last executing test programs: 13m1.698566199s ago: executing program 32 (id=154): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x10001043, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 12m3.439964699s ago: executing program 33 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000ec0)="bbb891a57b9a7bb1d8cb60b24f000000006167c04807f35551eeeb262cb0f003b4f353fcc3c08ddf2a0c3b2b1f8b9fa4ece5fe86195d5795332b65a6baeb06d8004d06b98cf649ae47f770522b75493af1dc239cede58ee580077404fffdfe47348caf86127b95510a790eab26e6f71285be39f9085ba8ea3824d2d36507524e8824bcdb6ad7aa4fd9aab379a40ccab4997569b90b3f6ed770f079728d5828eac13acad4b7ade2bbef64ab6430934206c171f6afedeac76b", 0x402, r0}, 0x38) 11m54.431707904s ago: executing program 34 (id=444): flock(0xffffffffffffffff, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 11m48.105514828s ago: executing program 35 (id=460): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 10m21.312300648s ago: executing program 8 (id=778): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x1015, r1, 0x0) read(r2, &(0x7f0000000580)=""/190, 0xbe) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1) 10m20.775779913s ago: executing program 8 (id=783): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000680)=0x522, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000020000001800000002000200861fa72e5b", 0x20, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a8, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x5, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m20.056072166s ago: executing program 8 (id=786): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r8}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xd) 10m18.640776164s ago: executing program 8 (id=789): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0xca, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, &(0x7f0000000440)=""/210, 0xca, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 10m18.309464872s ago: executing program 8 (id=790): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="ca0e808b935b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_clone(0x80063000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m17.364025872s ago: executing program 8 (id=794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) 10m1.973356007s ago: executing program 36 (id=794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) 8m50.470655277s ago: executing program 5 (id=1097): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x0, 0x0, &(0x7f00000001c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 8m48.879094603s ago: executing program 5 (id=1105): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioperm(0x0, 0x3, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 8m45.39335627s ago: executing program 5 (id=1114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x74}}, 0x8040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 8m44.974172761s ago: executing program 5 (id=1117): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000b40)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@orlov}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) getdents(r0, 0x0, 0x0) 8m40.272747507s ago: executing program 5 (id=1129): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000032a000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000be000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ae1000/0x4000)=nil, &(0x7f0000556000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000675000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = io_uring_setup(0x5111, &(0x7f00000003c0)={0x0, 0xbab9, 0x80, 0x82, 0x2f9}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000007fc0)=[{0x0, 0x0, 0x0}], 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r2, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r2, 0x0, 0x0, 0x0) 8m36.891664057s ago: executing program 5 (id=1140): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) 8m36.013951657s ago: executing program 37 (id=1140): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) 3m10.346794641s ago: executing program 3 (id=2144): r0 = socket$l2tp(0x2, 0x2, 0x73) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 3m9.075143292s ago: executing program 3 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 3m7.618825198s ago: executing program 3 (id=2148): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(0x0, 0x1031c2, 0xb4) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r2, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000380)={0x28, 0x2, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000340)}) 3m7.246562494s ago: executing program 4 (id=2150): iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m4.890713214s ago: executing program 3 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setparam(0x0, &(0x7f00000006c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24048040) r0 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m4.890383942s ago: executing program 4 (id=2155): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c840, 0x201) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) socket$kcm(0x2, 0x200000000000001, 0x106) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 3m3.38808359s ago: executing program 4 (id=2158): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m3.107519256s ago: executing program 3 (id=2160): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f0000000200)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) landlock_restrict_self(0xffffffffffffffff, 0x0) timer_delete(r1) tkill(r2, 0x13) 3m1.897785506s ago: executing program 4 (id=2162): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24048040) r0 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m0.784525679s ago: executing program 4 (id=2166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m58.762244071s ago: executing program 3 (id=2168): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb7e", 0x3}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0) 2m56.67221601s ago: executing program 4 (id=2172): r0 = io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 2m43.073148503s ago: executing program 38 (id=2168): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb7e", 0x3}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0) 2m41.408826959s ago: executing program 39 (id=2172): r0 = io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 31.759447019s ago: executing program 9 (id=2422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18387}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 29.624965926s ago: executing program 9 (id=2425): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x2000000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) lseek(r1, 0x0, 0x4) 27.567186309s ago: executing program 9 (id=2434): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x25a, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2033f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xdfffffff}}], 0x1, 0x0, 0x0) 23.976343976s ago: executing program 9 (id=2442): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) 22.936857006s ago: executing program 9 (id=2446): ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x803) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.259440412s ago: executing program 9 (id=2448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 19.084164985s ago: executing program 6 (id=2450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) r4 = semget$private(0x0, 0x5, 0x132) semctl$SEM_STAT(r4, 0x4, 0x12, &(0x7f0000000500)=""/125) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000300)="$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") 19.001794881s ago: executing program 1 (id=2452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 17.00862491s ago: executing program 6 (id=2455): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x38}}, 0x44) 15.235537042s ago: executing program 6 (id=2460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x62040, 0x20) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x7, 0x7, 0x237c4d13, 0x2, 0x7, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xaa, 0x7, 0x7, 0x1, 0x6, 0x4}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x50) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f) 15.085462174s ago: executing program 0 (id=2462): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r4, 0x5170c560dce29b81, 0x4, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4) 15.07813373s ago: executing program 1 (id=2463): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x1c, 0x80800) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 12.893520562s ago: executing program 0 (id=2465): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) write(r2, &(0x7f0000000140)="04", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 12.620217566s ago: executing program 2 (id=2466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 11.731472791s ago: executing program 6 (id=2467): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) 10.597846999s ago: executing program 1 (id=2468): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={0x14, r4, 0x705, 0x70bd2b, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 9.750817038s ago: executing program 7 (id=2469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 9.711589154s ago: executing program 2 (id=2470): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) socket(0x2000000015, 0x80005, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "00b147fbbfc100", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 9.489747479s ago: executing program 0 (id=2471): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.472157907s ago: executing program 1 (id=2472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(0xffffffffffffffff, 0x8, r0) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 7.485942869s ago: executing program 2 (id=2473): r0 = socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x200000, 0xffffffff}, 0x1c) 7.423137842s ago: executing program 7 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 6.321387054s ago: executing program 1 (id=2475): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x2, 0x2, 0x39565559, 0x1, 0x0, [{0x7, 0x1}, {0x2, 0x535}, {0x7, 0x1ff}, {0x5, 0x338b}, {0x4, 0x2}, {0x4, 0x3}, {0xe, 0x6}, {0x401000, 0x4a}], 0x2, 0x7, 0x7, 0x0, 0x2}}) 4.912519604s ago: executing program 40 (id=2448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 4.882009031s ago: executing program 2 (id=2477): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r3, 0x0, 0x0, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 4.299025369s ago: executing program 7 (id=2478): mknodat$null(0xffffffffffffff9c, 0x0, 0x408, 0x103) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) socket$kcm(0x2d, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, 0x0, 0x4000054) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @empty, 0x9}, 0x1c) 4.174613383s ago: executing program 0 (id=2479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) chdir(&(0x7f0000000080)='./file0\x00') linkat(r4, &(0x7f0000000280)='./file0\x00', r1, 0x0, 0x1400) 4.162196692s ago: executing program 6 (id=2480): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 3.830574722s ago: executing program 7 (id=2481): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) cachestat(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 3.680234435s ago: executing program 2 (id=2482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x3, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 3.524886811s ago: executing program 0 (id=2483): open(0x0, 0x80140, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) 2.358014349s ago: executing program 7 (id=2484): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_pts(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) 2.319559298s ago: executing program 1 (id=2485): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) socket(0x2000000015, 0x80005, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "00b147fbbfc100", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 1.213937026s ago: executing program 2 (id=2486): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, &(0x7f0000000000)) openat2$dir(0xffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0/file0\x00', &(0x7f00000002c0)={0x800, 0x0, 0x5}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) timer_create(0x2, &(0x7f0000000400)={0x0, 0x1c, 0x2, @thr={0x0, &(0x7f0000000300)="3522c462bd87bad51ad3e0a6976d8dfa125349f8cc427d5e299bc412c6b26755ad1f8e8474bc4aef8a5889d0817a0eff3eeef7b1ba2c025c76b65a6cb3ffc1f64b23f0d448b898998741c0a7c535dc649f1533643ce27f7da5908c831ac851027eddd40deed1a620da4ad109fdcccb2617e1f5ff62a16efda0f551051316fcd8b2d66e68deef568cdc223828b6621d421975bb01974f50a0e4c22d04f430a2a5ff5b7c280c8c518416356dfaa145dfd6"}}, &(0x7f0000000440)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 681.748918ms ago: executing program 6 (id=2487): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) sched_setattr(0x0, 0x0, 0x0) io_setup(0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 50.303849ms ago: executing program 0 (id=2488): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b000000", 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, &(0x7f0000000180)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) 0s ago: executing program 7 (id=2489): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 316.579741][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.760859][ T7485] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 317.068682][ T31] audit: type=1326 audit(1783514065.553:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.2.816" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 317.185682][ T31] audit: type=1326 audit(1783514065.593:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.2.816" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 317.209714][ T9186] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 317.287541][ T31] audit: type=1326 audit(1783514065.593:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.2.816" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 317.323263][ T31] audit: type=1326 audit(1783514065.593:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.2.816" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 317.380090][ T31] audit: type=1326 audit(1783514065.643:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.2.816" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff95a15e68e code=0x7ffc0000 [ 317.460312][ T31] audit: type=1326 audit(1783514065.643:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.2.816" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff95a15e68e code=0x7ffc0000 [ 317.543244][ T31] audit: type=1326 audit(1783514065.643:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.2.816" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff95a15e68e code=0x7ffc0000 [ 317.644099][ T31] audit: type=1326 audit(1783514065.643:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.2.816" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff95a15e68e code=0x7ffc0000 [ 317.721678][ T31] audit: type=1326 audit(1783514065.643:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.2.816" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff95a15e68e code=0x7ffc0000 [ 317.909028][ T9193] comedi comedi4: bad chanlist[1]=0x0000b89f chan=47263 range length=2 [ 318.588187][ T9204] loop2: detected