last executing test programs: 24m25.936001764s ago: executing program 4 (id=18): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/152, 0x1a0, 0x98, 0x0, 0x9}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xd, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 24m17.802850112s ago: executing program 4 (id=22): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) 24m8.569291162s ago: executing program 4 (id=31): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/152, 0x1a0, 0x98, 0x0, 0x9}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xd, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 23m55.297828549s ago: executing program 32 (id=27): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x4001af84, &(0x7f0000000000)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x202, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc600c7, 0x0) io_uring_enter(r2, 0xbbc, 0xd582, 0x0, 0x0, 0x0) 23m55.185509277s ago: executing program 4 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x4000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 23m49.623246624s ago: executing program 4 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r4, 0x0, 0x0, 0x4008044, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000540)=@ccm_128={{0x303}, "064fdcb90d61d144", "3673f2d46c7e32ab7af5760ce14fd739", "a498f55f", "f4922dda9aa7220b"}, 0x28) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x185200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000400)={0xa, 0x2, 0x0, 'queue1\x00', 0x38000}) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 23m44.336716783s ago: executing program 4 (id=46): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80044dff, 0x1000000000000) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000005e40)={0x2020}, 0x2020) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 23m26.444704472s ago: executing program 33 (id=46): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80044dff, 0x1000000000000) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000005e40)={0x2020}, 0x2020) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 19m6.910643054s ago: executing program 0 (id=261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200fcffffff0000000000619b00008500000028000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) r3 = socket(0x2b, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) shutdown(r3, 0x1) r5 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = dup(r5) write$binfmt_elf32(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002003e00040000003e03000038000000d900000098700000fe0320"], 0x823) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42}, 0x20) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460104028d040000000000000003000600080000009a03000038000000016eee9e5a0d56b48400200003000500080000020000000051e574640700000006000000030000000900000006000000"], 0x98) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, 0x0, 0x0) close(r3) read$msr(r2, &(0x7f0000000340)=""/216, 0xd8) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2042, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r9, 0x541b, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'comedi_bond\x00', [0x3, 0x0, 0x207, 0x4, 0x6, 0xafa3, 0x0, 0x4, 0x54c6cff4, 0x10, 0x5, 0x1, 0x1, 0x9, 0x6, 0x8, 0xfffffffe, 0x10001, 0x2, 0xd, 0x89, 0xcaa3, 0x1004, 0x20001e5b, 0x2000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffffc]}) 19m3.339975043s ago: executing program 0 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000540)=@ccm_128={{0x303}, "064fdcb90d61d144", "3673f2d46c7e32ab7af5760ce14fd739", "a498f55f", "f4922dda9aa7220b"}, 0x28) write$binfmt_misc(r4, &(0x7f0000000000)='i', 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x185200) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 19m0.47024528s ago: executing program 0 (id=269): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0xc010) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00100000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18m58.984719783s ago: executing program 0 (id=271): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/152, 0x1a0, 0x98, 0x0, 0x9}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xd, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) unshare(0x40020000) 18m45.533062402s ago: executing program 0 (id=278): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000", 0x3e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e", 0xd8}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79", 0xa0}, {&(0x7f0000000d00)}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_usb_connect$rtl8150(0x5, 0x81, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d}}]}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 18m41.581048289s ago: executing program 0 (id=281): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000200)='!se\xf7ih,\x17i\xeb-\xed\xacP\xe6lNn\x00xseqinux\x10', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 18m25.780166158s ago: executing program 34 (id=281): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000200)='!se\xf7ih,\x17i\xeb-\xed\xacP\xe6lNn\x00xseqinux\x10', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 8m59.917726068s ago: executing program 1 (id=675): sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25OPTRT(r4, 0x89e7, 0x0) 8m55.085207819s ago: executing program 1 (id=677): r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 8m54.385942497s ago: executing program 1 (id=679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200fcffffff0000000000619b00008500000028000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) r3 = socket(0x2b, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) shutdown(r3, 0x1) r5 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = dup(r5) write$binfmt_elf32(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002003e00040000003e03000038000000d900000098700000fe0320"], 0x823) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42}, 0x20) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460104028d040000000000000003000600080000009a03000038000000016eee9e5a0d56b48400200003000500080000020000000051e574640700000006000000030000000900000006000000"], 0x98) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/216, 0xd8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0) 8m52.312000021s ago: executing program 1 (id=681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 8m49.450698242s ago: executing program 1 (id=684): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0x9, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008804}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 8m47.135359457s ago: executing program 1 (id=685): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0x9, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008804}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 8m31.094180381s ago: executing program 35 (id=685): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0x9, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) io_uring_setup(0x3ef, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008804}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 6m58.943643518s ago: executing program 5 (id=748): socket$tipc(0x1e, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000440)="2d36d5", 0x3}], 0x2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8001, 0x5, 0x1, 0x18, "5c8d8e94923ad65c61920fcd8b01f6a3f9c0d07d0bcd82bd1f1a2e959cad11db0175435551912e9c5d170093fdb5bb597839ade1eef5213d2b0ae30e50238ae7", "8553bbc9018ac2f4e4858f8ed81c4155ea889ab9eb9ff94ff46dd356a5d5dfaa", [0x0, 0x7]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, 0x0, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)}) 6m56.610705657s ago: executing program 5 (id=750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m49.526684584s ago: executing program 5 (id=756): socket$tipc(0x1e, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000440)="2d36d5", 0x3}], 0x2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8001, 0x5, 0x1, 0x18, "5c8d8e94923ad65c61920fcd8b01f6a3f9c0d07d0bcd82bd1f1a2e959cad11db0175435551912e9c5d170093fdb5bb597839ade1eef5213d2b0ae30e50238ae7", "8553bbc9018ac2f4e4858f8ed81c4155ea889ab9eb9ff94ff46dd356a5d5dfaa", [0x0, 0x7]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, 0x0, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)}) 6m46.108733558s ago: executing program 5 (id=760): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r2 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80044dff, 0x1000000000000) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 6m44.645739083s ago: executing program 5 (id=761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6m44.430382544s ago: executing program 5 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000640)={0x4, 0x2, 0x1000, 0x3e9, 0x7f, 0x0, 0xded}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x403fc, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e3363"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 6m28.51540211s ago: executing program 36 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000640)={0x4, 0x2, 0x1000, 0x3e9, 0x7f, 0x0, 0xded}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x403fc, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e3363"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 1m43.934755497s ago: executing program 6 (id=1766): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xc0}}, 0x0) 1m42.138551826s ago: executing program 6 (id=1768): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) 1m41.055589538s ago: executing program 6 (id=1772): syz_emit_ethernet(0x4e, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x49, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) 1m40.473685919s ago: executing program 6 (id=1774): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 1m36.480159329s ago: executing program 6 (id=1789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1m35.037607425s ago: executing program 6 (id=1793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x2, {0x2, 0xd}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, 0x0, 0x1) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x80) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m19.248814044s ago: executing program 37 (id=1793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x2, {0x2, 0xd}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, 0x0, 0x1) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x80) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 27.541908934s ago: executing program 9 (id=1945): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe0f02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x2) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x97) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="00214717a70700000000030600710a5e31163ceb25ee9d04712000deff0410000000000000ffff03425d4d50e7182ce0ab", 0x31}], 0x1, 0x81, 0x7) 26.783672659s ago: executing program 9 (id=1948): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 25.253815484s ago: executing program 9 (id=1954): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x0, 0x0, [0xa652, 0x8, 0x9, 0xffffffff, 0x10000005, 0x100000000], 0x0, 0x0}, 0x78) 24.522383294s ago: executing program 9 (id=1958): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0xd, 0x7}, {0x4, 0x4, 0xa, 0xc}, {0x5, 0x3, 0x1, 0x9}, {0x5, 0x2, 0xc, 0xb}, {0x2, 0x3, 0xe, 0x3}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="04"], 0x10) 23.74627101s ago: executing program 9 (id=1961): syz_emit_ethernet(0x104a, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000fcffffff00e80001000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c814) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'veth1_to_bond\x00', {0x2, 0x4e20, @local}}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 22.207529932s ago: executing program 9 (id=1966): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 10.417925953s ago: executing program 2 (id=1994): r0 = dup(0xffffffffffffffff) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local, r2}, 0xc) 9.685445598s ago: executing program 2 (id=1997): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc340000000000000000000000030018"], 0xa8}}, 0x2) 8.875453194s ago: executing program 2 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 6.908541316s ago: executing program 38 (id=1966): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.810688156s ago: executing program 3 (id=2004): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 6.234195644s ago: executing program 8 (id=2005): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@sack_perm={0x4, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x4, @empty, 0x4}]}}}}}}}}, 0x0) 5.650598181s ago: executing program 8 (id=2007): socket$inet6(0xa, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 5.41962131s ago: executing program 3 (id=2008): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 4.346426821s ago: executing program 3 (id=2009): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40605414, 0x0) getdents(0xffffffffffffffff, 0x0, 0x58) socket$inet6_sctp(0xa, 0x4, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x101) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 3.376821962s ago: executing program 8 (id=2010): bpf$ITER_CREATE(0xb, 0x0, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@grpid}, {@grpquota}, {@journal_checksum}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(0x0, 0x8fff5) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r2, &(0x7f0000000d40)=""/43, 0x2b) 3.30134602s ago: executing program 7 (id=2011): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.225569857s ago: executing program 2 (id=2012): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x6f6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.962478848s ago: executing program 3 (id=2013): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="c0214717a7", 0xfffffdd0}, {&(0x7f0000000200)="f2b721593fbc863582aa7528ebe03b9b3cb9cb023123ae8d9da1580a29fb8f467ce813060d9bcf13644bd50fb9975cd6516f77c6a1859dad3fa7a17303b5b9c43023db7ca942d6a9e8ec9368d44c56410e37ea3dd458f1529010b49d8f7e1ba213d9cfce7208a58e8b0bdfc003c079aed1cb6ed0386cd57586df15e92af94a71371ea9c408f56e32c3f891f713a71ab8c776e5fd", 0x94}, {&(0x7f0000000080)="ebacc80fdfb2f00b932c6d15858cb72bd3"}], 0x2, 0x6, 0x1) 2.720170061s ago: executing program 7 (id=2014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000e1}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x49, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) 2.387190791s ago: executing program 2 (id=2015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000005000800"], 0x48) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 1.997566478s ago: executing program 8 (id=2016): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x10, {[@sack_perm={0x4, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x4, @empty, 0x4}]}}}}}}}}, 0x0) 1.990410575s ago: executing program 3 (id=2017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x9, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(0x3) 1.890317673s ago: executing program 7 (id=2018): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 1.484146612s ago: executing program 8 (id=2019): socket$inet6(0xa, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.336425057s ago: executing program 7 (id=2020): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(0xffffffffffffffff, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000003180)=""/163, 0xa3}, {&(0x7f0000003240)=""/142, 0x8e}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/90, 0x5a}], 0x4}, 0x7}], 0x1, 0x2, 0x0) 870.72244ms ago: executing program 7 (id=2021): openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40740, 0x0) memfd_secret(0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) socket$caif_stream(0x25, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 406.296604ms ago: executing program 3 (id=2022): mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000080)=0xc, 0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 261.229198ms ago: executing program 8 (id=2023): r0 = io_uring_setup(0x1d47, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x1, 0x83}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 107.133137ms ago: executing program 7 (id=2024): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x6f6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 0s ago: executing program 2 (id=2025): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000001440)={0x122640, 0x10b, 0x7}, 0x18) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}}, 0x802) kernel console output (not intermixed with test programs): , SerialNumber=3 [ 1235.874874][ T9678] usb 4-1: Product: syz [ 1235.879219][ T9678] usb 4-1: Manufacturer: syz [ 1235.884310][ T9678] usb 4-1: SerialNumber: syz [ 1235.910165][ T9678] usb 4-1: config 0 descriptor?? [ 1235.961241][ T9678] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1236.229860][T10490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.238506][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.247133][T10490] bridge_slave_1: entered allmulticast mode [ 1236.267759][T10490] bridge_slave_1: entered promiscuous mode [ 1236.421021][ T7314] usb 6-1: USB disconnect, device number 2 [ 1236.499590][T10313] veth0_macvtap: entered promiscuous mode [ 1236.764579][T10490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.838195][T10490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.960274][ T9678] gspca_vc032x: reg_r err -71 [ 1236.965346][ T9678] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1237.020205][ T9678] usb 4-1: USB disconnect, device number 39 [ 1237.126857][T10313] veth1_macvtap: entered promiscuous mode [ 1237.225714][T10490] team0: Port device team_slave_0 added [ 1237.268223][T10490] team0: Port device team_slave_1 added [ 1237.524340][T10490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.531875][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.599690][T10490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.637461][T10490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.647836][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.730024][T10490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.291256][T10313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.395045][T10490] hsr_slave_0: entered promiscuous mode [ 1240.422214][T10490] hsr_slave_1: entered promiscuous mode [ 1240.490603][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.554862][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.607789][T10313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.052686][T10600] affs: No valid root block on device nullb0 [ 1243.365633][ T1087] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.386444][ T1087] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.590353][ T1087] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.627766][ T1087] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.658678][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.687348][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.373666][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.739'. [ 1244.425323][T10611] netlink: 28 bytes leftover after parsing attributes in process `syz.5.739'. [ 1248.483240][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.514478][T10490] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1249.475845][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.722177][T10490] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1250.102255][T10490] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1250.147101][T10490] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1254.213958][T10490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.332816][T10490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.369745][ T32] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1254.407565][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.415117][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.554176][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.561034][ T32] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1254.561699][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.627662][ T32] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1254.666469][ T32] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1254.678156][ T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.707588][ T32] usb 8-1: Product: syz [ 1254.742063][ T32] usb 8-1: Manufacturer: syz [ 1254.746856][ T32] usb 8-1: SerialNumber: syz [ 1254.856007][ T32] rtl8150 8-1:1.0: couldn't find required endpoints [ 1255.758363][ T32] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 1255.791723][ T32] usb 8-1: USB disconnect, device number 2 [ 1258.375340][T10698] 9pnet_virtio: no channels available for device ./bus [ 1262.479317][T10490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.628342][T10490] veth0_vlan: entered promiscuous mode [ 1263.686827][T10490] veth1_vlan: entered promiscuous mode [ 1263.896435][T10490] veth0_macvtap: entered promiscuous mode [ 1264.661082][T10722] vxfs: WRONG superblock magic 00000000 at 1 [ 1264.667637][T10722] vxfs: WRONG superblock magic 00000000 at 8 [ 1264.673936][T10722] vxfs: can't find superblock. [ 1266.874564][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.076156][T10490] veth1_macvtap: entered promiscuous mode [ 1267.145756][T10492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1267.155715][T10492] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1267.170743][T10492] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1267.184662][T10492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1267.203689][T10492] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1267.229252][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.249784][ T32] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1267.423916][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.477253][ T32] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1267.565761][ T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.601980][ T32] usb 8-1: Product: syz [ 1267.687659][ T32] usb 8-1: Manufacturer: syz [ 1267.702539][ T32] usb 8-1: SerialNumber: syz [ 1267.748517][ T32] usb 8-1: config 0 descriptor?? [ 1267.868632][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.332709][ T32] airspy 8-1:0.0: usb_control_msg() failed -71 request 09 [ 1268.345348][ T32] airspy 8-1:0.0: Could not detect board [ 1268.361352][ T32] airspy 8-1:0.0: probe with driver airspy failed with error -71 [ 1268.560555][T10490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.815795][ T32] usb 8-1: USB disconnect, device number 3 [ 1268.911915][T10490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.245430][ T6137] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.266845][ T6137] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.290976][ T53] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.429642][ T5794] Bluetooth: hci0: command tx timeout [ 1269.526414][ T53] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.821536][ T59] bridge_slave_1: left allmulticast mode [ 1269.827382][ T59] bridge_slave_1: left promiscuous mode [ 1269.936642][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.070544][ T59] bridge_slave_0: left allmulticast mode [ 1270.076375][ T59] bridge_slave_0: left promiscuous mode [ 1270.120533][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.763909][T10756] 9pnet_virtio: no channels available for device ./bus [ 1272.404988][ T5794] Bluetooth: hci0: command tx timeout [ 1273.476370][T10759] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 1273.746610][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1274.332386][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1274.403730][ T59] bond0 (unregistering): Released all slaves [ 1274.508588][ T5794] Bluetooth: hci0: command tx timeout [ 1274.603881][T10764] vxfs: WRONG superblock magic 00000000 at 1 [ 1274.610431][T10764] vxfs: WRONG superblock magic 00000000 at 8 [ 1274.616591][T10764] vxfs: can't find superblock. [ 1276.540185][ T5794] Bluetooth: hci0: command tx timeout [ 1277.881835][ T59] hsr_slave_0: left promiscuous mode [ 1278.176440][T10776] affs: No valid root block on device nullb0 [ 1278.205242][ T59] hsr_slave_1: left promiscuous mode [ 1278.280602][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.288089][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.402490][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.418007][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.462296][ T59] veth1_macvtap: left promiscuous mode [ 1278.473391][ T59] veth0_macvtap: left promiscuous mode [ 1278.719915][ T59] veth1_vlan: left promiscuous mode [ 1278.725343][ T59] veth0_vlan: left promiscuous mode [ 1280.600545][ T2051] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1280.821536][ T2051] usb 4-1: Using ep0 maxpacket: 8 [ 1280.854929][ T2051] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1280.892638][ T2051] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1280.939200][ T2051] usb 4-1: string descriptor 0 read error: -22 [ 1280.960488][ T2051] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1280.993863][ T2051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.305756][ T2051] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1281.452859][ T2051] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1281.604198][ T2051] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1281.687190][ T2051] usb 4-1: media controller created [ 1281.829918][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1281.970044][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1282.050340][ T2051] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1282.420212][ T2051] zl10353_read_register: readreg error (reg=127, ret==0) [ 1283.340770][ T2051] usb 4-1: USB disconnect, device number 40 [ 1283.676214][T10800] trusted_key: encrypted_key: insufficient parameters specified [ 1285.674196][T10728] chnl_net:caif_netlink_parms(): no params data found [ 1286.702472][T10812] Cannot find add_set index 0 as target [ 1288.912531][T10815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1288.938138][T10815] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1289.514866][T10822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1289.531167][T10822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1289.551166][T10822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1289.591603][T10822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1289.602624][T10822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1289.676650][T10822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1289.686259][T10822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1289.701180][T10822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1289.715497][T10822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1289.727436][T10822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1291.513908][T10492] Bluetooth: hci6: command 0x0406 tx timeout [ 1291.725672][ T5794] Bluetooth: hci2: command tx timeout [ 1291.731812][ T8095] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1291.837896][T10492] Bluetooth: hci5: command tx timeout [ 1292.065514][ T8095] usb 8-1: Using ep0 maxpacket: 8 [ 1292.172046][ T8095] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1292.253336][ T8095] usb 8-1: config 4 interface 0 has no altsetting 0 [ 1292.369759][ T8095] usb 8-1: string descriptor 0 read error: -22 [ 1292.430435][ T8095] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1292.528411][ T8095] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.802857][ T8095] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1292.942225][ T8095] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1293.086105][ T8095] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1293.165029][ T8095] usb 8-1: media controller created [ 1293.553367][ T8095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1293.625922][T10728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.660197][T10728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.667884][T10728] bridge_slave_0: entered allmulticast mode [ 1293.713020][T10728] bridge_slave_0: entered promiscuous mode [ 1293.740095][T10492] Bluetooth: hci2: command tx timeout [ 1293.800434][ T8095] zl10353_read_register: readreg error (reg=127, ret==0) [ 1293.911716][T10492] Bluetooth: hci5: command tx timeout [ 1294.190156][T10728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.208285][T10728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.228968][T10728] bridge_slave_1: entered allmulticast mode [ 1294.263347][T10728] bridge_slave_1: entered promiscuous mode [ 1294.891816][T10858] trusted_key: encrypted_key: insufficient parameters specified [ 1295.117992][ T53] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.819963][ T5794] Bluetooth: hci2: command tx timeout [ 1295.868318][ T53] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.461220][ T5794] Bluetooth: hci5: command tx timeout [ 1296.887497][ T8095] usb 8-1: USB disconnect, device number 4 [ 1297.759263][T10728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.728695][ T5794] Bluetooth: hci2: command tx timeout [ 1298.734370][ T5794] Bluetooth: hci5: command tx timeout [ 1299.271223][T10728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.416637][T10821] chnl_net:caif_netlink_parms(): no params data found [ 1299.844661][ T53] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.531733][ T53] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.660390][T10728] team0: Port device team_slave_0 added [ 1300.893559][T10728] team0: Port device team_slave_1 added [ 1302.532451][T10728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.592224][T10728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.770727][T10728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.823828][T10728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.850843][T10728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.027112][T10728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.088857][T10906] Process accounting resumed [ 1306.586904][T10728] hsr_slave_0: entered promiscuous mode [ 1306.599082][T10728] hsr_slave_1: entered promiscuous mode [ 1306.608184][T10728] debugfs: 'hsr0' already exists in 'hsr' [ 1306.620397][T10728] Cannot create hsr debugfs directory [ 1306.707221][T10916] affs: No valid root block on device nullb0 [ 1306.862411][T10821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.874503][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.887784][T10821] bridge_slave_0: entered allmulticast mode [ 1306.898720][T10821] bridge_slave_0: entered promiscuous mode [ 1306.927020][T10825] chnl_net:caif_netlink_parms(): no params data found [ 1307.036431][T10821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.080467][T10821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.088199][T10821] bridge_slave_1: entered allmulticast mode [ 1307.131427][T10821] bridge_slave_1: entered promiscuous mode [ 1307.215691][T10921] loop7: detected capacity change from 0 to 1024 [ 1307.234884][ T53] bridge_slave_1: left allmulticast mode [ 1307.252232][T10921] EXT4-fs: inline encryption not supported [ 1307.265380][ T53] bridge_slave_1: left promiscuous mode [ 1307.280825][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.299292][ T53] bridge_slave_0: left allmulticast mode [ 1307.307776][ T53] bridge_slave_0: left promiscuous mode [ 1307.317864][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.319780][T10921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.686091][T10929] loop3: detected capacity change from 0 to 512 [ 1307.711263][T10929] EXT4-fs: inline encryption not supported [ 1307.722000][T10929] EXT4-fs (loop3): DAX unsupported by block device. [ 