last executing test programs: 8m8.879602413s ago: executing program 32 (id=217): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) 7m9.236630611s ago: executing program 2 (id=1257): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000043010000fd03000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000000c0), &(0x7f0000000040)}, 0x20) 7m9.015642713s ago: executing program 2 (id=1262): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 7m8.925320162s ago: executing program 2 (id=1266): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x84000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000004c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, &(0x7f0000044000)) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) 7m8.727514951s ago: executing program 2 (id=1271): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 7m8.495660275s ago: executing program 2 (id=1275): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000001, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010102}}, 0x1e) 7m8.051512719s ago: executing program 2 (id=1288): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0xc0}}], 0x1, 0x80) 7m7.935151901s ago: executing program 33 (id=1288): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0xc0}}], 0x1, 0x80) 7m6.232434102s ago: executing program 1 (id=1317): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = getpid() syz_pidfd_open(r2, 0x0) 7m6.231772982s ago: executing program 1 (id=1318): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) 7m6.114059063s ago: executing program 1 (id=1319): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 7m6.005648685s ago: executing program 1 (id=1322): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) 7m5.183798567s ago: executing program 1 (id=1334): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) 7m4.005336925s ago: executing program 1 (id=1354): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x8000, 0x0, 0x1}}, 0x26) 7m3.779470138s ago: executing program 34 (id=1354): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x8000, 0x0, 0x1}}, 0x26) 3m23.459401469s ago: executing program 3 (id=5087): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x13c}}, 0x20040880) 3m23.179720157s ago: executing program 3 (id=5094): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x5b, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, 0x0) 3m22.979359477s ago: executing program 3 (id=5098): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f00000002c0)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000740)={0x10, 0x18, 0x100, 0x70bd26, 0x25dfdbfd}, 0x10}, {&(0x7f00000001c0)={0x10, 0x42, 0x8, 0x70bd27, 0x25dfdbfc}, 0x10}, {0x0}, {&(0x7f0000000cc0)={0x344, 0x2c, 0x300, 0x70bd2a, 0x25dfdbfd, "", [@generic="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"]}, 0x344}], 0x4, 0x0, 0x0, 0x40}, 0x4004004) 3m22.771240798s ago: executing program 3 (id=5104): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf250300000048000180380004001400010002000000ac14142f00000000000000002000f6b00a004e200000870100000000000000000000000000000000090000000c00010069633a68"], 0x5c}}, 0x0) 3m22.55437191s ago: executing program 3 (id=5107): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) 3m21.455776241s ago: executing program 3 (id=5115): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2000000076001f0327bd7000fbdbdf250800000000000000080001"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) 3m6.430977997s ago: executing program 35 (id=5115): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2000000076001f0327bd7000fbdbdf250800000000000000080001"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) 2m27.452060978s ago: executing program 7 (id=6200): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 2m27.259466877s ago: executing program 7 (id=6204): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) stat(&(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)) 2m27.115529842s ago: executing program 7 (id=6207): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000140)="8269b66f", 0x37, 0x0, 0x0, 0x0) 2m27.023357951s ago: executing program 7 (id=6209): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) 2m26.827588051s ago: executing program 7 (id=6211): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0), &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'blake2s-160-x86\x00'}}, 0x0, 0x0) 2m26.609312593s ago: executing program 7 (id=6213): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 2m11.528755474s ago: executing program 36 (id=6213): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 50.225686634s ago: executing program 6 (id=7878): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 49.913888186s ago: executing program 6 (id=7885): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2}, 0x7}], 0x2, 0x2000, 0x0) 49.612818166s ago: executing program 6 (id=7894): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) getsockopt$inet_buf(r2, 0x0, 0x11, 0x0, &(0x7f0000000140)) 49.47845249s ago: executing program 6 (id=7900): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getegid() 49.355724902s ago: executing program 6 (id=7902): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregs(0xe, r2, 0x45, &(0x7f0000000080)) 49.225429975s ago: executing program 6 (id=7904): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 33.605759391s ago: executing program 37 (id=7904): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1.228531786s ago: executing program 0 (id=8701): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 1.183593591s ago: executing program 8 (id=8702): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) keyctl$search(0xa, 0x0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0) 1.09395527s ago: executing program 4 (id=8704): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80dc2, 0x0) 1.055933714s ago: executing program 5 (id=8705): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.015608088s ago: executing program 0 (id=8706): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$xdp(0x2c, 0x3, 0x0) accept(r3, 0x0, 0x0) 941.435476ms ago: executing program 8 (id=8708): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f6e4ebc0) 929.817147ms ago: executing program 4 (id=8709): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 925.886477ms ago: executing program 5 (id=8710): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(&(0x7f0000000dc0)={0x80002000, 0x0, 0x0, 0x0, {0x7}, &(0x7f0000000a80)=""/245, 0xf5, 0x0, &(0x7f0000000c00)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58) 867.232713ms ago: executing program 9 (id=8711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x54, r4, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x1, 0x0, 0x3}}, 0x1, 0x5, 0x25c, @val={0x10, 0x1, 0x41}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x7, 0x4, 0x0]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x400c000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x34, 0x26, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xb}, {0xb, 0x3}, {0xfff3, 0x7}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r6, 0xc0305302, &(0x7f00000001c0)={0x3, 0x34f, 0x4, 0x7, 0x9, 0x3}) 834.439956ms ago: executing program 0 (id=8712): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fspick(0xffffffffffffffff, 0x0, 0x1) 800.5123ms ago: executing program 4 (id=8713): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 715.659948ms ago: executing program 8 (id=8714): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1800) 710.617359ms ago: executing program 9 (id=8715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000080) 682.621562ms ago: executing program 5 (id=8716): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008080) syz_emit_ethernet(0x83, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff"], 0x0) 634.254856ms ago: executing program 0 (id=8717): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0xa, r4}, 0x10) 603.971189ms ago: executing program 4 (id=8718): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418efffe0004fcff", 0x58}], 0x1) 603.25877ms ago: executing program 8 (id=8719): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) 573.019303ms ago: executing program 9 (id=8720): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, 0x0, 0x0) 536.940596ms ago: executing program 5 (id=8721): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x4a, {0x2, 0xfffe, @broadcast}, 'syz_tun\x00'}) 423.705718ms ago: executing program 8 (id=8722): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) kcmp(0x0, 0x0, 0x4, r1, r1) 423.403497ms ago: executing program 9 (id=8723): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 423.236258ms ago: executing program 0 (id=8724): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 394.27546ms ago: executing program 4 (id=8725): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x2) 382.516282ms ago: executing program 5 (id=8726): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) 279.573342ms ago: executing program 8 (id=8727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 278.735852ms ago: executing program 9 (id=8737): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) 268.715513ms ago: executing program 0 (id=8728): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fsync(0xffffffffffffffff) 207.15129ms ago: executing program 5 (id=8729): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_clone3(&(0x7f0000000380)={0x200000000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 206.61493ms ago: executing program 4 (id=8730): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24000004) r2 = syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20080ca, &(0x7f0000000040), 0x1, 0x582, &(0x7f0000000280)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="be26b54ba53ed1a550c490bd13f407fe46e14d3193f6e28aae923b83b0a06ec7", 0x20) pread64(r2, 0x0, 0x0, 0x5f) 0s ago: executing program 9 (id=8731): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/sockcreate\x00') ftruncate(r3, 0x3119c976) kernel console output (not intermixed with test programs): 0x0406 tx timeout [ 304.098393][T14768] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4271'. [ 304.231720][T14794] tipc: Failed to remove unknown binding: 66,1,1/0:2301387871/2301387873 [ 304.281525][T14794] tipc: Failed to remove unknown binding: 66,1,1/0:2301387871/2301387873 [ 304.409898][T14803] fuse: Bad value for 'fd' [ 304.965466][T14828] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 304.977626][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4297'. [ 305.014094][T14830] loop3: detected capacity change from 0 to 256 [ 305.155391][T14830] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 305.196809][T14834] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4300'. [ 305.272781][T14834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4300'. [ 305.327566][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4300'. [ 305.337657][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4300'. [ 305.605305][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4310'. [ 305.791160][T14863] loop6: detected capacity change from 0 to 8192 [ 305.822288][T14863] FAT-fs (loop6): bogus number of directory entries (9) [ 305.843540][T14863] FAT-fs (loop6): Can't find a valid FAT filesystem [ 305.932817][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 306.510867][T14870] netlink: 'syz.5.4324': attribute type 11 has an invalid length. [ 306.513914][T14866] loop3: detected capacity change from 0 to 128 [ 306.529642][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 306.529656][ T26] audit: type=1326 audit(2000000165.695:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.4316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31ae1046c9 code=0x0 [ 306.546139][T14870] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4324'. [ 306.619030][T14866] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 306.658692][T14866] ext4 filesystem being mounted at /785/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.027563][T14900] loop4: detected capacity change from 0 to 256 [ 308.206663][T14900] FAT-fs (loop4): Directory bread(block 64) failed [ 308.236425][T14900] FAT-fs (loop4): Directory bread(block 65) failed [ 308.250902][T14902] loop3: detected capacity change from 0 to 4096 [ 308.273729][T14900] FAT-fs (loop4): Directory bread(block 66) failed [ 308.320913][T14900] FAT-fs (loop4): Directory bread(block 67) failed [ 308.347223][T14900] FAT-fs (loop4): Directory bread(block 68) failed [ 308.348422][T14902] ntfs3: Unknown parameter 'windows_names' [ 308.385929][T14900] FAT-fs (loop4): Directory bread(block 69) failed [ 308.420533][T14900] FAT-fs (loop4): Directory bread(block 70) failed [ 308.444165][T14900] FAT-fs (loop4): Directory bread(block 71) failed [ 308.481510][T14900] FAT-fs (loop4): Directory bread(block 72) failed [ 308.518245][T14900] FAT-fs (loop4): Directory bread(block 73) failed [ 308.673154][ T4228] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 308.775173][T14928] netlink: 'syz.5.4341': attribute type 4 has an invalid length. [ 308.804048][T14928] netlink: 'syz.5.4341': attribute type 21 has an invalid length. [ 308.812403][T14928] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4341'. [ 308.922911][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 308.992922][ T26] audit: type=1326 audit(2000000168.155:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14932 comm="syz.5.