0: entered promiscuous mode [ 664.914535][T15128] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.976096][T15128] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.007762][T15128] bridge_slave_1: entered allmulticast mode [ 665.027090][T15128] bridge_slave_1: entered promiscuous mode [ 666.826564][T15128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.083886][ T27] audit: type=1326 audit(2000000598.998:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.7.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 667.118294][T15128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.213667][ T27] audit: type=1326 audit(2000000598.998:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.7.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 667.240555][ T27] audit: type=1326 audit(2000000598.998:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.7.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 667.307106][ T27] audit: type=1326 audit(2000000599.008:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.7.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 667.372897][T15128] team0: Port device team_slave_0 added [ 667.390131][ T27] audit: type=1326 audit(2000000599.008:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.7.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 667.425382][T15128] team0: Port device team_slave_1 added [ 667.467535][T15128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.479369][ T27] audit: type=1326 audit(2000000599.008:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.7.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 667.527519][T15128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.533163][ T27] audit: type=1326 audit(2000000599.008:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.7.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 667.625788][T15128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.635400][ T27] audit: type=1326 audit(2000000599.008:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.7.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 667.673700][T15128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.680686][T15128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.714006][ T27] audit: type=1326 audit(2000000599.008:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.7.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 667.780619][ T27] audit: type=1326 audit(2000000599.008:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.7.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ee99c629 code=0x7ffc0000 [ 667.780960][T15128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.075588][T15128] hsr_slave_0: entered promiscuous mode [ 668.132677][T15128] hsr_slave_1: entered promiscuous mode [ 668.142401][T15128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.149994][T15128] Cannot create hsr debugfs directory [ 668.406638][T15278] netlink: 'syz.6.2204': attribute type 3 has an invalid length. [ 669.856436][T15128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 669.886432][T15128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 669.911582][T15128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 669.922753][T15128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 671.212817][T15128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.353900][T15128] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.389695][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.396918][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.173922][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.181119][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.708492][T15326] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.2217'. [ 672.718057][T15326] openvswitch: netlink: ct_state flags 00030000 unsupported [ 673.557924][T15128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.660354][T15128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.813810][T15128] veth0_vlan: entered promiscuous mode [ 674.858108][T15128] veth1_vlan: entered promiscuous mode [ 674.940454][T15128] veth0_macvtap: entered promiscuous mode [ 674.957966][T15128] veth1_macvtap: entered promiscuous mode [ 674.987231][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.998573][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.015634][T15128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.036934][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.055331][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.067842][T15128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.139272][T15128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.154342][T15128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.172538][T15128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.183021][T15128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.234144][T15357] netlink: 'syz.6.2222': attribute type 10 has an invalid length. [ 675.391540][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.403206][T15364] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2222'. [ 675.420650][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.464636][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.486846][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.099159][T15376] bond_slave_1: entered promiscuous mode [ 677.139001][T15376] bond_slave_1: left promiscuous mode [ 677.160514][T15385] tipc: Enabling of bearer rejected, failed to enable media [ 677.217252][T15385] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2226'. [ 677.312343][T15385] tipc: Enabling of bearer rejected, failed to enable media [ 680.775634][T15452] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 683.620125][T15479] xt_TCPMSS: Only works on TCP SYN packets [ 684.926882][ T28] IPVS: starting estimator thread 0... [ 685.745431][T15502] IPVS: using max 20 ests per chain, 48000 per kthread [ 686.492440][T15537] tipc: Enabling of bearer rejected, already enabled [ 686.573258][T15537] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2259'. [ 686.992004][T15537] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 687.099813][T15537] tipc: Enabled bearer , priority 10 [ 687.241940][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.251462][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.918089][T15643] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 699.964688][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 699.995730][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2283'. [ 700.038001][T15643] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.047324][T15643] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.056180][T15643] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.071363][T15643] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.161707][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 700.196537][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2283'. [ 702.915625][T15670] loop3: detected capacity change from 0 to 2048 [ 707.613490][T15713] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.2301'. [ 709.869943][T15743] overlayfs: failed to clone upperpath [ 713.340952][T15784] wireguard: wg1: Could not create IPv4 socket [ 713.380371][T15782] virtio-fs: tag not found [ 714.495617][T15792] tipc: Failed to remove unknown binding: 66,0,0/11578026:1069130912/1069130914 [ 714.504906][T15792] tipc: Failed to remove unknown binding: 66,0,0/11578026:1069130912/1069130913 [ 714.515779][T15792] tipc: Failed to remove unknown binding: 66,0,0/11578026:1069130912/1069130914 [ 714.525174][T15792] tipc: Failed to remove unknown binding: 66,0,0/11578026:1069130912/1069130913 [ 721.427087][T15859] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 722.720609][T15868] vlan1: entered promiscuous mode [ 722.998917][T15868] vlan1: entered allmulticast mode [ 723.004373][T15868] hsr_slave_1: entered allmulticast mode [ 725.628843][T15894] netlink: 'syz.8.2351': attribute type 1 has an invalid length. [ 725.710293][T15894] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 725.830614][T15894] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 725.840495][T15894] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 725.849332][T15894] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 725.861033][T15894] bond5: (slave geneve2): making interface the new active one [ 725.869353][T15894] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 726.342283][T15906] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 727.264794][T15894] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2351'. [ 727.295972][T15894] 8021q: adding VLAN 0 to HW filter on device bond5 [ 728.116728][T15904] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 728.500815][T15921] netlink: 'syz.6.2359': attribute type 1 has an invalid length. [ 729.415303][T15927] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2359'. [ 732.114792][T15932] Bluetooth: hci1: command 0x0406 tx timeout [ 733.240154][T15924] bond6: (slave bridge5): making interface the new active one [ 733.260349][T15924] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 737.994020][T15985] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 739.262931][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2376'. [ 741.732147][T16018] netlink: 'syz.8.2382': attribute type 4 has an invalid length. [ 744.078564][T16033] tipc: Resetting bearer [ 744.338090][T16033] tipc: Disabling bearer [ 748.725420][T16069] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2393'. [ 749.806461][T16077] netlink: 'syz.7.2394': attribute type 1 has an invalid length. [ 749.845442][T16077] 8021q: adding VLAN 0 to HW filter on device bond8 [ 749.966720][T16077] vlan3: entered promiscuous mode [ 749.973480][T16077] bond8: entered promiscuous mode [ 749.979751][T16077] vlan3: entered allmulticast mode [ 749.984897][T16077] bond8: entered allmulticast mode [ 750.005481][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2394'. [ 750.026221][T16077] bond8: (slave bridge8): making interface the new active one [ 750.033932][T16077] bridge8: entered promiscuous mode [ 750.039293][T16077] bridge8: entered allmulticast mode [ 750.046979][T16077] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 750.239867][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2400'. [ 752.366660][ T27] kauditd_printk_skb: 71 callbacks suppressed [ 752.390004][ T27] audit: type=1326 