last executing test programs: 23m11.990339512s ago: executing program 32 (id=316): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x84) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x1, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22m0.544469259s ago: executing program 33 (id=808): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 22m0.537004869s ago: executing program 4 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = fanotify_init(0xf00, 0x181000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 22m0.256903996s ago: executing program 4 (id=811): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r0 = getpid() syz_pidfd_open(r0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x108) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00l', @ANYRES16=0x0, @ANYBLOB="030129bd700002000000240000000a0001007770616e"], 0x20}}, 0x800) write$P9_RLERRORu(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009d4063", @ANYBLOB="4486fc42807c98", @ANYRES8=r1, @ANYRES32], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 21m59.861476956s ago: executing program 4 (id=812): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, &(0x7f00000102c0)=@vsock={0x28, 0x0, 0x2710}, 0x80) 21m58.774360813s ago: executing program 4 (id=819): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x10b442, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 21m58.417176942s ago: executing program 4 (id=820): creat(&(0x7f00000000c0)='./file1\x00', 0x24) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) inotify_init1(0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) setns(0xc9, 0x0) setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) socket(0x8, 0x5, 0x5) 21m57.130331624s ago: executing program 4 (id=826): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000042000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 21m56.864508401s ago: executing program 34 (id=826): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000042000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 19m44.184916271s ago: executing program 2 (id=1525): r0 = fanotify_init(0x40, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 19m43.899946638s ago: executing program 2 (id=1528): r0 = inotify_init() r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 19m43.482748139s ago: executing program 2 (id=1532): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4}, 0x8) 19m43.086163689s ago: executing program 2 (id=1535): syz_mount_image$exfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x7f, 0x1519, &(0x7f00000021c0)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock(&(0x7f000068d000/0x1000)=nil, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 19m41.868257289s ago: executing program 2 (id=1549): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc042, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m41.270316524s ago: executing program 2 (id=1555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xfdb, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendto$inet(r0, &(0x7f00000002c0)="ab", 0xfffffffffffffdd8, 0x4008825, 0x0, 0x0) 19m40.958619161s ago: executing program 35 (id=1555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xfdb, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendto$inet(r0, &(0x7f00000002c0)="ab", 0xfffffffffffffdd8, 0x4008825, 0x0, 0x0) 14m14.602819619s ago: executing program 0 (id=2901): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 14m13.543912936s ago: executing program 0 (id=2904): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 13m54.314481564s ago: executing program 36 (id=2912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 12m13.231842739s ago: executing program 5 (id=3049): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x1808004, 0x0) 12m9.211876688s ago: executing program 5 (id=3051): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) 12m5.396623514s ago: executing program 5 (id=3059): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c80)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}}], 0x1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) 12m1.986419688s ago: executing program 5 (id=3064): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r1, 0x16, 0x0, @void}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xc, r2, 0xcb, &(0x7f0000000240)=""/131) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./debug\x00', 0x1ff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000080)=0x3fd, 0x4) 12m0.825418447s ago: executing program 8 (id=3066): r0 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x7, 0x9}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') readlink(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) io_uring_enter(r1, 0x2219, 0x35a5, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r0, &(0x7f0000000140)=""/140, 0x8c, 0x0, 0x0) 12m0.777829618s ago: executing program 6 (id=3067): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r1 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 11m59.835721682s ago: executing program 8 (id=3068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) 11m55.022429991s ago: executing program 8 (id=3070): setitimer(0x0, &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 11m54.864926096s ago: executing program 6 (id=3071): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback, 0xffffffffffffffff, 0x1a, 0x20}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) 11m54.167116373s ago: executing program 8 (id=3073): open(0x0, 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) fcntl$setsig(r0, 0xa, 0x12) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 11m52.873890145s ago: executing program 6 (id=3075): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xffffffffffffff91, 0x0}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m52.746480518s ago: executing program 8 (id=3076): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r2 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x20000, 0x1000051, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000a00)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r1, 0x0, 0x0, 0x1, {0x259a}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r6, 0x0, 0x39000, 0x0) 11m52.469640655s ago: executing program 5 (id=3077): r0 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x6dfa34b69b012a6a, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$inet(0x10, 0x3, 0x0) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) 11m51.157216138s ago: executing program 6 (id=3079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sm3\x00'}}) 11m48.275009039s ago: executing program 8 (id=3080): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r1, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0xc, 0x7ff, 0x808, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x1, 0x5, 0x3, 0xa}, 0x50) 11m47.42507432s ago: executing program 6 (id=3081): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) setpgid(r2, r1) 11m47.092562169s ago: executing program 5 (id=3082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000010900010073797a3000"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/167, 0xa7) 11m40.173582101s ago: executing program 6 (id=3084): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x7f, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m32.811839684s ago: executing program 37 (id=3080): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000340)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r1, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0xc, 0x7ff, 0x808, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x1, 0x5, 0x3, 0xa}, 0x50) 11m31.637517043s ago: executing program 38 (id=3082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000010900010073797a3000"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) write(r4, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/167, 0xa7) 11m24.420507713s ago: executing program 39 (id=3084): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x7f, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.910796326s ago: executing program 9 (id=4487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000001340)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff53761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fdff01000000000000549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3d3c6f0d17be3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa", 0xb6}, {&(0x7f0000000140)="de21cf0a7caa580c2ee9f858f448439a91d577dc48e04d539e17cf5357ff6cc0848e8bdfe13b6da3724e6fb7ef168cc77b41daf55a31", 0x36}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d609", 0xde0}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 7.783334801s ago: executing program 1 (id=4488): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x8001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) sendmmsg$inet(r4, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="8f", 0x1}], 0x1}}], 0x1, 0x40840) 7.50942485s ago: executing program 1 (id=4492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x7}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.9383771s ago: executing program 1 (id=4495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x2, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 6.773939776s ago: executing program 9 (id=4496): r0 = inotify_init() r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x1000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1379, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x80000006) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) 6.502337655s ago: executing program 3 (id=4497): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x14, 0x1, 0x3, "2742528909000000ce0198666a0084feea0be6b8a80052d763e61f9d13f019e3"}) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r4 = shmat(r3, &(0x7f0000ff8000/0x4000)=nil, 0x5000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000240)={[{@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@numtail}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@uni_xlateno}]}, 0x4, 0x354, &(0x7f0000000900)="$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") shmdt(r4) 6.438965618s ago: executing program 9 (id=4499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) syz_read_part_table(0x107b, &(0x7f0000001080)="$eJzs0MFNAzEQBdCfON5kRRqgAtqgIM5cgS6QOFEJVxqgBWpAymHQegNUAFzeO9jyWH/GcvhX80u/SlJ3yZy2VB4Pye7i6/44ajmM9aOSU+3nn/j1lPSkqo/jrqV6VZ0ja/Fyk01S78+ZvnP7h7G1TPebZco673WbPE25OWZJ3OZt7dBatuMFp1qdGyfVf/d3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBvfAYAAP//ReQdug==") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000640)={0x2, 0xce20, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) 5.608162826s ago: executing program 3 (id=4500): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbd8df25"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000ac0)=""/4103, 0x1007}], 0x1, 0xaa, 0x7f) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x102}, 0xd}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=r2) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.607962006s ago: executing program 7 (id=4501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.538332368s ago: executing program 1 (id=4502): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x9, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000300)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) accept$inet(r0, 0x0, 0x0) 5.323145916s ago: executing program 3 (id=4503): syz_pidfd_open(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfffffff4}}, './file0\x00'}) statx(r7, &(0x7f0000000140)='./file0\x00', 0x6000, 0x2, &(0x7f0000000340)) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 3.669588453s ago: executing program 7 (id=4504): close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) set_mempolicy(0x4005, &(0x7f0000000000)=0xf, 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x3, 0x76c4, 0x10, 0x1000000007}) 3.625498775s ago: executing program 9 (id=4505): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x1) 3.513089439s ago: executing program 7 (id=4506): r0 = fsopen(&(0x7f0000000040)='gadgetfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r3, 0x2000009) sendfile(r1, r3, 0x0, 0x7ffff004) 3.392813543s ago: executing program 1 (id=4507): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0) read(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x13}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 3.353824594s ago: executing program 3 (id=4508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x3, 0x0, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0503161200fd140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.282850397s ago: executing program 7 (id=4509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 3.146602192s ago: executing program 3 (id=4510): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 3.137046512s ago: executing program 9 (id=4511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, &(0x7f0000ffe000), &(0x7f00000004c0), &(0x7f0000000000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x3}, 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) 644.742948ms ago: executing program 7 (id=4512): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 582.90404ms ago: executing program 1 (id=4513): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 45.134709ms ago: executing program 7 (id=4514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 37.027239ms ago: executing program 9 (id=4515): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/1000, 0x3e8) 0s ago: executing program 3 (id=4516): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x53a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x5}, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) kernel console output (not intermixed with test programs): erface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.634514][T15898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.228859][T15910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.306619][T15910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.365943][T15898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.374397][T15898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.484901][T15898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.281931][T15910] team0: Port device team_slave_0 added [ 925.882518][T15910] team0: Port device team_slave_1 added [ 926.618771][T15910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.691486][T15910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.849764][T15910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.054010][T15898] hsr_slave_0: entered promiscuous mode [ 927.126588][T15898] hsr_slave_1: entered promiscuous mode [ 927.200622][T15898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.285214][T15898] Cannot create hsr debugfs directory [ 927.619371][T15910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.655317][T15910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.935003][T15910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.214326][ T8180] bond7: (slave wlan0): Releasing active interface [ 928.225344][ T8180] bond7: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 928.285042][ T8180] batadv1: entered promiscuous mode [ 928.720899][T15935] chnl_net:caif_netlink_parms(): no params data found [ 929.128519][T15910] hsr_slave_0: entered promiscuous mode [ 929.187343][T15910] hsr_slave_1: entered promiscuous mode [ 929.225646][T15910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 929.251008][T15910] Cannot create hsr debugfs directory [ 929.754684][ T8180] hsr_slave_0: left promiscuous mode [ 929.797119][ T8180] hsr_slave_1: left promiscuous mode [ 929.831267][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.881404][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.940088][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.009853][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.095545][ T8180] bridge_slave_1: left allmulticast mode [ 930.154134][ T8180] bridge_slave_1: left promiscuous mode [ 930.195485][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.278427][ T8180] bridge_slave_0: left allmulticast mode [ 930.334638][ T8180] bridge_slave_0: left promiscuous mode [ 930.392196][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.563043][ T8180] hsr_slave_0: left promiscuous mode [ 930.615831][ T8180] hsr_slave_1: left promiscuous mode [ 930.636743][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.567819][ T8180] veth1_macvtap: left promiscuous mode [ 931.574609][ T8180] veth0_macvtap: left promiscuous mode [ 931.649809][ T8180] veth1_vlan: left promiscuous mode [ 931.706006][ T8180] veth0_vlan: left promiscuous mode [ 931.967080][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.975111][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.308243][T16016] netlink: 165 bytes leftover after parsing attributes in process `syz.7.3126'. [ 935.662767][T16023] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3127'. [ 935.936166][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 936.052077][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 936.062847][T12647] infiniband syz1: ib_query_port failed (-19) [ 936.333088][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.485382][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.587223][ T8180] team0 (unregistering): Port device bridge0 removed [ 937.652515][ T8180] bond0 (unregistering): Released all slaves [ 937.947716][ T8180] bond11 (unregistering): (slave veth0_to_bond): Releasing active interface [ 937.961677][ T8180] bond11 (unregistering): Released all slaves [ 938.272408][ T8180] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 938.354054][ T8180] bond10 (unregistering): Released all slaves [ 939.222389][ T8180] bond9 (unregistering): (slave bridge3): Releasing active interface [ 939.232972][ T8180] bridge3 (unregistering): left promiscuous mode [ 939.240798][ T8180] bridge3 (unregistering): left allmulticast mode [ 939.339557][ T8180] bond9 (unregistering): Released all slaves [ 939.459680][ T8180] bond8 (unregistering): Released all slaves [ 939.630696][ T8180] bond7 (unregistering): (slave batadv1): Releasing active interface [ 939.640921][ T8180] batadv1 (unregistering): left promiscuous mode [ 939.971562][ T8180] bond7 (unregistering): Released all slaves [ 940.159854][ T8180] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 940.250114][ T8180] bond6 (unregistering): Released all slaves [ 940.329730][ T8180] bond5 (unregistering): Released all slaves [ 940.428717][ T8180] bond4 (unregistering): Released all slaves [ 940.596221][ T8180] bond3 (unregistering): (slave veth3): Releasing active interface [ 940.609280][ T8180] bond3 (unregistering): (slave veth3): the permanent HWaddr of slave - 82:d9:ff:82:d9:13 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 940.631724][ T8180] dummy0 (unregistering): entered promiscuous mode [ 940.971279][ T8180] bond3 (unregistering): (slave dummy0): Releasing active interface [ 940.980995][ T8180] dummy0 (unregistering): left promiscuous mode [ 940.991498][ T8180] bond3 (unregistering): Released all slaves [ 941.259694][ T8180] bond2 (unregistering): Released all slaves [ 941.343425][ T8180] bond1 (unregistering): Released all slaves [ 942.300908][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 942.378494][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 942.453411][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.525688][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.104359][ T8180] bond0 (unregistering): Released all slaves [ 943.220916][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3127'. [ 943.663527][T15935] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.672251][T15935] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.680219][T15935] bridge_slave_0: entered allmulticast mode [ 943.728278][T15935] bridge_slave_0: entered promiscuous mode [ 943.777191][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3128'. [ 944.200770][T15935] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.208208][T15935] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.236700][T15935] bridge_slave_1: entered allmulticast mode [ 944.244287][T15935] bridge_slave_1: entered promiscuous mode [ 944.469105][T15935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.540745][T15935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.572305][T16050] netlink: 'syz.7.3129': attribute type 1 has an invalid length. [ 944.657095][T16050] 8021q: adding VLAN 0 to HW filter on device bond7 [ 944.669838][T16052] bond7: entered allmulticast mode [ 944.759916][T16053] bond7: (slave ip6gretap2): making interface the new active one [ 944.794810][T16053] ip6gretap2: entered allmulticast mode [ 944.802655][T16053] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 944.931769][T15935] team0: Port device team_slave_0 added [ 944.948771][T15935] team0: Port device team_slave_1 added [ 945.027447][T15935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.044671][T15935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.122256][T15935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.146492][T15935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.153508][T15935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.239201][T15935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.400462][T15935] hsr_slave_0: entered promiscuous mode [ 945.416250][T15935] hsr_slave_1: entered promiscuous mode [ 945.629471][T15898] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 945.668497][T15898] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 945.790134][T15898] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 945.822758][T15898] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 946.440557][T15898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.488709][T15935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 946.519314][T15935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 946.575897][T15935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 946.608945][T15898] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.707261][T15935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 946.749999][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.757215][T15303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.828318][ T8180] IPVS: stop unused estimator thread 0... [ 946.845145][ T8180] IPVS: stop unused estimator thread 0... [ 946.858239][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.865470][T15303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.962521][T15910] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 946.980408][T15910] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 947.028432][T15910] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 947.046915][T15910] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 947.511193][T15935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.782023][T15935] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.893242][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.900483][T15303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.933519][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.940810][T15303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.224454][T15910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.273583][T15898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.913448][T16126] No such timeout policy "syz1" [ 950.449739][T15935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 950.582652][T15910] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.614656][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.621890][ T8189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.809486][T15310] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.816710][T15310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.956416][ T8180] hsr_slave_0: left promiscuous mode [ 951.972890][ T8180] hsr_slave_1: left promiscuous mode [ 951.985630][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.043477][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.068176][ T8180] bridge_slave_1: left allmulticast mode [ 952.073916][ T8180] bridge_slave_1: left promiscuous mode [ 952.092076][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.114962][ T8180] bridge_slave_0: left allmulticast mode [ 952.120686][ T8180] bridge_slave_0: left promiscuous mode [ 952.135168][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.254310][ T8180] hsr_slave_0: left promiscuous mode [ 952.265448][ T8180] hsr_slave_1: left promiscuous mode [ 952.279578][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.298317][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.336950][ T8180] bridge_slave_1: left allmulticast mode [ 952.342672][ T8180] bridge_slave_1: left promiscuous mode [ 952.360687][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.387492][ T8180] bridge_slave_0: left allmulticast mode [ 952.393586][ T8180] bridge_slave_0: left promiscuous mode [ 952.404834][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.433849][ T8180] hsr_slave_0: left promiscuous mode [ 952.454919][ T8180] hsr_slave_1: left promiscuous mode [ 952.485466][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.496083][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.516212][ T8180] bridge_slave_1: left allmulticast mode [ 952.521920][ T8180] bridge_slave_1: left promiscuous mode [ 952.545028][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.591998][ T8180] bridge_slave_0: left allmulticast mode [ 952.598061][ T8180] bridge_slave_0: left promiscuous mode [ 952.615182][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.802936][T15700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 952.818725][T15700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 952.831186][T15700] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 952.841210][T15700] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 952.855353][T15700] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 952.863012][T15700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 953.142140][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 953.198031][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 953.238545][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.286705][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.538263][ T8180] bond0 (unregistering): Released all slaves [ 953.760883][T15092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 953.780631][T15092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 953.795198][T15092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 953.803561][T15092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 953.834915][T15092] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 953.842587][T15092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 953.973746][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 954.019535][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 954.059902][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.106215][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.267150][ T8180] bond0 (unregistering): Released all slaves [ 954.543364][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 954.590415][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 954.632756][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.679364][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.833474][ T8180] bond0 (unregistering): Released all slaves [ 954.944750][T15092] Bluetooth: hci0: command tx timeout [ 954.986971][T16162] netlink: 'syz.7.3138': attribute type 8 has an invalid length. [ 955.171229][T15935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.677522][T16184] ip_tables: iptables: counters copy to user failed while replacing table [ 955.904887][T15092] Bluetooth: hci5: command tx timeout [ 956.038625][T15935] veth0_vlan: entered promiscuous mode [ 956.438719][T15935] veth1_vlan: entered promiscuous mode [ 956.617824][T15935] veth0_macvtap: entered promiscuous mode [ 956.681976][T15935] veth1_macvtap: entered promiscuous mode [ 956.703333][T16164] chnl_net:caif_netlink_parms(): no params data found [ 956.818250][T15935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.826813][T16174] chnl_net:caif_netlink_parms(): no params data found [ 956.878265][ T27] audit: type=1326 audit(1786513328.112:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.7.3141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f967419e0d9 code=0x0 [ 957.026008][T15092] Bluetooth: hci0: command tx timeout [ 957.055434][T15935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.153877][T16164] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.164296][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.172423][T16164] bridge_slave_0: entered allmulticast mode [ 957.181454][T16164] bridge_slave_0: entered promiscuous mode [ 957.220921][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.239363][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.255585][T16164] bridge_slave_1: entered allmulticast mode [ 957.275979][T16164] bridge_slave_1: entered promiscuous mode [ 957.320224][T15935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.329351][T15935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.342612][T15935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.352246][T15935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.379861][T16174] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.387507][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.395334][T16174] bridge_slave_0: entered allmulticast mode [ 957.403943][T16174] bridge_slave_0: entered promiscuous mode [ 957.463901][T16174] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.478483][T16174] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.487398][T16174] bridge_slave_1: entered allmulticast mode [ 957.514124][T16174] bridge_slave_1: entered promiscuous mode [ 957.548117][T16164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.598897][T16164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.828133][T16174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.898519][T16174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.984844][T15092] Bluetooth: hci5: command tx timeout [ 958.087507][T16164] team0: Port device team_slave_0 added [ 958.105473][T16164] team0: Port device team_slave_1 added [ 958.208874][T15311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.249074][T15311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.481547][T16174] team0: Port device team_slave_0 added [ 958.531619][T16174] team0: Port device team_slave_1 added [ 959.105159][T15092] Bluetooth: hci0: command tx timeout [ 959.159062][T16164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.166676][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.196061][T16164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.232048][T16174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.239696][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.267214][T16174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.284223][T16174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.295543][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.322172][T16174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.335619][T16164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.342778][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.369834][T16164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.544233][ T8189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.548666][T16247] netlink: 'syz.7.3145': attribute type 1 has an invalid length. [ 959.569187][ T8189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.610064][T16247] bond8: entered promiscuous mode [ 959.615745][T16247] 8021q: adding VLAN 0 to HW filter on device bond8 [ 959.751306][T16252] bond8: (slave bridge3): making interface the new active one [ 959.758999][T16252] bridge3: entered promiscuous mode [ 959.765444][T16252] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 959.798893][T16247] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3145'. [ 959.821000][T16247] bond8: entered allmulticast mode [ 959.832103][T16247] bridge3: entered allmulticast mode [ 959.868278][T16164] hsr_slave_0: entered promiscuous mode [ 959.916287][T16164] hsr_slave_1: entered promiscuous mode [ 959.925875][T16164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.933487][T16164] Cannot create hsr debugfs directory [ 960.031262][T16174] hsr_slave_0: entered promiscuous mode [ 960.051166][T16174] hsr_slave_1: entered promiscuous mode [ 960.068668][T15092] Bluetooth: hci5: command tx timeout [ 960.075489][T16174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.083109][T16174] Cannot create hsr debugfs directory [ 961.196374][T15092] Bluetooth: hci0: command tx timeout [ 962.156680][T15092] Bluetooth: hci5: command tx timeout [ 962.483970][T16299] loop3: detected