1307.895487][T10228] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.121623][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.185531][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.233960][ T53] bond0 (unregistering): Released all slaves [ 1308.642141][ T53] hsr_slave_0: left promiscuous mode [ 1308.662582][ T53] hsr_slave_1: left promiscuous mode [ 1308.676446][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1308.703869][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.739296][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.759999][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.799108][ T53] veth1_macvtap: left promiscuous mode [ 1308.827693][ T53] veth0_macvtap: left promiscuous mode [ 1308.833834][ T53] veth1_vlan: left promiscuous mode [ 1308.839320][ T53] veth0_vlan: left promiscuous mode [ 1309.277411][T10948] netlink: 116 bytes leftover after parsing attributes in process `syz.7.805'. [ 1309.942561][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.949127][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.313750][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1310.356134][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1310.998009][T10821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.099312][T10821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.152043][T10966] loop7: detected capacity change from 0 to 4096 [ 1311.229204][T10966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.432724][T10966] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.610564][T10821] team0: Port device team_slave_0 added [ 1311.664823][T10821] team0: Port device team_slave_1 added [ 1311.990017][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 1312.607741][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.643462][T10989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1312.672521][T10821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.680570][T10988] loop3: detected capacity change from 0 to 256 [ 1312.682414][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.798447][T10821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.903816][T10988] FAT-fs (loop3): Directory bread(block 64) failed [ 1312.922607][T10988] FAT-fs (loop3): Directory bread(block 65) failed [ 1312.950260][T10988] FAT-fs (loop3): Directory bread(block 66) failed [ 1312.958113][T10988] FAT-fs (loop3): Directory bread(block 67) failed [ 1313.000291][T10988] FAT-fs (loop3): Directory bread(block 68) failed [ 1313.007004][T10988] FAT-fs (loop3): Directory bread(block 69) failed [ 1313.018973][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.054639][T10988] FAT-fs (loop3): Directory bread(block 70) failed [ 1313.069870][T10988] FAT-fs (loop3): Directory bread(block 71) failed [ 1313.072242][T10821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.111614][T10988] FAT-fs (loop3): Directory bread(block 72) failed [ 1313.118337][T10988] FAT-fs (loop3): Directory bread(block 73) failed [ 1313.120045][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.190071][T10821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.280405][T10825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.306522][T10825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.338540][T10825] bridge_slave_0: entered allmulticast mode [ 1313.362803][T10825] bridge_slave_0: entered promiscuous mode [ 1313.410454][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.561863][T10825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.582082][T10825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.615014][T10825] bridge_slave_1: entered allmulticast mode [ 1313.643317][T10825] bridge_slave_1: entered promiscuous mode [ 1313.891207][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.070122][T10825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.271234][T10825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.730687][T10821] hsr_slave_0: entered promiscuous mode [ 1314.756180][T10821] hsr_slave_1: entered promiscuous mode [ 1314.945329][T10825] team0: Port device team_slave_0 added [ 1315.047471][T10825] team0: Port device team_slave_1 added [ 1315.608273][ T29] audit: type=1326 audit(1771220620.343:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.7.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1870f9bf79 code=0x7ffc0000 [ 1315.620458][T10825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.654722][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.693685][ T29] audit: type=1326 audit(1771220620.343:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.7.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1870f9bf79 code=0x7ffc0000 [ 1315.737202][ T29] audit: type=1326 audit(1771220620.383:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.7.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f1870f9bf79 code=0x7ffc0000 [ 1315.749619][T10825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.774671][ T29] audit: type=1326 audit(1771220620.383:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.7.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1870f9bf79 code=0x7ffc0000 [ 1315.830100][ T29] audit: type=1326 audit(1771220620.383:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.7.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1870f9bf79 code=0x7ffc0000 [ 1316.032435][T10825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.059828][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.141460][T10825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.176378][T11026] tipc: Started in network mode [ 1316.191343][T11026] tipc: Node identity f63eae3c7272, cluster identity 4711 [ 1316.205472][T11026] tipc: Enabled bearer , priority 0 [ 1316.215573][ T53] bridge_slave_1: left allmulticast mode [ 1316.229146][ T53] bridge_slave_1: left promiscuous mode [ 1316.236986][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.261452][ T53] bridge_slave_0: left allmulticast mode [ 1316.267760][ T53] bridge_slave_0: left promiscuous mode [ 1316.284476][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.488922][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.7.827'. [ 1316.656639][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.675563][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.695637][ T53] bond0 (unregistering): Released all slaves [ 1316.790723][T11034] netlink: 44 bytes leftover after parsing attributes in process `syz.3.824'. [ 1316.805793][T11025] tipc: Resetting bearer [ 1316.814400][T11028] syzkaller0: entered promiscuous mode [ 1316.820495][T11028] syzkaller0: entered allmulticast mode [ 1316.828285][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.837161][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.862138][T11023] tipc: Resetting bearer [ 1316.887700][T11023] tipc: Disabling bearer [ 1317.542521][T11043] tipc: Started in network mode [ 1317.563923][T11043] tipc: Node identity , cluster identity 4711 [ 1317.590936][T11043] tipc: Failed to set node id, please configure manually [ 1317.610091][T11043] tipc: Enabling of bearer rejected, failed to enable media [ 1317.688652][T10825] hsr_slave_0: entered promiscuous mode [ 1317.724014][T10825] hsr_slave_1: entered promiscuous mode [ 1317.754212][T10825] debugfs: 'hsr0' already exists in 'hsr' [ 1317.774538][T10825] Cannot create hsr debugfs directory [ 1317.874456][ T53] hsr_slave_0: left promiscuous mode [ 1317.980427][ T53] hsr_slave_1: left promiscuous mode [ 1317.988071][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.036425][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.082291][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.092864][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.159080][ T53] veth1_macvtap: left promiscuous mode [ 1318.174780][ T53] veth0_macvtap: left promiscuous mode [ 1318.194262][ T53] veth1_vlan: left promiscuous mode [ 1318.208311][ T53] veth0_vlan: left promiscuous mode [ 1319.367492][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1319.453516][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1319.481831][T11068] tipc: Can't bind to reserved service type 3 [ 1319.793103][T10728] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1319.899932][T10728] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1319.976402][T10728] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1320.259849][T10728] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1320.278282][T11073] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 1321.655526][T10821] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1321.743385][T10821] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1321.805866][T10821] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1321.916965][T10821] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1322.431382][T10728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1322.500274][T10825] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1322.577402][T10825] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1322.675048][T10825] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1322.777409][T10825] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1322.877805][T10728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.287598][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.295206][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.356944][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.364476][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.543623][T10821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.925613][T10825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.953950][T10821] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.062356][ T704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.069950][ T704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.205995][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.213556][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.286248][T10825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.405164][ T704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.412713][ T704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.619146][ T704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.626713][ T704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.308938][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1327.353956][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1327.363718][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1327.384962][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1327.404809][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1328.605317][T10821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.447893][T10825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.512554][T10492] Bluetooth: hci4: command tx timeout [ 1329.592476][T11155] loop3: detected capacity change from 0 to 2048 [ 1329.632232][ T2965] bridge_slave_1: left allmulticast mode [ 1329.638061][ T2965] bridge_slave_1: left promiscuous mode [ 1329.646882][T11155] EXT4-fs: Ignoring removed nobh option [ 1329.695046][ T2965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.730899][ T2965] bridge_slave_0: left allmulticast mode [ 1329.736724][ T2965] bridge_slave_0: left promiscuous mode [ 1329.790315][ T2965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.801480][T11155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.815910][T11155] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.898936][ T29] audit: type=1800 audit(1771220634.633:93): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.852" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1330.030043][ T29] audit: type=1800 audit(1771220634.633:94): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.852" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1330.319200][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.821399][ T2965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1330.880822][ T2965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.901234][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 1330.927292][ T2965] bond0 (unregistering): Released all slaves [ 1331.146943][T11170] tipc: Started in network mode [ 1331.163151][T11170] tipc: Node identity ac14140f, cluster identity 4711 [ 1331.220627][T11170] tipc: New replicast peer: 255.255.255.255 [ 1331.258240][T11170] tipc: Enabled bearer , priority 10 [ 1331.579747][T10492] Bluetooth: hci4: command tx timeout [ 1331.655311][ T2965] hsr_slave_0: left promiscuous mode [ 1331.695678][ T2965] hsr_slave_1: left promiscuous mode [ 1331.718910][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.749374][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.192672][ T2965] team0 (unregistering): Port device team_slave_1 removed [ 1332.224682][ T2965] team0 (unregistering): Port device team_slave_0 removed [ 1332.448493][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.7.856'. [ 1332.458173][T11171] tipc: Disabling bearer [ 1332.547597][ T24] tipc: Node number set to 2886997007 [ 1333.175287][T11193] loop3: detected capacity change from 0 to 512 [ 1333.190862][T11126] chnl_net:caif_netlink_parms(): no params data found [ 1333.332168][ T29] audit: type=1800 audit(1771220638.073:95): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.859" name="file1" dev="loop3" ino=1048620 res=0 errno=0 [ 1333.502864][T10821] veth0_vlan: entered promiscuous mode [ 1333.669868][T10492] Bluetooth: hci4: command tx timeout [ 1333.921429][T10821] veth1_vlan: entered promiscuous mode [ 1334.024643][T10825] veth0_vlan: entered promiscuous mode [ 1334.186275][T10825] veth1_vlan: entered promiscuous mode [ 1334.194431][T11201] loop3: detected capacity change from 0 to 512 [ 1334.316111][T11201] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #12: comm syz.3.860: corrupted in-inode xattr: bad e_name length [ 1334.437885][T11201] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1334.439621][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1334.455538][ C0] EXT4-fs (loop3): initial error at time 1771220639: ext4_iget_extra_inode:5025: inode 12 [ 1334.465891][ C0] EXT4-fs (loop3): last error at time 1771220639: ext4_iget_extra_inode:5025: inode 12 [ 1334.494075][T11201] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.860: couldn't read orphan inode 12 (err -117) [ 1334.519775][T11201] loop3: lost filesystem error report for type 5 error -117 [ 1334.532350][T11201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1334.778823][T10821] veth0_macvtap: entered promiscuous mode [ 1334.815220][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.855472][T11126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.877192][T11126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.910275][T11126] bridge_slave_0: entered allmulticast mode [ 1334.971436][T11126] bridge_slave_0: entered promiscuous mode [ 1335.064171][T10821] veth1_macvtap: entered promiscuous mode [ 1335.119991][T11126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.127448][T11126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.190564][T11126] bridge_slave_1: entered allmulticast mode [ 1335.212870][T11126] bridge_slave_1: entered promiscuous mode [ 1335.522826][T10825] veth0_macvtap: entered promiscuous mode [ 1335.671608][T11126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.733850][T11126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.741724][T10492] Bluetooth: hci4: command tx timeout [ 1336.093709][T10825] veth1_macvtap: entered promiscuous mode [ 1336.146748][T10821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.216372][T11126] team0: Port device team_slave_0 added [ 1336.267325][T11126] team0: Port device team_slave_1 added [ 1336.364863][T10821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.750002][T11126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.757118][T11126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.869734][T11126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.950755][ T53] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.975240][ T53] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.998509][T11126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.007529][T11231] loop3: detected capacity change from 0 to 1024 [ 1337.015563][T11126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.046795][T11231] EXT4-fs: Ignoring removed orlov option [ 1337.093965][T11126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.156829][T11231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1337.231961][T10825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1337.252679][ T53] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.325676][ T53] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.537070][T10825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1337.761800][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.778230][T11126] hsr_slave_0: entered promiscuous mode [ 1337.789104][T11126] hsr_slave_1: entered promiscuous mode [ 1337.807962][T11126] debugfs: 'hsr0' already exists in 'hsr' [ 1337.814197][T11126] Cannot create hsr debugfs directory [ 1337.957866][ T2965] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.995865][ T6214] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.233040][ T6214] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.268041][ T6214] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.225786][T11243] loop3: detected capacity change from 0 to 8192 [ 1339.341399][T11243] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1339.450490][ T29] audit: type=1800 audit(1771220644.183:96): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.871" name="file2" dev="loop3" ino=1048621 res=0 errno=0 [ 1339.503673][T11243] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1339.584022][T11243] FAT-fs (loop3): Filesystem has been set read-only [ 1339.628643][T11243] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1339.667131][T11243] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1339.707724][T11243] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1339.768778][T11243] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1339.866000][T11243] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1339.937658][T11243] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1339.982778][T11243] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1340.046147][T11243] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1340.102289][T11243] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1340.768438][T11126] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1341.015400][T11126] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1341.159994][T11126] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1341.234690][T11126] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1342.579119][T11126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.818328][T11126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.923797][ T704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.931363][ T704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.072454][ T704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.079995][ T704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.948081][ T704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.020775][ T704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.297620][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.358574][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.778312][T11311] loop3: detected capacity change from 0 to 2048 [ 1345.040749][T11311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.382037][T11311] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.877: bg 0: block 234: padding at end of block bitmap is not set [ 1345.527740][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.547958][T11311] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 126 with error 28 [ 1345.597277][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.647206][T11311] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1345.647206][T11311] [ 1345.669853][T11311] EXT4-fs (loop3): Total free blocks count 0 [ 1345.676019][T11311] EXT4-fs (loop3): Free/Dirty block details [ 1345.782735][T11311] EXT4-fs (loop3): free_blocks=0 [ 1345.787878][T11311] EXT4-fs (loop3): dirty_blocks=128 [ 1345.853402][T11311] EXT4-fs (loop3): Block reservation details [ 1345.928788][T11311] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 1345.957254][T11126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.521205][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1346.542273][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1346.551609][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1346.612439][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1346.631183][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1346.670660][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.605792][T10492] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1347.630688][T10492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1347.640634][T10492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1347.683204][T10492] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1347.703805][T10492] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1348.700902][ T5794] Bluetooth: hci0: command tx timeout [ 1349.124368][T11353] tipc: New replicast peer: 100.1.1.1 [ 1349.150856][T11353] tipc: Enabled bearer , priority 10 [ 1349.638414][ T704] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.742694][ T5794] Bluetooth: hci6: command tx timeout [ 1349.876050][T11332] chnl_net:caif_netlink_parms(): no params data found [ 1350.079290][ T704] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.408580][ T2051] tipc: Node number set to 2219617852 [ 1350.742391][ T704] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.787679][ T5794] Bluetooth: hci0: command tx timeout [ 1350.883139][T11375] loop3: detected capacity change from 0 to 1024 [ 1350.935533][T11375] EXT4-fs: Ignoring removed orlov option [ 1351.124966][ T704] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.144668][T11375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.251370][ T29] audit: type=1800 audit(1771220655.943:97): pid=11375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.885" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1351.592886][T11375] Trying to write to read-only block-device loop3 [ 1351.637214][T11385] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1351.821994][ T5794] Bluetooth: hci6: command tx timeout [ 1351.844902][T11126] veth0_vlan: entered promiscuous mode [ 1351.956923][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.265603][T11126] veth1_vlan: entered promiscuous mode [ 1352.625469][ T704] bridge_slave_1: left allmulticast mode [ 1352.645400][ T704] bridge_slave_1: left promiscuous mode [ 1352.661183][ T704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.696975][ T704] bridge_slave_0: left allmulticast mode [ 1352.720124][ T704] bridge_slave_0: left promiscuous mode [ 1352.731528][ T704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.860894][ T5794] Bluetooth: hci0: command tx timeout [ 1353.635020][ T704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.683173][ T704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.716334][ T704] bond0 (unregistering): Released all slaves [ 1353.867241][T11342] chnl_net:caif_netlink_parms(): no params data found [ 1353.909878][ T5794] Bluetooth: hci6: command tx timeout [ 1354.080031][T11332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.101352][T11332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.109079][T11332] bridge_slave_0: entered allmulticast mode [ 1354.154433][T11332] bridge_slave_0: entered promiscuous mode [ 1354.623003][T11332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.637159][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.663160][T11332] bridge_slave_1: entered allmulticast mode [ 1354.690943][T11332] bridge_slave_1: entered promiscuous mode [ 1354.939822][ T5794] Bluetooth: hci0: command tx timeout [ 1354.978647][T11332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.178195][T11332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.628807][T11332] team0: Port device team_slave_0 added [ 1355.681309][T11332] team0: Port device team_slave_1 added [ 1355.737223][T11126] veth0_macvtap: entered promiscuous mode [ 1355.992315][ T5794] Bluetooth: hci6: command tx timeout [ 1356.055093][T11332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.063967][T11332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.124400][T11332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.345524][ T704] hsr_slave_0: left promiscuous mode [ 1356.405186][ T704] hsr_slave_1: left promiscuous mode [ 1356.428153][ T704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.460201][ T704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.501843][ T704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.528973][ T704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.595236][ T704] veth1_macvtap: left promiscuous mode [ 1356.616221][ T704] veth0_macvtap: left promiscuous mode [ 1356.639996][ T704] veth1_vlan: left promiscuous mode [ 1356.645530][ T704] veth0_vlan: left promiscuous mode [ 1358.001031][ T704] team0 (unregistering): Port device team_slave_1 removed [ 1358.051404][ T704] team0 (unregistering): Port device team_slave_0 removed [ 1358.470497][T11332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.477610][T11332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.521177][T11332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.714148][T11126] veth1_macvtap: entered promiscuous mode [ 1358.778876][T11342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.810245][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.820682][T11342] bridge_slave_0: entered allmulticast mode [ 1358.835915][T11342] bridge_slave_0: entered promiscuous mode [ 1358.863354][T11342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.871161][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.878887][T11342] bridge_slave_1: entered allmulticast mode [ 1358.889405][T11342] bridge_slave_1: entered promiscuous mode [ 1359.497663][T11332] hsr_slave_0: entered promiscuous mode [ 1359.558955][T11332] hsr_slave_1: entered promiscuous mode [ 1359.641921][T11342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.787102][T11342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.292437][T11126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1360.345865][ T704] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.462454][T11342] team0: Port device team_slave_0 added [ 1360.584211][T11126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1360.657755][T11342] team0: Port device team_slave_1 added [ 1360.710867][ T704] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.175141][ T704] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.244396][T10773] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.524590][ T704] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.591286][ T6214] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.629394][ T6214] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.844398][T11342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.864264][T11342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.942177][T11342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.976206][ T6214] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.125450][T11342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.179604][T11342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1362.272637][T11342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.999024][T11342] hsr_slave_0: entered promiscuous mode [ 1363.024759][T11342] hsr_slave_1: entered promiscuous mode [ 1363.042581][T11342] debugfs: 'hsr0' already exists in 'hsr' [ 1363.100054][T11342] Cannot create hsr debugfs directory [ 1363.698245][ T704] bridge_slave_1: left allmulticast mode [ 1363.705404][ T704] bridge_slave_1: left promiscuous mode [ 1363.727582][ T704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.876405][ T704] bridge_slave_0: left allmulticast mode [ 1363.889889][ T704] bridge_slave_0: left promiscuous mode [ 1363.896381][ T704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.517940][ T704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.546331][ T704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1364.564293][ T704] bond0 (unregistering): Released all slaves [ 1365.612001][T11517] netlink: 176 bytes leftover after parsing attributes in process `syz.7.914'. [ 1365.841480][ T704] hsr_slave_0: left promiscuous mode [ 1365.855185][ T704] hsr_slave_1: left promiscuous mode [ 1365.875436][ T704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.889060][ T704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.933928][ T704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.964253][ T704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.034039][ T704] veth1_macvtap: left promiscuous mode [ 1366.050467][ T704] veth0_macvtap: left promiscuous mode [ 1366.061077][ T704] veth1_vlan: left promiscuous mode [ 1366.080121][ T704] veth0_vlan: left promiscuous mode [ 1366.617211][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.7.920'. [ 1367.288144][ T704] team0 (unregistering): Port device team_slave_1 removed [ 1367.364156][ T704] team0 (unregistering): Port device team_slave_0 removed [ 1367.408189][T11544] netlink: 64 bytes leftover after parsing attributes in process `syz.3.925'. [ 1368.064339][T11332] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1368.210601][T11332] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1368.283383][T11332] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1368.814067][T11332] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1369.273074][T11342] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1369.362260][T11342] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1369.427737][T11342] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1369.538321][T11342] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1369.994102][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.032562][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.283477][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.309706][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.723466][T11332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.068303][T11332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.265193][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.272812][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.382804][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.390907][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.461107][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.468683][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1373.378670][T11581] netlink: 68 bytes leftover after parsing attributes in process `syz.7.937'. [ 1373.409162][T11581] netlink: 48 bytes leftover after parsing attributes in process `syz.7.937'. [ 1373.615212][T11342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1373.911670][T11583] netlink: 182 bytes leftover after parsing attributes in process `syz.3.938'. [ 1375.145889][T11342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.526203][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.533830][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.764087][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.771774][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.838563][T11614] syz.6.948 uses obsolete (PF_INET,SOCK_PACKET) [ 1379.405582][T11332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1379.908797][T11342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.390202][T11332] veth0_vlan: entered promiscuous mode [ 1382.557552][T11332] veth1_vlan: entered promiscuous mode [ 1382.961390][T11342] veth0_vlan: entered