last executing test programs: 16m15.886067182s ago: executing program 3 (id=48): socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 16m14.530962062s ago: executing program 3 (id=49): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x900000, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r1) 16m13.841439631s ago: executing program 3 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, @generic={0x2f}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$key(0xf, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904"], 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 16m11.485322546s ago: executing program 3 (id=67): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 16m10.337786922s ago: executing program 32 (id=70): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe7) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) 16m9.049374121s ago: executing program 3 (id=79): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 16m8.543695628s ago: executing program 2 (id=80): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r2, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[], 0x484}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040009) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") 16m7.618180392s ago: executing program 3 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 16m6.517355907s ago: executing program 2 (id=86): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x857f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) 16m6.026680094s ago: executing program 0 (id=89): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x400c01, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x2000, 0x0, 0x157, 0x40000) fcntl$dupfd(r2, 0x0, r2) 16m5.837264847s ago: executing program 2 (id=91): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m5.64249451s ago: executing program 0 (id=92): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0xb01, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 16m4.94790534s ago: executing program 0 (id=94): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x8000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x3e14, &(0x7f0000000100)={0x0, 0xaac0, 0x200, 0x3, 0x80003c1, 0x0, r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 16m4.603419095s ago: executing program 2 (id=95): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x80, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpaprt54bC33Nv3X13NUxJZ9vJfk0jKaf1t5eXZiLjRWyXmIuJrX474ZnI8bmf/YGul2WzsluV6t7VT7+wf3N5srWw0NhrbS0uLzy+/sPzc8p2s9J7audDP/PhLn//5p7/1u7t/vvXtvFqf+0hUYqAd56nX9EqxL/ryfbT7MIJNwEzZnsqkKwIAwJnkx/gfjIhPFMf/1ZgpjuYGzEyiZgAAAMB5yb4wH/9OIjIAAADg0kojYj6StFaOBZiPNL1SXhv4cFxPm+1O91Pr7b3ttXxexEJU0vXNZuNOOVZ4ISpJXl4sx9j2y88OlJci4tGI+F71WlGurbabaxO+9gEAAADT4sbA+f8/qmmRP92Q/xMAAAAALq6FkQUAAADgsnDKDwAAAJff4Pm/+/0DAADApfKVl17KU9Z//vXaK/t7W+1Xbq81Olu11t5qbbW9u1PbaLc3inv2tU7bXrPd3vlMbO/dq3cbnW69s39wt9Xe2+7e3XzgEdgAAADAGD368Td+nUTE4WevFSnK+wACPOAPk64AcJ4M9YPp5S7eML0qk64AMHHJKfMN3gEAgPe/mx89/vt///n/rg3A5WasDwBMH7//w/SqGAEIU2u2vAbwgV7x6qjlRv7+/8uzRsqyiDerR6e4vggAAOM1X6QkrZXnAfORprVaxCMR6UJUkvXNZuNOeX7wq2rlal5eLNZMTh0zDAAAAAAAAAAAAAAAAAAAAAAAAAD0ZFkSGQAAAHCpRaR/Soq7+UfcrD49P3h94Eryz2r8sSz88OXv31vpdncX8+l/K57ldSUiuj8opz878vFhAAAAwHlLDkfO6p2nl6+LY60VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFPg7fuvrvbTOOP+5YsRsTAs/mzMFa9zUYmI639PYvbIeklEzJxD/MPXI+KxYfGTeCfLXouyFsPiX3vI8ReKXTM8fhoRN84hPkyzN/L+58Vhn780nixeh3/+Zsv0Xo3u/9Iy8mNFPzes/3nk2NZaQ2M8/tZP671c5Xj81yMenx3e//T732RE/KeObe1fWZYdj/+Nrx8cjGp/9qOIm0O/f5IHYtW7rZ16Z//g9mZrZaOx0dheWlp8fvmF5eeW79TXN5uN8u/QGN/92M/eGRU/b//1IfF/+5te/3tS+58etdEB/3nr3v0P9bLH3oA8/q2nhn7/zsWI+Gn53ffJMp/Pv9nPH/byRz3xkzefOKn9ayP2/2nv/60ztv+Zr37n92dcFAAYg87+wdZKs9nYPSEzd4Zl3o+ZX8xdiGr8j5nstd47d1Hq8/9m8qPVd6f0W3UBKnYkk40l1tXieP6sa10ZU9sn2i0BAAAPwbsH/ZOuCQAAAAAAAAAAAAAAAAAAAEyvcdxKbTDm4WSaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwov8GAAD//3QT3Gw=") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, 0x0) close(0x3) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x5, 0xf, 0x7, 0x80, 0x2, 0x3, 0x107f, 0x20000006, 0x4d, 0x6, 0x5f, 0x6, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x245, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000412f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x8, 0x1, 0xea4, 0x1ff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0xfffffffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x6, 0x9, 0x7, 0x47, 0x8000, 0x0, 0x6d5a, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d1, 0xa, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x35, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0xffffff76, 0x80a2ed, 0x4, 0x2], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x8005, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x3, 0xa620, 0x7ba9, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x1, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x7f, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x805, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x8000, 0xdf5) 16m3.936772405s ago: executing program 0 (id=96): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./bus\x00', 0x10418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 16m2.983168998s ago: executing program 0 (id=97): openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}}) io_uring_enter(r3, 0x3516, 0x483, 0x0, 0x0, 0x0) 16m2.356362237s ago: executing program 2 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mount(0x0, 0x0, &(0x7f0000000440)='cifs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) 16m0.248505288s ago: executing program 0 (id=104): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m0.236173778s ago: executing program 2 (id=105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) 15m59.941635592s ago: executing program 33 (id=104): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m59.796001974s ago: executing program 34 (id=105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) 15m52.276623673s ago: executing program 35 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 11m20.776461309s ago: executing program 5 (id=1046): userfaultfd(0x801) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x18, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) 11m17.860305211s ago: executing program 5 (id=1049): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000280)=0x1, 0x4) close(0x3) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a0000000760000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11m17.132773272s ago: executing program 5 (id=1055): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r1, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 11m16.241643675s ago: executing program 5 (id=1059): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) landlock_create_ruleset(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@nogrpid}]}, 0x1, 0x792, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x103c42, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x10, 0x3, 0x7c27) pwrite64(r1, &(0x7f0000000100)="2380", 0x2, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711282000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0x208e24b) write$UHID_INPUT2(r0, &(0x7f0000001740), 0x6) 11m12.744791085s ago: executing program 5 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x9, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0xb, 0x0, &(0x7f0000000280)) 11m11.360595645s ago: executing program 5 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) 11m10.868927282s ago: executing program 36 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) 9m32.815152256s ago: executing program 9 (id=1399): mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed010000000000010902240001000000000904000001030000000921000001000000000905810300"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000002980), 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) read$msr(r3, &(0x7f0000000080)=""/213, 0xd5) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r2, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}}], 0x1, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x0, 0xe, 0x5, 0x9, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x80, &(0x7f0000000740)=ANY=[@ANYBLOB="12010003020000202505a1a44000010203010902"], &(0x7f00000009c0)={0x0, 0x0, 0x21, 0x0, 0x1, [{0x0, 0x0}]}) 9m28.229116102s ago: executing program 9 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2503000000000000000016"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 9m27.326959116s ago: executing program 9 (id=1411): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x185042, 0x1d8) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, &(0x7f00000026c0), 