capacity change from 0 to 128 [ 962.580156][T16299] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 962.911755][T16299] sysv_free_block: trying to free block not in datazone [ 963.010022][T15935] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 965.875678][T16340] bond_slave_0: entered promiscuous mode [ 965.883354][T16340] bond_slave_1: entered promiscuous mode [ 965.905617][T16340] bond_slave_0: left promiscuous mode [ 965.911088][T16340] bond_slave_1: left promiscuous mode [ 965.926347][T16340] bond1: (slave vlan2): making interface the new active one [ 965.937769][T16340] bond_slave_0: entered promiscuous mode [ 965.943456][T16340] bond_slave_1: entered promiscuous mode [ 965.953029][T16340] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 966.049469][T16164] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 966.540782][T16164] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 966.567389][T16164] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 966.580683][T16164] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 967.460114][T16366] netlink: 'syz.3.3161': attribute type 11 has an invalid length. [ 967.758423][T16366] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 967.785325][T16366] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 968.928766][T16377] netlink: 'syz.7.3162': attribute type 9 has an invalid length. [ 969.193578][ T8180] hsr_slave_0: left promiscuous mode [ 969.212278][ T8180] hsr_slave_1: left promiscuous mode [ 969.237436][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.255962][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.274071][ T8180] bridge_slave_1: left allmulticast mode [ 969.279979][ T8180] bridge_slave_1: left promiscuous mode [ 969.297763][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.322029][ T8180] bridge_slave_0: left allmulticast mode [ 969.328654][ T8180] bridge_slave_0: left promiscuous mode [ 969.334452][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.371537][ T8180] hsr_slave_0: left promiscuous mode [ 969.382678][ T8180] hsr_slave_1: left promiscuous mode [ 969.398767][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.408988][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.418097][ T8180] bridge_slave_1: left allmulticast mode [ 969.423869][ T8180] bridge_slave_1: left promiscuous mode [ 969.430585][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.444275][ T8180] bridge_slave_0: left allmulticast mode [ 969.454103][ T8180] bridge_slave_0: left promiscuous mode [ 969.464242][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.356527][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 970.437330][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 970.503477][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.575903][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.198195][ T8180] bond0 (unregistering): Released all slaves [ 972.912045][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 973.067761][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 973.155738][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.274051][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.287021][T16422] xt_CONNSECMARK: invalid mode: 0 [ 973.871997][ T8180] bond0 (unregistering): Released all slaves [ 974.227592][T16164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.282270][T16174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 974.341748][T16174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 974.413599][T16174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 974.463675][T16174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 974.599096][T16164] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.709424][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.716713][T15303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.340417][T15312] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.347692][T15312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.624383][T16440] netlink: 'syz.3.3172': attribute type 4 has an invalid length. [ 975.731908][T16440] netlink: 'syz.3.3172': attribute type 4 has an invalid length. [ 975.799941][T16440] kernel profiling enabled (shift: 9) [ 976.029890][T16174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.114390][T16174] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.152705][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3179'. [ 976.203328][T15311] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.210586][T15311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.255614][T15311] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.262860][T15311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.542458][T16164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.849943][T16174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.977274][T16174] veth0_vlan: entered promiscuous mode [ 977.000903][T16174] veth1_vlan: entered promiscuous mode [ 977.100217][T16174] veth0_macvtap: entered promiscuous mode [ 977.141825][T16174] veth1_macvtap: entered promiscuous mode [ 977.221192][T16174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.243380][T16174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.271645][T16174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.317481][T16164] veth0_vlan: entered promiscuous mode [ 977.343410][T16174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.368579][T16174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.393702][T16174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.415903][T16164] veth1_vlan: entered promiscuous mode [ 977.457703][T16174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.480635][T16174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.489826][T16174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.514733][T16174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.614328][T16164] veth0_macvtap: entered promiscuous mode [ 977.661917][T16164] veth1_macvtap: entered promiscuous mode [ 977.753828][T16164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.766413][T16164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.777359][T16164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.787957][T16164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.799705][T16164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.813590][ T8180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.832586][ T8180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.861562][T16164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.872386][T16164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.883171][T16164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.895171][T16164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.908117][T16164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.920736][T16164] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.936524][T16164] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.945391][T16164] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.954125][T16164] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.029421][ T8180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.077625][ T8180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.195557][T15303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.203425][T15303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.317044][T15312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.340928][T15312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.398119][T16504] netlink: 'syz.7.3181': attribute type 4 has an invalid length. [ 978.496113][T16504] netlink: 'syz.7.3181': attribute type 4 has an invalid length. [ 980.433566][T16530] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 980.991432][T16540] loop3: detected capacity change from 0 to 1024 [ 981.060719][T16540] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 981.099756][T16540] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 981.132773][T16540] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 981.207772][T16540] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: inode #5: comm syz.3.3180: unexpected bad inode w/o EXT4_IGET_BAD [ 981.275646][T16540] EXT4-fs (loop3): no journal found [ 981.280883][T16540] EXT4-fs (loop3): can't get journal size [ 981.336880][T16540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 981.488994][T15935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.489191][T16551] loop9: detected capacity change from 0 to 128 [ 981.500504][T16529] loop1: detected capacity change from 0 to 40427 [ 981.555160][T16551] VFS: Found a Xenix FS (block size = 512) on device loop9 [ 981.564443][T16529] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 981.663314][T16529] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 981.711542][T16529] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 981.757279][T16551] sysv_free_block: trying to free block not in datazone [ 981.856381][T16529] F2FS-fs (loop1): Found nat_bits in checkpoint [ 982.073878][T16164] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 983.277167][T16529] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 983.295401][T16529] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 984.975480][T16592] syz_tun: entered allmulticast mode [ 988.376090][T16624] Bluetooth: MGMT ver 1.22 [ 990.385016][T15092] Bluetooth: hci1: command 0x0406 tx timeout [ 991.197845][T16638] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.205382][T16638] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.362156][T16666] binder: BINDER_SET_CONTEXT_MGR already set [ 991.383799][T16666] binder: 16665:16666 ioctl 4018620d 200000004a80 returned -16 [ 991.805053][T16638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.855329][T16638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.288344][T16638] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.297438][T16638] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.306966][T16638] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.316649][T16638] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.375395][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.384304][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.034624][T16711] Can't find ip_set type bitmap:ip [ 1000.630358][T16762] loop1: detected capacity change from 0 to 256 [ 1000.852127][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1000.861345][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1000.870840][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1000.880177][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1000.889294][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1000.898604][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1000.907912][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1000.917897][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1000.927158][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1000.937041][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1001.008659][T16762] FAT-fs (loop1): Directory bread(block 64) failed [ 1001.051060][T16762] FAT-fs (loop1): Directory bread(block 65) failed [ 1001.100575][T16762] FAT-fs (loop1): Directory bread(block 66) failed [ 1001.139091][T16762] FAT-fs (loop1): Directory bread(block 67) failed [ 1001.170636][T16762] FAT-fs (loop1): Directory bread(block 68) failed [ 1001.200272][T16762] FAT-fs (loop1): Directory bread(block 69) failed [ 1001.229541][T16762] FAT-fs (loop1): Directory bread(block 70) failed [ 1001.285764][T16762] FAT-fs (loop1): Directory bread(block 71) failed [ 1001.318718][T16762] FAT-fs (loop1): Directory bread(block 72) failed [ 1001.373238][T16762] FAT-fs (loop1): Directory bread(block 73) failed [ 1007.891334][T16848] loop9: detected capacity change from 0 to 256 [ 1007.974986][T16848] FAT-fs (loop9): Directory bread(block 64) failed [ 1007.985946][T16848] FAT-fs (loop9): Directory bread(block 65) failed [ 1008.007659][T16848] FAT-fs (loop9): Directory bread(block 66) failed [ 1008.014280][T16848] FAT-fs (loop9): Directory bread(block 67) failed [ 1008.021255][T16848] FAT-fs (loop9): Directory bread(block 68) failed [ 1008.028349][T16848] FAT-fs (loop9): Directory bread(block 69) failed [ 1008.051925][T16848] FAT-fs (loop9): Directory bread(block 70) failed [ 1008.086395][T16848] FAT-fs (loop9): Directory bread(block 71) failed [ 1008.128884][T16848] FAT-fs (loop9): Directory bread(block 72) failed [ 1008.136223][T16848] FAT-fs (loop9): Directory bread(block 73) failed [ 1008.173113][T16855] __nla_validate_parse: 135 callbacks suppressed [ 1008.173159][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1008.231261][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1008.240461][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1008.451814][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1008.460992][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1008.620206][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1008.629585][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1008.759729][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1008.768850][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1008.791861][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3239'. [ 1010.256030][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.263804][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.064297][T16855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.128247][T16855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.751792][T16855] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.760892][T16855] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.771846][T16855] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.780880][T16855] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.351573][T16901] loop1: detected capacity change from 0 to 128 [ 1013.404749][T16901] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 1014.303709][T16900] sysv_free_block: trying to free block not in datazone [ 1014.566778][T16174] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1017.073729][T16944] loop3: detected capacity change from 0 to 256 [ 1017.145266][T16946] __nla_validate_parse: 134 callbacks suppressed [ 1017.145286][T16946] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3259'. [ 1017.208024][T16944] FAT-fs (loop3): Directory bread(block 64) failed [ 1017.239761][T16944] FAT-fs (loop3): Directory bread(block 65) failed [ 1017.287400][T16944] FAT-fs (loop3): Directory bread(block 66) failed [ 1017.293997][T16944] FAT-fs (loop3): Directory bread(block 67) failed [ 1017.355005][T16944] FAT-fs (loop3): Directory bread(block 68) failed [ 1017.361607][T16944] FAT-fs (loop3): Directory bread(block 69) failed [ 1017.405344][T16944] FAT-fs (loop3): Directory bread(block 70) failed [ 1017.434872][T16944] FAT-fs (loop3): Directory bread(block 71) failed [ 1017.461305][T16944] FAT-fs (loop3): Directory bread(block 72) failed [ 1017.496071][T16944] FAT-fs (loop3): Directory bread(block 73) failed [ 1018.902767][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1018.963344][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1018.972483][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1019.007431][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1019.016921][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1019.808436][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1019.817582][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1019.852584][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1019.864947][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1021.151772][T16962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.159632][T16962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.300303][T16962] bond_slave_0: left promiscuous mode [ 1021.306761][T16962] bond_slave_1: left promiscuous mode [ 1021.696536][T17000] tipc: Failed to remove unknown binding: 66,0,0/0:1664452821/1664452823 [ 1021.715850][T17000] tipc: Failed to remove unknown binding: 66,0,0/0:1664452821/1664452822 [ 1021.736771][T17000] tipc: Failed to remove unknown binding: 66,0,0/0:1664452821/1664452823 [ 1021.757294][T17000] tipc: Failed to remove unknown binding: 66,0,0/0:1664452821/1664452822 [ 1022.128727][T16962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.162237][T16962] __nla_validate_parse: 72 callbacks suppressed [ 