promiscuous mode [ 1383.057479][T11332] veth0_macvtap: entered promiscuous mode [ 1383.250404][T11342] veth1_vlan: entered promiscuous mode [ 1383.284403][T11332] veth1_macvtap: entered promiscuous mode [ 1383.551145][T11332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1383.888655][T11332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1384.136979][ T1087] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.229132][ T1087] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.351909][ T134] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.402890][T11342] veth0_macvtap: entered promiscuous mode [ 1384.488825][ T1087] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.612483][T11342] veth1_macvtap: entered promiscuous mode [ 1384.835523][T11342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1384.981747][T11342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.129222][ T704] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.178217][ T704] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.225335][ T704] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.317858][ T704] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.849740][ T29] audit: type=1326 audit(1771220692.583:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11712 comm="syz.3.970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x0 [ 1388.626111][T11729] loop6: detected capacity change from 0 to 2048 [ 1388.697549][T11473] loop6: p1 < > p4 [ 1388.740787][T11473] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1388.841348][T11729] loop6: p1 < > p4 [ 1388.896815][T11729] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1390.337335][T11473] udevd[11473]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1390.378355][T11740] udevd[11740]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1390.586938][T11740] udevd[11740]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1390.644483][T11473] udevd[11473]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1391.598598][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.664076][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.979134][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.036441][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.528158][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.581720][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.163872][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.290445][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.486329][T11809] syzkaller0: entered promiscuous mode [ 1396.549079][T11809] syzkaller0: entered allmulticast mode [ 1397.012258][T11814] tipc: Started in network mode [ 1397.040207][T11814] tipc: Node identity 9e51a218335d, cluster identity 4711 [ 1397.158031][T11814] tipc: Enabled bearer , priority 0 [ 1397.302238][T11818] tipc: Resetting bearer [ 1397.438101][T11818] tipc: Disabling bearer [ 1397.696426][T11821] loop8: detected capacity change from 0 to 1024 [ 1398.055541][T11821] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1398.187241][T11821] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1398.301399][T11821] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.994: Failed to acquire dquot type 0 [ 1398.431728][T11821] loop8: lost filesystem error report for type 5 error -5 [ 1398.439638][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1398.453719][ C0] EXT4-fs (loop8): initial error at time 1771220703: ext4_acquire_dquot:7003 [ 1398.462787][ C0] EXT4-fs (loop8): last error at time 1771220703: ext4_acquire_dquot:7003 [ 1398.500581][T11821] EXT4-fs (loop8): 1 truncate cleaned up [ 1398.594723][T11821] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.142038][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.311595][T11851] netlink: 182 bytes leftover after parsing attributes in process `syz.3.1005'. [ 1402.480112][T11888] loop8: detected capacity change from 0 to 512 [ 1402.752931][T11888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1402.824735][T11888] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.377424][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.372054][T11934] loop8: detected capacity change from 0 to 512 [ 1405.589015][T11934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1405.754938][T11934] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.361734][T11948] loop6: detected capacity change from 0 to 512 [ 1406.512795][T11948] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1406.545689][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.483721][ T29] audit: type=1326 audit(1771220713.223:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.8.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e299bf79 code=0x7fc00000 [ 1409.591699][T11990] loop8: detected capacity change from 0 to 512 [ 1409.702751][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1052'. [ 1409.843592][T11990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1409.957246][T11990] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.496878][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.635758][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1065'. [ 1411.730941][T12031] IPv6: sit1: Disabled Multicast RS [ 1412.550680][T12046] loop9: detected capacity change from 0 to 512 [ 1412.837429][T12046] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1412.890239][T12046] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1413.172150][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 1413.206269][T11342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.040328][T12069] netlink: 182 bytes leftover after parsing attributes in process `syz.8.1077'. [ 1415.386984][T12093] loop9: detected capacity change from 0 to 512 [ 1415.618888][T12093] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.710623][T12093] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1416.089207][T11342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.416814][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1105'. [ 1419.762812][T12159] loop6: detected capacity change from 0 to 1024 [ 1419.835121][T12159] EXT4-fs: Ignoring removed bh option [ 1420.034466][T12159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1420.235671][T12159] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1420.777907][T11126] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.986876][T12183] loop9: detected capacity change from 0 to 1024 [ 1421.135318][T12183] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.373870][T10995] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 1422.436756][T10995] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 1422.494661][T10995] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 1422.525019][T10995] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 1422.573747][T10995] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 1422.629991][T10995] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 1422.667929][T10995] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 1422.702403][T10995] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 1422.752669][T10995] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 1422.787375][T10995] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 1422.820881][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1123'. [ 1422.838082][T10995] hid-generic 0103:0004:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1422.874712][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1123'. [ 1423.754770][T12224] loop6: detected capacity change from 0 to 1024 [ 1423.843085][T12224] EXT4-fs: Ignoring removed bh option [ 1424.025961][T12224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1424.152280][ T29] audit: type=1326 audit(1771220728.853:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12217 comm="syz.8.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e299bf79 code=0x7fc00000 [ 1424.506383][T11342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.527115][T12215] fido_id[12215]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1425.809857][T11126] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.608340][T12256] loop8: detected capacity change from 0 to 128 [ 1427.685705][T12256] EXT4-fs: Ignoring removed nobh option [ 1427.841923][T12256] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1427.976969][T12256] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1428.365211][T12269] syzkaller1: entered promiscuous mode [ 1428.393205][T12269] syzkaller1: entered allmulticast mode [ 1428.462512][T12270] tipc: Enabled bearer , priority 0 [ 1428.655746][T12261] tipc: Disabling bearer [ 1429.015087][T11332] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1429.370158][T12286] 9p: Bad value for 'rfdno' [ 1429.439694][ T29] audit: type=1326 audit(1771220734.163:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1870f9bf79 code=0x7fc00000 [ 1429.966726][T12294] program syz.9.1147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1430.072264][ T29] audit: type=1326 audit(1771220734.803:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.3.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1431.611042][T12317] syzkaller0: entered promiscuous mode [ 1431.662467][T12317] syzkaller0: entered allmulticast mode [ 1431.733196][T12317] tipc: Enabled bearer , priority 0 [ 1431.884793][T12315] tipc: Resetting bearer [ 1431.937141][T12315] tipc: Disabling bearer [ 1432.812511][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.822586][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.523555][T12343] loop6: detected capacity change from 0 to 512 [ 1433.671035][ T29] audit: type=1326 audit(1771220738.403:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.3.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1433.801029][T12343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.869143][ T29] audit: type=1326 audit(1771220738.403:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.3.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1433.959028][T12343] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.007540][ T29] audit: type=1326 audit(1771220738.403:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.3.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1434.256941][ T29] audit: type=1326 audit(1771220738.403:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.3.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1434.399858][ T29] audit: type=1326 audit(1771220738.403:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.3.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1434.559884][ T29] audit: type=1326 audit(1771220738.403:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.3.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1434.614671][T11126] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.670743][ T29] audit: type=1326 audit(1771220738.403:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.3.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1434.715971][ T29] audit: type=1326 audit(1771220738.403:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.3.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1434.746185][ T29] audit: type=1326 audit(1771220738.403:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.3.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1435.476480][T12372] syzkaller0: entered promiscuous mode [ 1435.490241][T12372] syzkaller0: entered allmulticast mode [ 1435.662824][T12368] tipc: Started in network mode [ 1435.667949][T12368] tipc: Node identity a22d3e4c1869, cluster identity 4711 [ 1435.767895][T12368] tipc: Enabled bearer , priority 0 [ 1435.814768][T12367] tipc: Resetting bearer [ 1435.924813][T12367] tipc: Disabling bearer [ 1436.605837][T12386] loop3: detected capacity change from 0 to 512 [ 1436.671492][T12388] 9p: Bad value for 'rfdno' [ 1437.384310][ T29] audit: type=1326 audit(1771220742.113:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.8.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e299bf79 code=0x7fc00000 [ 1438.102201][T12406] sit0: entered promiscuous mode [ 1438.218627][T12406] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 1438.292608][T12406] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1185'. [ 1438.616063][T12415] loop8: detected capacity change from 0 to 128 [ 1439.176849][T12424] syzkaller0: entered promiscuous mode [ 1439.255060][T12424] syzkaller0: entered allmulticast mode [ 1439.370772][T12424] tipc: Enabled bearer , priority 0 [ 1439.473170][T12424] tipc: Resetting bearer [ 1439.691220][T12424] tipc: Disabling bearer [ 1439.700389][ T704] kworker/u8:7: attempt to access beyond end of device [ 1439.700389][ T704] loop8: rw=1, sector=137, nr_sectors = 8 limit=128 [ 1439.785584][ T704] kworker/u8:7: attempt to access beyond end of device [ 1439.785584][ T704] loop8: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1439.830546][ T704] kworker/u8:7: attempt to access beyond end of device [ 1439.830546][ T704] loop8: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1439.871230][T12435] 9p: Bad value for 'rfdno' [ 1439.879269][ T704] kworker/u8:7: attempt to access beyond end of device [ 1439.879269][ T704] loop8: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1439.902601][T12434] loop6: detected capacity change from 0 to 512 [ 1439.946950][ T704] kworker/u8:7: attempt to access beyond end of device [ 1439.946950][ T704] loop8: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1440.008034][T12434] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1440.065688][ T704] kworker/u8:7: attempt to access beyond end of device [ 1440.065688][ T704] loop8: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1440.131704][T12434] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1440.170114][ T704] kworker/u8:7: attempt to access beyond end of device [ 1440.170114][ T704] loop8: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1440.191765][T12434] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1440.300728][ T704] kworker/u8:7: attempt to access beyond end of device [ 1440.300728][ T704] loop8: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1440.384707][ T704] kworker/u8:7: attempt to access beyond end of device [ 1440.384707][ T704] loop8: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1440.386398][T12434] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.1195: corrupted inode contents [ 1440.451236][T12434] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1440.457504][T12434] EXT4-fs (loop6): Remounting filesystem read-only [ 1440.459874][ T704] kworker/u8:7: attempt to access beyond end of device [ 1440.459874][ T704] loop8: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1440.470189][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1440.470269][ C0] EXT4-fs (loop6): initial error at time 1771220745: ext4_do_update_inode:5569: inode 16 [ 1440.470421][ C0] EXT4-fs (loop6): last error at time 1771220745: ext4_do_update_inode:5569: inode 16 [ 1440.527120][T12434] EXT4-fs (loop6): 1 truncate cleaned up [ 1440.540765][ T29] audit: type=1326 audit(1771220745.273:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01aa59bf79 code=0x7fc00000 [ 1440.573775][ T2982] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1440.610470][ T2982] Quota error (device loop6): write_blk: dquota write failed [ 1440.618027][ T2982] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 1440.723542][ T2982] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1440.747195][ T2982] Quota error (device loop6): write_blk: dquota write failed [ 1440.781808][ T2982] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 1440.794259][T11332] INFO: The task syz-executor:11332 has been waiting for writeback completion for more than 1 seconds. [ 1440.840748][ T2982] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 1440.979983][ T2982] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1440.989368][ T2982] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1441.092756][T12434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1441.516727][T11126] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.519785][T12486] sctp: [Deprecated]: syz.7.1212 (pid 12486) Use of int in maxseg socket option. [ 1443.519785][T12486] Use struct sctp_assoc_value instead [ 1443.647140][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1212'. [ 1443.897233][T12492] loop3: detected capacity change from 0 to 512 [ 1448.078119][T12553] loop6: detected capacity change from 0 to 512 [ 1448.259012][T12553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1448.370377][T12553] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1448.560448][T12553] EXT4-fs warning (device loop6): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 1448.904618][T11126] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.934259][T12574] 9p: Bad value for 'wfdno' [ 1450.220799][T10492] Bluetooth: hci4: command 0x0406 tx timeout [ 1451.531801][T12613] loop8: detected capacity change from 0 to 256 [ 1451.593573][T12613] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙' [ 1452.943099][T12631] syzkaller0: entered promiscuous mode [ 1452.969852][T12631] syzkaller0: entered allmulticast mode [ 1453.093462][T12631] tipc: Enabled bearer , priority 0 [ 1453.200301][T12631] tipc: Resetting bearer [ 1453.305658][T12631] tipc: Disabling bearer [ 1456.319194][T12689] tipc: Enabling of bearer rejected, failed to enable media [ 1456.341666][T12692] 9p: Bad value for 'rfdno' [ 1456.911911][ T29] audit: type=1326 audit(1771220761.653:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12684 comm="syz.8.