0x0, 0xfffffffffffffffe) mount$nfs(&(0x7f0000000100)='*\x00', &(0x7f0000000180)='./file2\x00', &(0x7f00000002c0), 0x2, 0x0) 9m26.28849371s ago: executing program 9 (id=1415): socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x2, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x900, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0xc4a, 0x8, 0x9, 0xfffffff7, 0x4, 0x6, 0x40, 0x7b, 0x9, 0x5, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x5, 0x800, 0x2, 0x8a, 0x5, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x9, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x409, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0xa, 0x8, 0x100008, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x4005, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x3, 0xfffffffc, 0x3, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x7, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x1000, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0xffffffff, 0x81, 0x9, 0x2, 0x7, 0xfd, 0x7, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x7, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0x1, 0x3, 0xfffffffd, 0x2, 0x7, 0x6, 0x4, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0xdaca, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x56, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9m26.001789574s ago: executing program 9 (id=1419): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 9m24.544921986s ago: executing program 9 (id=1424): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 9m9.500162213s ago: executing program 37 (id=1424): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 1m5.532492824s ago: executing program 1 (id=2625): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00005a1000/0x4000)=nil, 0x4000}, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 58.368488957s ago: executing program 1 (id=2637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0xd931d3864d39dcca) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 56.347144616s ago: executing program 1 (id=2639): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001103000000000000000000000000000004000000000000000001000084000000000000000002000000000000000000002e"], 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r3) 54.634180021s ago: executing program 1 (id=2642): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r2, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5) 51.872758551s ago: executing program 1 (id=2648): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 49.810662071s ago: executing program 1 (id=2652): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0, 0x7f1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbaf}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xd, 0xc, 0x2f}}]}}}]}}]}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_setup(0x2c0c, 0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) socket$rds(0x15, 0x5, 0x0) connect$pppl2tp(r2, 0x0, 0x0) 32.822744266s ago: executing program 38 (id=2652): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0, 0x7f1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbaf}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xd, 0xc, 0x2f}}]}}}]}}]}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_setup(0x2c0c, 0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) socket$rds(0x15, 0x5, 0x0) connect$pppl2tp(r2, 0x0, 0x0) 21.985214342s ago: executing program 7 (id=2705): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 16.300507924s ago: executing program 7 (id=2719): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) 15.488123066s ago: executing program 7 (id=2723): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) keyctl$link(0x8, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x1000006}, 0x1c) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x2, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) 15.248438409s ago: executing program 7 (id=2724): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r0) 13.949768418s ago: executing program 4 (id=2725): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x4}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0xffffffffffffffff) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020) 13.600423513s ago: executing program 7 (id=2728): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 12.763717405s ago: executing program 4 (id=2730): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.028506925s ago: executing program 4 (id=2732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000300)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) ftruncate(r2, 0x400000) finit_module(r2, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e20, @loopback}}}, 0x88) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) 9.752510409s ago: executing program 7 (id=2735): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="140002000000000000000000f1"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r9 = dup2(r0, r0) write$P9_RSTATFS(r9, &(0x7f00000003c0)={0x43, 0x9, 0x2f00, {0x0, 0x0, 0x2000000, 0x3be, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x100000001, 0x7fffffff}}, 0x43) 9.66851503s ago: executing program 4 (id=2736): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) listen(r3, 0x4000) close(r3) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 9.66817484s ago: executing program 6 (id=2737): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) 9.510629232s ago: executing program 8 (id=2738): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r0) 9.125807278s ago: executing program 8 (id=2739): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80c4, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000040), 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x4b45, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f00000003c0)=""/200) 8.612355305s ago: executing program 4 (id=2740): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 8.498270727s ago: executing program 6 (id=2741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000001200)='./control\x00', 0x0) chmod(&(0x7f0000000940)='./control\x00', 0x9c32f69e6caa24ef) 8.224377301s ago: executing program 8 (id=2742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) socket$alg(0x26, 0x5, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0x4, 0x0, 0x40}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 6.045093202s ago: executing program 4 (id=2743): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f0000000580)=0xc) sched_getattr(r1, &(0x7f00000005c0)={0x38}, 0x38, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 5.427875081s ago: executing program 6 (id=2744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 4.12443956s ago: executing program 8 (id=2745): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0xc22, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x157c, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xfffe, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x400002, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.991814502s ago: executing program 6 (id=2746): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2.375213145s ago: executing program 6 (id=2747): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x30}}, 0x0) close(r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x234, 0x2e8, 0x2e8, 0x234, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'team_slave_1\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x2000, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 2.319651486s ago: executing program 8 (id=2748): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r0) 2.142546969s ago: executing program 8 (id=2749): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x5, 0x90, 0xffffffff, @vifc_lcl_ifindex, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r3, &(0x7f0000000300)="a7d1049379c7b742a2f4627dc8e78ee2c657e4d98e1390bcdd", &(0x7f0000000340)=""/143}, 0x20) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000180)=0x40) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000400bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff", @ANYRESDEC=r0, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0xf, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 6 (id=2750): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[], 0x0) kernel console output (not intermixed with test programs): s unknown, defaulting to 1000 [ 396.889124][ T5525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 398.520181][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 400.107998][ T7913] chnl_net:caif_netlink_parms(): no params data found [ 400.576556][ T7963] xt_cgroup: invalid