audit(2000000678.779:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.3.2397" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f530ef9c629 code=0x0 [ 753.376483][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.389338][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.463375][T16127] tipc: Invalid UDP bearer configuration [ 753.463432][T16127] tipc: Enabling of bearer rejected, failed to enable media [ 754.979292][ T11] ------------[ cut here ]------------ [ 754.985630][ T11] WARNING: CPU: 0 PID: 11 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 754.995150][ T11] Modules linked in: [ 754.999075][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 755.006490][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 755.016724][ T11] Workqueue: iou_exit io_ring_exit_work [ 755.022304][ T11] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 755.028078][ T11] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 755.047798][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 755.053885][ T11] RAX: ffffffff8a7bea87 RBX: ffff88805c91e000 RCX: ffff88801a27bc00 [ 755.062119][ T11] RDX: 0000000000000000 RSI: fffffffffffffff6 RDI: 0000000000000000 [ 755.070154][ T11] RBP: ffffc90000107bb0 R08: ffffc900001079c7 R09: 1ffff92000020f38 [ 755.078186][ T11] R10: dffffc0000000000 R11: fffff52000020f39 R12: dffffc0000000000 [ 755.086166][ T11] R13: ffff88805c91e288 R14: 000000010000aeb1 R15: 000000010000aebb [ 755.094184][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 755.103231][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.110251][ T11] CR2: 00007f530efe9d40 CR3: 000000004ff9d000 CR4: 00000000003506f0 [ 755.118247][ T11] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 755.126321][ T11] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 755.134374][ T11] Call Trace: [ 755.137676][ T11] [ 755.140630][ T11] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 755.146528][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 755.151751][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 755.157572][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 755.163411][ T11] process_scheduled_works+0xa5d/0x15d0 [ 755.169012][ T11] ? assign_work+0x430/0x430 [ 755.173673][ T11] ? assign_work+0x3d0/0x430 [ 755.178288][ T11] worker_thread+0xa55/0xfc0 [ 755.182925][ T11] kthread+0x2fa/0x390 [ 755.187074][ T11] ? pr_cont_work+0x560/0x560 [ 755.191775][ T11] ? kthread_blkcg+0xd0/0xd0 [ 755.196442][ T11] ret_from_fork+0x48/0x80 [ 755.200873][ T11] ? kthread_blkcg+0xd0/0xd0 [ 755.205486][ T11] ret_from_fork_asm+0x11/0x20 [ 755.210339][ T11] [ 755.213361][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 755.220659][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 755.228037][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 755.238106][ T11] Workqueue: iou_exit io_ring_exit_work [ 755.243672][ T11] Call Trace: [ 755.246953][ T11] [ 755.249889][ T11] dump_stack_lvl+0x18c/0x250 [ 755.254588][ T11] ? show_regs_print_info+0x20/0x20 [ 755.259807][ T11] ? load_image+0x400/0x400 [ 755.264332][ T11] panic+0x2dc/0x730 [ 755.268242][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 755.272768][ T11] ? ret_from_fork_asm+0x11/0x20 [ 755.277728][ T11] __warn+0x2e0/0x470 [ 755.281719][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 755.286843][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 755.291952][ T11] report_bug+0x2be/0x4f0 [ 755.296272][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 755.301405][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 755.306504][ T11] ? io_ring_exit_work+0x3a9/0x820 [ 755.311604][ T11] handle_bug+0xcf/0x120 [ 755.315839][ T11] exc_invalid_op+0x1a/0x50 [ 755.320332][ T11] asm_exc_invalid_op+0x1a/0x20 [ 755.325171][ T11] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 755.330879][ T11] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 755.350483][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 755.356541][ T11] RAX: ffffffff8a7bea87 RBX: ffff88805c91e000 RCX: ffff88801a27bc00 [ 755.364500][ T11] RDX: 0000000000000000 RSI: fffffffffffffff6 RDI: 0000000000000000 [ 755.372458][ T11] RBP: ffffc90000107bb0 R08: ffffc900001079c7 R09: 1ffff92000020f38 [ 755.380412][ T11] R10: dffffc0000000000 R11: fffff52000020f39 R12: dffffc0000000000 [ 755.388369][ T11] R13: ffff88805c91e288 R14: 000000010000aeb1 R15: 000000010000aebb [ 755.396340][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 755.401456][ T11] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 755.407260][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 755.412445][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 755.418150][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 755.423855][ T11] process_scheduled_works+0xa5d/0x15d0 [ 755.429406][ T11] ? assign_work+0x430/0x430 [ 755.433988][ T11] ? assign_work+0x3d0/0x430 [ 755.438573][ T11] worker_thread+0xa55/0xfc0 [ 755.443167][ T11] kthread+0x2fa/0x390 [ 755.447220][ T11] ? pr_cont_work+0x560/0x560 [ 755.451893][ T11] ? kthread_blkcg+0xd0/0xd0 [ 755.456477][ T11] ret_from_fork+0x48/0x80 [ 755.460881][ T11] ? kthread_blkcg+0xd0/0xd0 [ 755.465457][ T11] ret_from_fork_asm+0x11/0x20 [ 755.470220][ T11] [ 755.473565][ T11] Kernel Offset: disabled [ 755.477971][ T11] Rebooting in 86400 seconds..