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e299bf79 code=0x7fc00000 [ 1457.233637][T12697] loop9: detected capacity change from 0 to 4096 [ 1457.436595][T12697] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1457.758203][T12710] loop8: detected capacity change from 0 to 512 [ 1458.055991][T12710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1458.121054][T12710] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1458.268631][T12710] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 2175 (only 1 groups) [ 1458.828029][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.276476][T11342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.460005][ T9] hid_parser_main: 1 callbacks suppressed [ 1459.460098][ T9] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1459.549931][ T9] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1459.589880][ T9] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1459.638427][ T9] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1459.682035][ T9] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1459.722673][ T9] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1459.777318][ T9] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1459.822215][ T9] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1459.889902][ T9] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1459.915235][ T9] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1459.995978][ T9] hid-generic 0103:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1460.204047][T12740] syzkaller0: entered promiscuous mode [ 1460.220416][T12740] syzkaller0: entered allmulticast mode [ 1460.381147][ T29] audit: type=1326 audit(1771220765.113:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.7.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1870f9bf79 code=0x7fc00000 [ 1460.487390][T12740] tipc: Enabled bearer , priority 0 [ 1460.564761][ T29] audit: type=1326 audit(1771220765.113:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.7.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1870f9bf79 code=0x7fc00000 [ 1460.593100][T12744] tipc: Resetting bearer [ 1460.728147][ T29] audit: type=1326 audit(1771220765.113:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.7.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1870f9bf79 code=0x7fc00000 [ 1460.778613][T12744] tipc: Disabling bearer [ 1460.875146][ T29] audit: type=1326 audit(1771220765.113:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.7.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1870f9bf79 code=0x7fc00000 [ 1460.879395][T12743] fido_id[12743]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1461.050535][ T29] audit: type=1326 audit(1771220765.113:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.7.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1870f9bf79 code=0x7fc00000 [ 1462.980018][ T2051] hid-generic 0103:0004:0000.0003: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1463.859809][ T29] audit: type=1326 audit(1771220768.553:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12783 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37679bf79 code=0x7fc00000 [ 1463.956991][T12786] fido_id[12786]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1464.458126][T12801] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1320'. [ 1464.868088][T12813] netlink: 'syz.7.1321': attribute type 13 has an invalid length. [ 1464.944901][T12803] netlink: 'syz.7.1321': attribute type 2 has an invalid length. [ 1465.721929][ T8166] hid_parser_main: 12 callbacks suppressed [ 1465.722020][ T8166] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1465.780918][ T8166] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1465.799121][ T8166] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1465.838268][ T8166] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1465.891539][ T8166] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1465.933345][ T8166] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1465.973235][ T8166] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1466.001857][ T8166] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1466.038976][ T8166] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1466.081396][ T8166] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1466.127008][ T8166] hid-generic 0103:0004:0000.0004: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1466.762070][T12832] fido_id[12832]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1466.841399][T12837] 9p: Bad value for 'rfdno' [ 1467.515818][ T29] audit: type=1326 audit(1771220772.253:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37679bf79 code=0x7fc00000 [ 1470.148918][ T8166] hid-generic 0103:0004:0000.0005: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1470.723281][T10822] Bluetooth: hci0: command 0x0406 tx timeout [ 1470.729993][T10822] Bluetooth: hci6: command 0x0406 tx timeout [ 1471.707436][T12876] fido_id[12876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1471.820765][T12892] loop6: detected capacity change from 0 to 1024 [ 1471.892734][T12892] EXT4-fs: Ignoring removed orlov option [ 1472.113154][T12892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1472.139258][T12901] 9p: Bad value for 'rfdno' [ 1472.840036][ T29] audit: type=1326 audit(1771220777.563:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.9.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232d59bf79 code=0x7fc00000 [ 1475.386181][T11126] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.558434][T12956] 9p: Bad value for 'rfdno' [ 1476.252249][ T29] audit: type=1326 audit(1771220780.993:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.8.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e299bf79 code=0x7fc00000 [ 1476.853528][T12975] netlink: 'syz.6.1373': attribute type 29 has an invalid length. [ 1476.915497][T12975] netlink: 'syz.6.1373': attribute type 29 has an invalid length. [ 1477.011727][T12980] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1373'. [ 1477.083252][T12980] unsupported nla_type 58 [ 1478.718862][T13013] 9p: Bad value for 'wfdno' [ 1481.168710][T13050] 9p: Bad value for 'wfdno' [ 1482.869020][T13085] syzkaller0: entered promiscuous mode [ 1482.931228][T13085] syzkaller0: entered allmulticast mode [ 1483.293343][T13095] netlink: 182 bytes leftover after parsing attributes in process `syz.8.1413'. [ 1485.831244][T13131] netlink: 182 bytes leftover after parsing attributes in process `syz.7.1427'. [ 1486.335921][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1430'. [ 1487.895330][T13166] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1440'. [ 1487.957162][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1440'. [ 1488.031263][T13166] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1440'. [ 1488.326857][T13172] netlink: 182 bytes leftover after parsing attributes in process `syz.8.1441'. [ 1488.712924][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 1489.632187][T13193] netlink: 'syz.6.1451': attribute type 29 has an invalid length. [ 1489.687296][T13193] netlink: 'syz.6.1451': attribute type 29 has an invalid length. [ 1489.826074][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1452'. [ 1489.852480][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1452'. [ 1490.555533][T13210] netlink: 182 bytes leftover after parsing attributes in process `syz.9.1457'. [ 1490.655023][T13214] syzkaller0: entered promiscuous mode [ 1490.686433][T13214] syzkaller0: entered allmulticast mode [ 1490.898293][T13207] tipc: Enabled bearer , priority 0 [ 1490.992141][T13214] tipc: Resetting bearer [ 1491.138338][T13214] tipc: Disabling bearer [ 1491.231409][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1460'. [ 1491.892497][T13233] netlink: 'syz.8.1466': attribute type 29 has an invalid length. [ 1491.924598][T13233] netlink: 'syz.8.1466': attribute type 29 has an invalid length. [ 1491.986213][T13235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1467'. [ 1492.000316][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1467'. [ 1493.113807][T13255] loop6: detected capacity change from 0 to 512 [ 1493.426242][T13255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1493.480319][T13255] ext4 filesystem being mounted at /108/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1493.704907][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1476'. [ 1493.828723][T11126] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1494.262858][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.276896][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.520118][T13277] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1480'. [ 1494.609176][T13277] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1480'. [ 1494.694582][T13279] netlink: 'syz.7.1481': attribute type 29 has an invalid length. [ 1494.759861][T13280] netlink: 'syz.7.1481': attribute type 29 has an invalid length. [ 1495.948506][T13297] loop6: detected capacity change from 0 to 512 [ 1496.102285][T13297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1496.241899][T13297] ext4 filesystem being mounted at /111/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1496.315117][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1490'. [ 1496.993718][T11126] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1498.407363][T13331] loop8: detected capacity change from 0 to 2048 [ 1498.560883][T13331] loop8: p3 p4 < > [ 1498.565678][T13331] loop8: p3 start 11362048 is beyond EOD, truncated [ 1498.784848][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1503'. [ 1499.531978][T13352] loop8: detected capacity change from 0 to 512 [ 1499.762384][T13352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1499.887034][T13352] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1500.507074][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.251115][T13391] loop3: detected capacity change from 0 to 256 [ 1504.864904][T13409] loop9: detected capacity change from 0 to 164 [ 1505.158979][T13409] Unable to read rock-ridge attributes [ 1516.882358][T13550] loop9: detected capacity change from 0 to 512 [ 1516.907719][T13550] EXT4-fs: Ignoring removed oldalloc option [ 1519.961725][T13574] syzkaller0: entered promiscuous mode [ 1519.994920][T13574] syzkaller0: entered allmulticast mode [ 1521.060194][ T5836] hid_parser_main: 12 callbacks suppressed [ 1521.060295][ T5836] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1521.146481][ T5836] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1521.196855][ T5836] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1521.228747][ T5836] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1521.282858][ T5836] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1521.330032][ T5836] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1521.355141][ T5836] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1521.439003][ T5836] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1521.491336][ T5836] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1521.529937][ T5836] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1521.621282][ T5836] hid-generic 0103:0004:0000.0006: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1522.426982][T13611] loop9: detected capacity change from 0 to 512 [ 1522.452339][T13611] EXT4-fs: Ignoring removed oldalloc option [ 1523.533938][T13605] fido_id[13605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1524.926216][T13633] syzkaller0: entered promiscuous mode [ 1525.000653][T13633] syzkaller0: entered allmulticast mode [ 1526.145301][ T8166] hid_parser_main: 1 callbacks suppressed [ 1526.145393][ T8166] hid-generic 0103:0004:0000.0007: unknown main item tag 0x0 [ 1526.213431][ T8166] hid-generic 0103:0004:0000.0007: unknown main item tag 0x0 [ 1526.247424][ T8166] hid-generic 0103:0004:0000.0007: unknown main item tag 0x0 [ 1526.284115][ T8166] hid-generic 0103:0004:0000.0007: unknown main item tag 0x0 [ 1526.309323][ T8166] hid-generic 0103:0004:0000.0007: unknown main item tag 0x0 [ 1526.347860][ T8166] hid-generic 0103:0004:0000.0007: unknown main item tag 0x0 [ 1526.374944][ T8166] hid-generic 0103:0004:0000.0007: unknown main item tag 0x0 [ 1526.432647][ T8166] hid-generic 0103:0004:0000.0007: unknown main item tag 0x0 [ 1526.489280][ T8166] hid-generic 0103:0004:0000.0007: unknown main item tag 0x0 [ 1526.539293][ T8166] hid-generic 0103:0004:0000.0007: unknown main item tag 0x0 [ 1526.641484][ T8166] hid-generic 0103:0004:0000.0007: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1527.437953][T13657] fido_id[13657]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1529.637605][T13680] tap0: tun_chr_ioctl cmd 1074025677 [ 1529.720706][T13680] tap0: linktype set to 774 [ 1531.649422][ T5836] hid_parser_main: 1 callbacks suppressed [ 1531.692538][ T5836] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1531.762738][ T5836] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1531.829909][ T5836] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1531.858900][ T5836] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1531.897681][ T5836] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1531.945590][ T5836] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1531.983713][ T5836] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1532.026282][ T5836] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1532.064637][ T5836] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1532.108627][ T5836] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1532.190063][ T5836] hid-generic 0103:0004:0000.0008: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1533.019850][T13708] fido_id[13708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1534.623359][T13737] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1534.804647][T13750] loop3: detected capacity change from 0 to 512 [ 1534.965490][T13737] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1536.548456][T13776] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1641'. [ 1536.872495][T13772] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1536.998326][T13772] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1537.051742][T13772] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1544.609835][T13892] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1680'. [ 1545.308333][T13903] netlink: 