path, errno=-2 [ 400.599271][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 401.450469][ T4267] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 402.048261][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.476793][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.486182][ T7913] device bridge_slave_0 entered promiscuous mode [ 402.708606][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 403.316497][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.339746][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.479479][ T7913] device bridge_slave_1 entered promiscuous mode [ 403.510099][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 404.566544][ T7913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.595845][ T7913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.703577][ T7997] device bond0 entered promiscuous mode [ 404.709279][ T7997] device bond_slave_0 entered promiscuous mode [ 404.715578][ T7997] device bond_slave_1 entered promiscuous mode [ 404.778801][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 404.841102][ T7913] team0: Port device team_slave_0 added [ 404.949651][ T7913] team0: Port device team_slave_1 added [ 404.974904][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.981990][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.018507][ T7913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.037202][ T5512] device hsr_slave_0 left promiscuous mode [ 405.049410][ T5512] device hsr_slave_1 left promiscuous mode [ 405.071268][ T8004] netlink: 'syz.7.1106': attribute type 11 has an invalid length. [ 405.587899][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 405.929168][ T5512] device veth1_macvtap left promiscuous mode [ 405.933275][ T8007] loop7: detected capacity change from 0 to 2048 [ 405.937230][ T5512] device veth0_macvtap left promiscuous mode [ 405.968752][ T5512] device veth1_vlan left promiscuous mode [ 405.977231][ T5512] device veth0_vlan left promiscuous mode [ 406.007585][ T8007] xt_SECMARK: invalid mode: 2 [ 406.041082][ T8011] syz.4.1108 sent an empty control message without MSG_MORE. [ 406.357420][ T5484] smc: removing ib device syz2 [ 409.955884][ T5512] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 410.467918][ T5512] bond0 (unregistering): Released all slaves [ 410.509132][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.516187][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.546781][ T7913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.243500][ T8015] tipc: Enabling of bearer rejected, failed to enable media [ 411.258156][ T8020] device veth1_to_team entered promiscuous mode [ 411.369553][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 411.377033][ T8052] device bond0 left promiscuous mode [ 411.382500][ T8052] device bond_slave_0 left promiscuous mode [ 411.388754][ T8052] device bond_slave_1 left promiscuous mode [ 411.396763][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.404648][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.550921][ T7913] device hsr_slave_0 entered promiscuous mode [ 411.579937][ T7913] device hsr_slave_1 entered promiscuous mode [ 411.597968][ T7913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.605948][ T7913] Cannot create hsr debugfs directory [ 411.718022][ T8062] netlink: 'syz.6.1122': attribute type 10 has an invalid length. [ 412.466429][ T8062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.515693][ T8062] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 412.532735][ T8062] team0: Port device batadv0 added [ 415.605755][ T7913] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 415.796388][ T7913] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 416.018566][ T7913] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 416.252216][ T7913] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 416.659163][ T8091] IPv6: sit1: Disabled Multicast RS [ 416.889942][ T7913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.244812][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.355312][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.418678][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 417.545868][ T7913] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.767764][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 417.816383][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.205764][ T5525] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.213047][ T5525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.391701][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 418.437929][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 418.464744][ T5525] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.471942][ T5525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.545265][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.554919][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 418.609825][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.631166][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.650606][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.683667][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 418.692984][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.703570][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.712775][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 418.748857][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 418.777411][ T7913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.795790][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 418.821179][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 418.839910][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 420.274596][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 420.299791][ T8135] netlink: 'syz.4.1145': attribute type 5 has an invalid length. [ 420.321485][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 420.345834][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.127361][ T8150] bond0 speed is unknown, defaulting to 1000 [ 421.744505][ T8155] bond0 speed is unknown, defaulting to 1000 [ 422.990497][ T8175] netlink: 'syz.6.1153': attribute type 1 has an invalid length. [ 423.105604][ T8185] device macsec1 entered promiscuous mode [ 423.111597][ T8185] device bond2 entered promiscuous mode [ 423.214534][ T8180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.226354][ T8180] bond2: (slave bond3): making interface the new active one [ 423.234979][ T8180] device bond3 entered promiscuous mode [ 423.245118][ T8180] bond2: (slave bond3): Enslaving as an active interface with an up link [ 423.259790][ T8184] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 423.402706][ T8188] device bond3 entered promiscuous mode [ 423.467712][ T8188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.511139][ T8188] bond2: (slave bond3): making interface the new active one [ 423.532780][ T8188] bond2: (slave bond3): Enslaving as an active interface with an up link [ 424.126029][ T8190] device macsec1 entered promiscuous mode [ 424.146615][ T8190] device bond2 entered promiscuous mode [ 424.179577][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.215777][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.390856][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.430238][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.462625][ T7913] device veth0_vlan entered promiscuous mode [ 424.621238][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.634075][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.656304][ T7913] device veth1_vlan entered promiscuous mode [ 425.438664][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 425.469430][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 425.558447][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.584641][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 425.615200][ T7913] device veth0_macvtap entered promiscuous mode [ 425.819170][ T7913] device veth1_macvtap entered promiscuous mode [ 426.617368][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.627369][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.831122][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.844650][ T8222] loop7: detected capacity change from 0 to 256 [ 426.851549][ T8222] exfat: Deprecated parameter 'utf8' [ 426.857029][ T8222] /dev/loop7: Can't open blockdev [ 426.882346][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.906212][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.916958][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.939703][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.968237][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.987364][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.997300][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 