1022.162255][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1022.178515][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1022.216491][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1022.225726][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1022.234868][T16962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.266283][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1022.275426][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1022.319295][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1022.328396][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1022.364809][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1022.373819][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1025.295425][T16962] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.304360][T16962] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.313436][T16962] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.322376][T16962] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.555978][T16983] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1027.419626][T17033] loop9: detected capacity change from 0 to 1024 [ 1027.729541][T17033] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1027.790381][T17033] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1027.849986][T17033] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1027.892037][T17033] EXT4-fs error (device loop9): ext4_get_journal_inode:5820: inode #5: comm syz.9.3274: unexpected bad inode w/o EXT4_IGET_BAD [ 1027.963023][T17033] EXT4-fs (loop9): no journal found [ 1027.965987][T17042] loop3: detected capacity change from 0 to 512 [ 1027.974615][T17033] EXT4-fs (loop9): can't get journal size [ 1027.977206][T17033] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1028.058912][T17042] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1028.147284][T17042] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.3278: inode has both inline data and extents flags [ 1028.161995][T17042] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.3278: couldn't read orphan inode 15 (err -117) [ 1028.177020][T17042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.199677][T16164] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.407859][T17055] tipc: Failed to remove unknown binding: 66,0,0/0:295268235/295268237 [ 1028.444602][T17055] tipc: Failed to remove unknown binding: 66,0,0/0:295268235/295268236 [ 1028.483859][T17055] tipc: Failed to remove unknown binding: 66,0,0/0:295268235/295268237 [ 1028.514707][T17055] tipc: Failed to remove unknown binding: 66,0,0/0:295268235/295268236 [ 1028.579380][T17042] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1029.631507][T15935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.816898][T17085] loop1: detected capacity change from 0 to 8 [ 1029.867185][T17085] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1029.902530][T17080] Need at least one configuration in g1. [ 1029.913174][T17085] SQUASHFS error: Failed to read block 0x0: -5 [ 1029.921576][T17080] udc dummy_udc.0: failed to start g1: -22 [ 1029.928427][T17085] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1029.939742][T17080] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1029.954908][T17085] SQUASHFS error: Failed to read block 0x0: -5 [ 1029.970861][T17080] UDC core: g1: couldn't find an available UDC or it's busy [ 1029.985574][ T27] audit: type=1800 audit(1786513401.222:961): pid=17085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3284" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 1030.205039][ T5812] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1030.404907][ T5812] usb 10-1: Using ep0 maxpacket: 8 [ 1030.423088][ T5812] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1030.453537][ T5812] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1030.482244][ T5812] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.503064][ T5812] usb 10-1: Product: syz [ 1030.512940][ T5812] usb 10-1: Manufacturer: syz [ 1030.537171][ T5812] usb 10-1: SerialNumber: syz [ 1030.836998][T17109] loop3: detected capacity change from 0 to 128 [ 1030.873715][T17109] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1030.930416][ T5812] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1030.937757][ T5812] usb 10-1: MIDIStreaming interface descriptor not found [ 1031.006033][T17109] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1031.007002][ T5812] usb 10-1: USB disconnect, device number 2 [ 1031.086206][T17109] ext2 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.191486][T17117] udevd[17117]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.264659][T15700] Bluetooth: hci4: command 0x0406 tx timeout [ 1031.606334][T15935] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1031.915819][T17129] netlink: 'syz.1.3288': attribute type 4 has an invalid length. [ 1031.997291][T17129] netlink: 'syz.1.3288': attribute type 4 has an invalid length. [ 1032.988850][T17135] tipc: Failed to remove unknown binding: 66,0,0/0:4266656057/4266656059 [ 1032.997538][T17135] tipc: Failed to remove unknown binding: 66,0,0/0:4266656057/4266656058 [ 1033.007925][T17135] tipc: Failed to remove unknown binding: 66,0,0/0:4266656057/4266656059 [ 1033.016481][T17135] tipc: Failed to remove unknown binding: 66,0,0/0:4266656057/4266656058 [ 1033.214686][T17145] __nla_validate_parse: 62 callbacks suppressed [ 1033.214706][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 1033.304372][T17145] bond2: entered promiscuous mode [ 1033.310285][T17145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1033.405912][T17145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1033.413085][T17145] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1033.425216][T17145] bond2: (slave sit1): Error -95 calling set_mac_address [ 1035.158282][T17170] loop1: detected capacity change from 0 to 512 [ 1035.230782][T17170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1035.347719][T17170] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.3297: iget: bad i_size value: 38620345925642 [ 1035.662234][T17170] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3297: couldn't read orphan inode 15 (err -117) [ 1036.237051][T17170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.342427][ T27] audit: type=1800 audit(1786513407.572:962): pid=17170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3297" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1036.388269][T16174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.426225][T17199] loop1: detected capacity change from 0 to 512 [ 1038.497898][T17199] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.3308: Unrecognised inode hash code 255 [ 1038.627248][T17199] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3308: Corrupt directory, running e2fsck is recommended [ 1038.689792][T17199] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1038.772676][T17199] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.3308: corrupted in-inode xattr: invalid ea_ino [ 1038.867764][T17199] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3308: couldn't read orphan inode 15 (err -117) [ 1038.891837][T17199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1039.049311][T17199] tipc: Started in network mode [ 1039.054247][T17199] tipc: Node identity 4, cluster identity 4711 [ 1039.085586][T17199] tipc: Node number set to 4 [ 1039.626394][T16174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.071086][T17252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1045.480687][T17288] loop9: detected capacity change from 0 to 512 [ 1045.544999][T17288] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1045.602593][T17288] EXT4-fs error (device loop9): ext4_orphan_get:1404: inode #15: comm syz.9.3327: inode has both inline data and extents flags [ 1045.678720][T17288] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.3327: couldn't read orphan inode 15 (err -117) [ 1045.829172][T17288] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.811593][T17322] loop1: detected capacity change from 0 to 512 [ 1047.880008][T17322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.954053][T17322] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.067107][T16164] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.200937][T17322] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1048.316760][T17322] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #15: comm syz.1.3332: corrupted xattr block 33: invalid ea_ino [ 1048.337527][T17335] loop9: detected capacity change from 0 to 1764 [ 1048.508837][T17322] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 1048.708701][T17344] netlink: 'syz.7.3336': attribute type 1 has an invalid length. [ 1048.770810][T16174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.074090][T17354] loop1: detected capacity change from 0 to 1024 [ 1049.392109][T17344] bond9: entered promiscuous mode [ 1049.442431][T17354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.729160][T17344] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1049.899554][T17350] bridge5: entered promiscuous mode [ 1049.941704][T17350] bond9: (slave bridge5): Enslaving as a backup interface with an up link [ 1049.967940][T17354] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1049.994182][ T8188] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1050.007078][T17354] EXT4-fs (loop1): Remounting filesystem read-only [ 1050.060105][T17351] veth11: entered promiscuous mode [ 1050.088811][T17351] veth11: entered allmulticast mode [ 1050.138167][T17351] bond9: (slave veth11): Enslaving as a backup interface with a down link [ 1050.155083][ T8189] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1050.208445][T16174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.290034][T17369] netlink: 'syz.9.3339': attribute type 3 has an invalid length. [ 1050.799087][T15349] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1051.006905][T15349] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1051.049121][T15349] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1051.084794][T15349] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1051.092398][T17388] loop3: detected capacity change from 0 to 2048 [ 1051.127008][T15349] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1051.175776][T15349] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1051.208293][T17388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.242039][T15349] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1051.285264][T15349] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1051.317334][T15349] usb 10-1: Product: syz [ 1051.321667][T15349] usb 10-1: Manufacturer: syz [ 1051.362839][T15349] cdc_wdm 10-1:1.0: skipping garbage [ 1051.378784][T15349] cdc_wdm 10-1:1.0: skipping garbage [ 1051.397726][T15349] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1051.425413][T15349] cdc_wdm 10-1:1.0: Unknown control protocol [ 1051.669097][ T972] usb 10-1: USB disconnect, device number 3 [ 1051.845971][T15935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.992515][T17416] loop3: detected capacity change from 0 to 1024 [ 1052.041817][T17416] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1052.084953][T17416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.518755][T15935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.644796][T17432] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1054.198021][T17458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1054.311487][T17460] loop9: detected capacity change from 0 to 1024 [ 1054.367320][T17460] EXT4-fs: Ignoring removed oldalloc option [ 1054.404756][T17460] EXT4-fs: Ignoring removed orlov option [ 1054.552742][T17460] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.644675][T17460] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.728672][T17460] EXT4-fs error (device loop9): ext4_map_blocks:720: inode #15: comm syz.9.3362: lblock 0 mapped to illegal pblock 0 (length 2) [ 1054.772229][T17474] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 1054.781515][T17474] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 1054.802240][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.820351][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.840650][T17460] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 1054.887353][T17460] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1054.887353][T17460] [ 1054.927354][T17475] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3362: lblock 0 mapped to illegal pblock 0 (length 2) [ 1054.981527][T17478] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3362: lblock 0 mapped to illegal pblock 0 (length 2) [ 1055.036192][T17478] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3362: lblock 0 mapped to illegal pblock 0 (length 2) [ 1055.076604][T17476] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3362: lblock 0 mapped to illegal pblock 0 (length 2) [ 1055.109266][T17476] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3362: lblock 0 mapped to illegal pblock 0 (length 2) [ 1055.143221][T17459] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3362: lblock 0 mapped to illegal pblock 0 (length 2) [ 1055.170952][T17475] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3362: lblock 0 mapped to illegal pblock 0 (length 2) [ 1055.226409][T17459] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3362: lblock 0 mapped to illegal pblock 0 (length 2) [ 1055.301906][T17459] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3362: lblock 0 mapped to illegal pblock 0 (length 2) [ 1055.739979][T16164] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1059.931145][T17508] loop9: detected capacity change from 0 to 64 [ 1060.344861][T15344] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1060.557452][T15344] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1060.579801][T15344] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.634643][T15344] usb 4-1: config 220 has no interface number 2 [ 1060.664749][T15344] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1060.712111][T15344] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1060.731319][T15344] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1060.759548][T15344] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1060.782974][T15344] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1060.813360][T15344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.850269][T15344] usb 4-1: Product: syz [ 1060.875193][T15344] usb 4-1: Manufacturer: syz [ 1060.879871][T15344] usb 4-1: SerialNumber: syz [ 1061.196857][T15344] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1061.203297][T15344] usb 4-1: No valid video chain found. [ 1061.225039][T15344] usb 4-1: selecting invalid altsetting 0 [ 1062.030782][T15344] usb 4-1: selecting invalid altsetting 0 [ 1062.045130][T15344] usbtest: probe of 4-1:220.1 failed with error -22 [ 1062.075111][T15344] usb 4-1: USB disconnect, device number 5 [ 1062.156458][T17538] netlink: 'syz.3.3380': attribute type 1 has an invalid length. [ 1062.213376][T17538] bond3: entered promiscuous mode [ 1062.218994][T17538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1062.280549][T17538] bridge1: entered promiscuous mode [ 1062.286959][T17538] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 1062.318472][ T8189] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1062.447869][T17544] veth5: entered promiscuous mode [ 1062.452983][T17544] veth5: entered allmulticast mode [ 1062.478082][T17544] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 1062.500154][ T8188] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1063.882767][T17555] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 1064.308377][T17562] Cannot find add_set index 0 as target [ 1064.408450][T17555] syzkaller0: entered promiscuous mode [ 1064.540295][T17555] syzkaller0: entered allmulticast mode [ 1064.884329][T15349] IPVS: starting estimator thread 0... [ 1064.984982][T17567] IPVS: using max 16 ests per chain, 38400 per kthread [ 1065.239052][T17577] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1066.929628][T17606] netlink: 'syz.1.3393': attribute type 1 has an invalid length. [ 1067.039556][T17606] bond1: entered promiscuous mode [ 1067.045394][T17606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1067.247379][T17608] bridge1: entered promiscuous mode [ 1067.285580][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1067.305398][T17608] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1067.362089][T17606] veth3: entered promiscuous mode [ 1067.367863][T17606] veth3: entered allmulticast