capacity change from 0 to 256 [ 318.676429][ T9204] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 318.709922][ T9204] FAT-fs (loop2): Can't find a valid FAT filesystem [ 321.804087][ T9232] loop2: detected capacity change from 0 to 1764 [ 321.832828][ T9232] iso9660: Bad value for 'uid' [ 321.848796][ T9232] iso9660: Bad value for 'uid' [ 322.231491][ T31] kauditd_printk_skb: 66 callbacks suppressed [ 322.231519][ T31] audit: type=1326 audit(1783514070.723:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.9.832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdc479de59 code=0x0 [ 322.338696][ T9238] fuse: Unknown parameter 'û')0'Ñ"ê%”`Sr0xffffffffffffffff' [ 323.470435][ T31] audit: type=1326 audit(1783514071.933:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.5.835" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a99de59 code=0x7ffc0000 [ 323.541648][ T31] audit: type=1326 audit(1783514071.933:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.5.835" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a99de59 code=0x7ffc0000 [ 323.620981][ T31] audit: type=1326 audit(1783514071.933:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.5.835" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a99de59 code=0x7ffc0000 [ 323.691128][ T31] audit: type=1326 audit(1783514071.933:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.5.835" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f016a99de59 code=0x7ffc0000 [ 323.768825][ T31] audit: type=1326 audit(1783514071.933:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.5.835" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a99de59 code=0x7ffc0000 [ 323.860091][ T31] audit: type=1326 audit(1783514071.993:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.5.835" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a99de59 code=0x7ffc0000 [ 323.942014][ T31] audit: type=1326 audit(1783514071.993:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.5.835" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a99de59 code=0x7ffc0000 [ 323.984608][ T31] audit: type=1326 audit(1783514071.993:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.5.835" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a99de59 code=0x7ffc0000 [ 324.015471][ T31] audit: type=1326 audit(1783514071.993:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.5.835" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f016a95e68e code=0x7ffc0000 [ 324.361692][ T9262] tipc: Failed to remove unknown binding: 66,0,0/0:1962310991/1962310992 [ 324.504959][ T9262] tipc: Failed to remove unknown binding: 66,0,0/0:1962310991/1962310992 [ 325.968487][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.984138][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.993966][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.021325][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.036050][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.637419][ T9229] lo: entered allmulticast mode [ 327.651550][ T9229] tunl0: entered allmulticast mode [ 327.652236][ T9303] loop2: detected capacity change from 0 to 2048 [ 327.670915][ T9229] gre0: entered allmulticast mode [ 327.694115][ T9229] gretap0: entered allmulticast mode [ 327.700947][ T9229] erspan0: entered allmulticast mode [ 327.707390][ T9229] ip_vti0: entered allmulticast mode [ 327.715166][ T9229] ip6_vti0: entered allmulticast mode [ 327.723803][ T9229] sit0: entered allmulticast mode [ 327.728803][ T9303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.728939][ T9303] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.754822][ T9229] ip6tnl0: entered allmulticast mode [ 327.761978][ T9229] ip6gre0: entered allmulticast mode [ 327.768971][ T9229] syz_tun: entered allmulticast mode [ 327.775531][ T9229] ip6gretap0: entered allmulticast mode [ 327.782419][ T9229] bridge0: entered allmulticast mode [ 327.789145][ T9229] vcan0: entered allmulticast mode [ 327.795985][ T9229] bond0: entered allmulticast mode [ 327.801196][ T9229] bond_slave_0: entered allmulticast mode [ 327.807690][ T9229] bond_slave_1: entered allmulticast mode [ 327.816039][ T9229] team0: entered allmulticast mode [ 327.822306][ T9229] team_slave_0: entered allmulticast mode [ 327.828209][ T9229] team_slave_1: entered allmulticast mode [ 327.836715][ T9229] dummy0: entered allmulticast mode [ 327.846321][ T9229] nlmon0: entered allmulticast mode [ 327.853196][ T9229] batadv0: entered allmulticast mode [ 327.861186][ T9229] vxcan0: entered allmulticast mode [ 327.868029][ T9229] vxcan1: entered allmulticast mode [ 327.874557][ T9229] veth0: entered allmulticast mode [ 327.881391][ T9229] veth1: entered allmulticast mode [ 327.895170][ T9229] wg0: entered allmulticast mode [ 327.908543][ T9229] wg2: entered allmulticast mode [ 327.934351][ T9229] veth0_to_bridge: entered allmulticast mode [ 327.960996][ T9229] bridge_slave_0: left promiscuous mode [ 327.980447][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.047307][ T9229] veth1_to_bridge: entered allmulticast mode [ 328.061399][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.082450][ T9229] bridge_slave_1: left promiscuous mode [ 328.091166][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.100786][ T5626] Bluetooth: hci6: command tx timeout [ 328.153387][ T9229] veth0_to_bond: entered allmulticast mode [ 328.219643][ T9229] bond0: (slave bond_slave_0): Releasing backup interface [ 328.293942][ T9229] veth1_to_bond: entered allmulticast mode [ 328.324027][ T9229] bond0: (slave bond_slave_1): Releasing backup interface [ 328.368867][ T9229] veth0_to_team: entered allmulticast mode [ 328.412187][ T9229] team0: Port device team_slave_0 removed [ 328.418988][ T9229] veth1_to_team: entered allmulticast mode [ 328.454128][ T9229] team0: Port device team_slave_1 removed [ 328.466271][ T9229] veth0_to_batadv: entered allmulticast mode [ 328.473724][ T9229] batadv_slave_0: entered allmulticast mode [ 328.481594][ T9229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.491176][ T9229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.504851][ T9229] veth1_to_batadv: entered allmulticast mode [ 328.513428][ T9229] batadv_slave_1: entered allmulticast mode [ 328.520131][ T9229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.528491][ T9229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.543283][ T9229] xfrm0: entered allmulticast mode [ 328.550322][ T9229] veth0_to_hsr: entered allmulticast mode [ 328.559999][ T9229] hsr_slave_0: entered allmulticast mode [ 328.567652][ T9229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.611906][ T9290] netlink: 180 bytes leftover after parsing attributes in process `syz.4.847'. [ 328.754742][ T9308] netlink: 'syz.5.852': attribute type 12 has an invalid length. [ 328.909931][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 329.076875][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 329.076899][ T31] audit: type=1326 audit(1783514077.573:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.9.853" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc479de59 code=0x7ffc0000 [ 329.114662][ T31] audit: type=1326 audit(1783514077.583:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.9.853" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc479de59 code=0x7ffc0000 [ 329.169858][ T31] audit: type=1326 audit(1783514077.583:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.9.853" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc479de59 code=0x7ffc0000 [ 329.282914][ T31] audit: type=1326 audit(1783514077.583:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.9.853" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbdc479de59 code=0x7ffc0000 [ 329.336633][ T5778] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 329.405427][ T31] audit: type=1326 audit(1783514077.603:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.9.853" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc479de59 code=0x7ffc0000 [ 329.491992][ T31] audit: type=1326 audit(1783514077.653:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.9.853" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc479de59 code=0x7ffc0000 [ 329.523612][ T31] audit: type=1326 audit(1783514077.653:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.9.853" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc479de59 code=0x7ffc0000 [ 329.530706][ T9334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.858'. [ 329.557310][ T6339] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.569833][ T5778] usb 8-1: Using ep0 maxpacket: 16 [ 329.598318][ T5778] usb 8-1: unable to get BOS descriptor or descriptor too short [ 329.616384][ T5778] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.627616][ T31] audit: type=1326 audit(1783514077.653:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.9.853" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc479de59 code=0x7ffc0000 [ 329.653569][ T5778] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.667300][ T31] audit: type=1326 audit(1783514077.653:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.9.853" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc479de59 code=0x7ffc0000 [ 329.714623][ T5778] usb 8-1: string descriptor 0 read error: -22 [ 329.721423][ T5778] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 329.734641][ T5778] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.744370][ T31] audit: type=1326 audit(1783514077.653:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.9.853" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbdc475e68e code=0x7ffc0000 [ 329.781956][ T5778] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 329.791329][ T5778] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 329.905971][ T6339] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.105590][ T5778] usb 8-1: 2:1 : can't get High Capability descriptor [ 330.166347][ T5621] Bluetooth: hci6: command tx timeout [ 330.203782][ T6339] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.296553][ T9342] fuse: Bad value for 'fd' [ 330.534432][ T5778] usb 8-1: USB disconnect, device number 3 [ 332.573641][ T5621] Bluetooth: hci6: command tx timeout [ 332.574709][ T5626] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 333.071603][ T58] Bluetooth: (null): Invalid header checksum [ 333.088208][ T6339] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.099239][ T9359] fuse: Bad value for 'fd' [ 333.602324][ T9370] netlink: 'syz.4.870': attribute type 12 has an invalid length. [ 333.832825][ T9368] loop2: detected capacity change from 0 to 8 [ 334.077116][ T9368] syz.2.869: attempt to access beyond end of device [ 334.077116][ T9368] loop2: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 334.148424][ T9368] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 334.180393][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 334.180418][ T31] audit: type=1800 audit(1783514082.673:587): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.868" name="/" dev="fuse" ino=2 res=0 errno=0 [ 334.222667][ T9368] unable to read xattr id index table [ 334.646385][ T5626] Bluetooth: hci6: command tx timeout [ 334.931994][ T6339] bridge_slave_1: left allmulticast mode [ 334.967321][ T6339] bridge_slave_1: left promiscuous mode [ 334.992478][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.079531][ T6339] bridge_slave_0: left allmulticast mode [ 335.111424][ T6339] bridge_slave_0: left promiscuous mode [ 335.135704][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.314594][ T9389] loop9: detected capacity change from 0 to 256 [ 335.408578][ T9389] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 335.932312][ T6339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.953869][ T6339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.973442][ T6339] bond0 (unregistering): Released all slaves [ 337.049786][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.072380][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.108921][ T9280] bridge_slave_0: entered allmulticast mode [ 337.158297][ T9280] bridge_slave_0: entered promiscuous mode [ 337.213081][ T6339] hsr_slave_0: left promiscuous mode [ 337.231092][ T6339] hsr_slave_1: left promiscuous mode [ 337.616541][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.715899][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.184735][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.301799][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.619025][ T6339] veth1_macvtap: left promiscuous mode [ 338.650545][ T6339] veth0_macvtap: left promiscuous mode [ 338.682879][ T6339] veth1_vlan: left promiscuous mode [ 338.730631][ T6339] veth0_vlan: left promiscuous mode [ 339.874803][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.890'. [ 340.152766][ T6339] team0 (unregistering): Port device team_slave_1 removed [ 340.197968][ T6339] team0 (unregistering): Port device team_slave_0 removed [ 340.802695][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.813426][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.830940][ T9280] bridge_slave_1: entered allmulticast mode [ 340.850918][ T9280] bridge_slave_1: entered promiscuous mode [ 340.871993][ T9444] netlink: 'syz.7.886': attribute type 12 has an invalid length. [ 340.900668][ T5282] 8021q: adding VLAN 0 to HW filter on device eth17 [ 340.963047][ T9461] netlink: 36 bytes leftover after parsing attributes in process `syz.2.890'. [ 341.295109][ T9280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.362585][ T9280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.578385][ T9280] team0: Port device team_slave_0 added [ 341.643852][ T9280] team0: Port device team_slave_1 added [ 341.924584][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.955194][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.216043][ T9280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.259705][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.372844][ T9503] loop5: detected capacity change from 0 to 512 [ 342.794789][ T9503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.808995][ T9503] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.891959][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.288326][ T9280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.849152][ T9280] hsr_slave_0: entered promiscuous mode [ 343.893769][ T9280] hsr_slave_1: entered promiscuous mode [ 343.947676][ T9280] debugfs: 'hsr0' already exists in 'hsr' [ 343.988256][ T9280] Cannot create hsr debugfs directory [ 344.555083][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.069612][ T5282] 8021q: adding VLAN 0 to HW filter on device eth18 [ 347.300014][ T9553] netlink: 'syz.2.909': attribute type 12 has an invalid length. [ 347.330728][ T9280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.382188][ T9280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.407810][ T9280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.445227][ T9280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.582243][ T9559] binder: 9558:9559 ioctl c0306201 200000000680 returned -14 [ 347.612031][ T9280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.659231][ T9280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.709108][ T9280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.809521][ T9280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 348.339756][ T9280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.567043][ T5282] 8021q: adding VLAN 0 to HW filter on device eth19 [ 348.653537][ T9280] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.654827][ T9582] binder_alloc: 9581: binder_alloc_buf size -128 failed, no address space [ 348.714227][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.721788][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.724992][ T9582] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 348.796148][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.803434][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.633613][ T9622] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 350.687770][ T9622] bond2: entered allmulticast mode [ 350.819881][ T9625] bridge5: entered promiscuous mode [ 350.879681][ T9625] bridge5: entered allmulticast mode [ 350.920495][ T9625] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 351.642105][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20 [ 351.713286][ T9280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.852435][ T9280] veth0_vlan: entered promiscuous mode [ 351.870591][ T9280] veth1_vlan: entered promiscuous mode [ 351.925114][ T9280] veth0_macvtap: entered promiscuous mode [ 351.942673][ T9280] veth1_macvtap: entered promiscuous mode [ 351.974647][ T9280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.997240][ T9280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.013912][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.023151][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.034021][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.058485][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.191867][ T6340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.212079][ T6340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.252820][ T6340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.261718][ T6340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.124015][ T9676] netlink: 'syz.3.931': attribute type 12 has an invalid length. [ 353.161492][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.933'. [ 354.485867][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 356.185052][ T9718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.267714][ T9719] binder_alloc: 9717: binder_alloc_buf size -128 failed, no address space [ 356.307289][ T9719] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 357.220223][ T9715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.336723][ T9715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.623829][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.953'. [ 357.677433][ T9736] dummy0: left promiscuous mode [ 357.713584][ T9736] netlink: 'syz.4.953': attribute type 10 has an invalid length. [ 357.771144][ T9736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.953'. [ 357.854207][ T9736] dummy0: entered promiscuous mode [ 359.467954][ T9760] netlink: 'syz.4.959': attribute type 12 has an invalid length. [ 359.549976][ T9766] loop5: detected capacity change from 0 to 256 [ 359.686073][ T9766] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 359.795431][ T29] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 359.988579][ T29] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 360.100045][ T29] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 360.842497][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.865356][ T29] usb 3-1: Product: syz [ 360.869589][ T29] usb 3-1: Manufacturer: syz [ 360.874277][ T29] usb 3-1: SerialNumber: syz [ 361.282663][ T29] usb 3-1: can't set config #4, error -71 [ 361.363123][ T29] usb 3-1: USB disconnect, device number 8 [ 364.189196][ T9823] loop2: detected capacity change from 0 to 512 [ 364.266573][ T9823] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 364.385305][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 364.391893][ C0] EXT4-fs (loop2): initial error at time 1783514112: ext4_mb_generate_buddy:1314 [ 364.401324][ C0] EXT4-fs (loop2): last error at time 1783514112: ext4_mb_generate_buddy:1314 [ 364.443177][ T9823] EXT4-fs (loop2): Remounting filesystem read-only [ 364.539936][ T9823] EXT4-fs (loop2): 1 truncate cleaned up [ 364.606971][ T5626] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 364.614402][ T5626] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 364.629608][ T9836] loop5: detected capacity change from 0 to 512 [ 364.634389][ T9823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.793861][ T9836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.820256][ T9823] EXT4-fs (loop2): shut down requested (0) [ 364.888171][ T9836] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.944885][ T9847] fuse: fd is not a fuse device [ 365.024573][ T9847] fuse: fd is not a fuse device [ 365.076826][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.097935][ T9836] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 18: comm syz.5.978: lblock 23 mapped to illegal pblock 18 (length 1) [ 365.268983][ T9848] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 18: comm syz.5.978: lblock 23 mapped to illegal pblock 18 (length 1) [ 365.379101][ T9836] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.978: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 365.557175][ T9836] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.978: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 365.655616][ T9848] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 18: comm syz.5.978: lblock 23 mapped to illegal pblock 18 (length 1) [ 365.832961][ T9848] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 18: comm syz.5.978: lblock 23 mapped to illegal pblock 18 (length 1) [ 365.968354][ T9848] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 18: comm syz.5.978: lblock 23 mapped to illegal pblock 18 (length 1) [ 365.989392][ T9836] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.978: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 366.596968][ T9848] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.978: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 366.788054][ T9848] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.978: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 367.169268][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.465823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 374.039787][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.7.999'. [ 378.026141][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.032601][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.005996][T10017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.060390][T10017] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1026'. [ 383.606200][T10066] fuse: Bad value for 'fd' [ 383.623988][T10067] loop5: detected capacity change from 0 to 128 [ 384.726864][T10090] fuse: Bad value for 'fd' [ 384.765255][T10090] tmpfs: Bad value for 'mpol' [ 387.492317][T10134] netlink: 'syz.4.1057': attribute type 1 has an invalid length. [ 387.741775][T10134] 8021q: adding VLAN 0 to HW filter on device bond5 [ 387.860452][T10137] vlan0: entered allmulticast mode [ 387.899480][T10137] veth0_to_bond: entered allmulticast mode [ 387.946966][T10137] bond5: (slave vlan0): making interface the new active one [ 387.980360][T10137] bond5: (slave vlan0): Enslaving as an active interface with an up link [ 388.306200][T10151] overlayfs: failed to clone upperpath [ 388.376059][T10153] overlayfs: failed to clone upperpath [ 392.847493][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'. [ 393.999942][T10214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.364977][ T31] audit: type=1326 audit(1783514142.853:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.7.1079" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cce19de59 code=0x0 [ 394.945077][T10237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.956200][T10237] IPv6: NLM_F_CREATE should be set when creating new route [ 396.063882][T10256] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1088'. [ 396.232886][T10261] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 397.809325][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 397.881551][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 397.934619][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 398.665376][ T804] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 399.547979][ T804] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.599486][ T804] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 399.689002][ T5778] IPVS: starting estimator thread 0... [ 399.716931][ T804] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 399.745476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 399.805427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 399.975025][ T804] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 399.984562][ T804] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 399.992688][ T804] usb 8-1: Manufacturer: syz [ 400.002719][T10327] IPVS: using max 29 ests per chain, 69600 per kthread [ 400.821556][ T804] usb 8-1: config 0 descriptor?? [ 401.246357][ T804] usb 8-1: can't set config #0, error -71 [ 401.845121][ T804] usb 8-1: USB disconnect, device number 4 [ 402.243305][T10346] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 402.969262][T10366] loop5: detected capacity change from 0 to 512 [ 402.989612][T10366] EXT4-fs: Ignoring removed orlov option [ 403.033522][T10366] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.024148][T10366] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.1117: corrupted in-inode xattr: e_value size too large [ 404.071091][T10371] veth0_to_bond: entered promiscuous mode [ 404.149802][T10366] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 404.150390][T10366] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1117: couldn't read orphan inode 15 (err -117) [ 404.159766][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 404.159801][ C0] EXT4-fs (loop5): initial error at time 1783514152: ext4_iget_extra_inode:5179: inode 15 [ 404.159857][ C0] EXT4-fs (loop5): last error at time 1783514152: ext4_iget_extra_inode:5179: inode 15 [ 404.305243][T10366] loop5: lost filesystem error report for type 5 error -117 [ 404.378915][T10366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.991351][T10366] loop5: detected capacity change from 512 to 64 [ 405.310524][T10366] Dev loop5: unable to read RDB block 8 [ 405.340081][T10366] loop5: unable to read partition table [ 406.038019][T10366] loop_reread_partitions: partition scan of loop5 (ï5ŸA;¹8o÷Ö¤®mÝûÑÎ])Âî^\©) failed (rc=-5) [ 406.341598][ T5620] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 1: comm syz-executor: error -ENOMEM reading directory block [ 408.430279][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.494585][ T5620] syz_tun (unregistering): left allmulticast mode [ 409.521330][ T5620] syz_tun (unregistering): left promiscuous mode [ 409.561487][ T5620] bridge0: port 3(syz_tun) entered disabled state [ 410.894343][T10441] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.901781][T10441] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.024013][T10441] dummy0: left promiscuous mode [ 411.337072][T10441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.388943][T10441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.119931][T10441] vlan0: left allmulticast mode [ 412.174796][T10441] veth0_to_bond: left allmulticast mode [ 412.724986][ T6325] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.727674][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.759254][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.770500][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.782517][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.791843][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.799568][ T6325] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.808756][ T6325] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.819281][ T6325] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.830560][ T6325] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.842286][ T6325] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.858160][ T6325] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.879454][ T6325] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.087818][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1149'. [ 413.133050][T10486] netlink: 'syz.9.1149': attribute type 7 has an invalid length. [ 413.166816][T10489] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1149'. [ 413.186237][T10486] netlink: 'syz.9.1149': attribute type 8 has an invalid length. [ 413.196485][T10489] netlink: 'syz.9.1149': attribute type 7 has an invalid length. [ 413.204328][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1149'. [ 413.223690][T10489] netlink: 'syz.9.1149': attribute type 8 has an invalid length. [ 413.238609][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1149'. [ 414.885561][ T5621] Bluetooth: hci0: command tx timeout [ 415.620041][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 415.648572][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 416.965498][ T5621] Bluetooth: hci0: command tx timeout [ 417.050313][ T6326] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 417.338539][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.357018][T10469] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.374486][T10469] bridge_slave_0: entered allmulticast mode [ 417.392723][T10469] bridge_slave_0: entered promiscuous mode [ 417.414183][T10469] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.422983][T10569] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1178'. [ 417.443412][T10469] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.473423][T10469] bridge_slave_1: entered allmulticast mode [ 417.488543][T10572] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1168'. [ 417.508388][T10469] bridge_slave_1: entered promiscuous mode [ 417.511147][T10572] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1168'. [ 417.559976][T10572] netlink: 'syz.3.1168': attribute type 5 has an invalid length. [ 417.591665][T10572] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1168'. [ 418.554409][T10469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.601250][T10469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.738792][T10469] team0: Port device team_slave_0 added [ 418.798872][T10469] team0: Port device team_slave_1 added [ 418.876405][T10583] bond1: (slave ip6gretap1): making interface the new active one [ 418.889271][T10583] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 418.915851][T10469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.934146][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.993630][T10469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.038454][T10469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.045782][ T5621] Bluetooth: hci0: command tx timeout [ 419.057245][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.083685][T10469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.240243][T10469] hsr_slave_0: entered promiscuous mode [ 419.281477][T10469] hsr_slave_1: entered promiscuous mode [ 419.316715][T10469] debugfs: 'hsr0' already exists in 'hsr' [ 419.345702][T10469] Cannot create hsr debugfs directory [ 420.916622][T10615] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1182'. [ 421.131065][ T5621] Bluetooth: hci0: command tx timeout [ 422.530531][ C0] Unknown