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7fc00000 [ 309.732759][ T4228] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.962952][ T4228] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.972034][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.015525][ T4228] usb 4-1: Product: syz [ 310.019724][ T4228] usb 4-1: Manufacturer: syz [ 310.032736][ T4228] usb 4-1: SerialNumber: syz [ 310.088707][ T26] audit: type=1326 audit(2000000169.255:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14953 comm="syz.6.4350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x0 [ 310.182869][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4353'. [ 310.363057][ T4228] usb 4-1: 0:2 : does not exist [ 310.423981][ T4228] usb 4-1: USB disconnect, device number 9 [ 310.546757][T14979] overlayfs: workdir and upperdir must reside under the same mount [ 310.666396][T14986] loop7: detected capacity change from 0 to 256 [ 310.671231][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.823393][T14986] FAT-fs (loop7): Directory bread(block 64) failed [ 310.862205][T14986] FAT-fs (loop7): Directory bread(block 65) failed [ 310.891719][T14986] FAT-fs (loop7): Directory bread(block 66) failed [ 310.931676][T14986] FAT-fs (loop7): Directory bread(block 67) failed [ 310.957644][ T26] audit: type=1326 audit(2000000170.125:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.3.4370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c9da6d6c9 code=0x0 [ 310.994855][T14986] FAT-fs (loop7): Directory bread(block 68) failed [ 311.001435][T14986] FAT-fs (loop7): Directory bread(block 69) failed [ 311.057795][T14986] FAT-fs (loop7): Directory bread(block 70) failed [ 311.080071][T14986] FAT-fs (loop7): Directory bread(block 71) failed [ 311.103119][T14986] FAT-fs (loop7): Directory bread(block 72) failed [ 311.127882][T14986] FAT-fs (loop7): Directory bread(block 73) failed [ 311.878320][T15032] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 311.946910][T15027] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 311.959494][T15027] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 312.415315][T15052] overlayfs: statfs failed on './file0' [ 313.058321][T15085] netlink: 'syz.3.4415': attribute type 4 has an invalid length. [ 313.099789][T15085] netlink: 'syz.3.4415': attribute type 21 has an invalid length. [ 313.122778][T15085] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4415'. [ 313.486699][T15103] loop7: detected capacity change from 0 to 128 [ 313.555131][T15103] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.145324][ T446] Bluetooth: hci5: Frame reassembly failed (-84) [ 314.167298][T10691] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 314.214753][T10691] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 314.357601][T15130] loop7: detected capacity change from 0 to 256 [ 314.428974][T15130] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 314.630599][T15136] loop7: detected capacity change from 0 to 256 [ 314.824613][T15142] loop4: detected capacity change from 0 to 512 [ 315.776427][T15142] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 315.791578][T15142] EXT4-fs (loop4): 1 truncate cleaned up [ 315.797651][T15142] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 315.905758][T15142] EXT4-fs (loop4): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,. Quota mode: writeback. [ 316.172977][ T9766] Bluetooth: hci5: command 0x1003 tx timeout [ 316.184604][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 316.199406][T15162] loop7: detected capacity change from 0 to 128 [ 316.270796][T15162] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 316.393123][T15162] ext4 filesystem being mounted at /683/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.062101][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.068431][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.236149][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4454'. [ 317.491960][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4465'. [ 317.598018][T15201] device bond1 entered promiscuous mode [ 317.620688][T15197] device macvlan2 entered promiscuous mode [ 317.654863][T15197] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.752739][T15196] device bond1 left promiscuous mode [ 318.252804][ T9766] Bluetooth: hci5: command 0x1001 tx timeout [ 318.259559][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 320.332905][ T9766] Bluetooth: hci5: command 0x1009 tx timeout [ 329.899731][T15391] loop3: detected capacity change from 0 to 512 [ 330.093824][T15391] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 330.195510][T15391] ext4 filesystem being mounted at /824/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.468237][ T26] audit: type=1326 audit(2000000189.636:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15424 comm="syz.7.4565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31ae1046c9 code=0x0 [ 330.631099][T15431] cgroup: No subsys list or none specified [ 330.950513][ T26] audit: type=1107 audit(2000000190.116:144): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 331.040236][T15454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4579'. [ 331.590832][T15488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4592'. [ 331.639870][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4592'. [ 331.678822][T15488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4592'. [ 331.729908][T15488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4592'. [ 332.108443][T15519] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4605'. [ 332.753559][T15559] netlink: 'syz.4.4624': attribute type 16 has an invalid length. [ 332.777334][T15559] netlink: 64122 bytes leftover after parsing attributes in process `syz.4.4624'. [ 332.816573][ T7538] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 333.885110][ T7538] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.902600][ T7538] usb 7-1: config 0 has no interfaces? [ 334.119022][T15596] loop4: detected capacity change from 0 to 512 [ 334.132812][ T7538] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 334.168716][ T7538] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.190917][ T7538] usb 7-1: Product: syz [ 334.200750][ T7538] usb 7-1: Manufacturer: syz [ 334.210898][ T7538] usb 7-1: SerialNumber: syz [ 334.235097][ T7538] usb 7-1: config 0 descriptor?? [ 334.353769][T15596] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 334.402753][T15596] ext4 filesystem being mounted at /890/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.519760][ T9759] usb 7-1: USB disconnect, device number 9 [ 334.695079][T15608] Falling back ldisc for ttyS3. [ 335.761588][T15635] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4649'. [ 335.853072][T15643] netlink: 'syz.3.4652': attribute type 1 has an invalid length. [ 335.924968][T15650] loop6: detected capacity change from 0 to 128 [ 336.123623][T15650] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 336.155265][T15650] ext4 filesystem being mounted at /626/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.512624][ T4259] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 336.553366][T15688] netlink: 'syz.4.4670': attribute type 13 has an invalid length. [ 336.636485][T15688] erspan0: refused to change device tx_queue_len [ 336.902725][ T4259] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.919750][ T4259] usb 4-1: config 0 has no interfaces? [ 336.952296][ T26] audit: type=1326 audit(2000000196.113:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15709 comm="syz.4.4677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x0 [ 337.036823][ T26] audit: type=1326 audit(2000000196.163:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.5.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 337.120531][ T26] audit: type=1326 audit(2000000196.163:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.5.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 337.168749][ T4259] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 337.182679][ T4259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.207414][ T4259] usb 4-1: Product: syz [ 337.231968][ T4259] usb 4-1: Manufacturer: syz [ 337.236931][ T26] audit: type=1326 audit(2000000196.183:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.5.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 337.269551][ T4259] usb 4-1: SerialNumber: syz [ 337.277900][ T4259] usb 4-1: config 0 descriptor?? [ 337.302620][ T26] audit: type=1326 audit(2000000196.183:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.5.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 337.389654][ T26] audit: type=1326 audit(2000000196.183:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.5.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 337.591018][ T9759] usb 4-1: USB disconnect, device number 10 [ 339.273881][T15784] Falling back ldisc for ttyS3. [ 340.271058][ T26] audit: type=1326 audit(2000000199.433:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15798 comm="syz.6.4716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x0 [ 340.308772][T15806] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4717'. [ 341.034785][T15845] fuse: Invalid rootmode [ 341.150976][T15854] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4736'. [ 341.467824][T15866] netlink: 'syz.5.4741': attribute type 13 has an invalid length. [ 341.537879][T15866] erspan0: refused to change device tx_queue_len [ 342.128548][T15902] binder: Bad value for 'stats' [ 342.345346][T15911] netlink: 'syz.7.4757': attribute type 13 has an invalid length. [ 342.556736][T15911] erspan0: refused to change device tx_queue_len [ 344.066862][T15947] cgroup: Name too long [ 344.722235][T15992] binder: 15991:15992 ioctl c0306201 200000000940 returned -14 [ 345.075683][ T26] audit: type=1326 audit(2000000204.243:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16018 comm="syz.5.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 345.161922][ T26] audit: type=1326 audit(2000000204.263:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16018 comm="syz.5.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 345.236081][ T26] audit: type=1326 audit(2000000204.263:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16018 comm="syz.5.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 345.339450][ T26] audit: type=1326 audit(2000000204.263:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16018 comm="syz.5.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 345.416804][T16040] loop3: detected capacity change from 0 to 512 [ 345.429041][ T26] audit: type=1326 audit(2000000204.263:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16018 comm="syz.5.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 345.468703][ T26] audit: type=1326 audit(2000000204.263:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16018 comm="syz.5.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 345.547894][T16040] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 345.574662][T16040] ext4 filesystem being mounted at /862/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.590783][ T26] audit: type=1326 audit(2000000204.273:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16018 comm="syz.5.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 345.608376][T16040] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #2: comm syz.3.4814: corrupted inode contents [ 345.613527][ T26] audit: type=1326 audit(2000000204.273:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16018 comm="syz.5.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 345.647714][ T26] audit: type=1326 audit(2000000204.273:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16018 comm="syz.5.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 345.670381][ T26] audit: type=1326 audit(2000000204.273:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16018 comm="syz.5.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7452c2a6c9 code=0x7ffc0000 [ 345.824364][T16040] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #2: comm syz.3.4814: mark_inode_dirty error [ 345.843377][T16040] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #2: comm syz.3.4814: corrupted inode contents [ 345.987027][T16040] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.4814: mark_inode_dirty error [ 347.782279][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4839'. [ 347.829891][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4839'. [ 348.615138][T16108] fuse: Invalid rootmode [ 348.945470][T16153] bridge0: port 4(wlan1) entered disabled state [ 348.980833][T16153] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4863'. [ 349.058068][T16153] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 350.841624][T16244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4903'. [ 350.877555][T16248] 9pnet: Insufficient options for proto=fd [ 351.167996][T16268] loop7: detected capacity change from 0 to 256 [ 351.233667][T16268] exfat: Deprecated parameter 'namecase' [ 351.240970][T16268] exfat: Bad value for 'uid' [ 351.908804][T16314] netlink: 'syz.6.4934': attribute type 1 has an invalid length. [ 351.975841][T16314] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 351.994737][T16314] bond2: (slave batadv1): making interface the new active one [ 352.009749][T16314] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 352.021993][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4934'. [ 352.037261][T16314] bond2 (unregistering): (slave batadv1): Releasing active interface [ 352.072965][T16314] bond2 (unregistering): Released all slaves [ 354.210991][T16427] loop3: detected capacity change from 0 to 128 [ 354.303517][T16427] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,init_itable,,errors=continue. Quota mode: writeback. [ 354.317573][T16427] ext4 filesystem being mounted at /889/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.466249][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4991'. [ 354.618891][T16459] loop3: detected capacity change from 0 to 512 [ 354.718751][T16459] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 354.778457][T16459] EXT4-fs (loop3): 1 truncate cleaned up [ 354.792792][T16459] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.831730][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 354.831744][ T26] audit: type=1800 audit(2000000213.990:177): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4996" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 355.059546][T16485] loop7: detected capacity change from 0 to 8 [ 355.419056][T16517] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5026'. [ 355.890237][T16531] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5033'. [ 355.943731][T16531] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5033'. [ 355.961969][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5034'. [ 356.501219][T16515] loop4: detected capacity change from 0 to 40427 [ 356.605434][T16568] netlink: 'syz.6.5048': attribute type 4 has an invalid length. [ 356.646026][T16515] F2FS-fs (loop4): Found nat_bits in checkpoint [ 356.806344][T16515] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 357.455513][T16615] binder: Binderfs stats mode cannot be changed during a remount [ 358.155175][T16660] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5087'. [ 358.817623][T16694] tipc: Enabling of bearer rejected, media not registered [ 358.885488][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 358.972726][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 358.990590][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.002015][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.009861][ T26] audit: type=1326 audit(2000000218.170:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16700 comm="syz.6.5106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc36720d6c9 code=0x0 [ 359.770707][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.778652][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.786518][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.800518][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.812527][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.820033][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.894349][T16709] netlink: 3744 bytes leftover after parsing attributes in process `syz.6.5110'. [ 359.897712][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.941748][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.945987][T16713] loop6: detected capacity change from 0 to 512 [ 359.968666][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.981757][T16716] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5113'. [ 359.985891][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 359.999594][T16716] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5113'. [ 