mode [ 1067.376818][T17606] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1067.433603][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1067.712843][T17625] SET target dimension over the limit! [ 1069.134939][T17638] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 1069.165307][T17638] syzkaller0: entered promiscuous mode [ 1069.187899][T17638] syzkaller0: entered allmulticast mode [ 1069.397792][T17643] Cannot find add_set index 0 as target [ 1070.243357][ T972] IPVS: starting estimator thread 0... [ 1070.354682][T17650] IPVS: using max 23 ests per chain, 55200 per kthread [ 1070.471203][T17655] ip_tables: iptables: counters copy to user failed while replacing table [ 1070.786557][T17664] loop1: detected capacity change from 0 to 512 [ 1070.850283][T17668] netlink: 'syz.7.3404': attribute type 11 has an invalid length. [ 1071.654744][T15349] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1071.755477][T17668] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 1071.858234][T15349] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.899497][T15349] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1071.974927][T15349] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1071.991263][T15349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.221474][T15349] usb 2-1: Product: syz [ 1072.229520][T15349] usb 2-1: Manufacturer: syz [ 1072.234405][T15349] usb 2-1: SerialNumber: syz [ 1072.791501][T15349] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1073.007353][T15349] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1073.055103][T15349] scsi host1: usb-storage 2-1:1.0 [ 1073.174300][ T972] usb 2-1: USB disconnect, device number 5 [ 1073.214945][T17701] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3409'. [ 1076.608474][T17748] Cannot find add_set index 0 as target [ 1077.344914][T17738] Bluetooth: hci0: command 0x0406 tx timeout [ 1077.351107][ T5084] Bluetooth: hci5: command 0x0406 tx timeout [ 1078.174408][T17776] netlink: 'syz.3.3423': attribute type 1 has an invalid length. [ 1078.184071][T17772] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1079.688194][T17784] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1079.844835][T17779] veth7: entered allmulticast mode [ 1079.897962][T17779] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1080.123751][T17799] loop9: detected capacity change from 0 to 2048 [ 1080.266169][T17799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1080.684894][T15344] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1080.896626][T15344] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1080.938292][T15344] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1080.994784][T15344] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1081.033765][T15344] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1081.053899][T15344] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1081.074158][T15344] usb 10-1: SerialNumber: syz [ 1081.413561][T15344] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 1082.559655][T15344] usb 10-1: USB disconnect, device number 4 [ 1082.683512][T16164] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1085.834753][T15349] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1086.047638][T15349] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1086.087588][T15349] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1086.121184][T15349] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1086.140763][T15349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.170812][T15349] usb 2-1: Product: syz [ 1086.187528][T15349] usb 2-1: Manufacturer: syz [ 1086.224772][T15349] usb 2-1: SerialNumber: syz [ 1086.554894][T15349] usb 2-1: unit 4 not found! [ 1086.655090][T15349] usb 2-1: USB disconnect, device number 6 [ 1087.330565][T17023] udevd[17023]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1087.684353][T17880] syz.3.3435 (17880): drop_caches: 2 [ 1095.836832][T17981] netlink: 'syz.9.3456': attribute type 11 has an invalid length. [ 1096.607372][T17981] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 1096.985849][T17990] usb usb7: usbfs: interface 0 claimed by hub while 'syz.3.3459' sets config #3 [ 1097.018161][T17981] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 1097.586318][T18003] CIFS: Attempting to mount //127.0.0.1/test [ 1097.608012][T18003] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1097.649749][T18003] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1099.921779][ T27] audit: type=1326 audit(1786513471.152:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18021 comm="syz.3.3466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2405b9e0d9 code=0x0 [ 1100.345509][ T27] audit: type=1326 audit(1786513471.582:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18038 comm="syz.9.3469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fb1f9e0d9 code=0x0 [ 1101.533727][T15092] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 1101.553985][T18059] CIFS: Attempting to mount //127.0.0.1/test [ 1101.583218][T18059] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1101.624737][T18059] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1104.548323][T18095] netlink: 'syz.9.3480': attribute type 5 has an invalid length. [ 1106.190303][T18116] random: crng reseeded on system resumption [ 1108.355524][T18121] loop1: detected capacity change from 0 to 128 [ 1108.515287][T18121] bridge_slave_0: left allmulticast mode [ 1108.533241][T18121] bridge_slave_0: left promiscuous mode [ 1108.564214][T18121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.598744][T18121] bridge_slave_1: left allmulticast mode [ 1108.625218][T18121] bridge_slave_1: left promiscuous mode [ 1108.644986][T18121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.717260][T18121] bond0: (slave bond_slave_0): Releasing backup interface [ 1108.769663][T18121] bond0: (slave bond_slave_1): Releasing backup interface [ 1108.878339][T18121] team0: Port device team_slave_0 removed [ 1108.890090][T18121] team0: Port device team_slave_1 removed [ 1108.897260][T18121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.915224][T18121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.070352][T18121] bond1: (slave bridge1): Removing an active aggregator [ 1109.135455][ T8186] bond1: Warning: Found an uninitialized port [ 1109.325465][ T8186] bond1: Warning: Found an uninitialized port [ 1109.481721][T15175] bond1: Warning: Found an uninitialized port [ 1109.515648][T18121] bond1: (slave bridge1): Releasing backup interface [ 1109.581712][T18121] bond1: (slave bridge1): the permanent HWaddr of slave - 4a:54:8c:ae:c7:e2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1109.756177][T18121] bridge1: left promiscuous mode [ 1109.796805][T18121] bond1: (slave veth3): Releasing backup interface [ 1109.832778][T18135] loop3: detected capacity change from 0 to 512 [ 1113.420749][T18185] netlink: 'syz.3.3499': attribute type 5 has an invalid length. [ 1114.702886][T15092] Bluetooth: hci5: unexpected event for opcode 0x0407 [ 1116.230588][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.237069][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.401158][T18224] Need at least one configuration in g1. [ 1116.412776][T18224] udc dummy_udc.0: failed to start g1: -22 [ 1116.429415][T18224] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1116.453318][T18224] UDC core: g1: couldn't find an available UDC or it's busy [ 1119.141667][T18290] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1119.185163][T18293] (null): rxe_set_mtu: Set mtu to 1024 [ 1119.430496][T18293] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1125.181609][T18378] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3521'. [ 1125.331017][T18390] random: crng reseeded on system resumption [ 1126.551890][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1126.589286][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1126.598444][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1126.643563][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1126.653609][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1126.691447][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1126.700583][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1127.839308][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1127.848440][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1129.228655][ T27] audit: type=1326 audit(1786513500.174:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18419 comm="syz.9.3529" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fb1f9e0d9 code=0x0 [ 1129.491328][T18394] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.502533][T18394] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.511487][T18394] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.521127][T18394] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.621919][T18411] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode [ 1129.734826][T18411] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode [ 1130.355778][T18439] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 1130.362642][T18439] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 1130.461822][T18439] team0: left promiscuous mode [ 1130.466900][T18439] team0: left allmulticast mode [ 1130.471980][T18439] team1: left promiscuous mode [ 1130.476838][T18439] team1: left allmulticast mode [ 1130.482310][T18439] bridge2: left promiscuous mode [ 1130.487978][T18439] bond6: left promiscuous mode [ 1130.492959][T18439] vlan3: left allmulticast mode [ 1130.497917][T18439] bond6: left allmulticast mode [ 1130.503955][T18439] bond7: left allmulticast mode [ 1130.509078][T18439] ip6gretap2: left allmulticast mode [ 1130.514943][T18439] bond8: left promiscuous mode [ 1130.519745][T18439] bridge3: left promiscuous mode [ 1130.526517][T18439] bond8: left allmulticast mode [ 1130.531418][T18439] bridge3: left allmulticast mode [ 1130.566020][T18439] bond9: left promiscuous mode [ 1130.711001][T18439] bridge5: left promiscuous mode [ 1130.981431][T18439] veth11: left promiscuous mode [ 1131.474832][T18439] veth11: left allmulticast mode [ 1131.574871][T18448] tipc: Enabled bearer , priority 0 [ 1132.791447][T18452] syzkaller0: entered promiscuous mode [ 1132.797305][T18452] syzkaller0: entered allmulticast mode [ 1132.812821][T18452] tipc: Resetting bearer [ 1134.128055][T18489] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 1134.144649][T18489] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 1134.264817][ T27] audit: type=1326 audit(1786513505.204:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.1.3541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x0 [ 1134.397752][T18497] loop9: detected capacity change from 0 to 128 [ 1135.415859][T18497] bridge_slave_0: left allmulticast mode [ 1135.421591][T18497] bridge_slave_0: left promiscuous mode [ 1135.427835][T18497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.553183][T18497] bridge_slave_1: left allmulticast mode [ 1135.610340][T18497] bridge_slave_1: left promiscuous mode [ 1135.654880][T18497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.998874][T18497] bond0: (slave bond_slave_0): Releasing backup interface [ 1136.008712][T18497] bond0: (slave bond_slave_1): Releasing backup interface [ 1136.805974][T18497] team0: Port device team_slave_0 removed [ 1136.896059][T18497] team0: Port device team_slave_1 removed [ 1136.902342][T18497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.961428][T18497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.014706][T18517] tipc: Started in network mode [ 1137.077725][T18517] tipc: Node identity 76657468115f, cluster identity 4711 [ 1137.205396][T18517] tipc: Enabled bearer , priority 0 [ 1137.258822][T18527] loop9: detected capacity change from 0 to 128 [ 1137.339292][T18527] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1137.371079][T18527] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.573262][T18527] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1138.215668][T12647] tipc: Node number set to 1731884136 [ 1143.602828][T18455] tipc: Resetting bearer [ 1152.556263][T18455] tipc: Disabling bearer [ 1152.587477][T18646] gretap1: entered promiscuous mode [ 1153.894823][T18666] libceph: resolve '96.' (ret=-3): failed [ 1154.975337][T18677] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[16174] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18677] [ 1155.249375][T18685] netlink: zone id is out of range [ 1155.264929][T18685] netlink: zone id is out of range [ 1155.270128][T18685] netlink: zone id is out of range [ 1155.282711][T18687] __nla_validate_parse: 419 callbacks suppressed [ 1155.282730][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3589'. [ 1155.294726][T18685] netlink: zone id is out of range [ 1155.305715][T18685] netlink: zone id is out of range [ 1155.311033][T18685] netlink: zone id is out of range [ 1155.331766][T18685] netlink: zone id is out of range [ 1155.344414][T18690] loop1: detected capacity change from 0 to 512 [ 1155.354592][T18685] netlink: zone id is out of range [ 1155.364923][T18685] netlink: zone id is out of range [ 1155.370100][T18685] netlink: zone id is out of range [ 1155.605519][T18690] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.3588: corrupted in-inode xattr: invalid ea_ino [ 1155.697283][T18690] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3588: couldn't read orphan inode 15 (err -117) [ 1155.746322][T18690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.400533][T18690] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1157.334677][T18690] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #18: comm syz.1.3588: mark_inode_dirty error [ 1157.410976][T18724] netlink: 'syz.7.3596': attribute type 4 has an invalid length. [ 1157.692784][T16174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.976884][T18746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3603'. [ 1159.076781][T18746] bond5: entered promiscuous mode [ 1159.081908][T18746] bond5: entered allmulticast mode [ 1159.346967][ T27] audit: type=1326 audit(1786513530.284:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18752 comm="syz.9.3612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fb1f9e0d9 code=0x0 [ 1161.400809][T18786] tipc: Started in network mode [ 1161.406178][T18786] tipc: Node identity 76657468115f, cluster identity 4711 [ 1161.552091][T18786] tipc: Enabled bearer , priority 0 [ 1162.096012][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3613'. [ 1162.380431][T18811] loop1: detected capacity change from 0 to 2048 [ 1162.478813][T18811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.542976][T15373] tipc: Node number set to 1731884136 [ 1162.552773][T18811] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.834356][T18811] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3615: bg 0: block 345: padding at end of block bitmap is not set [ 1162.931632][T18811] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 216 with error 28 [ 1163.007562][T18811] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1163.007562][T18811] [ 1163.065241][T18811] EXT4-fs (loop1): Total free blocks count 0 [ 1163.100259][T18811] EXT4-fs (loop1): Free/Dirty block details [ 1163.135526][T18811] EXT4-fs (loop1): free_blocks=0 [ 1163.140644][T18811] EXT4-fs (loop1): dirty_blocks=224 [ 1163.147630][T18824] netlink: 'syz.7.3617': attribute type 2 has an invalid length. [ 1163.173083][T18811] EXT4-fs (loop1): Block reservation details [ 1163.203606][T18811] EXT4-fs (loop1): i_reserved_data_blocks=14 [ 1163.373707][T18315] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 232 with max blocks 2 with error 28 [ 1164.064784][T18830] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[18832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18830] [ 1166.222267][T18855] tipc: Enabling of bearer rejected, already enabled [ 1166.994888][T18868] loop1: detected capacity change from 0 to 256 [ 1167.098872][T18868] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1167.109685][T18868] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1167.324035][T18868] exFAT-fs (loop1): failed to read sector(0x100) [ 1167.331218][T18868] exFAT-fs (loop1): failed to load upcase table [ 1167.338052][T18868] exFAT-fs (loop1): failed to recognize exfat type [ 1168.363249][T18878] net_ratelimit: 23 callbacks suppressed [ 1168.363330][T18878] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1169.079395][T18890] tipc: Failed to remove unknown binding: 66,0,0/1731884136:274854095/274854097 [ 1169.100982][T18890] tipc: Failed to remove unknown binding: 66,0,0/1731884136:274854095/274854096 [ 1169.124826][T18890] tipc: Failed to remove unknown binding: 66,0,0/1731884136:274854095/274854097 [ 1169.154033][T18890] tipc: Failed to remove unknown binding: 66,0,0/1731884136:274854095/274854096 [ 1169.478177][T18902] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3635'. [ 1169.742651][T18908] loop1: detected capacity change from 0 to 2048 [ 1170.047111][T18908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1175.661256][T19006] IPVS: Error joining to the multicast group [ 1177.672641][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.679254][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.894286][T19035] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.693860][T19050] netlink: 'syz.1.3671': attribute type 1 has an invalid length. [ 1180.490425][T19050] bond2: entered promiscuous mode [ 1180.514327][T19050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1180.625319][T19055] vlan2: entered allmulticast mode [ 1180.654620][T19055] bond2: entered allmulticast mode [ 1180.753510][T19057] bond2: (slave bridge2): making interface the new active one [ 1180.791810][T19057] bridge2: entered promiscuous mode [ 1180.804989][T19057] bridge2: entered allmulticast mode [ 1180.842740][T19057] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1181.158551][T19071] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1181.709096][T19087] syzkaller0: entered promiscuous mode [ 1181.739108][T19087] syzkaller0: entered allmulticast mode [ 1183.946533][T19126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1184.037521][T19126] netlink: 'syz.3.3692': attribute type 5 has an invalid length. [ 1184.048287][T19126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1184.085743][T19129] xfrm0: entered allmulticast mode [ 1191.218676][T19196] netlink: 300 bytes leftover after parsing attributes in process `syz.7.3715'. [ 1192.819181][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3720'. [ 1193.121411][T19214] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3721'. [ 1193.200212][T19214] vlan2: entered allmulticast mode [ 1193.212109][T19214] bridge1: entered allmulticast mode [ 1194.152918][T19220] bridge1: port 1(erspan0) entered blocking state [ 1194.170725][T19220] bridge1: port 1(erspan0) entered disabled state [ 1194.188238][T19220] erspan0: entered allmulticast mode [ 1194.204200][T19220] erspan0: entered promiscuous mode [ 1197.111522][T19275] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1197.111522][T19275] The task syz.3.3738 (19275) triggered the difference, watch for misbehavior. [ 1200.546684][T19304] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1200.583285][T19304] bond6 (unregistering): Released all slaves [ 1200.901287][T15344] libceph: connect (1)[c::]:6789 error -101 [ 1200.914984][T15344] libceph: mon0 (1)[c::]:6789 connect error [ 1200.946307][T19309] ceph: No mds server is up or the cluster is laggy [ 1202.914397][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3755'. [ 1202.937471][T19344] CIFS: Attempting to mount //127.0.0.1/share [ 1203.719665][T19344] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1203.734598][T19344] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1203.960226][T19357] tipc: Started in network mode [ 1203.978460][T19357] tipc: Node identity 76657468115f, cluster identity 4711 [ 1204.014828][T19357] tipc: Enabled bearer , priority 0 [ 1205.264644][T15373] tipc: Node number set to 1731884136 [ 1206.976008][T19383] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1212.207865][T19410] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.216907][T19410] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.226046][T19410] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.234867][T19410] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.253187][T19410] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1216.180641][T19441] netlink: 'syz.7.3774': attribute type 1 has an invalid length. [ 1216.277352][T19441] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1216.375085][T19441] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1216.383959][T19441] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1216.414582][T19441] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1216.437497][T19441] bond10: (slave geneve3): making interface the new active one [ 1216.469717][T19441] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 1216.499530][T19444] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3774'. [ 1218.056585][ T27] audit: type=1326 audit(1786513588.992:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19464 comm="syz.3.3791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2405b9e0d9 code=0x0 [ 1218.143451][T12647] smpboot: CPU 1 is now offline [ 1218.215459][T19467] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1219.730407][ T27] audit: type=1326 audit(1786513590.682:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.7.3796" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967419e0d9 code=0x7ffc0000 [ 1219.752488][T19486] sock: sock_set_timeout: `syz.7.3796' (pid 19486) tries to set negative timeout [ 1219.784837][ T27] audit: type=1326 audit(1786513590.682:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.7.3796" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967419e0d9 code=0x7ffc0000 [ 1219.816108][ T27] audit: type=1326 audit(1786513590.682:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.7.3796" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f967419e0d9 code=0x7ffc0000 [ 1219.849942][ T27] audit: type=1326 audit(1786513590.682:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.7.3796" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967419e0d9 code=0x7ffc0000 [ 1219.884731][ T27] audit: type=1326 audit(1786513590.682:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.7.3796" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f967419e0d9 code=0x7ffc0000 [ 1219.919927][ T27] audit: type=1326 audit(1786513590.682:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.7.3796" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967419e0d9 code=0x7ffc0000 [ 1219.950060][ T27] audit: type=1326 audit(1786513590.682:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.7.3796" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f967419e0d9 code=0x7ffc0000 [ 1219.988502][ T27] audit: type=1326 audit(1786513590.682:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.7.3796" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967419e0d9 code=0x7ffc0000 [ 1220.018148][ T27] audit: type=1326 audit(1786513590.702:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.7.3796" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f967419e0d9 code=0x7ffc0000 [ 1220.596861][T19506] loop1: detected capacity change from 0 to 2048 [ 1220.649595][T19508] tipc: Enabled bearer , priority 10 [ 1220.675378][T19506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1220.689991][T19508] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3805'. [ 1220.718215][T19506] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1220.735639][T19508] tipc: Enabling of bearer rejected, failed to enable media [ 1220.954609][T19514] netlink: 'syz.1.3804': attribute type 12 has an invalid length. [ 1221.307273][T16174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.261969][T19532] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1224.913802][T19555] futex_wake_op: syz.9.3819 tries to shift op by 32; fix this program [ 1225.323098][T19563] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3820'. [ 1226.536244][T19575] syzkaller0: entered promiscuous mode [ 1226.554689][T19575] syzkaller0: entered allmulticast mode [ 1226.561633][T19577] bridge0: port 3(syz_tun) entered blocking state [ 1226.584743][T19577] bridge0: port 3(syz_tun) entered disabled state [ 1226.605634][T19577] syz_tun: entered promiscuous mode [ 1226.842423][T15092] Bluetooth: hci1: unexpected subevent 0x0e length: 32 > 15 [ 1228.871395][T19607] Set syz1 is full, maxelem 2 reached [ 1231.035246][T19643] netlink: 'syz.7.3835': attribute type 4 has an invalid length. [ 1231.250497][T19646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1231.271993][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3849'. [ 1231.669195][T19650] veth9: entered allmulticast mode [ 1231.690342][T19650] bond6: (slave veth9): Enslaving as an active interface with an up link [ 1232.123970][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'. [ 1232.182902][T19659] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1232.206542][T19663] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3853'. [ 1232.220840][T19663] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1232.232986][T19663] bridge6: entered promiscuous mode [ 1232.270976][T19661] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1232.281942][T19661] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1232.540832][T19667] loop1: detected capacity change from 0 to 1024 [ 1232.853466][T19659] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1232.879784][T19659] bond7 (unregistering): Released all slaves [ 1232.910975][T19665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1232.918963][T19665] IPv6: NLM_F_CREATE should be set when creating new route [ 1232.927088][T19670] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3853'. [ 1234.667422][T19670] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1234.775084][T19670] bridge7: entered promiscuous mode [ 1239.110588][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.123052][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.543942][T19753] siw: device registration error -23 [ 1242.204308][T19765] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1246.830108][T19778] xfrm0: entered allmulticast mode [ 1253.884633][ T5812] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1253.892926][T19824] netlink: 'syz.7.3900': attribute type 14 has an invalid length. [ 1255.047903][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.072589][ T5812] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1255.140116][ T5812] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1255.164971][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.204141][ T5812] usb 2-1: Product: syz [ 1255.214257][ T5812] usb 2-1: Manufacturer: syz [ 1255.229707][ T5812] usb 2-1: SerialNumber: syz [ 1255.264816][ T5812] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1255.296557][ T5812] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1255.335481][ T5812] usbserial_generic 2-1:1.0: device has no bulk endpoints [ 1255.501445][T12647] usb 2-1: USB disconnect, device number 7 [ 1255.584853][T19839] netlink: 'syz.7.3906': attribute type 1 has an invalid length. [ 1255.765864][T19839] veth13: entered allmulticast mode [ 1255.792160][T19839] bond11: (slave veth13): Enslaving as an active interface with a down link [ 1259.675348][T19877] netlink: 'syz.9.3917': attribute type 1 has an invalid length. [ 1259.783782][T19881] veth3: entered allmulticast mode [ 1259.835287][T19881] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1263.237825][T19877] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1270.424288][T19945] syzkaller0: entered promiscuous mode [ 1270.441676][T19945] syzkaller0: entered allmulticast mode [ 1276.275124][T19978] veth0_vlan: entered allmulticast mode [ 1276.297402][T19979] netlink: zone id is out of range [ 1276.316876][T19978] xt_hashlimit: max too large, truncated to 1048576 [ 1276.334839][T19979] netlink: zone id is out of range [ 1276.340029][T19979] netlink: zone id is out of range [ 1276.369956][T19980] ªªªªªª: renamed from vlan0 [ 1276.375020][T19979] netlink: zone id is out of range [ 1276.397449][T19979] netlink: zone id is out of range [ 1276.418794][T19979] netlink: zone id is out of range [ 1276.441226][T19979] netlink: zone id is out of range [ 1276.466997][T19979] netlink: zone id is out of range [ 1276.496593][T19979] netlink: zone id is out of range [ 1276.517795][T19979] netlink: zone id is out of range [ 1277.703377][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 1277.703395][ T27] audit: type=1326 audit(1786513648.652:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.1.3955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35b899e0d9 code=0x0 [ 1279.895207][T20026] libceph: resolve '96.' (ret=-3): failed [ 1280.790844][T20026] loop1: detected capacity change from 0 to 131072 [ 1280.805520][T20026] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 1280.812317][T20026] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1280.836320][T20026] F2FS-fs (loop1): invalid crc value [ 1280.857811][T20026] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1280.949630][T20026] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1280.957355][T20026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1284.413432][T20055] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3967'. [ 1287.186311][ T27] audit: type=1326 audit(1786513658.142:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20078 comm="syz.1.3968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1287.218555][ T27] audit: type=1326 audit(1786513658.142:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20078 comm="syz.1.3968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1287.290421][ T27] audit: type=1326 audit(1786513658.242:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20078 comm="syz.1.3968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1287.315256][ T27] audit: type=1326 audit(1786513658.242:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20078 comm="syz.1.3968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1287.350616][ T27] audit: type=1326 audit(1786513658.242:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20078 comm="syz.1.3968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1287.385628][ T27] audit: type=1326 audit(1786513658.242:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20078 comm="syz.1.3968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1287.414741][ T27] audit: type=1326 audit(1786513658.242:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20078 comm="syz.1.3968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1287.444329][ T27] audit: type=1326 audit(1786513658.242:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20078 comm="syz.1.3968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1288.011829][T20093] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3986'. [ 1288.202899][T20095] libceph: resolve '96.' (ret=-3): failed [ 1289.534050][T20099] bond12: entered promiscuous mode [ 1289.554531][T20099] bond12: entered allmulticast mode [ 1300.550954][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.559036][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.931188][T20228] loop1: detected capacity change from 0 to 64 [ 1310.889930][T20252] overlayfs: missing 'lowerdir' [ 1313.373335][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4031'. [ 1313.411596][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4031'. [ 1313.471840][T20261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.516537][T20261] bond2: (slave bond0): Enslaving as an active interface with a down link [ 1313.565342][T20267] netlink: 'syz.9.4031': attribute type 4 has an invalid length. [ 1313.615645][T20267] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4031'. [ 1313.647195][T20267] .