status report in ack skb [ 422.907533][T10662] vlan1: entered allmulticast mode [ 422.912887][T10662] bond0: entered allmulticast mode [ 422.924399][T10662] bond_slave_0: entered allmulticast mode [ 422.938272][T10662] bond_slave_1: entered allmulticast mode [ 422.948017][T10663] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1193'. [ 423.368096][T10663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.001270][T10663] bond_slave_0: left allmulticast mode [ 424.057647][T10663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.093935][T10663] bond_slave_1: left allmulticast mode [ 424.135190][T10663] bond0 (unregistering): Released all slaves [ 424.271296][T10469] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.353512][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.392777][T10469] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.423588][T10675] overlayfs: failed to clone upperpath [ 424.488809][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.534575][T10469] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 425.728771][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.788966][T10469] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.971247][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.922389][T10469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.035242][T10469] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.370946][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.378196][ T6340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.666898][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.674277][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.883351][T10755] netlink: 'syz.3.1218': attribute type 4 has an invalid length. [ 431.035602][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 431.191943][T10765] overlayfs: failed to clone upperpath [ 431.227375][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 432.225526][ T30] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 432.246767][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.220245][ T30] usb 8-1: Product: syz [ 433.234743][ T30] usb 8-1: Manufacturer: syz [ 433.243786][ T30] usb 8-1: SerialNumber: syz [ 433.255019][ T30] usb 8-1: config 0 descriptor?? [ 433.868729][ T30] usb 8-1: can't set config #0, error -71 [ 433.912837][ T30] usb 8-1: USB disconnect, device number 5 [ 434.128908][T10786] loop7: detected capacity change from 0 to 256 [ 434.187692][T10786] exFAT-fs (loop7): Invalid exboot-signature(sector = 2): 0x1119abd0 [ 435.098560][T10786] exFAT-fs (loop7): Invalid exboot-signature(sector = 5): 0x1119abd0 [ 435.158943][T10786] exFAT-fs (loop7): Invalid exboot-signature(sector = 6): 0x00000000 [ 435.217570][T10786] exFAT-fs (loop7): Invalid exboot-signature(sector = 7): 0x00000000 [ 435.227900][T10786] exFAT-fs (loop7): Invalid exboot-signature(sector = 8): 0x00000000 [ 435.238129][T10786] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e) [ 435.249109][T10786] exFAT-fs (loop7): invalid boot region [ 435.255090][T10786] exFAT-fs (loop7): failed to recognize exfat type [ 437.222344][T10469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.659947][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 437.697352][T10469] veth0_vlan: entered promiscuous mode [ 437.920940][T10469] veth1_vlan: entered promiscuous mode [ 438.206482][T10469] veth0_macvtap: entered promiscuous mode [ 438.278670][T10469] veth1_macvtap: entered promiscuous mode [ 438.414485][T10469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.562506][T10469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.670242][ T6340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.363040][ T6329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.411530][T10860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1241'. [ 439.449473][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.461099][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.591059][ T6329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.845918][ T6329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.312098][ T8458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.384916][ T8458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.599878][ T8458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.604835][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1248'. [ 440.633920][ T8458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.682874][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1248'. [ 443.910707][T10939] loop7: detected capacity change from 0 to 1024 [ 443.958246][T10939] EXT4-fs (loop7): filesystem is read-only [ 443.991186][T10939] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 444.024280][T10945] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1264'. [ 444.042372][T10939] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 444.078791][T10939] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 444.133949][T10939] EXT4-fs error (device loop7): ext4_get_journal_inode:5900: comm syz.7.1263: inode #1: comm syz.7.1263: iget: illegal inode # [ 444.180436][T10939] loop7: lost filesystem error report for type 5 error -117 [ 444.186029][T10951] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1266'. [ 444.206300][T10949] vlan5: entered allmulticast mode [ 444.213954][T10939] EXT4-fs (loop7): no journal found [ 444.219309][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 444.219342][ C1] EXT4-fs (loop7): initial error at time 1783514192: ext4_get_journal_inode:5900 [ 444.219386][ C1] EXT4-fs (loop7): last error at time 1783514192: ext4_get_journal_inode:5900 [ 444.249220][T10949] bond0: entered allmulticast mode [ 444.273988][T10949] bond_slave_0: entered allmulticast mode [ 444.291474][T10939] EXT4-fs (loop7): can't get journal size [ 444.303143][T10949] bond_slave_1: entered allmulticast mode [ 444.333351][T10939] EXT4-fs error (device loop7): __ext4_fill_super:5600: inode #2: comm syz.7.1263: iget: special inode unallocated [ 444.375706][T10939] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 444.376106][T10939] EXT4-fs (loop7): get root inode failed [ 444.395571][T10939] EXT4-fs (loop7): mount failed [ 444.412281][T10951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.447058][T10951] bond_slave_0: left allmulticast mode [ 444.483454][T10951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.536987][T10951] bond_slave_1: left allmulticast mode [ 444.600392][T10951] bond0 (unregistering): Released all slaves [ 445.726561][ T8464] bond2: (slave vlan3): link status definitely down, disabling slave [ 445.751675][ T8464] bond2: now running without any active interface! [ 446.032840][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1271'. [ 449.090318][T11025] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 449.248787][T11030] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1288'. [ 449.894600][T11027] vlan3: entered allmulticast mode [ 449.918780][T11027] bond0: entered allmulticast mode [ 449.961909][T11027] bond_slave_0: entered allmulticast mode [ 449.991419][T11027] bond_slave_1: entered allmulticast mode [ 450.237166][T11030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.332801][T11030] bond_slave_0: left allmulticast mode [ 450.437789][T11030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.544194][T11030] bond_slave_1: left allmulticast mode [ 450.573159][T11030] bond0 (unregistering): Released all slaves [ 451.731236][T11063] fuse: Bad value for 'fd' [ 451.767950][ T5626] Bluetooth: hci6: command 0x0406 tx timeout [ 451.810517][T11062] loop7: detected capacity change from 0 to 2048 [ 451.865069][T11062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.914761][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 457.240105][T11141] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 457.414586][T11146] netlink: 'syz.1.1318': attribute type 10 has an invalid length. [ 457.458734][T11146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1318'. [ 457.549299][T11146] dummy0: entered promiscuous mode [ 458.985676][ T5745] IPVS: starting estimator thread 0... [ 459.115527][T11163] IPVS: using max 22 ests per chain, 52800 per kthread [ 461.122311][T11219] trusted_key: syz.3.1341 sent an empty control message without MSG_MORE. [ 461.145648][T11222] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1340'. [ 464.941906][T11277] netlink: 'syz.9.1356': attribute type 1 has an invalid length. [ 465.196236][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 465.206417][T11277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.310070][T11279] bond1: (slave ip6gretap1): making interface the new active one [ 465.385106][T11279] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 465.797190][T11299] netlink: 666 bytes leftover after parsing attributes in process `syz.9.1360'. [ 467.715696][T11320] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.723170][T11320] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.892327][T11320] bridge0: entered allmulticast mode [ 467.930383][T11323] overlayfs: failed to clone upperpath [ 468.071928][T11320] bridge_slave_1: left allmulticast mode [ 468.259207][T11320] bridge_slave_1: left promiscuous mode [ 468.287287][T11320] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.344368][T11320] bridge_slave_0: left allmulticast mode [ 468.351411][T11320] bridge_slave_0: left promiscuous mode [ 468.365570][T11320] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.920190][T11345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.927463][T11345] IPv6: NLM_F_CREATE should be set when creating new route [ 469.766095][T11363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1379'. [ 469.868447][T11366] netlink: 'syz.2.1380': attribute type 1 has an invalid length. [ 470.029865][T11369] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 470.048169][T11369] bond0 (unregistering): Released all slaves [ 470.211635][T11366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.288631][T11372] bond0: (slave ip6gretap1): making interface the new active one [ 470.318691][T11372] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 471.780594][T11385] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[11386] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[11385] [ 472.123440][T11390] syz_tun: entered allmulticast mode [ 472.175141][T11389] syz_tun: left allmulticast mode [ 472.431833][T11394] fuse: fd is not a fuse device [ 476.097520][T11430] loop1: detected capacity change from 0 to 512 [ 476.895233][T11432] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 477.304799][T11430] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 477.465580][T11435] bond0 (unregistering): Released all slaves [ 478.276879][T11432] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 478.424521][T11438] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 479.010318][T11453] ip6gretap0: entered promiscuous mode [ 479.128059][T11473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.321266][T11453] ip6gretap0: entered allmulticast mode [ 481.723712][T11509] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 481.764876][T11509] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1416'. [ 482.082788][T11522] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 482.541312][T11527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 482.622918][T11527] bond4: (slave bond5): making interface the new active one [ 482.686907][T11527] bond4: (slave bond5): Enslaving as an active interface with an up link [ 482.830720][T11529] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 485.798260][T11563] could not allocate digest TFM handle hmac(streebog512) [ 486.268114][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 492.468208][T11649] fuse: Bad value for 'fd' [ 493.025735][T11649] 9p: Bad value for 'rfdno' [ 493.469809][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1451'. [ 493.581748][T11661] ip6gre1: entered promiscuous mode [ 493.614934][T11661] ip6gre1: entered allmulticast mode [ 493.645492][T11668] netlink: 'syz.7.1451': attribute type 6 has an invalid length. [ 493.684321][T11668] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1451'. [ 495.184205][T11702] netdevsim netdevsim9: Firmware load for '../file0/file0' refused, path contains '..' component [ 495.327301][ T5880] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 495.608672][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 496.006098][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 496.036028][ T5880] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 496.050766][ T5880] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 496.076545][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.171432][ T5880] usb 2-1: Product: syz [ 496.192000][ T5880] usb 2-1: Manufacturer: syz [ 496.228880][ T5880] usb 2-1: SerialNumber: syz [ 496.554915][T11690] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1459'. [ 496.779507][ T5880] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 496.827099][T11690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.842616][ T5880] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 496.953155][T11690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.080275][ T5880] usb 2-1: 2:1 : can't get High Capability descriptor [ 497.671729][ T5880] usb 2-1: USB disconnect, device number 3 [ 498.817736][T11744] fuse: fd is not a fuse device [ 501.137095][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.148339][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.196823][T11800] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1487'. [ 507.147628][T11836] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 507.176850][T11839] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 507.186242][T11839] overlayfs: failed to set xattr on upper [ 507.191988][T11839] overlayfs: ...falling back to redirect_dir=nofollow. [ 507.198945][T11839] overlayfs: ...falling back to index=off. [ 507.204759][T11839] overlayfs: ...falling back to uuid=null. [ 507.247734][T11839] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 507.412517][ T31] audit: type=1326 audit(1783514255.903:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.4.1501" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7c79de59 code=0x7ffc0000 [ 507.561511][ T31] audit: type=1326 audit(1783514255.903:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.4.1501" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7c79de59 code=0x7ffc0000 [ 507.689281][ T31] audit: type=1326 audit(1783514255.933:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.4.1501" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7c79de59 code=0x7ffc0000 [ 507.848035][ T31] audit: type=1326 audit(1783514255.933:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.4.1501" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7c79de59 code=0x7ffc0000 [ 507.932060][ T31] audit: type=1326 audit(1783514255.933:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.4.1501" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3a7c79de59 code=0x7ffc0000 [ 507.997095][T11836] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 508.070515][T11844] IPVS: Unknown mcast interface: bridge0 [ 508.125477][ T31] audit: type=1326 audit(1783514255.983:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.4.1501" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7c79de59 code=0x7ffc0000 [ 508.309124][ T31] audit: type=1326 audit(1783514255.983:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.4.1501" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7c79de59 code=0x7ffc0000 [ 508.471763][ T31] audit: type=1326 audit(1783514255.983:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.4.1501" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a7c75e68e code=0x7ffc0000 [ 508.560974][ T31] audit: type=1326 audit(1783514255.983:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.4.1501" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a7c75e68e code=0x7ffc0000 [ 508.699108][ T31] audit: type=1326 audit(1783514255.983:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.4.1501" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a7c75e68e code=0x7ffc0000 [ 515.081193][T11931] xt_hashlimit: max too large, truncated to 1048576 [ 518.419601][T11961] pim6reg: entered allmulticast mode [ 518.471104][T11967] team0: entered allmulticast mode [ 518.511862][T11967] team_slave_0: entered allmulticast mode [ 518.550263][T11967] team_slave_1: entered allmulticast mode [ 518.614222][T11968] team0: left allmulticast mode [ 518.871646][T11968] team_slave_0: left allmulticast mode [ 518.880902][T11968] team_slave_1: left allmulticast mode [ 518.887458][T11968] pim6reg: left allmulticast mode [ 520.871703][T11998] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 520.908290][T11998] netlink: 'syz.2.1539': attribute type 4 has an invalid length. [ 520.955143][T11998] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1539'. [ 522.666771][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 523.057500][T12032] syzkaller0: entered promiscuous mode [ 523.084154][T12032] syzkaller0: entered allmulticast mode [ 523.131881][T12032] tipc: Started in network mode [ 523.154383][T12032] tipc: Node identity 3a565cbb86ee, cluster identity 4711 [ 523.193693][T12032] tipc: Enabled bearer , priority 0 [ 523.664121][T12028] tipc: Resetting bearer [ 523.820883][T12028] tipc: Disabling bearer [ 525.489526][T12058] netlink: 'syz.2.1553': attribute type 2 has an invalid length. [ 526.836077][T12079] fuse: fd is not a fuse device [ 529.760564][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1585'. [ 532.503290][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 532.803746][T12164] tipc: Started in network mode [ 532.816149][T12164] tipc: Node identity 7f000001, cluster identity 4711 [ 532.833375][T12164] tipc: Enabling of bearer rejected, failed to enable media [ 532.859957][T12164] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1586'. [ 532.907614][T12164] tipc: Enabling of bearer rejected, failed to enable media [ 534.598063][T12190] fuse: Bad value for 'fd' [ 539.197949][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 539.761388][T12252] fuse: fd is not a fuse device [ 540.855241][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'. [ 540.878025][T12266] netlink: 'syz.2.1617': attribute type 7 has an invalid length. [ 540.900167][T12266] netlink: 'syz.2.1617': attribute type 8 has an invalid length. [ 540.917406][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'. [ 540.932700][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 540.989470][T12267] netlink: 'syz.2.1617': attribute type 7 has an invalid length. [ 541.017527][T12267] netlink: 'syz.2.1617': attribute type 8 has an invalid length. [ 541.062900][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 543.643100][T12309] fuse: fd is not a fuse device [ 550.077066][ T5626] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 550.543085][T12354] bond0 (unregistering): Released all slaves [ 550.668750][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 551.434148][T12385] loop1: detected capacity change from 0 to 512 [ 551.552356][T12385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.558937][T12387] overlayfs: failed to clone upperpath [ 551.700286][T12385] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.715603][T12404] __quota_error: 63 callbacks suppressed [ 552.715630][T12404] Quota error (device loop1): do_check_range: Getting block 4128768 out of range 0-5 [ 553.050827][T12401] netlink: 'syz.4.1651': attribute type 11 has an invalid length. [ 553.471007][T12405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.669576][T12405] veth0_to_bond: left promiscuous mode [ 554.793444][T12425] netlink: 'syz.2.1654': attribute type 1 has an invalid length. [ 555.068406][T10469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.102702][T12405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.119694][T12405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.188064][T12405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 555.190461][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 555.219824][T12405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.298092][T12405] veth0_macvtap: left promiscuous mode [ 555.545757][T12405] veth0_macvtap: entered promiscuous mode [ 555.571373][T12405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 555.580031][T12405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 555.591622][T12405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 555.600892][T12405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.842352][T12405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.857877][T12405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.870848][T12405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 555.880719][T12405] 8021q: adding VLAN 0 to HW filter on device bond4 [ 555.910263][T12405] 8021q: adding VLAN 0 to HW filter on device bond5 [ 555.919951][T12405] veth0_to_bond: entered promiscuous mode [ 556.039031][ T6325] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 556.346323][ T6325] bond2: (slave veth5): making interface the new active one [ 556.360311][ T6325] bond2: active interface up! [ 557.226800][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.234145][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.258781][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.266041][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.373227][T12425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 557.393326][T12442] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 558.469114][ T14] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.074217][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.320984][ T37] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.369380][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.125991][ T6339] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.153643][ T6339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.191981][ T6339] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.258592][ T6339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.283363][ T31] audit: type=1804 audit(1783514308.773:662): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1669" name="bus" dev="ramfs" ino=34461 res=1 errno=0 [ 560.448137][ T31] audit: type=1804 audit(1783514308.843:663): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1669" name="bus" dev="ramfs" ino=34461 res=1 errno=0 [ 562.446107][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.489609][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.210194][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 565.595451][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 566.500176][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 566.580236][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 566.625703][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 566.663827][ T5893] usb 2-1: can't read configurations, error -71 [ 573.509598][T12617] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 573.538446][T12617] batman_adv: batadv0: Adding interface: gretap2 [ 573.555188][T12617] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.298090][T12617] batman_adv: batadv0: Interface activated: gretap2 [ 574.462791][T12632] fuse: fd is not a fuse device [ 574.609738][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1710'. [ 574.888146][T12637] bond3: entered promiscuous mode [ 574.911787][T12637] bond3: entered allmulticast mode [ 575.637098][ T31] audit: type=1804 audit(1783514324.123:664): pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1712" name="bus" dev="ramfs" ino=34633 res=1 errno=0 [ 575.742010][ T31] audit: type=1804 audit(1783514324.163:665): pid=12647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1712" name="bus" dev="ramfs" ino=34633 res=1 errno=0 [ 575.819211][ T31] audit: type=1326 audit(1783514324.183:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1713" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db6b9de59 code=0x7ffc0000 [ 575.879688][T12655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1714'. [ 575.899672][ T31] audit: type=1326 audit(1783514324.183:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1713" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db6b9de59 code=0x7ffc0000 [ 575.956866][ T31] audit: type=1326 audit(1783514324.233:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1713" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db6b9de59 code=0x7ffc0000 [ 575.990229][ T31] audit: type=1326 audit(1783514324.233:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1713" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db6b9de59 code=0x7ffc0000 [ 576.292371][ T31] audit: type=1326 audit(1783514324.233:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1713" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7db6b9de59 code=0x7ffc0000 [ 577.017348][ T31] audit: type=1326 audit(1783514324.233:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1713" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db6b9de59 code=0x7ffc0000 [ 577.077903][ T31] audit: type=1326 audit(1783514324.233:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1713" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db6b9de59 code=0x7ffc0000 [ 577.224050][ T31] audit: type=1326 audit(1783514324.233:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1713" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db6b9de59 code=0x7ffc0000 [ 580.235562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 581.143181][T12680] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 581.188755][T12680] batman_adv: batadv0: Adding interface: gretap1 [ 581.202762][T12680] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.252788][T12680] batman_adv: batadv0: Interface activated: gretap1 [ 583.844778][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.852329][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.184015][T12716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1734'. [ 584.213389][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1734'. [ 584.263495][T12716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1734'. [ 585.257116][T12702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.450958][T12702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.959809][T12747] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1743'. [ 588.283199][ T8453] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.309403][ T8453] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.362755][T12752] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 588.391039][T12752] batman_adv: batadv0: Adding interface: gretap1 [ 588.398178][T12752] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.465423][T12752] batman_adv: batadv0: Interface activated: gretap1 [ 588.484244][ T8453] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.505667][ T8453] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.998512][ T30] IPVS: starting estimator thread 0... [ 589.895607][T12772] IPVS: using max 25 ests per chain, 60000 per kthread [ 594.592408][T12845] syzkaller0: entered promiscuous mode [ 594.604514][T12845] syzkaller0: entered allmulticast mode [ 599.848860][T12888] tipc: Failed to remove unknown binding: 66,0,0/0:3210228528/3210228530 [ 599.857852][T12888] tipc: Failed to remove unknown binding: 66,0,0/0:3210228528/3210228529 [ 599.919269][T12888] tipc: Failed to remove unknown binding: 66,0,0/0:3210228528/3210228530 [ 599.928015][T12888] tipc: Failed to remove unknown binding: 66,0,0/0:3210228528/3210228529 [ 601.343119][ T24] IPVS: starting estimator thread 0... [ 601.475446][T12898] IPVS: using max 29 ests per chain, 69600 per kthread [ 603.841698][T12919] tipc: Failed to remove unknown binding: 66,1,1/0:1815005255/1815005257 [ 603.909455][T12919] tipc: Failed to remove unknown binding: 66,1,1/0:1815005255/1815005257 [ 603.925109][T12919] tipc: Failed to remove unknown binding: 66,1,1/0:1815005255/1815005257 [ 604.280649][T12927] tipc: Started in network mode [ 604.296956][T12927] tipc: Node identity 4, cluster identity 4711 [ 604.308945][T12927] tipc: Node number set to 4 [ 607.906176][ T31] kauditd_printk_skb: 49 callbacks suppressed [ 607.906305][ T31] audit: type=1326 audit(1783514356.363:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12978 comm="syz.2.1807" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x0 [ 609.639399][T13008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.796493][ T1126] bridge_slave_1: left allmulticast mode [ 610.857536][ T1126] bridge_slave_1: left promiscuous mode [ 610.871847][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.122434][ T1126] bridge_slave_0: left allmulticast mode [ 611.174718][ T1126] bridge_slave_0: left promiscuous mode [ 611.423849][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.715840][T13043] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1817'. [ 613.374917][ T1126] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 613.551046][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.564983][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.575730][ T1126] bond0 (unregistering): Released all slaves [ 613.591083][ T1126] bond1 (unregistering): Released all slaves [ 613.617013][ T1126] bond2 (unregistering): Released all slaves [ 613.687047][T13022] syz_tun: entered allmulticast mode [ 613.910036][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 614.155090][ T5626] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 623.752245][T13150] netlink: 'syz.3.1844': attribute type 33 has an invalid length. [ 624.763560][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.776034][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.725882][ T1126] hsr_slave_0: left promiscuous mode [ 626.103325][ T1126] hsr_slave_1: left promiscuous mode [ 626.173605][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.522916][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.681368][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 629.778122][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 631.792681][T13150] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 631.902096][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 636.455584][T13254] loop1: detected capacity change from 0 to 164 [ 638.141034][T13280] loop1: detected capacity change from 0 to 256 [ 643.390283][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 643.891324][T13349] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 645.578114][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 650.559746][T13404] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[7485] was attempted by " [ 656.183375][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 