360.026868][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.042548][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.059486][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.072621][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.083841][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.101572][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.117480][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.142757][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.162676][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.185558][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.207931][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.225863][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.245241][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.271880][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.293293][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.302297][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.319111][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.327881][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.349063][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.360635][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.369658][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.378016][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.386780][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.394664][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.413128][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.420842][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.430281][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.452618][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.460143][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.477578][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.491277][T16734] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5123'. [ 360.502607][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.510204][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.521252][T16734] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5123'. [ 360.530489][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.538310][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.548070][T16734] tipc: Invalid UDP bearer configuration [ 360.548109][T16734] tipc: Enabling of bearer rejected, failed to enable media [ 360.554077][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.588965][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.612577][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.622717][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.630225][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.652845][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.660582][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.671156][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.699944][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.707766][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.716239][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.729416][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.737810][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.752551][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.760069][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.782616][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.790138][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.802550][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.810062][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.836548][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.844706][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.852404][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.854317][T16750] loop7: detected capacity change from 0 to 512 [ 360.860437][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.880298][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.888351][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.902966][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.910679][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.918306][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.926032][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.933844][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.941343][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.949889][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.957454][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.965070][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.972857][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 360.974862][T16750] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 360.980431][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.001653][T16750] ext4 filesystem being mounted at /862/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.003787][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.021876][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.029777][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.037591][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.045425][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.053418][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.060924][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.064776][T16750] EXT4-fs error (device loop7): ext4_do_update_inode:5218: inode #2: comm syz.7.5131: corrupted inode contents [ 361.068883][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.086365][T16750] EXT4-fs error (device loop7): ext4_dirty_inode:6054: inode #2: comm syz.7.5131: mark_inode_dirty error [ 361.088004][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.101368][T16750] EXT4-fs error (device loop7): ext4_do_update_inode:5218: inode #2: comm syz.7.5131: corrupted inode contents [ 361.106650][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.125889][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.125962][T16750] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.5131: mark_inode_dirty error [ 361.133711][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.152263][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.159976][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.167544][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.175076][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.182646][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.190608][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.198201][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.205721][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.213818][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.222276][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.233216][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.240730][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.250653][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.258584][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.272679][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.280199][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.292949][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.300659][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.308374][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.315995][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.323509][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.331035][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.338923][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.350203][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.358397][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.370416][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.378307][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.386048][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.393954][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.401442][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.409237][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.416947][ T4259] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 361.434499][ T4259] hid-generic 0000:10000:0007.0002: hidraw0: HID v9.40 Device [syz1] on syz1 [ 361.977364][T16790] fido_id[16790]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 362.570201][T16835] netlink: 'syz.4.5168': attribute type 4 has an invalid length. [ 362.663574][T16838] bridge0: port 4(erspan0) entered blocking state [ 362.670071][T16838] bridge0: port 4(erspan0) entered disabled state [ 362.708667][T16838] device erspan0 entered promiscuous mode [ 362.730140][T16838] bridge0: port 4(erspan0) entered blocking state [ 362.736671][T16838] bridge0: port 4(erspan0) entered forwarding state [ 362.843889][T16850] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5177'. [ 362.881611][T16850] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5177'. [ 362.905620][T16850] tipc: Invalid UDP bearer configuration [ 362.905657][T16850] tipc: Enabling of bearer rejected, failed to enable media [ 362.927530][T16856] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5188'. [ 363.172255][T16874] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5190'. [ 363.189266][T16874] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 363.221044][T16876] netlink: 'syz.7.5187': attribute type 4 has an invalid length. [ 363.359047][T16884] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5194'. [ 363.389164][T16884] tipc: Invalid UDP bearer configuration [ 363.389196][T16884] tipc: Enabling of bearer rejected, failed to enable media [ 363.393905][T16886] 9pnet: Could not find request transport: f [ 365.816791][T16951] __nla_validate_parse: 1 callbacks suppressed [ 365.816808][T16951] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5224'. [ 366.198284][T16979] overlayfs: missing 'lowerdir' [ 366.374643][T16991] x_tables: duplicate underflow at hook 1 [ 366.932396][T17029] netlink: 337 bytes leftover after parsing attributes in process `syz.6.5260'. [ 368.471029][T17091] loop7: detected capacity change from 0 to 40427 [ 368.560264][T17091] F2FS-fs (loop7): Found nat_bits in checkpoint [ 368.651678][T17132] binder: 17131:17132 ioctl c0306201 200000000300 returned -11 [ 368.669902][T17132] binder: 17131:17132 ioctl c0306201 2000000000c0 returned -11 [ 368.677134][T17091] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 368.791945][T17138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5306'. [ 368.861521][T17140] loop4: detected capacity change from 0 to 1024 [ 369.001651][T17140] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nombcache,,errors=continue. Quota mode: none. [ 369.025765][T17140] ext4 filesystem being mounted at /1029/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.161805][T17154] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5313'. [ 369.350196][T17162] loop4: detected capacity change from 0 to 512 [ 369.458902][T17162] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 369.485892][T17162] ext4 filesystem being mounted at /1031/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.861450][T17290] binder: 17289:17290 ioctl c0306201 0 returned -14 [ 372.355041][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5396'. [ 372.940399][T17332] loop6: detected capacity change from 0 to 40427 [ 374.834831][T17391] netlink: 'syz.5.5424': attribute type 4 has an invalid length. [ 374.868584][T17391] netlink: 'syz.5.5424': attribute type 5 has an invalid length. [ 374.884959][T17391] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.5424'. [ 375.162139][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5435'. [ 375.913693][T17463] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5457'. [ 375.924553][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5457'. [ 375.963398][T17463] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5457'. [ 375.985457][T17463] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5457'. [ 376.347551][T17487] user requested TSC rate below hardware speed [ 376.503890][ T26] audit: type=1326 audit(2000000235.670:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17502 comm="syz.4.5476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x0 [ 376.549869][T17435] chnl_net:caif_netlink_parms(): no params data found [ 376.744409][T17435] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.752125][T17435] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.775080][T17435] device bridge_slave_0 entered promiscuous mode [ 376.787330][T17435] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.797411][T17435] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.806704][T17435] device bridge_slave_1 entered promiscuous mode [ 376.834461][T17435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.847005][T17435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.930329][T17435] team0: Port device team_slave_0 added [ 376.947311][T17435] team0: Port device team_slave_1 added [ 376.985610][T17435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.001959][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.041152][T17435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.067414][T17435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.082314][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.130644][T17435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.209675][T17435] device hsr_slave_0 entered promiscuous mode [ 377.220872][T17435] device hsr_slave_1 entered promiscuous mode [ 377.237050][T17435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.264706][T17435] Cannot create hsr debugfs directory [ 377.378470][T17550] batman_adv: batadv0: Adding interface: dummy0 [ 377.407085][T17550] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.448710][T17550] batman_adv: batadv0: Interface activated: dummy0 [ 377.476841][T17554] batadv0: mtu less than device minimum [ 377.497956][T17554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.511029][T17554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.523454][T17554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.535773][T17554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.537489][ T7538] Bluetooth: hci5: command 0x0409 tx timeout [ 377.547960][T17554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.564531][T17554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.576938][T17554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.589235][T17554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.601537][T17554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.826690][T17435] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 377.865990][T17435] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 377.898648][T17435] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 377.929202][T17435] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 378.159948][T17594] 9pnet_virtio: no channels available for device syz [ 378.204081][T17435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.225794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 