427.032652][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.108568][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.130583][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.540606][ T5471] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 428.597620][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.608215][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.619602][ T7913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.630509][ T7913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.660973][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.674794][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 428.693502][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.711187][ T7913] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.725136][ T7913] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.734667][ T7913] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.263733][ T7913] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.657975][ T5472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.705968][ T5472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.781947][ T5525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.802028][ T5525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.778934][ T5527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 430.801150][ T5527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 431.049819][ T8259] loop8: detected capacity change from 0 to 256 [ 431.077917][ T8259] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 432.131024][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1180'. [ 432.184836][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.304644][ T8270] device batadv_slave_0 entered promiscuous mode [ 433.570191][ T8274] netlink: 'syz.7.1183': attribute type 1 has an invalid length. [ 433.871362][ T8297] sd 0:0:1:0: device reset [ 434.650783][ T8304] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1188'. [ 435.685924][ T8314] bond0 speed is unknown, defaulting to 1000 [ 435.750222][ T8319] device veth1_to_team entered promiscuous mode [ 435.818438][ T4359] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 435.885045][ T8319] device veth1_to_team left promiscuous mode [ 435.987533][ T8327] loop8: detected capacity change from 0 to 128 [ 435.993979][ T8319] team0: Port device team_slave_1 removed [ 436.020334][ T4359] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 436.037221][ T4359] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 436.079274][ T4359] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 436.098522][ T4359] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.119891][ T8316] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 437.334219][ T4297] usb 10-1: USB disconnect, device number 2 [ 437.334871][ T27] audit: type=1326 audit(2000000020.320:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.6.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 437.405593][ T27] audit: type=1326 audit(2000000020.360:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.6.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 437.526200][ T8344] netlink: 'syz.8.1203': attribute type 1 has an invalid length. [ 437.584767][ T8344] device bond3 entered promiscuous mode [ 437.594322][ T8344] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.604068][ T8344] bond2: (slave bond3): making interface the new active one [ 437.612378][ T8344] bond2: (slave bond3): Enslaving as an active interface with an up link [ 437.672625][ T8344] device macsec1 entered promiscuous mode [ 437.688887][ T8344] device bond2 entered promiscuous mode [ 437.989459][ T8359] netlink: 'syz.7.1209': attribute type 1 has an invalid length. [ 438.619382][ T27] audit: type=1326 audit(2000000021.520:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.6.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 439.442168][ T8366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.546421][ T8366] bond3: (slave bond4): making interface the new active one [ 439.562461][ T8366] bond3: (slave bond4): Enslaving as an active interface with an up link [ 439.999613][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.013777][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.650813][ T8359] device macsec1 entered promiscuous mode [ 440.764512][ T8359] device bond3 entered promiscuous mode [ 440.905239][ T8359] device bond4 entered promiscuous mode [ 441.150237][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.159869][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.167376][ T8379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.181146][ T8379] device batadv_slave_0 left promiscuous mode [ 441.197672][ T8379] device macsec1 left promiscuous mode [ 441.203420][ T8379] device bond2 left promiscuous mode [ 441.208903][ T8379] device bond3 left promiscuous mode [ 441.840341][ T8396] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1220'. [ 441.864263][ T8396] device vlan2 entered promiscuous mode [ 441.880315][ T8396] device bridge0 entered promiscuous mode [ 442.048829][ T8381] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 442.229985][ T8381] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.241332][ T8381] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 442.252248][ T8381] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 442.261436][ T8381] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.271791][ T8394] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 442.605925][ T8299] usb 8-1: USB disconnect, device number 5 [ 443.959219][ T8414] loop9: detected capacity change from 0 to 256 [ 443.966842][ T8414] exfat: Deprecated parameter 'utf8' [ 444.466106][ T8414] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 445.051460][ T8425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.547602][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'. [ 447.609032][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1246'. [ 447.618099][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1246'. [ 449.115447][ T8495] Device name cannot be null; rc = [-22] [ 452.045963][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1256'. [ 455.382121][ T8536] loop9: detected capacity change from 0 to 512 [ 455.398168][ T27] audit: type=1326 audit(2000000038.380:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.4.1260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x0 [ 455.424493][ T8536] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 456.043782][ T8544] bond0 speed is unknown, defaulting to 1000 [ 456.120337][ T8536] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 456.203735][ T8548] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 456.373175][ T8536] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.1263: corrupted in-inode xattr [ 456.405770][ T8536] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1263: couldn't read orphan inode 15 (err -117) [ 456.558648][ T8536] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 457.199049][ T7913] EXT4-fs (loop9): unmounting filesystem. [ 457.354354][ T8560] tipc: Enabled bearer , priority 10 [ 457.458789][ T8560] tipc: Enabled bearer , priority 0 [ 459.020757][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 459.053907][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 459.064396][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 459.084184][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 459.150698][ T8605] bond1: (slave ip6gretap1): Releasing active interface [ 459.213557][ T8608] loop9: detected capacity change from 0 to 1024 [ 459.223830][ T8605] bond2: (slave bond3): Releasing backup interface [ 459.237014][ T8608] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 459.260910][ T8606] netlink: 'syz.4.1285': attribute type 10 has an invalid length. [ 459.281399][ T8606] device wlan1 entered promiscuous mode [ 460.000611][ T8606] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 460.874376][ T5242] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 461.229089][ T8628] bond0 speed is unknown, defaulting to 1000 [ 461.820561][ T4267] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 462.616399][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1300'. [ 462.741630][ T8659] xt_HMARK: proto mask must be zero with L3 mode [ 464.670478][ T8675] bond0 speed is unknown, defaulting to 1000 [ 465.278720][ T8685] trusted_key: encrypted_key: insufficient parameters specified [ 466.000097][ T4267] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 466.019032][ T4267] Bluetooth: hci0: Injecting HCI hardware error event [ 466.043033][ T4264] Bluetooth: hci0: hardware error 0x00 [ 467.155016][ T8702] loop7: detected capacity change from 0 to 4096 [ 467.166746][ T8702] /dev/loop7: Can't open blockdev [ 469.046729][ T4264] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 469.069621][ T8724] bond0 speed is unknown, defaulting to 1000 [ 469.445779][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1327'. [ 469.494383][ T8740] netlink: 340 bytes leftover after parsing attributes in process `syz.6.1330'. [ 469.504966][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1330'. [ 471.300181][ T8771] loop7: detected capacity change from 0 to 4096 [ 471.307256][ T8771] /dev/loop7: Can't open blockdev [ 471.912793][ T8780] bond0 speed is unknown, defaulting to 1000 [ 473.374453][ T27] audit: type=1326 audit(2000000056.360:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 473.422648][ T27] audit: type=1326 audit(2000000056.360:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 473.473329][ T8803] netlink: 'syz.8.1349': attribute type 1 has an invalid length. [ 473.525778][ T8803] 8021q: adding VLAN 0 to HW filter on device bond4 [ 474.386278][ T8803] device veth3 entered promiscuous mode [ 474.396625][ T8803] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 474.410944][ T27] audit: type=1326 audit(2000000057.390:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 479.032351][ T27] audit: type=1326 audit(2000000057.390:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 479.334220][ T27] audit: type=1326 audit(2000000057.390:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 481.372981][ T8824] delete_channel: no stack [ 481.545022][ T27] audit: type=1326 audit(2000000057.390:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 481.567523][ T27] audit: type=1326 audit(2000000057.390:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 481.658431][ T27] audit: type=1326 audit(2000000057.390:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 481.945640][ T27] audit: type=1326 audit(2000000057.390:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 482.838424][ T27] audit: type=1326 audit(2000000057.390:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 482.987756][ T27] audit: type=1326 audit(2000000057.390:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 483.017039][ T27] audit: type=1326 audit(2000000057.390:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 483.070882][ T8854] tipc: Started in network mode [ 483.075825][ T8854] tipc: Node identity 9216ab0536b4, cluster identity 4711 [ 483.088797][ T27] audit: type=1326 audit(2000000057.390:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.6.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 483.209849][ T8854] tipc: Enabled bearer , priority 0 [ 483.236450][ T8856] netlink: 'syz.8.1364': attribute type 1 has an invalid length. [ 483.299743][ T8856] 8021q: adding VLAN 0 to HW filter on device bond5 [ 483.565422][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1365'. [ 484.722382][ T8381] tipc: Node number set to 2762124037 [ 484.751421][ T8859] device veth5 entered promiscuous mode [ 484.762577][ T8859] bond5: (slave veth5): Enslaving as an active interface with a down link [ 484.812932][ T8860] bond5: (slave erspan0): making interface the new active one [ 484.829195][ T8860] device erspan0 entered promiscuous mode [ 484.835398][ T8860] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 484.853114][ T8854] device syzkaller0 entered promiscuous mode [ 484.878877][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 484.928925][ T8874] tipc: Resetting bearer [ 485.593563][ T8888] bond0 speed is unknown, defaulting to 1000 [ 485.608582][ T8851] tipc: Resetting bearer [ 485.638031][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 485.638051][ T27] audit: type=1326 audit(2000000068.610:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7fc00000 [ 485.670478][ T8851] tipc: Disabling bearer [ 485.701595][ T8891] overlayfs: failed to clone upperpath [ 485.718421][ T27] audit: type=1326 audit(2000000068.610:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f504d38e969 code=0x7fc00000 [ 485.780890][ T27] audit: type=1326 audit(2000000068.610:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7fc00000 [ 485.867361][ T27] audit: type=1326 audit(2000000068.610:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7fc00000 [ 485.958614][ T27] audit: type=1326 audit(2000000068.610:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7fc00000 [ 486.097079][ T27] audit: type=1326 audit(2000000068.610:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7fc00000 [ 486.124660][ T8900] batman_adv: batadv0: Adding interface: vlan0 [ 486.145070][ T8900] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.160730][ T27] audit: type=1326 audit(2000000068.610:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7fc00000 [ 486.193691][ T8900] batman_adv: batadv0: Interface activated: vlan0 [ 486.852924][ T27] audit: type=1326 audit(2000000068.610:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7fc00000 [ 487.180876][ T8903] tipc: Enabled bearer , priority 10 [ 487.576194][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1380'. [ 487.863038][ T8903] tipc: Enabled bearer , priority 0 [ 487.935997][ T27] audit: type=1326 audit(2000000068.610:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7fc00000 [ 488.029610][ T27] audit: type=1326 audit(2000000068.610:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7fc00000 [ 489.854217][ T8937] tipc: Enabled bearer , priority 0 [ 489.880992][ T8937] device syzkaller0 entered promiscuous mode [ 490.936212][ T8937] tipc: Resetting bearer [ 490.970147][ T8943] bond0 speed is unknown, defaulting to 1000 [ 491.138765][ T8936] tipc: Resetting bearer [ 491.267502][ T8936] tipc: Disabling bearer [ 491.333799][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1395'. [ 492.316120][ T8964] tipc: Enabled bearer , priority 10 [ 492.361117][ T8964] tipc: Enabled bearer , priority 0 [ 492.756837][ T4296] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 492.765980][ T5165] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 493.642648][ T4296] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.684573][ T4296] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.738633][ T4296] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 493.769319][ T4296] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.799140][ T4296] usb 10-1: config 0 descriptor?? [ 493.825714][ T4296] usbhid 10-1:0.0: can't add hid device: -22 [ 493.974905][ T8981] bond0 speed is unknown, defaulting to 1000 [ 494.009141][ T4296] usbhid: probe of 10-1:0.0 failed with error -22 [ 494.380027][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.601208][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.713480][ T4705] usb 10-1: USB disconnect, device number 3 [ 497.119011][ T9016] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1408'. [ 497.988647][ T9019] tipc: Enabling of bearer rejected, failed to enable media [ 499.868444][ T9044] bond0 speed is unknown, defaulting to 1000 [ 500.218578][ T9051] netlink: 'syz.9.1419': attribute type 1 has an invalid length. [ 500.300016][ T9051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.556937][ T9054] bond1: (slave vlan3): making interface the new active one [ 500.582071][ T9054] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 500.591557][ T5527] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 500.734919][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1421'. [ 502.024547][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.044329][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.266174][ T9078] overlayfs: failed to clone upperpath [ 503.586785][ T9094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1431'. [ 503.600823][ T9093] bond0 speed is unknown, defaulting to 1000 [ 503.690662][ T9081] trusted_key: encrypted_key: key user:syz not found [ 505.362351][ T9112] xt_connbytes: Forcing CT accounting to be enabled [ 505.379253][ T9112] Cannot find add_set index 1 as target [ 506.308911][ T5536] device erspan0 left promiscuous mode [ 507.091047][ T9125] overlayfs: failed to clone upperpath [ 508.717552][ T9137] bond0 speed is unknown, defaulting to 1000 [ 510.052110][ T9153] netlink: 'syz.4.1449': attribute type 12 has an invalid length. [ 510.107751][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1451'. [ 510.179055][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 510.179070][ T27] audit: type=1326 audit(2000000093.170:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 510.298535][ T27] audit: type=1326 audit(2000000093.170:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 510.368421][ T27] audit: type=1326 audit(2000000093.200:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 510.436558][ T27] audit: type=1326 audit(2000000093.200:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 510.492475][ T27] audit: type=1326 audit(2000000093.200:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 511.683156][ T27] audit: type=1326 audit(2000000093.210:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 511.756586][ T27] audit: type=1326 audit(2000000093.220:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 511.812932][ T27] audit: type=1326 audit(2000000093.220:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 511.841431][ T27] audit: type=1326 audit(2000000093.220:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 511.868592][ T27] audit: type=1326 audit(2000000093.220:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.6.