140 bytes leftover after parsing attributes in process `syz.8.1684'. [ 1545.382140][T13903] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1684'. [ 1545.724160][T13910] netlink: 596 bytes leftover after parsing attributes in process `syz.9.1685'. [ 1547.649271][T13939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1694'. [ 1548.363397][T13948] netlink: 140 bytes leftover after parsing attributes in process `syz.9.1698'. [ 1548.421011][T13948] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1698'. [ 1548.913823][T13953] loop8: detected capacity change from 0 to 256 [ 1549.189374][T13961] netlink: 596 bytes leftover after parsing attributes in process `syz.9.1702'. [ 1550.650519][T13979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1707'. [ 1551.452143][T13987] loop8: detected capacity change from 0 to 1024 [ 1551.658663][T13987] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1551.758675][ T29] audit: type=1800 audit(1771220856.493:124): pid=13987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1709" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1551.840974][T13999] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1712'. [ 1551.870306][T13999] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1712'. [ 1551.920007][ T29] audit: type=1800 audit(1771220856.523:125): pid=13987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1709" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1552.187284][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.923061][T14015] netlink: 596 bytes leftover after parsing attributes in process `syz.9.1716'. [ 1553.563909][ T8095] hid_parser_main: 1 callbacks suppressed [ 1553.564005][ T8095] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 1553.623921][ T8095] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 1553.657685][ T8095] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 1553.730913][ T8095] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 1553.773248][ T8095] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 1553.809119][ T8095] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 1553.859068][ T8095] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 1553.881163][ T8095] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 1553.938360][ T8095] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 1553.985810][ T8095] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 1554.090404][ T8095] hid-generic 0103:0004:0000.0009: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1554.830223][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1554.868686][T14024] fido_id[14024]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1554.890842][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1554.912751][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1554.940552][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1554.960773][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1554.960914][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1721'. [ 1555.224094][T14033] loop9: detected capacity change from 0 to 512 [ 1555.681249][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.687967][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.758738][T14033] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1555.903003][T14040] netlink: 140 bytes leftover after parsing attributes in process `syz.8.1725'. [ 1556.702971][T14051] netlink: 596 bytes leftover after parsing attributes in process `syz.8.1728'. [ 1557.020040][ T5794] Bluetooth: hci2: command tx timeout [ 1557.065745][T14056] loop6: detected capacity change from 0 to 256 [ 1557.071999][T14058] netlink: 190 bytes leftover after parsing attributes in process `syz.9.1730'. [ 1557.840666][T14029] chnl_net:caif_netlink_parms(): no params data found [ 1559.100186][ T5794] Bluetooth: hci2: command tx timeout [ 1559.828638][T14086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1559.843992][T14086] batadv_slave_0: entered promiscuous mode [ 1561.040065][T14105] netlink: 596 bytes leftover after parsing attributes in process `syz.8.1742'. [ 1561.158887][T14029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.168082][T14029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.179021][T14029] bridge_slave_0: entered allmulticast mode [ 1561.185768][ T5794] Bluetooth: hci2: command tx timeout [ 1561.189954][T14029] bridge_slave_0: entered promiscuous mode [ 1561.214132][T14029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.222576][T14029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.231711][T14029] bridge_slave_1: entered allmulticast mode [ 1561.242343][T14029] bridge_slave_1: entered promiscuous mode [ 1561.682768][T14029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.850545][T14029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1562.242345][T14029] team0: Port device team_slave_0 added [ 1562.351490][T14029] team0: Port device team_slave_1 added [ 1562.601332][T14132] loop6: detected capacity change from 0 to 256 [ 1562.801194][T14133] loop9: detected capacity change from 0 to 764 [ 1562.887393][T14133] rock: directory entry would overflow storage [ 1562.909766][T14133] rock: sig=0x4654, size=5, remaining=4 [ 1562.915186][T14029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.969645][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.049676][T14029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.261725][ T5794] Bluetooth: hci2: command tx timeout [ 1564.245604][T14029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1564.322270][T14029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1564.636353][T14029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.677182][T14029] hsr_slave_0: entered promiscuous mode [ 1565.742912][T14029] hsr_slave_1: entered promiscuous mode [ 1565.783185][T14029] debugfs: 'hsr0' already exists in 'hsr' [ 1565.789083][T14029] Cannot create hsr debugfs directory [ 1566.610624][T14162] netlink: 596 bytes leftover after parsing attributes in process `syz.6.1756'. [ 1567.373346][T14164] loop8: detected capacity change from 0 to 1024 [ 1567.496505][T14164] EXT4-fs: Ignoring removed orlov option [ 1567.632151][T14164] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1567.802358][ T29] audit: type=1800 audit(1771220872.543:126): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1758" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1567.967782][ T29] audit: type=1804 audit(1771220872.543:127): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1758" name="/newroot/155/file1/bus" dev="loop8" ino=18 res=1 errno=0 [ 1568.292161][T14177] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 1568.884867][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1569.107972][T14029] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.424776][T14029] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.443312][T14029] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.963378][T14029] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.837857][T14208] loop6: detected capacity change from 0 to 128 [ 1572.054709][T14213] netlink: 596 bytes leftover after parsing attributes in process `syz.8.1769'. [ 1572.333740][T14029] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1572.447759][T14029] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1572.588100][T14029] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1572.735378][T14029] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1574.346174][T14029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.605359][T14029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.155164][ T704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.162786][ T704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.339123][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.346711][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.138694][T14260] netlink: 596 bytes leftover after parsing attributes in process `syz.8.1785'. [ 1577.593538][T14279] loop8: detected capacity change from 0 to 512 [ 1577.693274][T14279] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1577.896188][T14279] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1577.929561][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1577.936164][ C0] EXT4-fs (loop8): initial error at time 1771220882: mb_free_blocks:2047: inode 11: block 64 [ 1577.943608][T14279] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #11: comm syz.8.1791: corrupted inode contents [ 1577.946762][ C0] EXT4-fs (loop8): last error at time 1771220882: mb_free_blocks:2047: inode 11: block 64 [ 1578.012145][T14279] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1578.013247][T14279] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #11: comm syz.8.1791: mark_inode_dirty error [ 1578.120051][T14279] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1578.121404][T14279] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1791: invalid indirect mapped block 1 (level 1) [ 1578.122752][T14029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.167690][T14279] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1578.170371][T14279] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #11: comm syz.8.1791: corrupted inode contents [ 1578.253341][T14279] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1578.261251][T14279] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1578.320038][T14279] loop8: lost filesystem error report for type 5 error -117 [ 1578.340408][T14279] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #11: comm syz.8.1791: corrupted inode contents [ 1578.399201][T14279] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1578.417526][T14279] EXT4-fs error (device loop8): ext4_truncate:4587: inode #11: comm syz.8.1791: mark_inode_dirty error [ 1578.487992][T14279] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1578.514365][T14279] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1578.581983][T14279] loop8: lost filesystem error report for type 5 error -117 [ 1578.583468][T14279] EXT4-fs (loop8): 1 truncate cleaned up [ 1578.646623][T14279] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1578.958443][T14029] veth0_vlan: entered promiscuous mode [ 1579.095937][T14029] veth1_vlan: entered promiscuous mode [ 1579.177494][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.488247][T14029] veth0_macvtap: entered promiscuous mode [ 1580.030527][T14029] veth1_macvtap: entered promiscuous mode [ 1580.579323][T14029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.728011][T14029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.965665][T10773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.990099][T10773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.109758][T10773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.138236][ T704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.286792][T14323] netlink: 596 bytes leftover after parsing attributes in process `syz.7.1800'. [ 1584.369525][ C1] hrtimer: interrupt took 320712 ns [ 1595.915252][T10492] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1595.932768][T10492] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1595.949272][T10492] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1595.981706][T10492] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1595.993945][T10492] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1596.254988][T14415] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1596.286138][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1596.320858][T14415] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1820'. [ 1596.656780][T14418] loop8: detected capacity change from 0 to 512 [ 1596.853477][T14418] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1821: inode has both inline data and extents flags [ 1596.922580][T14418] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1596.932801][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1596.948737][ C1] EXT4-fs (loop8): initial error at time 1771220901: ext4_orphan_get:1391: inode 15 [ 1596.958465][ C1] EXT4-fs (loop8): last error at time 1771220901: ext4_orphan_get:1391: inode 15 [ 1596.972864][T14418] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1821: couldn't read orphan inode 15 (err -117) [ 1597.019933][T14418] loop8: lost filesystem error report for type 5 error -117 [ 1597.061596][T14418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1598.127942][T10492] Bluetooth: hci3: command tx timeout [ 1599.311854][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.369051][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.755597][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.893782][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.021211][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.139817][T10492] Bluetooth: hci3: command tx timeout [ 1601.256496][T14440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.265258][T14440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.250894][T10492] Bluetooth: hci3: command tx timeout [ 1602.490280][T14440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.722466][T14440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1604.360613][T10492] Bluetooth: hci3: command tx timeout [ 1606.234515][ T53] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.303967][ T53] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.569961][T14496] loop8: detected capacity change from 0 to 512 [ 1607.011533][ T53] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.080230][T14496] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1607.094812][T14496] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1607.391139][ T29] audit: type=1800 audit(1771220912.123:128): pid=14496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1842" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1607.713214][T14499] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.112098][ T6214] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.384152][T14410] chnl_net:caif_netlink_parms(): no params data found [ 1608.764186][ T6214] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.212629][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.197909][T14514] loop3: detected capacity change from 0 to 128 [ 1610.748019][ T6214] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.707596][ T6214] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.900223][T14410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.959968][T14410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.967804][T14410] bridge_slave_0: entered allmulticast mode [ 1613.034488][T14410] bridge_slave_0: entered promiscuous mode [ 1613.262932][T14410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.371014][T14410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.406914][T14410] bridge_slave_1: entered allmulticast mode [ 1613.455600][T14410] bridge_slave_1: entered promiscuous mode [ 1613.960973][ T6214] bridge_slave_1: left allmulticast mode [ 1613.989973][ T6214] bridge_slave_1: left promiscuous mode [ 1614.021880][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.089367][ T6214] bridge_slave_0: left allmulticast mode [ 1614.125186][ T6214] bridge_slave_0: left promiscuous mode [ 1614.142951][T14561] loop8: detected capacity change from 0 to 512 [ 1614.166743][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.330501][T14561] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1614.453182][T14561] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1615.535648][ T6214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.629030][ T6214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.714579][ T6214] bond0 (unregistering): Released all slaves [ 1615.797641][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1615.906691][T14410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.020013][T14410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.053732][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1861'. [ 