378.256067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.323936][T17435] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.350524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.364886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.393569][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.400702][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.453651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.478798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.495054][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.501357][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.513883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.522496][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.529558][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.537847][T17614] fuse: Bad value for 'fd' [ 378.538532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.561218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.589541][T17435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.606307][T17435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.624308][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.681437][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.701635][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.734727][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.766732][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.783192][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.828989][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.846296][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.863522][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.910501][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.318401][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.345991][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.373681][T17435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.612891][ T9766] Bluetooth: hci5: command 0x041b tx timeout [ 379.786802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.807673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.916450][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.964436][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.980461][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.998674][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.020106][T17435] device veth0_vlan entered promiscuous mode [ 380.071585][T17435] device veth1_vlan entered promiscuous mode [ 380.147800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.171058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.236520][T17435] device veth0_macvtap entered promiscuous mode [ 380.273616][T17435] device veth1_macvtap entered promiscuous mode [ 380.341901][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.361627][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.372003][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.394259][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.410826][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.428960][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.439298][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.453641][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.464338][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.475492][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.499834][T17435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.540794][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.559543][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.585877][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.595089][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.622401][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.644346][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.665765][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.710541][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.727561][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.739415][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.756344][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.778476][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.791955][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.810378][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.845034][T17435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.886560][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.926091][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.945838][T17435] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.954851][T17435] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.965302][T17435] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.975997][T17435] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.522921][ T4267] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 381.686636][T17751] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 381.696240][ T9759] Bluetooth: hci5: command 0x040f tx timeout [ 381.773953][ T4267] usb 8-1: device descriptor read/64, error -71 [ 381.827554][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.865117][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.905813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 381.939341][ T6177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.962861][ T6177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.988755][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 382.062533][ T4267] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 382.346959][T17789] x_tables: duplicate underflow at hook 1 [ 382.403393][ T4267] usb 8-1: device descriptor read/64, error -71 [ 382.467274][T17792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5595'. [ 383.097531][ T4267] usb usb8-port1: attempt power cycle [ 383.559862][ T4267] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 383.683004][ T4267] usb 8-1: device descriptor read/8, error -71 [ 383.713420][ T9766] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 383.773073][ T9759] Bluetooth: hci5: command 0x0419 tx timeout [ 383.972621][ T4267] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 383.972700][ T9766] usb 9-1: Using ep0 maxpacket: 16 [ 383.997567][T17827] x_tables: duplicate underflow at hook 2 [ 384.122834][ T9766] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.142609][ T9766] usb 9-1: config 0 has no interfaces? [ 384.158574][ T9766] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 384.188902][ T9766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.220353][ T9766] usb 9-1: config 0 descriptor?? [ 384.223026][ T4267] usb 8-1: device not accepting address 7, error -71 [ 384.248109][ T4267] usb usb8-port1: unable to enumerate USB device [ 384.501180][ T26] audit: type=1326 audit(2000000243.660:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17846 comm="syz.4.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7fc00000 [ 384.519729][T17810] udc-core: couldn't find an available UDC or it's busy [ 384.540931][T17810] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 384.573899][ T26] audit: type=1326 audit(2000000243.690:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17846 comm="syz.4.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00b59ac6c9 code=0x7fc00000 [ 384.612825][ T7538] usb 9-1: USB disconnect, device number 2 [ 384.622925][ T26] audit: type=1326 audit(2000000243.690:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17846 comm="syz.4.5624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7fc00000 [ 385.387027][T17874] loop8: detected capacity change from 0 to 512 [ 385.534398][T17874] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.5635: inode has both inline data and extents flags [ 385.587372][T17874] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.5635: couldn't read orphan inode 15 (err -117) [ 385.691075][T17874] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 385.981145][T17874] overlayfs: filesystem on './file0' not supported as upperdir [ 386.201648][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5645'. [ 386.223966][T17902] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 386.380995][T17906] device syzkaller0 entered promiscuous mode [ 386.495428][T17912] device team_slave_0 entered promiscuous mode [ 386.502375][T17912] device team_slave_1 entered promiscuous mode [ 386.522370][T17912] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 386.570732][T17917] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 386.625124][ T26] audit: type=1326 audit(2000000245.790:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.4.5656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x0 [ 386.878289][T17931] overlayfs: failed to clone upperpath [ 386.908825][T17931] overlayfs: failed to clone upperpath [ 387.271369][T17949] 9pnet: Insufficient options for proto=fd [ 387.286605][ T6177] tipc: Subscription rejected, illegal request [ 387.431003][T17955] loop6: detected capacity change from 0 to 256 [ 387.471509][T17955] /dev/loop6: Can't open blockdev [ 387.618355][T17963] loop4: detected capacity change from 0 to 512 [ 387.723644][T17963] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.5674: inode has both inline data and extents flags [ 387.812955][T17963] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.5674: couldn't read orphan inode 15 (err -117) [ 387.850864][T17963] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 388.027550][T17982] overlayfs: filesystem on './file0' not supported as upperdir [ 388.100982][T17984] netlink: 536 bytes leftover after parsing attributes in process `syz.5.5685'. [ 388.148134][T17984] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5685'. [ 388.221537][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5686'. [ 389.441336][T18047] batman_adv: batadv0: Interface deactivated: dummy0 [ 389.482709][T18047] batman_adv: batadv0: Removing interface: dummy0 [ 389.513461][T18047] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 389.552058][T18047] bond0: (slave bond_slave_0): Releasing backup interface [ 389.609337][T18047] bond0: (slave bond_slave_1): Releasing backup interface [ 389.734459][T18047] team0: Port device team_slave_0 removed [ 389.781760][T18047] team0: Port device team_slave_1 removed [ 389.801616][T18047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.829701][T18047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.870596][T18047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.884916][T18047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.940475][T18050] netlink: 'syz.6.5716': attribute type 10 has an invalid length. [ 390.031654][T18050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.121194][T18050] team0: Port device bond0 added [ 390.177880][T18053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5716'. [ 390.308248][T18053] team0 (unregistering): Port device bond0 removed [ 390.350514][T18071] loop4: detected capacity change from 0 to 512 [ 390.384053][T18071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 390.406767][T18071] System zones: 1-12 [ 390.444004][T18071] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5726: error while reading EA inode 32 err=-116 [ 390.463291][T18071] EXT4-fs (loop4): Remounting filesystem read-only [ 390.470367][T18071] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 390.488255][T18071] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.5726: error while reading EA inode 32 err=-116 [ 390.505771][T18071] EXT4-fs (loop4): Remounting filesystem read-only [ 390.512807][T18071] EXT4-fs (loop4): 1 orphan inode deleted [ 390.518560][T18071] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 390.897215][T18090] netlink: 'syz.5.5734': attribute type 21 has an invalid length. [ 392.229209][T18172] loop6: detected capacity change from 0 to 512 [ 392.424452][T18187] netlink: 'syz.4.5782': attribute type 1 has an invalid length. [ 392.435496][T18185] binder: Bad value for 'stats' [ 392.508244][T18187] device bond1 entered promiscuous mode [ 392.514253][T18187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.594242][T18193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.601287][T18193] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 392.612200][T18193] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 392.627108][T18193] bond1: (slave wireguard0): making interface the new active one [ 392.635813][T18193] device wireguard0 entered promiscuous mode [ 392.645934][T18193] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 392.655229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 392.728682][T18187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.736032][T18187] IPv6: NLM_F_CREATE should be set when creating new route [ 392.743297][T18187] IPv6: NLM_F_CREATE should be set when creating new route [ 392.793824][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5792'. [ 392.869073][T18187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.898230][T18215] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5793'. [ 392.901766][T18187] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 392.953493][T18187] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 392.981707][T18218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5795'. [ 392.994244][T18220] loop7: detected capacity change from 0 to 512 [ 393.152382][T18220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 393.172642][T18220] System zones: 1-12 [ 393.180693][T18220] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.5794: error while reading EA inode 32 err=-116 [ 393.239869][T18220] EXT4-fs (loop7): Remounting filesystem read-only [ 393.253751][T18220] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.5794: error while reading EA inode 32 err=-116 [ 393.268762][T18220] EXT4-fs (loop7): Remounting filesystem read-only [ 393.278104][T18220] EXT4-fs (loop7): 1 orphan inode deleted [ 393.287467][T18220] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 393.915342][T18275] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 393.932432][T18275] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 394.009534][T18284] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5825'. [ 395.751342][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5843'. [ 396.295988][T18357] loop4: detected capacity change from 0 to 512 [ 396.433716][T18357] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 396.455074][T18357] EXT4-fs (loop4): inline encryption not supported [ 396.475397][T18357] EXT4-fs (loop4): Test dummy encryption mode enabled [ 396.484679][T18363] netlink: 'syz.6.5859': attribute type 4 has an invalid length. [ 396.502863][T18357] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 396.557986][T18357] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 396.621168][T18357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 396.629820][T18357] System zones: 1-12 [ 396.651415][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5862'. [ 396.661926][T18357] EXT4-fs (loop4): 1 truncate cleaned up [ 396.670699][T18357] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 396.908243][T18357] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 397.302353][T18411] binder_alloc: 18410: pid 18410 spamming oneway? 