656.745811][T13494] netlink: 'syz.7.1934': attribute type 1 has an invalid length. [ 657.518657][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 663.248343][T13559] ªªªªªª: renamed from lo [ 663.756291][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1951'. [ 666.114509][T13573] vlan1: entered allmulticast mode [ 666.138897][T13573] bridge4: entered allmulticast mode [ 666.188202][T13562] bridge4: port 1(erspan0) entered blocking state [ 666.205950][T13562] bridge4: port 1(erspan0) entered disabled state [ 666.229654][T13562] erspan0: entered allmulticast mode [ 666.495555][T13562] erspan0: entered promiscuous mode [ 666.502143][T13562] bridge4: port 1(erspan0) entered blocking state [ 666.508727][T13562] bridge4: port 1(erspan0) entered forwarding state [ 667.470410][T13596] fuse: fd is not a fuse device [ 669.159398][T13630] sch_tbf: burst 12 is lower than device lo mtu (14) ! [ 674.770004][T13689] veth0_macvtap: Caught tx_queue_len zero misconfig [ 675.013943][T13697] loop1: detected capacity change from 0 to 128 [ 675.088974][T13701] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1989'. [ 685.213827][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.220633][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.355134][T13829] tipc: Enabling of bearer rejected, failed to enable media [ 691.645329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 695.291318][T13905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2036'. [ 695.329779][T13905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2036'. [ 695.373839][T13905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2036'. [ 695.607766][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 695.770609][T13918] vlan3: entered allmulticast mode [ 695.790831][T13918] bridge2: entered allmulticast mode [ 695.918039][T13909] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.976062][T13909] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.902123][T13964] loop1: detected capacity change from 0 to 512 [ 702.891589][T13964] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2052: iget: bad i_size value: 38620345925642 [ 703.048596][T13964] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 703.051013][T13964] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2052: couldn't read orphan inode 15 (err -117) [ 703.060299][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 703.060333][ C1] EXT4-fs (loop1): initial error at time 1783514451: ext4_orphan_get:1399: inode 15 [ 703.060388][ C1] EXT4-fs (loop1): last error at time 1783514451: ext4_orphan_get:1399: inode 15 [ 703.282072][T13964] loop1: lost filesystem error report for type 5 error -117 [ 703.296299][T13964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.800250][T13984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2055'. [ 703.865920][T13984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2055'. [ 703.946169][T13984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2055'. [ 704.114972][T13992] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz.1.2052: bg 0: block 5: invalid block bitmap [ 704.211651][T13992] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 188 with error 28 [ 704.358143][T13992] EXT4-fs (loop1): This should not happen!! Data will be lost [ 704.358143][T13992] [ 704.592901][T13992] EXT4-fs (loop1): Total free blocks count 0 [ 704.803940][T13992] EXT4-fs (loop1): Free/Dirty block details [ 704.992454][T13992] EXT4-fs (loop1): free_blocks=0 [ 705.037735][T13992] EXT4-fs (loop1): dirty_blocks=192 [ 705.093656][T13992] EXT4-fs (loop1): Block reservation details [ 705.181701][T13992] EXT4-fs (loop1): i_reserved_data_blocks=192 [ 705.635078][T10469] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 706.410929][T10469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.677860][T14020] xt_hashlimit: max too large, truncated to 1048576 [ 709.793513][T14071] netlink: 'syz.2.2081': attribute type 1 has an invalid length. [ 709.958166][T14071] 8021q: adding VLAN 0 to HW filter on device bond7 [ 711.143648][T14073] bridge4: port 1(erspan0) entered disabled state [ 711.285124][T14073] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.292761][T14073] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.931784][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f08b800: rx timeout, send abort [ 712.440160][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f08b800: abort rx timeout. Force session deactivation [ 712.678302][T14073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.694816][T14073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.931799][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2088'. [ 712.940562][T14109] loop1: detected capacity change from 0 to 512 [ 713.015887][T14109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.053870][T14109] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.231616][T14073] vlan1: left allmulticast mode [ 713.236970][T14073] bridge4: left allmulticast mode [ 713.367034][T14074] bond7: (slave veth7): Enslaving as an active interface with a down link [ 713.393934][T10469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.470241][T14106] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 713.526337][T14106] gretap0: entered promiscuous mode [ 713.560732][ T37] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.606899][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.666352][ T37] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.720577][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.733455][ T6329] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.815612][T14117] netlink: 'syz.4.2091': attribute type 7 has an invalid length. [ 714.857916][ T6329] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.925404][ T6329] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.978639][ T6329] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.941109][ T5626] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 720.948937][T14172] tipc: Cannot configure node identity twice [ 721.168986][T14183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.646544][ T5626] Bluetooth: hci6: Malformed LE Event: 0x0d [ 728.617743][T14226] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 728.686495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 730.957650][T14226] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 731.487619][T14254] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 731.525416][T14226] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 732.878062][T14226] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 734.267840][T14226] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 734.600962][T14280] tipc: Enabling of bearer rejected, failed to enable media [ 738.107944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 742.312792][ T5626] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 743.761601][ T5626] Bluetooth: hci1: Unknown advertising packet type: 0x18 [ 743.761676][ T5626] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 743.769735][ T5626] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 743.780286][ T5626] Bluetooth: hci1: Malformed LE Event: 0x0d [ 746.597701][T14373] tipc: Cannot configure node identity twice [ 746.650262][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.671697][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.486012][T14389] tipc: Enabling of bearer rejected, failed to enable media [ 758.164989][ T5626] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 758.226425][T14408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.468836][T14408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.593953][T14471] netlink: 'syz.9.2186': attribute type 1 has an invalid length. [ 763.871383][T14408] vlan3: left allmulticast mode [ 763.920982][T14408] bridge2: left allmulticast mode [ 763.981788][ T8465] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.050490][ T8465] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.131025][ T8465] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.102580][T14471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 765.265153][T14474] vlan2: entered allmulticast mode [ 765.302101][T14474] veth0_to_bond: entered allmulticast mode [ 765.351187][T14474] bond2: (slave vlan2): Opening slave failed [ 765.501220][T14479] syz_tun: entered allmulticast mode [ 765.583664][T14479] syz_tun: left allmulticast mode [ 765.627709][T14480] syz_tun: entered allmulticast mode [ 765.642601][T14488] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2190'. [ 765.685381][ T8465] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.750300][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 765.782290][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 765.802649][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 765.810904][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 765.818749][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 767.969948][ T5626] Bluetooth: hci4: command tx timeout [ 768.602091][T14505] loop1: detected capacity change from 0 to 512 [ 768.667132][T14505] EXT4-fs: Ignoring removed i_version option [ 768.747062][T14505] EXT4-fs: Ignoring removed nobh option [ 768.819700][T14505] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 768.928268][T14505] EXT4-fs (loop1): 1 truncate cleaned up [ 769.203202][T14505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.108808][ T5626] Bluetooth: hci4: command tx timeout [ 770.865041][ T31] audit: type=1800 audit(1783514518.973:724): pid=14521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2194" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 771.147103][T10469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.178246][ T5621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 771.207257][ T5621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 771.218098][ T5621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 771.256274][ T5621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 771.492518][ T5621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 772.165390][ T5626] Bluetooth: hci4: command tx timeout [ 772.535075][T14537] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2197'. [ 772.631613][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2197'. [ 773.855652][ T5626] Bluetooth: hci7: command tx timeout [ 774.245452][ T5626] Bluetooth: hci4: command tx timeout [ 774.356599][T14537] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2197'. [ 774.978064][T14559] netlink: 182 bytes leftover after parsing attributes in process `syz.9.2202'. [ 776.005950][ T5626] Bluetooth: hci7: command tx timeout [ 778.085626][ T5626] Bluetooth: hci7: command tx timeout [ 779.796475][T14589] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 780.275704][ T5626] Bluetooth: hci7: command tx timeout [ 781.313249][T14589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.429518][T14595] vlan2: entered allmulticast mode [ 781.468835][T14595] veth0_to_bond: entered allmulticast mode [ 781.523974][T14595] bond1: (slave vlan2): making interface the new active one [ 782.295819][T14595] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 784.215675][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802d572c00: rx timeout, send abort [ 784.724168][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802d572c00: abort rx timeout. Force session deactivation [ 786.889498][T14640] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2234'. [ 787.040909][T14638] ªªªªªª: entered allmulticast mode [ 787.480679][ T6335] bridge_slave_1: left allmulticast mode [ 787.497046][ T6335] bridge_slave_1: left promiscuous mode [ 787.519605][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.530964][ T6335] bridge_slave_0: left allmulticast mode [ 787.547402][ T6335] bridge_slave_0: left promiscuous mode [ 787.565693][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.585028][ T31] audit: type=1326 audit(1783514536.073:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2226" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 787.632668][ T31] audit: type=1326 audit(1783514536.103:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2226" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 787.661545][T14661] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2224'. [ 787.671445][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2224'. [ 787.682062][ T31] audit: type=1326 audit(1783514536.103:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2226" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 787.709807][T14661] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2224'. [ 787.737505][ T31] audit: type=1326 audit(1783514536.113:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2226" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 787.766099][ T31] audit: type=1326 audit(1783514536.113:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2226" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 787.792045][ T31] audit: type=1326 audit(1783514536.113:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2226" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 787.818880][ T31] audit: type=1326 audit(1783514536.113:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2226" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 787.861655][ T31] audit: type=1326 audit(1783514536.113:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2226" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 787.862892][ T6335] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 787.906674][ T31] audit: type=1326 audit(1783514536.113:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2226" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 787.932795][ T31] audit: type=1326 audit(1783514536.113:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2226" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 791.199444][ T6335] bond1 (unregistering): Released all slaves [ 793.012216][ T6335] tipc: Left network mode [ 793.230292][T14489] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.239550][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.256007][T14489] bridge_slave_0: entered allmulticast mode [ 793.270866][T14489] bridge_slave_0: entered promiscuous mode [ 793.335443][T14489] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.347024][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.359018][T14489] bridge_slave_1: entered allmulticast mode [ 793.369113][T14489] bridge_slave_1: entered promiscuous mode [ 793.491859][ T6335] hsr_slave_0: left promiscuous mode [ 793.501743][ T6335] hsr_slave_1: left promiscuous mode [ 793.513646][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.523579][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.790778][ T6335] team0 (unregistering): Port device team_slave_1 removed [ 793.809688][ T6335] team0 (unregistering): Port device team_slave_0 removed [ 793.944460][T14489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.956237][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 793.995852][T14489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.070499][T14489] team0: Port device team_slave_0 added [ 794.087785][T14489] team0: Port device team_slave_1 added [ 794.184847][T14489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.194707][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.223058][T14489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.239935][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.256924][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.264259][T14522] bridge_slave_0: entered allmulticast mode [ 794.277043][T14522] bridge_slave_0: entered promiscuous mode [ 794.287733][T14489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.298455][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.328898][T14489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.354148][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.370392][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.403686][T14522] bridge_slave_1: entered allmulticast mode [ 794.416676][T14522] bridge_slave_1: entered promiscuous mode [ 794.453949][ T6335] IPVS: stop unused estimator thread 0... [ 794.586106][T14522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.614115][T14489] hsr_slave_0: entered promiscuous mode [ 794.636543][T14489] hsr_slave_1: entered promiscuous mode [ 794.646637][T14489] debugfs: 'hsr0' already exists in 'hsr' [ 794.665407][T14489] Cannot create hsr debugfs directory [ 794.677710][T14522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.794777][T14522] team0: Port device team_slave_0 added [ 794.804336][T14522] team0: Port device team_slave_1 added [ 794.874723][T14522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.882044][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.909043][T14522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.976323][T14522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.983305][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.009758][T14522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.022434][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 795.172454][T14522] hsr_slave_0: entered promiscuous mode [ 795.179713][T14522] hsr_slave_1: entered promiscuous mode [ 795.186538][T14522] debugfs: 'hsr0' already exists in 'hsr' [ 795.192292][T14522] Cannot create hsr debugfs directory [ 795.881428][ T6335] bridge_slave_1: left allmulticast mode [ 795.887230][ T6335] bridge_slave_1: left promiscuous mode [ 795.894531][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.909407][ T6335] bridge_slave_0: left allmulticast mode [ 795.918387][ T6335] bridge_slave_0: left promiscuous mode [ 795.924193][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.954127][ T6335] erspan0: left allmulticast mode [ 795.965206][ T6335] erspan0: left promiscuous mode [ 795.976672][ T6335] bridge4: port 1(erspan0) entered disabled state [ 796.096167][ T6335] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 796.212635][ T6335] bond1 (unregistering): Released all slaves [ 796.232676][ T6335] bond2 (unregistering): (slave veth5): Releasing active interface [ 796.242501][ T6335] bond2 (unregistering): Released all slaves [ 796.262131][ T6335] bond3 (unregistering): (slave bond4): Releasing backup interface [ 796.270973][ T6335] bond3 (unregistering): Released all slaves [ 796.288845][ T6335] bond4 (unregistering): Released all slaves [ 796.313762][ T6335] bond5 (unregistering): (slave vlan0): Releasing active interface [ 796.324549][ T6335] bond5 (unregistering): Released all slaves [ 796.351787][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7 [ 796.488813][ T6335] tipc: Left network mode [ 796.911650][ T6335] hsr_slave_0: left promiscuous mode [ 796.920806][ T6335] hsr_slave_1: left promiscuous mode [ 796.930313][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.938716][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.395006][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8 [ 797.802163][ T6335] IPVS: stop unused estimator thread 0... [ 797.843280][T14489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 797.871383][T14489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 797.886494][T14489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 797.907622][T14489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 797.929590][T14489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 797.966293][T14489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.099308][T14489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 798.110393][T14489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 798.491360][T14489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.549442][T14489] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.603836][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.611038][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.641295][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.648494][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.820884][T14522] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 798.834302][T14522] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.850836][T14522] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 798.863480][T14522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.872943][T14522] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 798.884539][T14522] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.893340][T14522] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 798.908850][T14522] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.134583][T14522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.169796][T14522] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.203578][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.210787][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.261899][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.269121][ T8465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.877575][T14489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.997768][T14489] veth0_vlan: entered promiscuous mode [ 800.017361][T14489] veth1_vlan: entered promiscuous mode [ 800.060108][T14489] veth0_macvtap: entered promiscuous mode [ 800.071925][T14489] veth1_macvtap: entered promiscuous mode [ 800.112097][T14489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.138292][T14489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.160950][ T8465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.180924][ T8465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.208828][ T6325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.238066][ T6325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.367304][T14522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.452049][ T8465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.479505][ T8465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.562102][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.592320][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.858648][T14870] SQUASHFS error: Failed to read block 0x0: -5 [ 805.785247][T14522] veth0_vlan: entered promiscuous mode [ 805.836403][T14522] veth1_vlan: entered promiscuous mode [ 806.909279][T14522] veth0_macvtap: entered promiscuous mode [ 807.015705][T14522] veth1_macvtap: entered promiscuous mode [ 807.052761][T14901] loop0: detected capacity change from 0 to 256 [ 807.077882][T14901] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 807.102552][T14901] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 808.061010][T14901] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 808.088345][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.108239][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.168023][T14901] exFAT-fs (loop0): failed to load alloc-bitmap [ 808.214133][T14901] exFAT-fs (loop0): failed to recognize exfat type [ 808.230898][T14522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.304752][T14522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.564228][ T543] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.678238][ T543] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.958800][ T543] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.978046][ T543] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.631349][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.643707][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.710787][T12573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.781345][T12573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.893346][T14980] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2260'. [ 815.901879][T14992] netlink: 'syz.6.2192': attribute type 1 has an invalid length. [ 815.998252][T14993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2192'. [ 816.047011][T14987] loop1: detected capacity change from 0 to 2048 [ 816.150324][T14998] atomic_op ffff88807e26a198 conn xmit_atomic 0000000000000000 [ 816.243705][T14987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.792159][T10469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.642529][T15076] loop1: detected capacity change from 0 to 512 [ 824.603783][T15076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.630913][T15076] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.755673][T15089] 9p: Bad value for 'wfdno' [ 826.029262][T10469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.625338][T15113] loop0: detected capacity change from 0 to 512 [ 827.676562][T15113] EXT4-fs: Ignoring removed i_version option [ 827.727990][T15113] EXT4-fs: Ignoring removed nobh option [ 827.775781][T15113] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 827.868465][T15113] EXT4-fs (loop0): 1 truncate cleaned up [ 827.918852][T15113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.647610][ T31] kauditd_printk_skb: 950 callbacks suppressed [ 828.647639][ T31] audit: type=1800 audit(1783514577.033:1685): pid=15130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2290" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 829.185010][T14489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.584047][T15150] loop0: detected capacity change from 0 to 512 [ 831.673128][T15150] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2297: iget: bad i_size value: 38620345925642 [ 831.960084][T15150] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 831.965318][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 831.980955][ C1] EXT4-fs (loop0): initial error at time 1783514580: ext4_orphan_get:1399: inode 15 [ 831.990390][ C1] EXT4-fs (loop0): last error at time 1783514580: ext4_orphan_get:1399: inode 15 [ 832.017066][T15150] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2297: couldn't read orphan inode 15 (err -117) [ 832.031403][T15150] loop0: lost filesystem error report for type 5 error -117 [ 832.034904][T15150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.994752][T15150] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.2297: bg 0: block 5: invalid block bitmap [ 833.039056][T15150] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 156 with error 28 [ 833.071436][T15150] EXT4-fs (loop0): This should not happen!! Data will be lost [ 833.071436][T15150] [ 833.111100][T15150] EXT4-fs (loop0): Total free blocks count 0 [ 833.129630][T15150] EXT4-fs (loop0): Free/Dirty block details [ 833.160540][T15150] EXT4-fs (loop0): free_blocks=0 [ 833.190356][T15150] EXT4-fs (loop0): dirty_blocks=160 [ 833.220368][T15150] EXT4-fs (loop0): Block reservation details [ 833.245741][T15150] EXT4-fs (loop0): i_reserved_data_blocks=160 [ 834.538472][T15178] loop6: detected capacity change from 0 to 512 [ 834.958657][T15178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.003280][T15178] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.913617][T14489] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 836.248040][T14489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.422365][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 836.763472][T14522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.565501][ T31] audit: type=1326 audit(1783514587.033:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="syz.2.2310" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 838.940253][ T31] audit: type=1326 audit(1783514587.033:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="syz.2.2310" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 838.966116][ T31] audit: type=1326 audit(1783514587.033:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="syz.2.2310" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 838.991558][ T31] audit: type=1326 audit(1783514587.033:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="syz.2.2310" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 839.018524][ T31] audit: type=1326 audit(1783514587.033:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="syz.2.2310" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 839.044107][ T31] audit: type=1326 audit(1783514587.033:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="syz.2.2310" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 839.071937][ T31] audit: type=1326 audit(1783514587.033:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="syz.2.2310" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 839.100437][ T31] audit: type=1326 audit(1783514587.033:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="syz.2.2310" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95a19de59 code=0x7ffc0000 [ 839.146175][ T31] audit: type=1326 audit(1783514587.033:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="syz.2.2310" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff95a15e68e code=0x7ffc0000 [ 839.262620][ T31] audit: type=1326 audit(1783514587.083:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="syz.2.2310" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff95a15e68e code=0x7ffc0000 [ 840.441642][T15243] 8021q: VLANs not supported on ip6gre0 [ 842.930272][T15250] loop1: detected capacity change from 0 to 32768 [ 842.958088][T15250] (syz.1.2321,15250,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 842.975157][T15250] (syz.1.2321,15250,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 843.026347][T15271] syzkaller0: entered promiscuous mode [ 843.042440][T15250] JBD2: Ignoring recovery information on journal [ 843.064944][T15271] syzkaller0: entered allmulticast mode [ 843.240132][T15250] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 843.304552][T15280] atomic_op ffff88804fa7c198 conn xmit_atomic 0000000000000000 [ 846.063923][T15316] loop0: detected capacity change from 0 to 512 [ 846.100030][T15316] EXT4-fs (loop0): Test dummy encryption mode enabled [ 846.101215][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 846.136713][T15316] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 846.482412][T15324] fuse: fd is not a fuse device [ 847.278507][T10469] ocfs2: Unmounting device (7,1) on (node local) [ 856.142925][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 856.997600][T15393] loop6: detected capacity change from 0 to 512 [ 858.090724][T15393] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2352: iget: bad i_size value: 38620345925642 [ 858.212014][T15393] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 858.215306][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 858.231001][ C0] EXT4-fs (loop6): initial error at time 1783514606: ext4_orphan_get:1399: inode 15 [ 858.240485][ C0] EXT4-fs (loop6): last error at time 1783514606: ext4_orphan_get:1399: inode 15 [ 858.258553][T15393] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2352: couldn't read orphan inode 15 (err -117) [ 858.289641][T15393] loop6: lost filesystem error report for type 5 error -117 [ 858.298560][T15393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.462916][ T5626] Bluetooth: hci3: unexpected event for opcode 0x040d [ 858.674386][T15417] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz.6.2352: bg 0: block 5: invalid block bitmap [ 858.790628][T15417] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 858.861670][T15417] EXT4-fs (loop6): This should not happen!! Data will be lost [ 858.861670][T15417] [ 858.924910][T15417] EXT4-fs (loop6): Total free blocks count 0 [ 859.140769][T15417] EXT4-fs (loop6): Free/Dirty block details [ 859.214615][T15417] EXT4-fs (loop6): free_blocks=0 [ 859.412023][T15417] EXT4-fs (loop6): dirty_blocks=32 [ 859.436343][T15417] EXT4-fs (loop6): Block reservation details [ 859.454947][T15417] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 860.084558][T14522] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 860.179863][T14522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.790855][ T5282] 8021q: adding VLAN 0 to HW filter on device eth21 [ 869.544289][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.555366][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.313768][T15554] loop6: detected capacity change from 0 to 1024 [ 875.400584][T15554] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 879.394636][ T5621] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 879.417110][ T5621] Bluetooth: hci2: Injecting HCI hardware error event [ 879.427353][ T5621] Bluetooth: hci2: hardware error 0x00 [ 882.603312][ T5621] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 884.690051][T15599] loop6: detected capacity change from 0 to 512 [ 884.780997][T15599] ext3: Unknown parameter 'dax.dax' [ 886.733672][T15621] overlayfs: failed to clone lowerpath [ 888.073059][T15627] o2cb: This node has not been configured. [ 888.079695][T15627] o2cb: Cluster check failed. Fix errors before retrying. [ 888.088391][T15627] (syz.7.2405,15627,0):user_dlm_register:674 ERROR: status = -22 [ 888.096254][T15627] (syz.7.2405,15627,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 889.043186][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2406'. [ 891.467471][ T5282] 8021q: adding VLAN 0 to HW filter on device eth22 [ 892.102162][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 894.760028][T15671] loop6: detected capacity change from 0 to 128 [ 895.860553][T15671] FAT-fs (loop6): bogus number of reserved sectors [ 895.887760][T15677] loop0: detected capacity change from 0 to 512 [ 895.940470][T15671] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 896.018297][T15671] FAT-fs (loop6): Can't find a valid FAT filesystem [ 896.152765][T15677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.248959][T15677] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.325458][ T5626] Bluetooth: hci7: command 0x0406 tx timeout [ 897.671032][T14489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.471732][T15760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 903.479007][T15760] IPv6: NLM_F_CREATE should be set when creating new route [ 904.650517][ T5621] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 907.907348][T15803] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[14522] was attempted by " [ 909.303740][T15823] loop6: detected capacity change from 0 to 8 [ 910.303203][T15814] loop0: detected capacity change from 0 to 512 [ 910.620512][T15814] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 910.649417][T15814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 910.658421][T15814] EXT4-fs (loop0): orphan cleanup on readonly fs [ 910.664908][T15814] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.2453: iget: bad i_size value: 12154761577498 [ 910.678434][T15814] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 910.691945][T15814] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2453: couldn't read orphan inode 13 (err -117) [ 910.701201][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 910.701238][ C0] EXT4-fs (loop0): initial error at time 1783514659: ext4_orphan_get:1399: inode 13 [ 910.701294][ C0] EXT4-fs (loop0): last error at time 1783514659: ext4_orphan_get:1399: inode 13 [ 910.740788][T15814] loop0: lost filesystem error report for type 5 error -117 [ 910.789354][T15814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 912.485999][T14489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.874988][T15850] loop6: detected capacity change from 0 to 32768 [ 912.882507][T15850] btrfs: Deprecated parameter 'usebackuproot' [ 912.889007][T15850] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 912.917994][T15850] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2460 (15850) [ 912.937604][T15850] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 912.947872][T15850] BTRFS info (device loop6): using crc32c checksum algorithm [ 913.033369][ T1024] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 913.076668][T15850] BTRFS error (device loop6): failed to load root extent [ 913.083781][T15850] BTRFS warning (device loop6): try to load backup roots slot 1 [ 913.091930][ T1024] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 913.142180][T15850] BTRFS warning (device loop6): couldn't read tree root [ 913.149272][T15850] BTRFS warning (device loop6): try to load backup roots slot 2 [ 913.157528][ T14] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 913.227788][T15850] BTRFS warning (device loop6): couldn't read tree root [ 913.234837][T15850] BTRFS warning (device loop6): try to load backup roots slot 3 [ 913.266281][T15850] BTRFS info (device loop6): rebuilding free space tree [ 913.356064][T15850] BTRFS info (device loop6): checking UUID tree [ 913.364506][T15850] BTRFS info (device loop6): enabling ssd optimizations [ 913.373023][T15850] BTRFS info (device loop6): turning on async discard [ 913.379881][T15850] BTRFS info (device loop6): enabling free space tree [ 913.386734][T15850] BTRFS info (device loop6): force clearing of disk cache [ 913.393858][T15850] BTRFS info (device loop6): enabling auto defrag [ 913.400327][T15850] BTRFS info (device loop6): trying to use backup root at mount time [ 913.408412][T15850] BTRFS info (device loop6): use zstd compression, level 3 [ 913.492147][T15857] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 913.529831][T15857] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 913.730063][T15857] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 913.739991][T15857] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 913.812257][T15857] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 913.990491][T15857] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 914.664598][T15857] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 914.688512][T15857] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 915.626922][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 915.633050][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 915.793258][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 915.855754][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 916.119132][T14522] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 916.867213][ T5621] Bluetooth: hci7: command 0x0406 tx timeout [ 917.845901][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 917.931812][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 918.920158][ T5621] Bluetooth: hci7: command 0x0406 tx timeout [ 919.080423][T15911] capability: warning: `syz.0.2471' uses 32-bit capabilities (legacy support in use) [ 922.313054][T15927] xt_CT: No such helper "snmp_trap" [ 923.826882][T15937] loop1: detected capacity change from 0 to 4096 [ 923.869761][T15937] EXT4-fs: Ignoring removed orlov option [ 923.939400][T15937] EXT4-fs (loop1): Test dummy encryption mode enabled [ 924.298922][T15937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.162768][T15937] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 925.273352][T10469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.453175][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 927.453201][ T31] audit: type=1326 audit(1783514675.903:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.7.2484" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 927.583859][ T31] audit: type=1326 audit(1783514675.923:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.7.2484" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 927.611752][ T31] audit: type=1326 audit(1783514675.923:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.7.2484" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 927.820756][ T31] audit: type=1326 audit(1783514675.923:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.7.2484" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce19de59 code=0x7ffc0000 [ 928.326739][ T58] ------------[ cut here ]------------ [ 928.334839][ T58] time_after(jiffies, timeout) [ 928.334862][ T58] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x479/0xd7a, CPU#1: kworker/u8:4/58 [ 928.350117][ T58] Modules linked in: [ 928.356641][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 928.366035][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 928.376194][ T58] Workqueue: iou_exit io_ring_exit_work [ 928.382731][ T58] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 928.388657][ T58] Code: 8e e8 9b e2 43 01 48 8b 05 f4 a3 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 22 5b d4 00 4d 85 ff 79 12 e8 78 60 d4 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 66 60 d4 00 48 8b 74 24 20 [ 928.409351][ T58] RSP: 0018:ffffc900015f7aa0 EFLAGS: 00010293 [ 928.416005][ T58] RAX: 0000000000000000 RBX: ffff88807aa52710 RCX: ffffffff81354e9e [ 928.424013][ T58] RDX: ffff88801dbc0000 RSI: ffffffff81354ea8 RDI: ffff88801dbc0000 [ 928.432393][ T58] RBP: ffffc900015f7c38 R08: 0000000000000007 R09: 0000000000000000 [ 928.440843][ T58] R10: fffffffffffffffe R11: 0000000000000000 R12: ffff88807aa52000 [ 928.448920][ T58] R13: dffffc0000000000 R14: 000000007aa52700 R15: fffffffffffffffe [ 928.456995][ T58] FS: 0000000000000000(0000) GS:ffff888123eee000(0000) knlGS:0000000000000000 [ 928.466042][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.472661][ T58] CR2: 00007f7db6beb540 CR3: 000000005f77d000 CR4: 0000000000350ef0 [ 928.480733][ T58] Call Trace: [ 928.484026][ T58] [ 928.487057][ T58] ? do_raw_spin_lock+0x128/0x260 [ 928.492134][ T58] ? __pfx_io_ring_exit_work+0x10/0x10 [ 928.498561][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.504239][ T58] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 928.510609][ T58] ? debug_object_deactivate+0x2e4/0x3b0 [ 928.516402][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.522078][ T58] ? rcu_is_watching+0x12/0xc0 [ 928.526937][ T58] process_one_work+0xa23/0x1940 [ 928.531943][ T58] ? __pfx_process_one_work+0x10/0x10 [ 928.537433][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.543121][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.548900][ T58] worker_thread+0x5ef/0xe50 [ 928.553561][ T58] ? kthread+0x13a/0x450 [ 928.557887][ T58] ? __pfx_worker_thread+0x10/0x10 [ 928.563045][ T58] kthread+0x370/0x450 [ 928.567557][ T58] ? __pfx_kthread+0x10/0x10 [ 928.572200][ T58] ret_from_fork+0x72b/0xd50 [ 928.576884][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 928.582038][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.587767][ T58] ? __switch_to+0x800/0x10f0 [ 928.592489][ T58] ? __switch_to_asm+0x39/0x70 [ 928.597334][ T58] ? __pfx_kthread+0x10/0x10 [ 928.602833][ T58] ret_from_fork_asm+0x1a/0x30 [ 928.608140][ T58] [ 928.611175][ T58] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 928.618469][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 928.627784][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 928.637861][ T58] Workqueue: iou_exit io_ring_exit_work [ 928.643497][ T58] Call Trace: [ 928.646785][ T58] [ 928.649730][ T58] dump_stack_lvl+0x100/0x190 [ 928.654440][ T58] vpanic+0x552/0x970 [ 928.658450][ T58] ? __pfx_vpanic+0x10/0x10 [ 928.662992][ T58] panic+0xd1/0xe0 [ 928.666747][ T58] ? __pfx_panic+0x10/0x10 [ 928.671204][ T58] ? check_panic_on_warn+0x1f/0x90 [ 928.676375][ T58] check_panic_on_warn.cold+0x19/0x34 [ 928.681783][ T58] ? io_ring_exit_work+0x479/0xd7a [ 928.686940][ T58] __warn.cold+0x191/0x318 [ 928.691385][ T58] __report_bug+0x30f/0x440 [ 928.695933][ T58] ? io_ring_exit_work+0x479/0xd7a [ 928.701091][ T58] ? __pfx___report_bug+0x10/0x10 [ 928.706164][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.711852][ T58] ? rcu_is_watching+0x12/0xc0 [ 928.716651][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.722322][ T58] ? trace_contention_end+0x126/0x160 [ 928.727727][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.733403][ T58] ? __mutex_lock+0x26d/0x1bd0 [ 928.738219][ T58] ? io_ring_exit_work+0x422/0xd7a [ 928.743373][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.749045][ T58] ? find_held_lock+0x2b/0x80 [ 928.753763][ T58] ? io_ring_exit_work+0x434/0xd7a [ 928.758930][ T58] ? io_ring_exit_work+0x479/0xd7a [ 928.764085][ T58] report_bug+0xb2/0x220 [ 928.768380][ T58] ? io_ring_exit_work+0x479/0xd7a [ 928.773536][ T58] handle_bug+0x16a/0x2a0 [ 928.777899][ T58] exc_invalid_op+0x17/0x50 [ 928.782433][ T58] asm_exc_invalid_op+0x1a/0x20 [ 928.787317][ T58] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 928.793085][ T58] Code: 8e e8 9b e2 43 01 48 8b 05 f4 a3 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 22 5b d4 00 4d 85 ff 79 12 e8 78 60 d4 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 66 60 d4 00 48 8b 74 24 20 [ 928.812731][ T58] RSP: 0018:ffffc900015f7aa0 EFLAGS: 00010293 [ 928.818839][ T58] RAX: 0000000000000000 RBX: ffff88807aa52710 RCX: ffffffff81354e9e [ 928.826847][ T58] RDX: ffff88801dbc0000 RSI: ffffffff81354ea8 RDI: ffff88801dbc0000 [ 928.834849][ T58] RBP: ffffc900015f7c38 R08: 0000000000000007 R09: 0000000000000000 [ 928.842855][ T58] R10: fffffffffffffffe R11: 0000000000000000 R12: ffff88807aa52000 [ 928.850857][ T58] R13: dffffc0000000000 R14: 000000007aa52700 R15: fffffffffffffffe [ 928.858867][ T58] ? io_ring_exit_work+0x46e/0xd7a [ 928.864033][ T58] ? io_ring_exit_work+0x478/0xd7a [ 928.869197][ T58] ? do_raw_spin_lock+0x128/0x260 [ 928.874271][ T58] ? __pfx_io_ring_exit_work+0x10/0x10 [ 928.879788][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.885465][ T58] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 928.891329][ T58] ? debug_object_deactivate+0x2e4/0x3b0 [ 928.897017][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.902682][ T58] ? rcu_is_watching+0x12/0xc0 [ 928.907495][ T58] process_one_work+0xa23/0x1940 [ 928.912508][ T58] ? __pfx_process_one_work+0x10/0x10 [ 928.917928][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.923615][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.929293][ T58] worker_thread+0x5ef/0xe50 [ 928.933970][ T58] ? kthread+0x13a/0x450 [ 928.938260][ T58] ? __pfx_worker_thread+0x10/0x10 [ 928.943425][ T58] kthread+0x370/0x450 [ 928.947544][ T58] ? __pfx_kthread+0x10/0x10 [ 928.952181][ T58] ret_from_fork+0x72b/0xd50 [ 928.956812][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 928.961970][ T58] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.967653][ T58] ? __switch_to+0x800/0x10f0 [ 928.972370][ T58] ? __switch_to_asm+0x39/0x70 [ 928.977172][ T58] ? __pfx_kthread+0x10/0x10 [ 928.981813][ T58] ret_from_fork_asm+0x1a/0x30 [ 928.986640][ T58] [ 928.989941][ T58] Kernel Offset: disabled [ 928.994262][ T58] Rebooting in 86400 seconds..