1616.115579][ T6214] tipc: Left network mode [ 1616.761206][T14410] team0: Port device team_slave_0 added [ 1617.058624][T14410] team0: Port device team_slave_1 added [ 1617.139452][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.146223][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.177386][T14598] loop8: detected capacity change from 0 to 1024 [ 1617.211873][T14598] EXT4-fs: Ignoring removed orlov option [ 1617.394683][T14598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1617.567570][ T29] audit: type=1800 audit(1771220922.283:129): pid=14598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1871" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1617.656686][ T6214] hsr_slave_0: left promiscuous mode [ 1617.669902][ T29] audit: type=1804 audit(1771220922.283:130): pid=14598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1871" name="/newroot/183/file1/bus" dev="loop8" ino=18 res=1 errno=0 [ 1617.754395][ T6214] hsr_slave_1: left promiscuous mode [ 1617.796663][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1617.868061][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1617.888611][T14612] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 15: block 97:freeing already freed block (bit 6); block bitmap corrupt. [ 1617.962114][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1617.995337][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1618.114083][ T6214] veth1_macvtap: left promiscuous mode [ 1618.152410][ T6214] veth0_macvtap: left promiscuous mode [ 1618.158285][ T6214] veth1_vlan: left promiscuous mode [ 1618.210423][ T6214] veth0_vlan: left promiscuous mode [ 1618.372687][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.873335][T14636] loop8: detected capacity change from 0 to 512 [ 1619.899819][T14636] EXT4-fs: Ignoring removed oldalloc option [ 1620.372494][T14636] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1620.623355][T14636] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1879: iget: bogus i_mode (4) [ 1620.642698][T14636] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1620.649596][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1620.665420][ C1] EXT4-fs (loop8): initial error at time 1771220925: ext4_orphan_get:1391: inode 15 [ 1620.675118][ C1] EXT4-fs (loop8): last error at time 1771220925: ext4_orphan_get:1391: inode 15 [ 1620.819957][T14636] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1879: couldn't read orphan inode 15 (err -117) [ 1620.832637][T14636] loop8: lost filesystem error report for type 5 error -117 [ 1621.620561][T14636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1622.545913][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.282191][ T6214] team0 (unregistering): Port device team_slave_1 removed [ 1623.353195][ T6214] team0 (unregistering): Port device team_slave_0 removed [ 1624.109258][T14410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1624.147406][T14410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.245401][T14410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.285423][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1878'. [ 1624.324037][T14648] tipc: Enabling of bearer rejected, failed to enable media [ 1624.402700][T14410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1624.437591][T14410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.539682][T14410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.081859][T14410] hsr_slave_0: entered promiscuous mode [ 1625.125364][T14410] hsr_slave_1: entered promiscuous mode [ 1625.143036][T14410] debugfs: 'hsr0' already exists in 'hsr' [ 1625.148930][T14410] Cannot create hsr debugfs directory [ 1625.341004][T14681] nft_compat: unsupported protocol 0 [ 1625.435712][T14677] loop3: detected capacity change from 0 to 4096 [ 1629.262254][T14718] tipc: Enabling of bearer rejected, failed to enable media [ 1630.332640][T14410] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1630.467029][T14410] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1630.603144][T14410] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1630.779864][T14410] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1631.456156][T14741] loop3: detected capacity change from 0 to 512 [ 1631.481335][T14741] EXT4-fs: Ignoring removed oldalloc option [ 1631.878818][T14733] loop8: detected capacity change from 0 to 4096 [ 1632.134688][T14733] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1633.056955][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.420118][T14765] loop8: detected capacity change from 0 to 512 [ 1635.248602][T14410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1635.416910][T14765] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1635.430956][T14765] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1635.680795][ T29] audit: type=1800 audit(1771220940.363:131): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1914" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1636.522254][T14410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1636.793530][T14774] tipc: Enabling of bearer rejected, failed to enable media [ 1637.024707][T13683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.032315][T13683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.099346][T11332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.368408][T13683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.376086][T13683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.029133][T14788] IPv4: Oversized IP packet from 127.202.26.0 [ 1638.731553][T14798] 9pnet_fd: Insufficient options for proto=fd [ 1639.434453][ T29] audit: type=1326 audit(1771220944.173:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14794 comm="syz.9.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232d59bf79 code=0x7fc00000 [ 1640.122389][T14819] tipc: Enabling of bearer rejected, failed to enable media [ 1640.301381][T14410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.082899][T14410] veth0_vlan: entered promiscuous mode [ 1641.286096][T14410] veth1_vlan: entered promiscuous mode [ 1641.798792][T14410] veth0_macvtap: entered promiscuous mode [ 1641.916633][T14410] veth1_macvtap: entered promiscuous mode [ 1642.284538][T14410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1642.526601][T14850] 9pnet_fd: Insufficient options for proto=fd [ 1642.794223][T14410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.367026][ T29] audit: type=1326 audit(1771220948.103:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.7.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1870f9bf79 code=0x7fc00000 [ 1644.250252][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.388074][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.671907][T10750] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.773114][T10773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.103688][T14871] tipc: Enabling of bearer rejected, failed to enable media [ 1646.986907][T14905] 9pnet_fd: Insufficient options for proto=fd [ 1647.681530][ T29] audit: type=1326 audit(1771221208.422:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc266d9bf79 code=0x7fc00000 [ 1648.926377][T14935] tipc: Enabling of bearer rejected, failed to enable media [ 1650.198622][T14953] 9pnet_fd: Insufficient options for proto=fd [ 1650.841520][ T29] audit: type=1326 audit(1771221211.592:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14949 comm="syz.8.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e299bf79 code=0x7fc00000 [ 1652.007313][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.075765][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.295098][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.372090][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.816264][T14993] tipc: Enabling of bearer rejected, failed to enable media [ 1653.416950][T15000] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1813'. [ 1654.144978][T15008] 9pnet_fd: Insufficient options for proto=fd [ 1654.841149][ T29] audit: type=1326 audit(1771221215.582:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.3.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc266d9bf79 code=0x7fc00000 [ 1661.522201][T15040] tipc: Started in network mode [ 1661.527323][T15040] tipc: Node identity 2ee9b385df8c, cluster identity 4711 [ 1661.558636][T15040] tipc: Enabled bearer , priority 0 [ 1661.727996][T15040] tipc: Disabling bearer [ 1662.156116][T15056] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1989'. [ 1662.755008][ T24] IPVS: starting estimator thread 0... [ 1662.879844][T15062] IPVS: using max 240 ests per chain, 12000 per kthread [ 1664.361323][ T29] audit: type=1326 audit(1771221225.112:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.3.1998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc266d9bf79 code=0x0 [ 1664.838555][T15087] netlink: 'syz.2.2000': attribute type 13 has an invalid length. [ 1664.900912][T15065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1664.985850][T15065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1667.064516][T15115] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2004'. [ 1667.920615][T15123] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2006'. [ 1668.337778][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1668.355039][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1668.366502][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1668.378263][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1668.388433][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1669.030512][T15090] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1669.234797][T15090] syzkaller0: entered promiscuous mode [ 1669.258307][T15090] syzkaller0: entered allmulticast mode [ 1669.301681][ T1087] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.347586][ T1087] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.631697][T15123] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1669.673044][ T1087] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.900773][ T1087] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.462456][ T5794] Bluetooth: hci4: command tx timeout [ 1670.524232][T15151] loop8: detected capacity change from 0 to 1024 [ 1670.581593][T15151] EXT4-fs: Ignoring removed bh option [ 1670.687902][T15151] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 1672.496623][T15182] tipc: Enabling of bearer rejected, failed to enable media [ 1672.547923][ T5794] Bluetooth: hci4: command tx timeout [ 1673.020659][T15128] chnl_net:caif_netlink_parms(): no params data found [ 1673.458545][ T57] ===================================================== [ 1673.466385][ T57] BUG: KMSAN: uninit-value in __inet_bind+0x8a4/0xf20 [ 1673.473805][ T57] __inet_bind+0x8a4/0xf20 [ 1673.478366][ T57] inet_bind+0x12c/0x1a0 [ 1673.483080][ T57] kernel_bind+0xd6/0x130 [ 1673.487792][ T57] rds_tcp_conn_path_connect+0x952/0xff0 [ 1673.493855][ T57] rds_connect_worker+0x353/0x4d0 [ 1673.499153][ T57] process_scheduled_works+0xb21/0x1e30 [ 1673.505376][ T57] worker_thread+0xede/0x1580 [ 1673.510298][ T57] kthread+0x53f/0x600 [ 1673.514575][ T57] ret_from_fork+0x20f/0x910 [ 1673.519366][ T57] ret_from_fork_asm+0x1a/0x30 [ 1673.527564][ T57] [ 1673.531633][ T57] Uninit was stored to memory at: [ 1673.536887][ T57] kernel_bind+0x92/0x130 [ 1673.541509][ T57] rds_tcp_conn_path_connect+0x952/0xff0 [ 1673.547280][ T57] rds_connect_worker+0x353/0x4d0 [ 1673.552628][ T57] process_scheduled_works+0xb21/0x1e30 [ 1673.558317][ T57] worker_thread+0xede/0x1580 [ 1673.563370][ T57] kthread+0x53f/0x600 [ 1673.567591][ T57] ret_from_fork+0x20f/0x910 [ 1673.572443][ T57] ret_from_fork_asm+0x1a/0x30 [ 1673.577363][ T57] [ 1673.580354][ T57] Uninit was stored to memory at: [ 1673.585568][ T57] rds_tcp_conn_path_connect+0xaf8/0xff0 [ 1673.591419][ T57] rds_connect_worker+0x353/0x4d0 [ 1673.596615][ T57] process_scheduled_works+0xb21/0x1e30 [ 1673.602472][ T57] worker_thread+0xede/0x1580 [ 1673.607281][ T57] kthread+0x53f/0x600 [ 1673.611564][ T57] ret_from_fork+0x20f/0x910 [ 1673.616292][ T57] ret_from_fork_asm+0x1a/0x30 [ 1673.621376][ T57] [ 1673.623775][ T57] Uninit was created at: [ 1673.631721][ T57] kmem_cache_alloc_noprof+0x37b/0x1270 [ 1673.637473][ T57] rds_tcp_conn_alloc+0x7b/0xbb0 [ 1673.643667][ T57] __rds_conn_create+0x267f/0x34e0 [ 1673.648939][ T57] rds_conn_create_outgoing+0x5d/0x80 [ 1673.654566][ T57] rds_sendmsg+0x2684/0x4d70 [ 1673.659317][ T57] ____sys_sendmsg+0xfe7/0x1080 [ 1673.664529][ T57] ___sys_sendmsg+0x271/0x3b0 [ 1673.669336][ T57] __x64_sys_sendmsg+0x211/0x3e0 [ 1673.674570][ T57] x64_sys_call+0x1e20/0x3ea0 [ 1673.679408][ T57] do_syscall_64+0x134/0xf80 [ 1673.684572][ T57] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.690814][ T57] [ 1673.693241][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.704330][ T57] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1673.708734][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1673.719056][ T57] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 1673.725514][ T57] ===================================================== [ 1673.735628][ T57] Disabling lock debugging due to kernel taint [ 1674.429056][ T57] Kernel panic - not syncing: kmsan.panic set ... [ 1674.435639][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1674.446686][ T57] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1674.452326][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1674.462517][ T57] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 1674.468881][ T57] Call Trace: [ 1674.472240][ T57] [ 1674.475246][ T57] __dump_stack+0x26/0x30 [ 1674.479738][ T57] dump_stack_lvl+0x50/0x1c0 [ 1674.484475][ T57] ? dump_stack+0x12/0x25 [ 1674.488967][ T57] dump_stack+0x1e/0x25 [ 1674.493268][ T57] vpanic+0x7b4/0x1430 [ 1674.497522][ T57] panic+0x15d/0x160 [ 1674.501616][ T57] kmsan_report+0x31a/0x320 [ 1674.506366][ T57] ? __msan_warning+0x1b/0x30 [ 1674.511169][ T57] ? __inet_bind+0x8a4/0xf20 [ 1674.515879][ T57] ? inet_bind+0x12c/0x1a0 [ 1674.520409][ T57] ? kernel_bind+0xd6/0x130 [ 1674.525048][ T57] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 1674.530994][ T57] ? rds_connect_worker+0x353/0x4d0 [ 1674.536437][ T57] ? process_scheduled_works+0xb21/0x1e30 [ 1674.542287][ T57] ? worker_thread+0xede/0x1580 [ 1674.547265][ T57] ? kthread+0x53f/0x600 [ 1674.551660][ T57] ? ret_from_fork+0x20f/0x910 [ 1674.556551][ T57] ? ret_from_fork_asm+0x1a/0x30 [ 1674.561671][ T57] ? kmsan_get_metadata+0xf1/0x160 [ 1674.566939][ T57] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.572995][ T57] ? __rcu_read_unlock+0x6c/0xd0 [ 1674.578275][ T57] ? inet_addr_type_table+0x33b/0x560 [ 1674.583859][ T57] ? kmsan_get_metadata+0xf1/0x160 [ 1674.589132][ T57] __msan_warning+0x1b/0x30 [ 1674.593777][ T57] __inet_bind+0x8a4/0xf20 [ 1674.598346][ T57] inet_bind+0x12c/0x1a0 [ 1674.602714][ T57] ? __pfx_inet_bind+0x10/0x10 [ 1674.607687][ T57] kernel_bind+0xd6/0x130 [ 1674.612151][ T57] ? rds_tcp_tune+0x834/0xe60 [ 1674.616946][ T57] ? kmsan_get_metadata+0xf1/0x160 [ 1674.622221][ T57] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.628197][ T57] rds_tcp_conn_path_connect+0x952/0xff0 [ 1674.633984][ T57] ? kmsan_get_metadata+0xf1/0x160 [ 1674.639268][ T57] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1674.645558][ T57] rds_connect_worker+0x353/0x4d0 [ 1674.650752][ T57] ? __pfx_rds_connect_worker+0x10/0x10 [ 1674.656470][ T57] process_scheduled_works+0xb21/0x1e30 [ 1674.662215][ T57] worker_thread+0xede/0x1580 [ 1674.667072][ T57] kthread+0x53f/0x600 [ 1674.671306][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1674.676562][ T57] ? __pfx_kthread+0x10/0x10 [ 1674.681296][ T57] ret_from_fork+0x20f/0x910 [ 1674.686016][ T57] ? __switch_to+0x51c/0x750 [ 1674.690871][ T57] ? __pfx_kthread+0x10/0x10 [ 1674.695609][ T57] ret_from_fork_asm+0x1a/0x30 [ 1674.700552][ T57] [ 1674.703996][ T57] Kernel Offset: disabled [ 1674.708361][ T57] Rebooting in 86400 seconds..