2 buffers allocated for a total size of 5360 [ 397.404805][T18418] netlink: 'syz.8.5879': attribute type 46 has an invalid length. [ 397.436237][T18418] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5879'. [ 397.468308][T18420] netlink: 'syz.6.5882': attribute type 1 has an invalid length. [ 397.592819][T18420] device bond2 entered promiscuous mode [ 397.617552][T18420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.641742][T18435] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5886'. [ 397.732568][T18426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.745017][T18426] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 397.759657][T18426] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 397.786457][T18426] bond2: (slave wireguard1): making interface the new active one [ 397.799065][T18426] device wireguard1 entered promiscuous mode [ 397.807535][T18426] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 397.824601][T18430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.831973][T18430] IPv6: NLM_F_CREATE should be set when creating new route [ 397.839268][T18430] IPv6: NLM_F_CREATE should be set when creating new route [ 397.848687][T18430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.858492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 397.894934][T18430] bond2: (slave wireguard2): The slave device specified does not support setting the MAC address [ 397.944520][T18430] bond2: (slave wireguard2): Enslaving as a backup interface with an up link [ 398.072552][ T9759] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 398.278808][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5899'. [ 398.312823][ T9759] usb 8-1: Using ep0 maxpacket: 16 [ 398.437580][ T9759] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.458223][ T9759] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.468035][ T9759] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 398.480646][ T9759] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.505643][ T9759] usb 8-1: config 0 descriptor?? [ 398.763965][ T7538] usb 8-1: USB disconnect, device number 8 [ 400.606429][T18555] loop8: detected capacity change from 0 to 128 [ 400.665777][T18561] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5942'. [ 400.747278][T18555] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 400.776815][T18555] FAT-fs (loop8): Filesystem has been set read-only [ 400.799299][T18555] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 400.851467][T18555] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 401.365925][T18605] netlink: 188 bytes leftover after parsing attributes in process `syz.7.5961'. [ 401.484961][T18613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5966'. [ 401.925146][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5984'. [ 402.088749][T18658] tipc: Started in network mode [ 402.112609][T13432] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 402.126737][T18658] tipc: Node identity ac14142f, cluster identity 4711 [ 402.135183][T18658] tipc: New replicast peer: 0.0.0.0 [ 402.141331][T18658] tipc: Enabled bearer , priority 10 [ 402.382937][T13432] usb 8-1: Using ep0 maxpacket: 8 [ 402.502816][T13432] usb 8-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 402.524653][T18688] netlink: 196 bytes leftover after parsing attributes in process `syz.8.6003'. [ 402.527240][T13432] usb 8-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 402.582421][T13432] usb 8-1: config 0 interface 0 has no altsetting 0 [ 402.605603][T13432] usb 8-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 402.629429][T13432] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.682323][T13432] usb 8-1: config 0 descriptor?? [ 403.047887][T18722] loop6: detected capacity change from 0 to 128 [ 403.061545][T18724] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6018'. [ 403.072856][T13432] usbhid 8-1:0.0: can't add hid device: -71 [ 403.079234][T13432] usbhid: probe of 8-1:0.0 failed with error -71 [ 403.100879][T13432] usb 8-1: USB disconnect, device number 9 [ 403.142619][ T4267] tipc: Node number set to 2886997039 [ 406.285190][T18845] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6075'. [ 406.948631][ T144] Bluetooth: hci6: Frame reassembly failed (-84) [ 406.957917][T18871] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 409.186915][ T9766] Bluetooth: hci6: command 0x1003 tx timeout [ 409.193210][ T4193] Bluetooth: hci6: sending frame failed (-49) [ 409.597114][T18958] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6126'. [ 411.212609][ T9766] Bluetooth: hci6: command 0x1001 tx timeout [ 411.218965][ T4193] Bluetooth: hci6: sending frame failed (-49) [ 413.292589][ T7538] Bluetooth: hci6: command 0x1009 tx timeout [ 413.543252][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6188'. [ 414.537575][T19138] loop8: detected capacity change from 0 to 1024 [ 414.624324][T19138] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 414.693319][T19138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 414.724932][T19138] System zones: 0-1, 4-36, 102-102 [ 414.792311][T19138] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 415.229372][T19157] device sit0 entered promiscuous mode [ 415.271540][T19157] netlink: 'syz.8.6217': attribute type 1 has an invalid length. [ 415.301972][T19157] netlink: 1 bytes leftover after parsing attributes in process `syz.8.6217'. [ 416.891980][T19189] loop4: detected capacity change from 0 to 512 [ 417.026845][T19189] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 417.061789][T19189] ext4 filesystem being mounted at /1229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.219621][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6235'. [ 417.295371][T19202] binder: 19201:19202 unknown command 1074553620 [ 417.339898][T19202] binder: 19201:19202 ioctl c0306201 200000000640 returned -22 [ 418.848683][T19284] netlink: 'syz.6.6272': attribute type 16 has an invalid length. [ 418.873152][T19284] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.6272'. [ 419.501687][T19321] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6289'. [ 420.019410][T19311] fuse: Bad value for 'fd' [ 420.243908][ T4267] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 420.281345][ T4267] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 420.799556][T19387] netlink: 'syz.5.6319': attribute type 28 has an invalid length. [ 420.971763][T19392] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6323'. [ 420.990595][T19394] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6322'. [ 423.210066][T19432] netlink: 'syz.6.6337': attribute type 25 has an invalid length. [ 423.248919][T19435] device hsr0 left promiscuous mode [ 423.271791][T19435] bridge0: port 3(hsr0) entered disabled state [ 423.331639][T19435] device bridge_slave_1 left promiscuous mode [ 423.339122][T19435] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.348890][T19435] device bridge_slave_0 left promiscuous mode [ 423.358154][T19435] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.651390][T19443] 9pnet_virtio: no channels available for device syz [ 424.115458][T19466] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.123019][T19466] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.185359][T19466] device bridge_slave_1 left promiscuous mode [ 424.191679][T19466] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.224710][T19466] device bridge_slave_0 left promiscuous mode [ 424.231500][T19466] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.404813][T19485] netlink: 57 bytes leftover after parsing attributes in process `syz.6.6363'. [ 424.578887][T19496] netlink: 188 bytes leftover after parsing attributes in process `syz.6.6369'. [ 424.793433][T19508] cgroup: Unknown subsys name 'audit' [ 424.950598][T19514] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6377'. [ 425.207393][T19526] device syzkaller1 entered promiscuous mode [ 425.378042][T19534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6386'. [ 426.894107][T19622] cgroup: subsys name conflicts with all [ 427.555692][T19663] fuseblk: Bad value for 'user_id' [ 428.904166][T19704] netlink: 'syz.8.6468': attribute type 4 has an invalid length. [ 429.744447][T19739] netlink: 'syz.6.6484': attribute type 4 has an invalid length. [ 430.576425][T19780] binder: BINDER_SET_CONTEXT_MGR already set [ 430.649243][T19780] binder: 19779:19780 ioctl 40046207 0 returned -16 [ 432.036373][T19771] chnl_net:caif_netlink_parms(): no params data found [ 432.191016][T19771] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.198245][T19771] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.206788][T19771] device bridge_slave_0 entered promiscuous mode [ 432.215265][T19771] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.222697][T19771] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.245481][T19771] device bridge_slave_1 entered promiscuous mode [ 432.309423][T19771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.371523][T19771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.452411][T19771] team0: Port device team_slave_0 added [ 432.500310][ T9766] Bluetooth: hci6: command 0x0409 tx timeout [ 432.509209][T19771] team0: Port device team_slave_1 added [ 432.600744][T19771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.619568][T19771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.692513][T19771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.731428][T19771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.749611][T19771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.826546][T19771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.976546][T19771] device hsr_slave_0 entered promiscuous mode [ 433.005401][T19771] device hsr_slave_1 entered promiscuous mode [ 433.022693][T19771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.038111][T19771] Cannot create hsr debugfs directory [ 433.367899][T19875] overlayfs: failed to clone lowerpath [ 433.603418][T19771] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 433.653733][T19771] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 433.734142][T19771] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 433.964238][T19771] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 434.210216][T19771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.260935][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.295640][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.351204][T19771] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.444873][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.463688][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.485314][T10691] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.492390][T10691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.553449][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.572656][ T9759] Bluetooth: hci6: command 0x041b tx timeout [ 434.594351][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.631657][T10691] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.638784][T10691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.673242][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.734318][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.755720][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.816420][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.851722][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.880440][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.893753][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.946992][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.982291][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 435.003462][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.050500][T19771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.109214][T19771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.143073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 435.168827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.557716][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.575519][T10691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.601605][T19771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.176991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.203877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.271877][T19771] device veth0_vlan entered promiscuous mode [ 436.306633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 436.334922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.358419][T19771] device veth1_vlan entered promiscuous mode [ 436.367441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.377163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.385996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 436.468324][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 436.486351][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 436.503503][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.522133][T19771] device veth0_macvtap entered promiscuous mode [ 436.556691][T19771] device veth1_macvtap entered promiscuous mode [ 436.587817][T19959] 9pnet_virtio: no channels available for device syz [ 436.591981][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.614187][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.647480][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.658952][ T9759] Bluetooth: hci6: command 0x040f tx timeout [ 436.666323][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.712112][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.736779][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.758175][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.809624][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.838310][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.887577][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.903532][T19967] binder: Binderfs stats mode cannot be changed during a remount [ 436.923241][T19771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.952645][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 436.971033][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 436.981305][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 437.009358][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.026923][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.041609][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.051881][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.068182][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.086606][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.101631][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.115803][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.130963][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.164951][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.183810][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.201869][T19771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.212121][T19969] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 437.242351][T19969] infiniband syz1: set down [ 437.264497][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.268614][ T153] smc: removing ib device syz1 [ 437.289646][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.309890][ T7] infiniband syz1: ib_query_port failed (-19) [ 437.311808][T19771] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.342045][T19771] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.354635][T19771] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.363819][T19771] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.561011][ T3078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.574298][ T3078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.626004][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 