`: renamed from bond0 (while UP) [ 1313.952496][T20270] tipc: Enabling of bearer rejected, already enabled [ 1319.789768][T20291] loop1: detected capacity change from 0 to 256 [ 1319.817995][T20292] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1320.570635][T20299] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.4040'. [ 1320.579874][T20299] net_ratelimit: 23 callbacks suppressed [ 1320.579883][T20299] openvswitch: netlink: ct_state flags 00030000 unsupported [ 1327.511399][T20331] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1329.938864][T20344] bond2: (slave bridge2): Releasing backup interface [ 1329.958652][T20344] bridge2: left promiscuous mode [ 1329.963793][T20344] bridge2: left allmulticast mode [ 1330.075146][T20344] bond0: (slave vxlan0): Releasing backup interface [ 1330.125762][T20344] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.134884][T20344] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.143780][T20344] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.152904][T20344] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1333.358694][T20394] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1334.850439][T20430] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 1334.883022][T20430] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 1338.385128][T20481] tipc: Enabling of bearer rejected, already enabled [ 1339.051111][T20495] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1343.313132][T20509] loop1: detected capacity change from 0 to 512 [ 1343.398260][T20486] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1345.167117][T20511] overlayfs: failed to clone lowerpath [ 1348.165580][T20518] syzkaller0: entered promiscuous mode [ 1348.171294][T20518] syzkaller0: entered allmulticast mode [ 1349.555550][T20526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1350.005644][T20534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4093'. [ 1350.751173][T20541] tipc: Enabling of bearer rejected, already enabled [ 1351.368199][T20547] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10734] was attempted by " [ 1351.528870][T20551] wg1: entered promiscuous mode [ 1352.976108][T20561] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1353.022942][T20551] wg1: entered allmulticast mode [ 1356.094687][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1357.171046][T20591] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1358.233389][T20593] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4101'. [ 1360.458784][T20604] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4115'. [ 1360.922398][T20612] tipc: Enabling of bearer rejected, already enabled [ 1361.115188][T20618] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1361.132923][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4121'. [ 1361.990186][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.808494][T20628] tipc: Failed to remove unknown binding: 66,0,0/4:875807381/875807383 [ 1362.817362][T20619] tipc: Failed to remove unknown binding: 66,0,0/4:230147141/230147142 [ 1363.018442][T20619] tipc: Failed to remove unknown binding: 66,0,0/4:230147141/230147142 [ 1365.144303][T20632] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 1365.210925][T20632] ref_ctr increment failed for inode: 0x58a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807dc2e880 [ 1365.224735][T20641] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4125'. [ 1365.284757][T20636] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 1365.307537][T20636] ref_ctr decrement failed for inode: 0x58a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807dc2e880 [ 1365.361214][T20644] vlan4: entered allmulticast mode [ 1365.404483][T20644] bridge8: entered allmulticast mode [ 1365.463456][T20641] bridge8: port 1(erspan0) entered blocking state [ 1365.665791][T20641] bridge8: port 1(erspan0) entered disabled state [ 1365.684572][T20641] erspan0: entered allmulticast mode [ 1365.695335][T20641] erspan0: entered promiscuous mode [ 1365.707744][T20641] bridge8: port 1(erspan0) entered blocking state [ 1365.714293][T20641] bridge8: port 1(erspan0) entered forwarding state [ 1373.988961][T20692] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1374.208708][T20697] wg1: entered promiscuous mode [ 1374.213630][T20697] wg1: entered allmulticast mode [ 1376.911465][T20715] syzkaller0: entered promiscuous mode [ 1376.930625][T20715] syzkaller0: entered allmulticast mode [ 1378.565902][T20728] bridge0: port 1(syz_tun) entered blocking state [ 1378.592880][T20728] bridge0: port 1(syz_tun) entered disabled state [ 1378.612334][T20728] syz_tun: entered allmulticast mode [ 1378.639589][T20728] syz_tun: entered promiscuous mode [ 1380.354298][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1380.405344][T20748] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 1380.501425][T20748] ref_ctr increment failed for inode: 0x570 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880788e1300 [ 1380.549636][T20755] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1380.596162][T20751] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 1380.672389][T20751] ref_ctr decrement failed for inode: 0x570 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880788e1300 [ 1380.742313][T20758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1380.835494][T20758] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1382.206932][T20760] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1382.253369][T20760] bond3 (unregistering): Released all slaves [ 1382.322809][T20763] netlink: 'syz.9.4159': attribute type 322 has an invalid length. [ 1383.091460][T20775] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1383.201315][T20775] bond3 (unregistering): Released all slaves [ 1384.596767][T20792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 1386.792083][T20804] loop1: detected capacity change from 0 to 128 [ 1386.841158][T20804] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1386.898264][T20804] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1386.998652][T20804] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.897693][T16174] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1390.248200][T20824] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4175'. [ 1390.392146][T20824] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1390.658860][T20829] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1390.753962][T20829] bond13: (slave bond14): Enslaving as an active interface with an up link [ 1393.765484][T20833] bond13 (unregistering): (slave bond14): Releasing backup interface [ 1393.845647][T20833] bond13 (unregistering): Released all slaves [ 1393.937513][T20842] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4178'. [ 1394.097693][T20856] bridge0: port 1(syz_tun) entered blocking state [ 1394.155379][T20856] bridge0: port 1(syz_tun) entered disabled state [ 1394.161997][T20856] syz_tun: entered allmulticast mode [ 1394.209869][T20856] syz_tun: entered promiscuous mode [ 1394.456621][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4188'. [ 1397.204019][ T27] audit: type=1326 audit(1786513768.152:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.1.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1397.243171][ T27] audit: type=1326 audit(1786513768.152:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.1.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1397.276821][ T27] audit: type=1326 audit(1786513768.162:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.1.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1397.310187][ T27] audit: type=1326 audit(1786513768.162:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.1.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1397.332287][T20883] sock: sock_set_timeout: `syz.1.4194' (pid 20883) tries to set negative timeout [ 1397.350543][ T27] audit: type=1326 audit(1786513768.162:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.1.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1397.387203][ T27] audit: type=1326 audit(1786513768.162:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.1.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1397.428428][ T27] audit: type=1326 audit(1786513768.162:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.1.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1397.473701][ T27] audit: type=1326 audit(1786513768.162:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.1.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1397.501510][T20889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4204'. [ 1397.512712][ T27] audit: type=1326 audit(1786513768.162:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.1.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1397.535546][T20889] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1397.584990][T20889] bridge3: entered promiscuous mode [ 1397.587897][ T27] audit: type=1326 audit(1786513768.162:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20881 comm="syz.1.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b899e0d9 code=0x7ffc0000 [ 1397.859714][T20889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4204'. [ 1397.890537][T20898] loop1: detected capacity change from 0 to 256 [ 1397.898337][T20889] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1399.099152][T20889] bridge4: entered promiscuous mode [ 1399.105500][T20898] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1399.431120][T20910] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 1399.794032][T20910] FAT-fs (loop1): Filesystem has been set read-only [ 1402.438910][T20930] tipc: Enabled bearer , priority 10 [ 1402.815746][T20930] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4203'. [ 1402.866243][T20930] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1402.886962][T20930] tipc: Enabled bearer , priority 10 [ 1404.643049][T20944] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 1404.672333][T20944] ref_ctr increment failed for inode: 0x4f6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888047c4e880 [ 1404.726101][T20952] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 1404.766186][T20952] ref_ctr decrement failed for inode: 0x4f6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888047c4e880 [ 1406.619963][T20977] tipc: Enabled bearer , priority 10 [ 1406.986910][T20977] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4221'. [ 1407.027564][T20977] tipc: Enabling of bearer rejected, failed to enable media [ 1407.568530][T20990] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 1407.582803][T20990] ref_ctr increment failed for inode: 0xe30 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6a600 [ 1407.598604][T20990] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 1407.607773][T20990] ref_ctr decrement failed for inode: 0xe30 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6a600 [ 1411.118227][T21016] netlink: 'syz.1.4229': attribute type 1 has an invalid length. [ 1411.223494][T21018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1411.291939][T21018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1411.326139][T21018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1411.356397][T21018] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1411.386607][T21018] bond3: (slave geneve2): making interface the new active one [ 1411.404759][T21018] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1411.429737][T21016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4229'. [ 1411.460146][T21016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1411.544472][T21018] syz.1.4229 (21018) used greatest stack depth: 17864 bytes left [ 1415.365705][T21041] tipc: Enabled bearer , priority 10 [ 1415.731329][T21041] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4236'. [ 1415.778288][T21041] tipc: Enabling of bearer rejected, failed to enable media [ 1416.347281][T21057] loop1: detected capacity change from 0 to 256 [ 1416.365620][T21057] exfat: Deprecated parameter 'utf8' [ 1416.430757][T21057] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d) [ 1416.856177][ T5811] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1417.234212][ T5811] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 40698, setting to 64 [ 1417.710161][ T5811] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1417.719673][ T5811] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1417.728303][ T5811] usb 2-1: Product: syz [ 1417.732713][ T5811] usb 2-1: Manufacturer: syz [ 1417.740780][T21057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1419.031133][ T5811] hub 2-1:4.0: USB hub found [ 1420.454696][ T5811] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 1421.554746][ T5811] usb 2-1: USB disconnect, device number 8 [ 1421.577934][T21104] 8021q: VLANs not supported on vcan0 [ 1421.717034][T21106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1422.975257][T21115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.035255][T21115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.431267][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.010005][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4267'. [ 1434.390903][T21197] Bluetooth: hci4: command 0x0406 tx timeout [ 1434.827820][T21215] netlink: 201392 bytes leftover after parsing attributes in process `syz.9.4289'. [ 1435.093284][T21211] netlink: 'syz.7.4288': attribute type 322 has an invalid length. [ 1440.345436][T21252] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4301'. [ 1449.009726][T21304] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1449.636610][ T5811] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1449.845394][ T5811] usb 2-1: not running at top speed; connect to a high speed hub [ 1449.884962][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.924602][ T5811] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1449.961167][ T5811] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1449.998058][ T5811] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1450.044851][ T5811] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1450.084702][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.129084][ T5811] usb 2-1: Product: syz [ 1450.143596][ T5811] usb 2-1: Manufacturer: syz [ 1450.166074][ T5811] usb 2-1: SerialNumber: syz [ 1451.827788][ T5811] usb 2-1: 0:2 : does not exist [ 1452.061450][ T5811] usb 2-1: USB disconnect, device number 9 [ 1452.829994][T21343] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4330'. [ 1452.897871][T21345] loop1: detected capacity change from 0 to 1024 [ 1452.917360][T21345] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1452.941463][T21345] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1452.958045][T21347] xt_l2tp: invalid flags combination: 0 [ 1453.332357][T21345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1453.540752][T21345] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.1.4331: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 1453.737930][T16174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.048738][T21364] syzkaller0: entered promiscuous mode [ 1454.254529][T21364] syzkaller0: entered allmulticast mode [ 1455.636606][T21376] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4341'. [ 1455.781627][T21379] batman_adv: batadv0: Adding interface: macsec1 [ 1455.799704][T21379] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.943049][T21379] batman_adv: batadv0: Interface activated: macsec1 [ 1456.085855][T21381] loop1: detected capacity change from 0 to 256 [ 1460.704939][T15092] Bluetooth: hci1: command 0x0406 tx timeout [ 1465.926684][T21442] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4360'. [ 1469.345951][T21458] loop1: detected capacity change from 0 to 1024 [ 1469.573128][T21461] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1470.140342][T21468] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1470.861565][T21478] netlink: 184 bytes leftover after parsing attributes in process `syz.7.4372'. [ 1472.006017][T21495] netlink: 'syz.9.4377': attribute type 1 has an invalid length. [ 1472.156506][T21496] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 1472.176187][T21499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1472.204980][T21496] ref_ctr increment failed for inode: 0x71c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6c280 [ 1472.226702][T21499] bond0: (slave bond3): making interface the new active one [ 1472.274851][T21499] bond0: (slave bond3): Enslaving as an active interface with an up link [ 1472.307850][T21501] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 1472.335966][T21495] bond0: (slave gretap2): Enslaving as a backup interface with an up link [ 1472.355041][T21501] ref_ctr decrement failed for inode: 0x71c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6c280 [ 1473.761108][T21525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4388'. [ 1475.491471][T21525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4388'. [ 1483.722144][T21576] netlink: 'syz.3.4404': attribute type 1 has an invalid length. [ 1484.869005][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.214877][T21577] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1490.887727][T21627] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4417'. [ 1491.528525][T21620] loop1: detected capacity change from 