437.657252][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.700105][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.748926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 437.849149][T19979] netlink: 836 bytes leftover after parsing attributes in process `syz.6.6586'. [ 438.688091][T20026] loop8: detected capacity change from 0 to 2048 [ 438.733968][ T4247] Bluetooth: hci6: command 0x0419 tx timeout [ 438.769018][T20026] loop8: p1 < > p4 [ 438.781726][T20026] loop8: p4 size 8388608 extends beyond EOD, truncated [ 438.888589][T20026] EXT4-fs (loop8p1): unable to read superblock [ 439.061569][T20047] binder: Binderfs stats mode cannot be changed during a remount [ 439.302933][T15375] udevd[15375]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 439.326778][T15202] udevd[15202]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 439.944889][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.951352][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.560976][T20142] syz.8.6650[20142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.561064][T20142] syz.8.6650[20142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.242785][T20181] syz.9.6668[20181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.319432][T20181] syz.9.6668[20181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.558202][T20198] device veth0_to_team entered promiscuous mode [ 444.317426][T20272] tipc: Enabling of bearer rejected, failed to enable media [ 447.755539][T20426] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6775'. [ 448.617296][T20481] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6801'. [ 448.763717][T20487] netlink: 'syz.9.6805': attribute type 17 has an invalid length. [ 449.170880][T20508] netlink: 'syz.9.6814': attribute type 3 has an invalid length. [ 451.564285][T20636] loop4: detected capacity change from 0 to 128 [ 451.580332][T20640] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6879'. [ 452.364803][T20663] loop6: detected capacity change from 0 to 2048 [ 452.460735][T15202] loop6: p1 < > p4 < > [ 452.485898][T20663] loop6: p1 < > p4 < > [ 452.814933][T15202] udevd[15202]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 452.837958][T15375] udevd[15375]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 452.899241][T15202] udevd[15202]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 452.903090][T15375] udevd[15375]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 453.138228][T20698] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6906'. [ 453.147791][T20699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6907'. [ 453.211132][T20699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6907'. [ 453.428511][ T26] audit: type=1326 audit(2000000312.590:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 453.501136][ T26] audit: type=1326 audit(2000000312.610:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 453.555884][ T26] audit: type=1326 audit(2000000312.610:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 453.660806][ T26] audit: type=1326 audit(2000000312.620:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 453.766516][ T26] audit: type=1326 audit(2000000312.620:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 453.877619][ T26] audit: type=1326 audit(2000000312.620:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 453.915344][T20740] netlink: 140 bytes leftover after parsing attributes in process `syz.8.6926'. [ 453.928910][ T26] audit: type=1326 audit(2000000312.620:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 453.930781][T20742] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6927'. [ 454.024061][ T26] audit: type=1326 audit(2000000312.620:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 454.151580][ T26] audit: type=1326 audit(2000000312.620:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 454.205720][T20748] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6930'. [ 454.219795][ T26] audit: type=1326 audit(2000000312.620:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20710 comm="syz.6.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 454.510539][T20772] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 455.656584][T20800] netlink: 'syz.4.6953': attribute type 28 has an invalid length. [ 457.179428][T20839] netlink: 252 bytes leftover after parsing attributes in process `syz.6.6971'. [ 458.335454][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6991'. [ 458.890235][T20909] overlayfs: failed to clone upperpath [ 460.894402][T20974] tmpfs: Bad value for 'size' [ 462.278180][T21043] 9pnet: Insufficient options for proto=fd [ 463.116576][T21088] xt_bpf: check failed: parse error [ 463.964203][T21099] @0Ù: renamed from bond_slave_1 [ 465.122670][T21125] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7100'. [ 465.235197][T21137] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7104'. [ 465.454152][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7107'. [ 465.813625][ T4228] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 466.092589][ T4228] usb 5-1: Using ep0 maxpacket: 16 [ 466.233038][ T4228] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 466.272847][ T4228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.410282][ T4228] usb 5-1: config 0 has no interface number 0 [ 466.758722][ T4228] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 466.769753][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.784819][ T4228] usb 5-1: config 0 descriptor?? [ 466.835138][ T4228] usb 5-1: Found UVC 0.00 device (0bd3:0555) [ 466.842056][ T4228] usb 5-1: No valid video chain found. [ 467.036362][ T4228] usb 5-1: USB disconnect, device number 8 [ 467.263676][T21182] loop6: detected capacity change from 0 to 512 [ 467.727056][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7125'. [ 467.787192][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7125'. [ 468.237829][T21205] loop6: detected capacity change from 0 to 256 [ 468.330119][T21205] /dev/loop6: Can't open blockdev [ 469.095128][T21237] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7147'. [ 471.627062][T21330] sctp: [Deprecated]: syz.4.7193 (pid 21330) Use of int in max_burst socket option deprecated. [ 471.627062][T21330] Use struct sctp_assoc_value instead [ 471.870157][T21342] netlink: 'syz.5.7198': attribute type 11 has an invalid length. [ 472.024300][T21354] netlink: 312 bytes leftover after parsing attributes in process `syz.6.7203'. [ 472.276405][T21369] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 472.311965][T21369] CIFS mount error: No usable UNC path provided in device string! [ 472.311965][T21369] [ 472.375679][T21369] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 472.681472][T21397] netlink: 'syz.9.7222': attribute type 1 has an invalid length. [ 472.753228][T21397] netlink: 'syz.9.7222': attribute type 4 has an invalid length. [ 472.781630][T21397] netlink: 15294 bytes leftover after parsing attributes in process `syz.9.7222'. [ 473.351717][T21422] x_tables: duplicate underflow at hook 2 [ 474.423404][T21475] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7255'. [ 474.507974][T21479] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7257'. [ 474.528311][T21481] overlayfs: failed to clone lowerpath [ 474.625397][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7259'. [ 474.670626][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7259'. [ 474.918453][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7262'. [ 474.951973][T21500] binder: 21497:21500 ioctl c018620c 200000000000 returned -22 [ 474.961477][T21494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.123108][T21494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.374547][T21494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.603818][T21494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.873847][T21521] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 475.941500][T21521] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 475.948755][T21521] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 475.996332][T21521] vhci_hcd vhci_hcd.0: Device attached [ 476.012702][T21526] vhci_hcd: connection closed [ 476.017253][ T2005] vhci_hcd: stop threads [ 476.042234][ T2005] vhci_hcd: release socket [ 476.065609][ T2005] vhci_hcd: disconnect device [ 479.029929][T21651] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7334'. [ 479.190377][T21659] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7338'. [ 479.208312][T21659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7338'. [ 479.254651][T21659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7338'. [ 479.387573][T21671] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7343'. [ 479.437851][T21676] netlink: 'syz.5.7346': attribute type 4 has an invalid length. [ 479.636293][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7351'. [ 479.952590][ T7538] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 480.192601][ T7538] usb 7-1: Using ep0 maxpacket: 16 [ 480.312698][ T7538] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 480.320938][ T7538] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.373565][ T7538] usb 7-1: config 0 has no interface number 0 [ 480.379701][ T7538] usb 7-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 480.384692][T21717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7365'. [ 480.442716][ T7538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.493049][ T7538] usb 7-1: config 0 descriptor?? [ 480.534641][ T7538] usb 7-1: Found UVC 0.00 device (0bd3:0555) [ 480.541554][ T7538] usb 7-1: No valid video chain found. [ 480.755127][ T7538] usb 7-1: USB disconnect, device number 11 [ 481.181042][T21756] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7381'. [ 481.335656][T21760] net_ratelimit: 10 callbacks suppressed [ 481.335673][T21760] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 481.348875][T21760] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 482.126280][T21802] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7401'. [ 482.181247][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7401'. [ 483.238842][T21849] cgroup: Need name or subsystem set [ 484.131168][T21887] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 484.408316][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 484.408331][ T26] audit: type=1326 audit(2000000343.570:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21901 comm="syz.6.7443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 484.523694][ T26] audit: type=1326 audit(2000000343.570:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21901 comm="syz.6.7443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 484.566509][T21910] binder: 21908:21910 ioctl c018620c 200000000000 returned -22 [ 484.578945][ T26] audit: type=1326 audit(2000000343.580:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21901 comm="syz.6.7443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 484.623359][ T26] audit: type=1326 audit(2000000343.580:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21901 comm="syz.6.7443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 484.719024][ T26] audit: type=1326 audit(2000000343.580:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21901 comm="syz.6.7443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36720d6c9 code=0x7ffc0000 [ 484.988680][T21930] __nla_validate_parse: 1 callbacks suppressed [ 484.988697][T21930] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7456'. [ 485.644234][T21959] loop4: detected capacity change from 0 to 128 [ 485.709753][T21959] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 485.843142][ T6177] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 486.892398][T22007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7490'. [ 487.794992][T22036] overlayfs: failed to clone upperpath [ 487.948485][T22041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7506'. [ 488.089355][T22044] netlink: 'syz.5.7506': attribute type 5 has an invalid length. [ 488.129868][T22044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7506'. [ 488.195005][T22045] netlink: 5 bytes leftover after parsing attributes in process `syz.6.7507'. [ 490.162381][T22116] 9pnet: p9_errstr2errno: server reported unknown error [ 490.367861][T22130] loop4: detected capacity change from 0 to 512 [ 490.377443][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7542'. [ 490.429527][T22130] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 490.481667][T22130] EXT4-fs (loop4): inline encryption not supported [ 490.519347][T22130] EXT4-fs (loop4): Test dummy encryption mode enabled [ 490.559084][T22130] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 490.617209][T22130] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 490.650092][T22130] EXT4-fs (loop4): 1 truncate cleaned up [ 490.656077][T22130] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 491.473158][T22169] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7562'. [ 491.973990][T22193] loop9: detected capacity change from 0 to 128 [ 492.069447][T22193] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 492.223582][ T5563] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 493.239058][T22221] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7587'. [ 493.429080][T22237] sch_fq: defrate 53322 ignored. [ 493.569517][T22242] loop4: detected capacity change from 0 to 2048 [ 493.693672][T22242] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 493.706738][T22242] ext4 filesystem being mounted at /1508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.130455][T22269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7607'. [ 494.661528][T22291] loop6: detected capacity change from 0 to 256 [ 495.226101][T22305] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7626'. [ 495.834799][T22281] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7612'. [ 496.092565][T22320] ptrace attach of "./syz-executor exec"[22323] was attempted by "./syz-executor exec"[22320] [ 497.264425][T22354] overlayfs: failed to clone upperpath [ 497.690326][T22378] sctp: [Deprecated]: syz.8.7659 (pid 22378) Use of int in max_burst socket option deprecated. [ 497.690326][T22378] Use struct sctp_assoc_value instead [ 497.791729][T22384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.612434][ C0] sched: RT throttling activated [ 499.615059][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 500.236539][T22412] ptrace attach of "./syz-executor exec"[22419] was attempted by "./syz-executor exec"[22412] [ 500.456081][T22423] netlink: 'syz.4.7678': attribute type 4 has an invalid length. [ 500.490008][T22423] netlink: 'syz.4.7678': attribute type 5 has an invalid length. [ 500.539626][T22423] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.7678'. [ 500.883099][T22446] netlink: 4100 bytes leftover after parsing attributes in process `syz.5.7686'. [ 500.962197][T22455] netlink: 'syz.9.7690': attribute type 6 has an invalid length. [ 501.377123][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.384305][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.417339][T22479] 9p: Unknown Cache mode doo [ 501.616421][T22490] netlink: 260 bytes