0 to 4096 [ 1492.563574][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1492.563590][ T27] audit: type=1800 audit(1786513863.512:1030): pid=21649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4414" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1498.608976][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4430'. [ 1498.653015][T21683] macvtap1: entered promiscuous mode [ 1498.666377][T21683] bridge0: entered promiscuous mode [ 1498.679611][T21689] loop1: detected capacity change from 0 to 512 [ 1498.688580][T21683] macvtap1: entered allmulticast mode [ 1498.693971][T21683] bridge0: entered allmulticast mode [ 1498.715125][T21689] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1498.768682][T21687] bridge0: left allmulticast mode [ 1498.778612][T21687] bridge0: left promiscuous mode [ 1498.797644][T21689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1498.821995][T21687] macvtap1: left promiscuous mode [ 1498.831558][T21687] macvtap1: left allmulticast mode [ 1498.860476][T21689] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1500.787196][T21707] trusted_key: encrypted_key: insufficient parameters specified [ 1503.249428][T16174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.848940][T21714] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1505.809856][T21738] loop1: detected capacity change from 0 to 256 [ 1505.908926][T21738] FAT-fs (loop1): Directory bread(block 64) failed [ 1505.915955][T21738] FAT-fs (loop1): Directory bread(block 65) failed [ 1505.922668][T21738] FAT-fs (loop1): Directory bread(block 66) failed [ 1505.929369][T21738] FAT-fs (loop1): Directory bread(block 67) failed [ 1505.936169][T21738] FAT-fs (loop1): Directory bread(block 68) failed [ 1505.942734][T21738] FAT-fs (loop1): Directory bread(block 69) failed [ 1505.949494][T21738] FAT-fs (loop1): Directory bread(block 70) failed [ 1505.956175][T21738] FAT-fs (loop1): Directory bread(block 71) failed [ 1505.962863][T21738] FAT-fs (loop1): Directory bread(block 72) failed [ 1505.969578][T21738] FAT-fs (loop1): Directory bread(block 73) failed [ 1505.982841][T21738] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1508.125784][ T27] audit: type=1800 audit(1786513879.082:1031): pid=21742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4447" name="bus" dev="ramfs" ino=63674 res=0 errno=0 [ 1509.717716][T21792] netlink: 'syz.9.4472': attribute type 1 has an invalid length. [ 1510.051602][T21793] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1510.077707][T21792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1510.093138][T21794] bond4: (slave gretap3): making interface the new active one [ 1510.102956][T21794] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 1510.118502][T21798] tipc: Enabled bearer , priority 0 [ 1510.139362][T21794] syz.9.4472 (21794) used greatest stack depth: 17672 bytes left [ 1510.156822][T21788] syzkaller0: entered promiscuous mode [ 1510.166060][T21788] syzkaller0: entered allmulticast mode [ 1510.241967][T21788] tipc: Resetting bearer [ 1510.274062][T21786] tipc: Resetting bearer [ 1510.322959][T21786] tipc: Disabling bearer [ 1511.479414][T21800] trusted_key: encrypted_key: insufficient parameters specified [ 1511.617429][T21806] tipc: Enabling of bearer rejected, already enabled [ 1512.632410][T21821] netlink: 'syz.9.4470': attribute type 1 has an invalid length. [ 1512.850612][T21823] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1513.070848][T21821] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4470'. [ 1513.123205][T17225] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1513.127788][T21821] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1513.254441][ T8187] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1513.362288][T21833] syzkaller0: entered promiscuous mode [ 1513.398958][T21833] syzkaller0: entered allmulticast mode [ 1514.407717][T21197] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 1515.722685][T21855] syz_tun (unregistering): left allmulticast mode [ 1515.749810][T21855] syz_tun (unregistering): left promiscuous mode [ 1515.763129][T21855] bridge0: port 1(syz_tun) entered disabled state [ 1515.790321][T21853] syzkaller0: entered promiscuous mode [ 1515.797516][T21853] syzkaller0: entered allmulticast mode [ 1515.837390][T21853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.846974][T21853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.070601][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4486'. [ 1516.476922][T21880] tipc: Enabled bearer , priority 0 [ 1516.498468][T21880] syzkaller0: entered promiscuous mode [ 1516.511776][T21880] syzkaller0: entered allmulticast mode [ 1516.555400][T21880] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1516.643897][T21880] tipc: Resetting bearer [ 1516.747866][T21877] tipc: Resetting bearer [ 1516.808220][T21877] tipc: Disabling bearer [ 1520.282560][T21918] bond1: option mode: unable to set because the bond device has slaves [ 1520.341259][T21918] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1520.369505][T21918] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1523.211930][ T5836] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1523.385216][T21946] netlink: 'syz.1.4513': attribute type 1 has an invalid length. [ 1523.406591][ T5836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.832269][ T5836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1523.902717][ T5836] usb 1-1: Dual-Role OTG device on HNP port [ 1523.938248][ T5836] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 1523.967848][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.163693][ C0] ------------[ cut here ]------------ [ 1524.169891][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 1524.176786][ C0] WARNING: CPU: 0 PID: 21955 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 1524.186894][ C0] Modules linked in: [ 1524.190801][ C0] CPU: 0 PID: 21955 Comm: syz.3.4516 Not tainted syzkaller #0 [ 1524.198267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1524.208347][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 1524.213767][ C0] Code: 49 8b 0e 48 c7 c0 00 ed 7a 8b 49 c7 c0 20 ed 7a 8b 4c 0f 44 c0 48 c7 c7 c0 ec 7a 8b 48 c7 c6 51 bf a6 8c 89 ea e8 7d fe 95 fa <0f> 0b e9 e1 fe ff ff e8 61 31 cc fa 49 bc 00 00 00 00 00 fc ff df [ 1524.233471][ C0] RSP: 0018:ffffc90000007790 EFLAGS: 00010046 [ 1524.239613][ C0] RAX: e8dd689256894400 RBX: ffff8881437d80e0 RCX: ffff888018b30000 [ 1524.247597][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1524.255599][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 1524.263604][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 1524.271593][ C0] R13: ffff8881437d810d R14: ffff8881437d80e8 R15: ffff88802373d6ba [ 1524.279576][ C0] FS: 00007f2406b286c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1524.288523][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1524.295115][ C0] CR2: 000000110c393219 CR3: 000000005e2b5000 CR4: 00000000003506f0 [ 1524.303119][ C0] Call Trace: [ 1524.306410][ C0] [ 1524.309267][ C0] hidg_set_alt+0x12a/0xa10 [ 1524.313871][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 1524.319267][ C0] set_config+0x735/0xff0 [ 1524.323649][ C0] composite_setup+0x1df4/0x33a0 [ 1524.328612][ C0] configfs_composite_setup+0xc7/0x100 [ 1524.334098][ C0] dummy_timer+0x1324/0x34e0 [ 1524.338724][ C0] ? mark_lock+0x94/0x320 [ 1524.343074][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1524.348117][ C0] ? lock_chain_count+0x20/0x20 [ 1524.352988][ C0] ? dummy_free_streams+0x520/0x520 [ 1524.358201][ C0] ? dummy_free_streams+0x520/0x520 [ 1524.363410][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1524.368635][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1524.373778][ C0] ? read_tsc+0x9/0x20 [ 1524.377906][ C0] hrtimer_run_softirq+0x177/0x290 [ 1524.383077][ C0] handle_softirqs+0x27d/0x820 [ 1524.387868][ C0] ? read_tsc+0x9/0x20 [ 1524.391954][ C0] ? ktime_get+0x24b/0x280 [ 1524.396390][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1524.401171][ C0] ? do_softirq+0x1a0/0x1a0 [ 1524.405697][ C0] __irq_exit_rcu+0xd3/0x190 [ 1524.410303][ C0] ? irq_exit_rcu+0x20/0x20 [ 1524.414828][ C0] irq_exit_rcu+0x9/0x20 [ 1524.419077][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1524.424735][ C0] [ 1524.427678][ C0] [ 1524.430616][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1524.436693][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1524.441994][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1524.461632][ C0] RSP: 0018:ffffc9000bb8fb00 EFLAGS: 00000206 [ 1524.467727][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: e8dd689256894400 [ 1524.475709][ C0] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0 [ 1524.483692][ C0] RBP: ffffc9000bb8fc10 R08: dffffc0000000000 R09: 1ffffffff223daa2 [ 1524.491693][ C0] R10: dffffc0000000000 R11: fffffbfff223daa3 R12: 1ffff92001771f6c [ 1524.499696][ C0] R13: ffffffff8d216e40 R14: 0000000000000246 R15: dffffc0000000000 [ 1524.507704][ C0] ? __x64_sys_socket+0x7a/0x90 [ 1524.512640][ C0] ? do_syscall_64+0x55/0xb0 [ 1524.517247][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1524.523335][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1524.528743][ C0] fs_reclaim_acquire+0x71/0x100 [ 1524.533709][ C0] ? slab_pre_alloc_hook+0x2a/0x300 [ 1524.538965][ C0] slab_pre_alloc_hook+0x2a/0x300 [ 1524.544029][ C0] ? security_sk_alloc+0x4b/0x130 [ 1524.549129][ C0] ? security_sk_alloc+0x4b/0x130 [ 1524.554174][ C0] __kmem_cache_alloc_node+0x53/0x250 [ 1524.559577][ C0] ? security_sk_alloc+0x4b/0x130 [ 1524.564613][ C0] __kmalloc+0xa7/0x240 [ 1524.568787][ C0] ? sk_prot_alloc+0xe7/0x210 [ 1524.573480][ C0] security_sk_alloc+0x4b/0x130 [ 1524.578342][ C0] sk_prot_alloc+0x101/0x210 [ 1524.582945][ C0] ? sk_alloc+0x24/0x350 [ 1524.587204][ C0] sk_alloc+0x3a/0x350 [ 1524.591295][ C0] packet_create+0xff/0x790 [ 1524.595886][ C0] __sock_create+0x49e/0x940 [ 1524.600497][ C0] __sys_socket+0xd7/0x1b0 [ 1524.604929][ C0] __x64_sys_socket+0x7a/0x90 [ 1524.609615][ C0] do_syscall_64+0x55/0xb0 [ 1524.614045][ C0] ? clear_bhb_loop+0x40/0x90 [ 1524.618731][ C0] ? clear_bhb_loop+0x40/0x90 [ 1524.623450][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1524.629378][ C0] RIP: 0033:0x7f2405b9e0d9 [ 1524.633831][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.653462][ C0] RSP: 002b:00007f2406b28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1524.661895][ C0] RAX: ffffffffffffffda RBX: 00007f2405e25fa0 RCX: 00007f2405b9e0d9 [ 1524.669882][ C0] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000011 [ 1524.677866][ C0] RBP: 00007f2405c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1524.685845][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1524.693821][ C0] R13: 00007f2405e26038 R14: 00007f2405e25fa0 R15: 00007ffcc76eb418 [ 1524.701815][ C0] [ 1524.704843][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1524.712123][ C0] CPU: 0 PID: 21955 Comm: syz.3.4516 Not tainted syzkaller #0 [ 1524.719583][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1524.729643][ C0] Call Trace: [ 1524.732927][ C0] [ 1524.735780][ C0] dump_stack_lvl+0x18c/0x250 [ 1524.740477][ C0] ? show_regs_print_info+0x20/0x20 [ 1524.745681][ C0] ? load_image+0x420/0x420 [ 1524.750215][ C0] panic+0x2ca/0x720 [ 1524.754126][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1524.758653][ C0] __warn+0x2e0/0x470 [ 1524.762648][ C0] ? usb_ep_enable+0x263/0x440 [ 1524.767432][ C0] ? usb_ep_enable+0x263/0x440 [ 1524.772204][ C0] report_bug+0x2be/0x4f0 [ 1524.776542][ C0] ? usb_ep_enable+0x263/0x440 [ 1524.781314][ C0] ? usb_ep_enable+0x263/0x440 [ 1524.786087][ C0] ? usb_ep_enable+0x265/0x440 [ 1524.790856][ C0] handle_bug+0xcf/0x120 [ 1524.795112][ C0] exc_invalid_op+0x1a/0x50 [ 1524.799622][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1524.804481][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 1524.809863][ C0] Code: 49 8b 0e 48 c7 c0 00 ed 7a 8b 49 c7 c0 20 ed 7a 8b 4c 0f 44 c0 48 c7 c7 c0 ec 7a 8b 48 c7 c6 51 bf a6 8c 89 ea e8 7d fe 95 fa <0f> 0b e9 e1 fe ff ff e8 61 31 cc fa 49 bc 00 00 00 00 00 fc ff df [ 1524.829478][ C0] RSP: 0018:ffffc90000007790 EFLAGS: 00010046 [ 1524.835557][ C0] RAX: e8dd689256894400 RBX: ffff8881437d80e0 RCX: ffff888018b30000 [ 1524.843536][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1524.851538][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 1524.859516][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 1524.867495][ C0] R13: ffff8881437d810d R14: ffff8881437d80e8 R15: ffff88802373d6ba [ 1524.875491][ C0] hidg_set_alt+0x12a/0xa10 [ 1524.880035][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 1524.885424][ C0] set_config+0x735/0xff0 [ 1524.889776][ C0] composite_setup+0x1df4/0x33a0 [ 1524.894739][ C0] configfs_composite_setup+0xc7/0x100 [ 1524.900210][ C0] dummy_timer+0x1324/0x34e0 [ 1524.904834][ C0] ? mark_lock+0x94/0x320 [ 1524.909178][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1524.914208][ C0] ? lock_chain_count+0x20/0x20 [ 1524.919077][ C0] ? dummy_free_streams+0x520/0x520 [ 1524.924285][ C0] ? dummy_free_streams+0x520/0x520 [ 1524.929495][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1524.934716][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1524.939832][ C0] ? read_tsc+0x9/0x20 [ 1524.943915][ C0] hrtimer_run_softirq+0x177/0x290 [ 1524.949037][ C0] handle_softirqs+0x27d/0x820 [ 1524.953812][ C0] ? read_tsc+0x9/0x20 [ 1524.957885][ C0] ? ktime_get+0x24b/0x280 [ 1524.962323][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1524.967111][ C0] ? do_softirq+0x1a0/0x1a0 [ 1524.971628][ C0] __irq_exit_rcu+0xd3/0x190 [ 1524.976225][ C0] ? irq_exit_rcu+0x20/0x20 [ 1524.980743][ C0] irq_exit_rcu+0x9/0x20 [ 1524.984989][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1524.990632][ C0] [ 1524.993566][ C0] [ 1524.996503][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1525.002490][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1525.007784][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1525.027397][ C0] RSP: 0018:ffffc9000bb8fb00 EFLAGS: 00000206 [ 1525.033480][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: e8dd689256894400 [ 1525.041456][ C0] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0 [ 1525.049435][ C0] RBP: ffffc9000bb8fc10 R08: dffffc0000000000 R09: 1ffffffff223daa2 [ 1525.057417][ C0] R10: dffffc0000000000 R11: fffffbfff223daa3 R12: 1ffff92001771f6c [ 1525.065392][ C0] R13: ffffffff8d216e40 R14: 0000000000000246 R15: dffffc0000000000 [ 1525.073383][ C0] ? __x64_sys_socket+0x7a/0x90 [ 1525.078241][ C0] ? do_syscall_64+0x55/0xb0 [ 1525.082838][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1525.088918][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1525.094316][ C0] fs_reclaim_acquire+0x71/0x100 [ 1525.099262][ C0] ? slab_pre_alloc_hook+0x2a/0x300 [ 1525.104483][ C0] slab_pre_alloc_hook+0x2a/0x300 [ 1525.109524][ C0] ? security_sk_alloc+0x4b/0x130 [ 1525.114553][ C0] ? security_sk_alloc+0x4b/0x130 [ 1525.119583][ C0] __kmem_cache_alloc_node+0x53/0x250 [ 1525.124970][ C0] ? security_sk_alloc+0x4b/0x130 [ 1525.129997][ C0] __kmalloc+0xa7/0x240 [ 1525.134163][ C0] ? sk_prot_alloc+0xe7/0x210 [ 1525.138852][ C0] security_sk_alloc+0x4b/0x130 [ 1525.143710][ C0] sk_prot_alloc+0x101/0x210 [ 1525.148311][ C0] ? sk_alloc+0x24/0x350 [ 1525.152563][ C0] sk_alloc+0x3a/0x350 [ 1525.156646][ C0] packet_create+0xff/0x790 [ 1525.161164][ C0] __sock_create+0x49e/0x940 [ 1525.165766][ C0] __sys_socket+0xd7/0x1b0 [ 1525.170190][ C0] __x64_sys_socket+0x7a/0x90 [ 1525.174876][ C0] do_syscall_64+0x55/0xb0 [ 1525.179297][ C0] ? clear_bhb_loop+0x40/0x90 [ 1525.183980][ C0] ? clear_bhb_loop+0x40/0x90 [ 1525.188662][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1525.194563][ C0] RIP: 0033:0x7f2405b9e0d9 [ 1525.198983][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1525.218593][ C0] RSP: 002b:00007f2406b28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1525.227012][ C0] RAX: ffffffffffffffda RBX: 00007f2405e25fa0 RCX: 00007f2405b9e0d9 [ 1525.234991][ C0] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000011 [ 1525.242966][ C0] RBP: 00007f2405c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1525.250940][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1525.258916][ C0] R13: 00007f2405e26038 R14: 00007f2405e25fa0 R15: 00007ffcc76eb418 [ 1525.266908][ C0] [ 1525.270183][ C0] Kernel Offset: disabled [ 1525.274616][ C0] Rebooting in 86400 seconds..