leftover after parsing attributes in process `syz.6.7708'. [ 501.629060][ T26] audit: type=1326 audit(2000000360.800:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.4.7709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 501.691971][ T26] audit: type=1326 audit(2000000360.800:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.4.7709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 501.812344][ T26] audit: type=1326 audit(2000000360.800:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.4.7709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 501.912682][ T26] audit: type=1326 audit(2000000360.920:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.4.7709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 502.038406][ T26] audit: type=1326 audit(2000000360.950:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.4.7709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 502.107737][ T26] audit: type=1326 audit(2000000360.970:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.4.7709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 502.191197][ T26] audit: type=1326 audit(2000000360.970:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.4.7709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 502.262580][ T26] audit: type=1326 audit(2000000360.970:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.4.7709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 502.353954][ T26] audit: type=1326 audit(2000000360.970:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.4.7709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 502.421725][ T26] audit: type=1326 audit(2000000360.970:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.4.7709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 502.722365][T22534] device syzkaller0 entered promiscuous mode [ 503.849894][T22585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7752'. [ 504.830358][T22616] 9p: Unknown Cache mode m [ 505.982249][T22671] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7794'. [ 506.680003][T22695] loop4: detected capacity change from 0 to 1024 [ 506.748325][T22695] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 507.279968][T22711] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7810'. [ 509.325212][T22793] loop4: detected capacity change from 0 to 32768 [ 509.511569][T22793] XFS (loop4): Mounting V5 Filesystem [ 509.640666][ T4259] XFS (loop4): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 509.711006][ T4259] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_inobt block 0x18 [ 509.746039][T22828] netlink: 'syz.5.7861': attribute type 1 has an invalid length. [ 509.779021][ T4259] XFS (loop4): Unmount and run xfs_repair [ 509.802403][ T4259] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 509.850976][ T4259] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff IAB3............ [ 509.880892][ T4259] 00000010: 00 00 00 00 00 00 00 18 00 00 00 02 00 00 00 10 ................ [ 509.904705][ T4259] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 509.933688][ T4259] 00000030: 00 00 00 00 f0 ea ad a5 00 00 11 40 00 00 40 37 ...........@..@7 [ 509.988284][ T4259] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 510.013420][ T4259] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 510.043795][ T4259] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 510.086963][ T4259] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 510.122967][T22793] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x18 len 8 error 74 [ 510.134416][T22793] XFS (loop4): Failed to read root inode 0x1140, error 117 [ 512.484431][T22929] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.7909'. [ 513.134713][T22961] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 513.147088][T22961] overlayfs: missing 'lowerdir' [ 513.332656][T22967] overlayfs: failed to clone lowerpath [ 513.986971][T23016] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 514.079764][T23022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.335629][T23058] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 516.352414][T23058] overlayfs: missing 'lowerdir' [ 519.169494][T23188] 9p: Unknown access argument a [ 519.343208][T23196] netlink: 'syz.4.8032': attribute type 21 has an invalid length. [ 520.037714][T23231] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8052'. [ 520.987249][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 520.987263][ T26] audit: type=1326 audit(2000000379.855:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23274 comm="syz.8.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e23eb76c9 code=0x7ffc0000 [ 521.089739][ T26] audit: type=1326 audit(2000000379.894:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23274 comm="syz.8.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e23eb76c9 code=0x7ffc0000 [ 521.143275][ T26] audit: type=1326 audit(2000000379.894:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23274 comm="syz.8.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4e23eb76c9 code=0x7ffc0000 [ 521.231141][ T26] audit: type=1326 audit(2000000379.894:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23274 comm="syz.8.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e23eb76c9 code=0x7ffc0000 [ 521.299081][ T26] audit: type=1326 audit(2000000379.894:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23274 comm="syz.8.8071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e23eb76c9 code=0x7ffc0000 [ 522.226129][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8098'. [ 523.973334][T23401] device batadv_slave_1 entered promiscuous mode [ 523.989039][T23400] device batadv_slave_1 left promiscuous mode [ 524.121369][T23407] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 524.205853][T23407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 524.223147][T23407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.237599][T23407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.285946][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 524.312919][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 524.860941][T23427] loop4: detected capacity change from 0 to 2048 [ 524.953149][T23427] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 526.874807][T23540] fuse: Bad value for 'fd' [ 528.951124][T23587] chnl_net:caif_netlink_parms(): no params data found [ 528.957608][T23615] 9pnet: p9_errstr2errno: server reported unknown error [ 529.253360][T23587] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.260445][T23587] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.303480][T23587] device bridge_slave_0 entered promiscuous mode [ 529.383795][T23633] device syzkaller0 entered promiscuous mode [ 529.392222][T23587] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.399522][T23587] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.421719][T23587] device bridge_slave_1 entered promiscuous mode [ 529.524603][T23587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.546411][T23587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.820072][T23587] team0: Port device team_slave_0 added [ 529.878776][T23587] team0: Port device team_slave_1 added [ 530.140948][T23587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.178415][T23587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.216995][T23587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.229554][T23587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.318895][T23587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.352496][ T4247] Bluetooth: hci7: command 0x0409 tx timeout [ 530.402755][T23587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.497594][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8251'. [ 530.683303][T23587] device hsr_slave_0 entered promiscuous mode [ 530.748096][T23587] device hsr_slave_1 entered promiscuous mode [ 530.772226][T23587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.827679][T23587] Cannot create hsr debugfs directory [ 531.960123][T23739] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8278'. [ 532.127466][T23587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 532.165821][T23587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 532.229805][T23587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 532.263696][T23587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 532.460913][ T7] Bluetooth: hci7: command 0x041b tx timeout [ 533.221150][T23775] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8288'. [ 533.294663][T23587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.309938][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 533.343208][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 533.388173][T23587] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.447311][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 533.469006][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.490768][ T446] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.497931][ T446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.513225][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 533.573769][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 533.605532][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.612691][ T446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.634913][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 533.665463][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 533.747176][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 533.787184][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 533.824030][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 533.839207][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 533.861255][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 533.926245][T23587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 533.945748][T23587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.979857][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 533.996964][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.050054][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.120406][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 534.164413][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 534.208603][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 534.340625][T23842] 9p: Unknown access argument a [ 534.537696][ T9759] Bluetooth: hci7: command 0x040f tx timeout [ 534.631805][T23587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.654455][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.662013][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.752810][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 534.769219][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 534.835860][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 534.846807][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 534.887598][T23587] device veth0_vlan entered promiscuous mode [ 534.903427][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 534.929230][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 534.957458][T23587] device veth1_vlan entered promiscuous mode [ 535.088320][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 535.124572][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 535.165180][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 535.226976][ T6177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 535.287414][T23587] device veth0_macvtap entered promiscuous mode [ 535.307124][T23587] device veth1_macvtap entered promiscuous mode [ 535.393524][T23587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.474863][T23587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.499120][T23587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.516658][T23587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.527538][T23587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.545551][T23587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.555386][T23587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.594738][T23587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.604873][T23587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.606116][T23929] overlayfs: failed to clone lowerpath [ 535.625880][T23587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.652209][T23587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.690118][ T26] audit: type=1326 audit(2000000650.428:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.4.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 535.727618][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 535.746357][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 535.769085][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 535.769953][ T26] audit: type=1326 audit(2000000650.428:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.4.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 535.821597][ T26] audit: type=1326 audit(2000000650.428:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.4.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 535.826530][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 535.854882][ T26] audit: type=1326 audit(2000000650.428:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.4.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 535.894091][ T26] audit: type=1326 audit(2000000650.428:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.4.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 535.932815][ T26] audit: type=1326 audit(2000000650.428:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.4.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 535.957126][T23587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.994998][T23587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.037550][T23587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.042242][ T26] audit: type=1326 audit(2000000650.428:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.4.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 536.075676][T23587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.109716][T23587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.138723][ T26] audit: type=1326 audit(2000000650.428:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.4.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 536.160573][T23587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.166184][T23956] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 536.185365][ T26] audit: type=1326 audit(2000000650.428:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.4.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 536.207511][T23587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.243211][T23587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.252480][ T26] audit: type=1326 audit(2000000650.428:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.4.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b59ac6c9 code=0x7ffc0000 [ 536.290129][T23587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.312940][T23587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.359623][T23587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.387336][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 536.427511][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 536.449932][T23587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.454568][T23971] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 536.474169][T23587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.484415][T23587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.494080][T23587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.616779][ T7] Bluetooth: hci7: command 0x0419 tx timeout [ 536.661672][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.716128][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.742996][T23983] netlink: 72 bytes leftover after parsing attributes in process `syz.9.8369'. [ 536.754808][ T6177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.779363][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 536.804700][ T6177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.847772][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 536.961286][T23999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8374'. [ 538.238164][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8411'. [ 538.726774][T24116] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 540.036389][T24178] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 540.637089][T24204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8445'. [ 541.527609][T24248] loop9: detected capacity change from 0 to 1024 [ 541.622750][T24248] EXT4-fs (loop9): inline encryption not supported [ 541.639951][T24248] EXT4-fs (loop9): Ignoring removed nobh option [ 541.678397][T24248] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 541.729142][T24248] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 541.778106][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8465'. [ 541.827220][T24248] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,nouid32,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,nomblk_io_submit,grpid,dioread_nolock,,errors=continue. Quota mode: writeback. [ 542.036234][T24248] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2229: inode #15: comm syz.9.8459: corrupted in-inode xattr [ 542.101455][T24277] netlink: 'syz.0.8469': attribute type 1 has an invalid length. [ 542.409695][T24287] 9p: Unknown access argument a [ 542.496648][T24293] loop4: detected capacity change from 0 to 164 [ 542.650637][T24300] netlink: 'syz.9.8477': attribute type 4 has an invalid length. [ 542.733607][T24300] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.8477'. [ 542.953059][T24316] loop0: detected capacity change from 0 to 256 [ 543.005186][T24317] kvm [24313]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 543.018861][T24316] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 543.094412][T24316] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 543.143870][T24316] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x110dabd0, checksum : 0x1119abd0) [ 543.200684][T24316] exFAT-fs (loop0): invalid boot region [ 543.220078][T24316] exFAT-fs (loop0): failed to recognize exfat type [ 543.563296][T24336] netlink: 188 bytes leftover after parsing attributes in process `syz.9.8487'. [ 544.525425][T24379] 9p: Unknown Cache mode m [ 544.816890][T24389] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 544.905144][T24389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.259832][T24465] autofs4:pid:24465:autofs_fill_super: called with bogus options [ 547.752507][T24478] loop0: detected capacity change from 0 to 40427 [ 547.788159][T24545] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 547.788159][T24545] The task syz.9.8556 (24545) triggered the difference, watch for misbehavior. [ 547.828119][T24478] F2FS-fs (loop0): invalid crc value [ 547.852507][T24478] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 548.025476][T24478] F2FS-fs (loop0): recover fsync data on readonly fs [ 548.056574][T24478] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 549.402066][T24588] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 549.777457][T24611] device veth0 entered promiscuous mode [ 549.810856][T24608] device veth0 left promiscuous mode [ 550.091037][T24633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8587'. [ 550.329796][T24651] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 551.466432][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 551.466446][ T26] audit: type=1326 audit(2000000666.202:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24678 comm="syz.0.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34acd56c9 code=0x7ffc0000 [ 551.608875][ T26] audit: type=1326 audit(2000000666.232:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24678 comm="syz.0.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34acd56c9 code=0x7ffc0000 [ 551.721010][ T26] audit: type=1326 audit(2000000666.232:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24678 comm="syz.0.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff34acd56c9 code=0x7ffc0000 [ 551.832916][ T26] audit: type=1326 audit(2000000666.232:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24678 comm="syz.0.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34acd56c9 code=0x7ffc0000 [ 551.966841][ T26] audit: type=1326 audit(2000000666.232:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24678 comm="syz.0.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34acd56c9 code=0x7ffc0000 [ 553.361147][T24701] loop4: detected capacity change from 0 to 32768 [ 553.850010][T24701] XFS (loop4): Mounting V5 Filesystem [ 554.429903][T24701] XFS (loop4): Ending clean mount [ 554.914430][ T4188] XFS (loop4): Unmounting Filesystem [ 555.177041][ T23] Bluetooth: hci6: command 0x0406 tx timeout [ 559.765094][T24971] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8685'. [ 559.929820][T24979] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8688'. [ 560.332202][T25006] netlink: 756 bytes leftover after parsing attributes in process `syz.5.8700'. [ 561.973446][ T27] INFO: task syz.7.6213:19148 blocked for more than 143 seconds. [ 562.006212][ T27] Not tainted syzkaller #0 [ 562.011175][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 562.020262][ T27] task:syz.7.6213 state:D stack:26848 pid:19148 ppid: 7695 flags:0x00004004 [ 562.039334][ T27] Call Trace: [ 562.062166][ T27] [ 562.074224][ T27] __schedule+0x11bb/0x4390 [ 562.100631][ T27] ? release_firmware_map_entry+0x190/0x190 [ 562.165714][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 562.171759][ T27] ? lock_chain_count+0x20/0x20 [ 562.222958][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 562.235666][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 562.241088][ T27] schedule+0x11b/0x1e0 [ 562.245258][ T27] schedule_preempt_disabled+0xf/0x20 [ 562.289579][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 562.296357][ T27] ? down_write_killable_nested+0x90/0x90 [ 562.302193][ T27] ? read_lock_is_recursive+0x10/0x10 [ 562.319571][ T27] ? __rwlock_init+0x140/0x140 [ 562.324483][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 562.334141][ T27] ? do_quotactl+0x710/0x710 [ 562.348750][ T27] down_read+0x96/0x2e0 [ 562.375609][ T27] ? do_quotactl+0x710/0x710 [ 562.380248][ T27] iterate_supers+0xa4/0x1d0 [ 562.384850][ T27] __se_sys_quotactl+0x33a/0x6c0 [ 562.394302][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 562.406799][ T27] ? __x64_sys_quotactl+0xa0/0xa0 [ 562.416418][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 562.424326][ T27] ? lock_chain_count+0x20/0x20 [ 562.429722][ T27] ? vtime_user_exit+0x2dc/0x400 [ 562.440082][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 562.445375][ T27] do_syscall_64+0x4c/0xa0 [ 562.450495][ T27] ? clear_bhb_loop+0x30/0x80 [ 562.455261][ T27] ? clear_bhb_loop+0x30/0x80 [ 562.460344][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 562.468759][ T27] RIP: 0033:0x7f31ae1046c9 [ 562.473287][ T27] RSP: 002b:00007f31ac36b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 562.485380][ T27] RAX: ffffffffffffffda RBX: 00007f31ae35afa0 RCX: 00007f31ae1046c9 [ 562.497245][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 562.507447][T25084] loop4: detected capacity change from 0 to 512 [ 562.514227][ T27] RBP: 00007f31ae186f91 R08: 0000000000000000 R09: 0000000000000000 [ 562.522511][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.564917][ T27] R13: 00007f31ae35b038 R14: 00007f31ae35afa0 R15: 00007ffc271c3418 [ 562.577863][ T27] [ 562.591361][ T27] [ 562.591361][ T27] Showing all locks held in the system: [ 562.605165][T25084] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 562.624228][ T27] 4 locks held by kworker/u4:0/9: [ 562.630502][ T27] 3 locks held by kworker/0:1/13: [ 562.646070][T25084] ext4 filesystem being mounted at /1757/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 562.656842][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 562.678514][ T27] #1: ffffc90000d27d00 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 562.757889][ T27] #2: ffffffff8c1210f0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4b0 [ 562.795612][ T27] 1 lock held by khungtaskd/27: [ 562.800494][ T27] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 562.824147][ T27] 2 locks held by getty/3949: [ 562.829153][ T27] #0: ffff88814ce03098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 562.839624][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 562.866138][ T27] 1 lock held by syz-executor/4194: [ 562.871357][ T27] #0: ffff88801d6280e0 (&type->s_umount_key#62){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 562.892743][ T27] 2 locks held by dhcpcd/5282: [ 562.900353][ T27] #0: ffff888063ef1410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 562.911364][ T27] #1: ffffffff8c1211e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x347/0x6b0 [ 562.922811][ T27] 2 locks held by kworker/0:18/9759: [ 562.928368][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 562.942088][ T27] #1: ffffc90003fbfd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 562.960260][ T27] 1 lock held by syz.7.6213/19148: [ 562.965398][ T27] #0: ffff88801d6280e0 (&type->s_umount_key#62){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 562.975855][ T27] 1 lock held by syz.6.7904/22924: [ 562.981139][ T27] #0: ffff88801d6280e0 (&type->s_umount_key#62){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 563.002289][ T27] [ 563.007177][ T27] ============================================= [ 563.007177][ T27] [ 563.015895][ T27] NMI backtrace for cpu 1 [ 563.020233][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 563.027423][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 563.037472][ T27] Call Trace: [ 563.040737][ T27] [ 563.043647][ T27] dump_stack_lvl+0x168/0x230 [ 563.048315][ T27] ? show_regs_print_info+0x20/0x20 [ 563.053496][ T27] ? load_image+0x3b0/0x3b0 [ 563.057981][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 563.063357][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 563.068473][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 563.073534][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 563.079685][ T27] ? _printk+0xcc/0x110 [ 563.083828][ T27] ? load_image+0x3b0/0x3b0 [ 563.088314][ T27] ? load_image+0x3b0/0x3b0 [ 563.092802][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 563.098860][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 563.104836][ T27] watchdog+0xe0f/0xe50 [ 563.108990][ T27] kthread+0x436/0x520 [ 563.113041][ T27] ? hungtask_pm_notify+0x40/0x40 [ 563.118045][ T27] ? kthread_blkcg+0xd0/0xd0 [ 563.122638][ T27] ret_from_fork+0x1f/0x30 [ 563.127049][ T27] [ 563.130742][ T27] Sending NMI from CPU 1 to CPUs 0: [ 563.136180][ C0] NMI backtrace for cpu 0 [ 563.136190][ C0] CPU: 0 PID: 2005 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 563.136205][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 563.136213][ C0] Workqueue: phy22 ieee80211_iface_work [ 563.136233][ C0] RIP: 0010:kfree+0x86/0x2a0 [ 563.136247][ C0] Code: 48 89 df e8 3c c8 79 ff 49 89 c7 49 c1 ef 06 49 83 e7 c0 48 b9 00 00 00 00 00 ea ff ff 49 8b 44 0f 08 a8 01 0f 85 21 01 00 00 <49> 01 cf 49 8b 47 08 4c 89 f9 a8 01 0f 85 1a 01 00 00 48 83 39 ff [ 563.136259][ C0] RSP: 0018:ffffc900061ff800 EFLAGS: 00000246 [ 563.136270][ C0] RAX: 0000000000000000 RBX: ffff8880250d0000 RCX: ffffea0000000000 [ 563.136280][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.136288][ C0] RBP: ffffc900061ff990 R08: dffffc0000000000 R09: ffffed100c55ed9c [ 563.136298][ C0] R10: ffffed100c55ed9c R11: 1ffff1100c55ed9b R12: ffff8880250d0000 [ 563.136308][ C0] R13: 0000000000000001 R14: ffffffff8932036e R15: 0000000000943400 [ 563.136317][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 563.136329][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.136339][ C0] CR2: 000055ac7c225660 CR3: 0000000021634000 CR4: 00000000003506f0 [ 563.136352][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 563.136360][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 563.136368][ C0] Call Trace: [ 563.136372][ C0] [ 563.136380][ C0] ieee80211_bss_info_update+0x86e/0xaa0 [ 563.136401][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 563.136420][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 563.136438][ C0] ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0 [ 563.136462][ C0] ? ieee80211_ibss_rx_no_sta+0x730/0x730 [ 563.136476][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 563.136490][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 563.136505][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 563.136517][ C0] ? _raw_spin_unlock+0x40/0x40 [ 563.136528][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 563.136545][ C0] ? kcov_remote_start+0xea/0x4a0 [ 563.136560][ C0] ieee80211_iface_work+0x70e/0xc60 [ 563.136578][ C0] process_one_work+0x863/0x1000 [ 563.136598][ C0] ? worker_detach_from_pool+0x240/0x240 [ 563.136611][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 563.136626][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 563.136638][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 563.136659][ C0] ? wq_worker_running+0x97/0x170 [ 563.136672][ C0] worker_thread+0xaa8/0x12a0 [ 563.136698][ C0] kthread+0x436/0x520 [ 563.136709][ C0] ? rcu_lock_release+0x20/0x20 [ 563.136721][ C0] ? kthread_blkcg+0xd0/0xd0 [ 563.136733][ C0] ret_from_fork+0x1f/0x30 [ 563.136754][ C0] [ 563.148797][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 563.148813][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 563.148830][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 563.148840][ T27] Call Trace: [ 563.148845][ T27] [ 563.148853][ T27] dump_stack_lvl+0x168/0x230 [ 563.148877][ T27] ? show_regs_print_info+0x20/0x20 [ 563.148896][ T27] ? load_image+0x3b0/0x3b0 [ 563.148923][ T27] panic+0x2c9/0x7f0 [ 563.148940][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 563.148961][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 563.148976][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 563.148997][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 563.149018][ T27] watchdog+0xe4e/0xe50 [ 563.149041][ T27] kthread+0x436/0x520 [ 563.149054][ T27] ? hungtask_pm_notify+0x40/0x40 [ 563.149068][ T27] ? kthread_blkcg+0xd0/0xd0 [ 563.149084][ T27] ret_from_fork+0x1f/0x30 [ 563.149114][ T27] [ 563.149316][ T27] Kernel Offset: disabled [ 563.509212][ T27] Rebooting in 86400 seconds..