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 513.667575][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1462'. [ 515.869474][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1469'. [ 516.067848][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1469'. [ 516.206781][ T9206] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 516.431991][ T4267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 516.444162][ T4267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 516.453156][ T4267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 516.464139][ T4267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 516.497702][ T4267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 516.505172][ T4267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 516.624801][ T9211] bond0 speed is unknown, defaulting to 1000 [ 516.783553][ T9211] chnl_net:caif_netlink_parms(): no params data found [ 518.868020][ T4267] Bluetooth: hci5: command 0x0409 tx timeout [ 518.998093][ T5490] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.341867][ T5490] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.368625][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.427084][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.446234][ T9211] device bridge_slave_0 entered promiscuous mode [ 520.450382][ T5490] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.839344][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.950230][ T4267] Bluetooth: hci5: command 0x041b tx timeout [ 521.070999][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.551861][ T9211] device bridge_slave_1 entered promiscuous mode [ 521.565966][ T9252] batman_adv: batadv0: Adding interface: dummy0 [ 521.578408][ T9252] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.668402][ T9252] batman_adv: batadv0: Interface activated: dummy0 [ 521.696229][ T9256] batadv0: mtu less than device minimum [ 521.718040][ T9256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 521.731269][ T9256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 521.743640][ T9256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 521.756021][ T9256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 521.768463][ T9256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 521.780836][ T9256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 521.793315][ T9256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 521.805715][ T9256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 521.818429][ T9256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 523.018528][ T4267] Bluetooth: hci5: command 0x040f tx timeout [ 524.061777][ T5490] bond1: (slave vlan3): Releasing active interface [ 524.218516][ T5490] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.262299][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.336613][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.464040][ T5487] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 525.098531][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 525.112114][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 525.124086][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 525.133015][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.140751][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 525.488616][ T9211] team0: Port device team_slave_0 added [ 525.497883][ T9211] team0: Port device team_slave_1 added [ 525.614997][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.632480][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.877015][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.415453][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.561113][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.658604][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.791342][ T5490] tipc: Disabling bearer [ 526.826606][ T5490] tipc: Disabling bearer [ 527.033502][ T5490] tipc: Left network mode [ 527.825159][ T9211] device hsr_slave_0 entered promiscuous mode [ 528.056856][ T9211] device hsr_slave_1 entered promiscuous mode [ 528.074514][ T9211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.215247][ T9310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.311388][ T9211] Cannot create hsr debugfs directory [ 528.612773][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 528.665976][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 529.091332][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 532.925157][ T9356] loop7: detected capacity change from 0 to 8 [ 532.937339][ T9356] /dev/loop7: Can't open blockdev [ 533.817857][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1506'. [ 534.107040][ T9363] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 534.280175][ T9367] loop7: detected capacity change from 0 to 1024 [ 535.159389][ T9367] /dev/loop7: Can't open blockdev [ 535.435611][ T9367] loop7: detected capacity change from 0 to 512 [ 535.569688][ T9367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 535.744032][ T9367] /dev/loop7: Can't open blockdev [ 538.342247][ T9374] tipc: New replicast peer: 10.1.1.2 [ 538.348044][ T9374] tipc: Enabled bearer , priority 10 [ 538.515402][ T9211] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.679000][ T4256] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 539.695079][ T9211] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 539.784895][ T5490] device hsr_slave_0 left promiscuous mode [ 539.793903][ T5490] device hsr_slave_1 left promiscuous mode [ 539.806104][ T5490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.816017][ T5490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.834377][ T5490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.843068][ T5490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.856124][ T5490] batman_adv: batadv0: Interface deactivated: vlan0 [ 539.870555][ T4256] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.882098][ T5490] batman_adv: batadv0: Removing interface: vlan0 [ 539.897414][ T4256] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.908467][ T5490] device bridge_slave_1 left promiscuous mode [ 539.914773][ T5490] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.926511][ T4256] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.950921][ T5490] device bridge_slave_0 left promiscuous mode [ 539.969629][ T5490] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.971209][ T4256] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.054923][ T5490] device veth1_macvtap left promiscuous mode [ 540.064214][ T5490] device veth0_macvtap left promiscuous mode [ 540.078484][ T5490] device veth1_vlan left promiscuous mode [ 540.093683][ T5490] device veth0_vlan left promiscuous mode [ 540.178349][ T4256] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.208478][ T4256] usb 8-1: config 0 descriptor?? [ 541.031444][ T4256] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 541.049203][ T4256] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 541.069820][ T4256] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 542.923023][ T5490] bond1 (unregistering): Released all slaves [ 543.117659][ T4256] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 543.319588][ T9446] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1532'. [ 546.472132][ T8381] usb 8-1: USB disconnect, device number 6 [ 546.786515][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1542'. [ 546.821233][ T9476] overlayfs: failed to clone upperpath [ 546.825851][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1542'. [ 547.712728][ T5490] team0 (unregistering): Port device team_slave_1 removed [ 548.076875][ T5490] team0 (unregistering): Port device team_slave_0 removed [ 548.673080][ T5490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.319558][ T5490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.853897][ T9521] loop7: detected capacity change from 0 to 1024 [ 553.869044][ T9521] /dev/loop7: Can't open blockdev [ 555.203939][ T5490] bond0 (unregistering): Released all slaves [ 555.300387][ T9211] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.311369][ T9211] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 555.334371][ T9516] bond0 speed is unknown, defaulting to 1000 [ 555.780431][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.180581][ T5525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 556.254390][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 556.263353][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.283412][ T9211] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.301979][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 556.316357][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.331901][ T5518] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.339259][ T5518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.364320][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 556.400395][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 556.436551][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.446534][ T5518] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.453729][ T5518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.525122][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.567610][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 557.017765][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 557.340362][ T5525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 557.357098][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 557.492453][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 557.504840][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.516070][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.525497][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.534960][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.707633][ T9211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.731904][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 557.745473][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.767270][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 560.931171][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 560.950350][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 560.980317][ T9211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.276527][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 561.676923][ T9589] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 561.736497][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 561.810221][ T9211] device veth0_vlan entered promiscuous mode [ 561.948491][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 561.957102][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 561.969675][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 561.977756][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 562.011267][ T9211] device veth1_vlan entered promiscuous mode [ 562.033606][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1577'. [ 562.799572][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.813613][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.036297][ T9598] device hsr_slave_1 left promiscuous mode [ 563.135094][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 563.194754][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 563.225331][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 563.267576][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 563.290515][ T9211] device veth0_macvtap entered promiscuous mode [ 563.320920][ T9211] device veth1_macvtap entered promiscuous mode [ 563.361118][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.374336][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.385847][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.396566][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.413364][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.425781][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 563.436081][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 563.446170][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 563.455459][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 563.469024][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.485947][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.230995][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.241984][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.251906][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.262608][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.335086][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.363132][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 564.384588][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 564.433023][ T9211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.678693][ T9211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.687821][ T9211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.283357][ T9211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.596691][ T5487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.621733][ T5487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.658089][ T5518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.666662][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 565.711204][ T5518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.729735][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 565.749512][ T9644] loop7: detected capacity change from 0 to 2048 [ 565.919935][ T9644] loop7: p1 < > p3 [ 565.925143][ T9644] loop7: p3 size 134217728 extends beyond EOD, truncated [ 566.288324][ T4296] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 566.501482][ T9658] loop7: detected capacity change from 0 to 8 [ 566.532981][ T4296] usb 2-1: Using ep0 maxpacket: 16 [ 566.542450][ T4296] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 566.573608][ T4296] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.588229][ T9658] /dev/loop7: Can't open blockdev [ 566.602387][ T4296] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.972804][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.189522][ T4296] usb 2-1: Product: syz [ 567.214854][ T4296] usb 2-1: Manufacturer: syz [ 567.973593][ T4296] usb 2-1: SerialNumber: syz [ 568.252062][ T4296] usb 2-1: 0:2 : does not exist [ 568.262130][ T4296] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 568.279161][ T4296] usb 2-1: USB disconnect, device number 2 [ 571.290173][ T9691] loop1: detected capacity change from 0 to 128 [ 571.485830][ T9700] syz.1.1604: attempt to access beyond end of device [ 571.485830][ T9700] loop1: rw=2049, sector=145, nr_sectors = 360 limit=128 [ 571.541817][ T9691] 9pnet: Could not find request transport: f [ 571.806676][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1611'. [ 571.816092][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1611'. [ 571.851704][ T9710] device bond0 entered promiscuous mode [ 571.860154][ T9710] device bond_slave_0 entered promiscuous mode [ 571.869893][ T9710] device bond_slave_1 entered promiscuous mode [ 571.883070][ T9710] device bond0 left promiscuous mode [ 571.891427][ T9710] device bond_slave_0 left promiscuous mode [ 571.897706][ T9710] device bond_slave_1 left promiscuous mode [ 574.676312][ T9744] loop7: detected capacity change from 0 to 2048 [ 574.701627][ T9744] /dev/loop7: Can't open blockdev [ 575.605842][ T9758] loop1: detected capacity change from 0 to 2048 [ 575.628905][ T9758] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 575.636628][ T9758] UDF-fs: Scanning with blocksize 512 failed [ 575.652431][ T9758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 577.448687][ T4704] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 577.728489][ T4704] usb 2-1: Using ep0 maxpacket: 16 [ 577.964869][ T4704] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 578.082954][ T4704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.298317][ T4704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 578.306485][ T4704] usb 2-1: SerialNumber: syz [ 579.364937][ T9779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.378562][ T9779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.367225][ T4704] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 583.411855][ T4704] usb 2-1: USB disconnect, device number 3 [ 583.652376][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 584.384659][ T9833] 8021q: VLANs not supported on sit0 [ 586.650082][ T9856] netlink: 'syz.1.1650': attribute type 1 has an invalid length. [ 586.808840][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1650'. [ 587.694926][ T9863] bond0 speed is unknown, defaulting to 1000 [ 587.899016][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 587.899031][ T27] audit: type=1326 audit(2000000426.885:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 588.019634][ T27] audit: type=1326 audit(2000000426.895:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 588.107212][ T27] audit: type=1326 audit(2000000426.925:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 588.215748][ T27] audit: type=1326 audit(2000000426.925:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 588.301664][ T9889] netlink: 'syz.7.1659': attribute type 1 has an invalid length. [ 589.725632][ T27] audit: type=1326 audit(2000000426.925:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 589.748045][ T27] audit: type=1326 audit(2000000426.925:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 589.828419][ T27] audit: type=1326 audit(2000000426.925:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 589.880623][ T9889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.906803][ T9897] bond5: (slave geneve2): making interface the new active one [ 590.095769][ T27] audit: type=1326 audit(2000000426.925:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 590.231454][ T9897] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 590.336194][ T27] audit: type=1326 audit(2000000426.935:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 590.363374][ T27] audit: type=1326 audit(2000000426.935:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 590.507070][ T9903] device veth3 entered promiscuous mode [ 590.516199][ T9903] bond5: (slave veth3): Enslaving as an active interface with a down link [ 590.525037][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 592.340565][ T9889] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 592.436136][ T9924] bond0 speed is unknown, defaulting to 1000 [ 592.490735][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 592.514854][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 592.888812][ T4704] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 593.349064][ T4704] usb 8-1: Using ep0 maxpacket: 32 [ 593.382803][ T4704] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.575070][ T4704] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.627044][ T4704] usb 8-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 593.643012][ T4704] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.703608][ T4704] usb 8-1: config 0 descriptor?? [ 595.069833][ T5527] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 595.180080][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1682'. [ 595.201447][ T9969] netlink: 'syz.6.1679': attribute type 1 has an invalid length. [ 595.955763][ T9978] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 596.007439][ T9978] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 596.016796][ T9978] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 596.026166][ T9978] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 596.037309][ T9978] bond4: (slave geneve2): making interface the new active one [ 596.046780][ T9978] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 596.079882][ T9970] sch_tbf: burst 511 is lower than device veth7 mtu (1514) ! [ 596.106190][ T9969] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1679'. [ 596.150052][ T9969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.341194][ T4704] usbhid 8-1:0.0: can't add hid device: -71 [ 596.347259][ T4704] usbhid: probe of 8-1:0.0 failed with error -71 [ 596.362135][ T4704] usb 8-1: USB disconnect, device number 7 [ 597.226404][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 597.289452][ T9988] bond0 speed is unknown, defaulting to 1000 [ 603.616728][T10030] netlink: 'syz.8.1697': attribute type 1 has an invalid length. [ 604.309932][T10042] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1696'. [ 604.380379][T10034] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.389916][T10034] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.399501][T10034] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.409322][T10034] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.424584][T10034] bond6: (slave geneve2): making interface the new active one [ 604.435320][T10034] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 604.559120][T10030] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1697'. [ 604.926352][T10054] 8021q: VLANs not supported on bond0 [ 606.129299][T10065] loop1: detected capacity change from 0 to 1024 [ 606.190588][T10068] 8021q: VLANs not supported on sit0 [ 607.223307][T10075] bond0 speed is unknown, defaulting to 1000 [ 607.449084][T10082] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1714'. [ 607.551271][T10089] netlink: 'syz.8.1716': attribute type 1 has an invalid length. [ 607.553353][T10087] loop1: detected capacity change from 0 to 2048 [ 607.572114][T10087] UDF-fs: bad mount option "lastblock=0L000000000000000" or missing value [ 608.397877][T10089] 8021q: adding VLAN 0 to HW filter on device bond7 [ 609.129529][T10093] bond7: (slave geneve3): making interface the new active one [ 609.153015][T10093] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 609.202932][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 609.253493][T10094] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 610.675786][T10089] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 610.991688][T10107] 9pnet: Could not find request transport: f [ 611.494413][T10129] bond0 speed is unknown, defaulting to 1000 [ 611.503267][T10131] loop7: detected capacity change from 0 to 2048 [ 611.515860][T10131] /dev/loop7: Can't open blockdev [ 612.586457][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'. [ 612.812111][T10151] netlink: 'syz.1.1734': attribute type 1 has an invalid length. [ 612.945268][T10151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.985641][T10152] bond1: (slave geneve2): making interface the new active one [ 612.995997][T10152] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 613.083997][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1735'. [ 613.258985][T10154] device veth3 entered promiscuous mode [ 613.710009][T10154] bond1: (slave veth3): Enslaving as an active interface with a down link [ 613.744364][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 613.989247][T10151] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 614.516274][T10166] ip6t_srh: unknown srh invflags 7863 [ 615.242906][T10165] orangefs_mount: mount request failed with -4 [ 616.250299][T10180] loop7: detected capacity change from 0 to 2048 [ 617.382238][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1746'. [ 617.404011][T10193] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1746'. [ 619.212170][T10222] loop7: detected capacity change from 0 to 64 [ 619.320801][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 619.320817][ T27] audit: type=1326 audit(2000000458.280:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 619.382789][ T27] audit: type=1326 audit(2000000458.310:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 619.731919][ T27] audit: type=1326 audit(2000000458.310:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 620.455029][ T27] audit: type=1326 audit(2000000458.340:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 620.846292][ T27] audit: type=1326 audit(2000000458.340:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 620.873447][ T27] audit: type=1326 audit(2000000458.340:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 620.914591][ T27] audit: type=1326 audit(2000000458.340:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 622.047245][ T27] audit: type=1326 audit(2000000458.340:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 622.077139][ T27] audit: type=1326 audit(2000000458.340:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 622.111026][ T27] audit: type=1326 audit(2000000458.340:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7fc00000 [ 623.900155][ T8299] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 624.090119][ T8299] usb 8-1: Using ep0 maxpacket: 8 [ 624.099624][ T8299] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 624.118865][ T8299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.135674][ T8299] usb 8-1: config 0 descriptor?? [ 624.226812][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.233277][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.003981][T10261] loop7: detected capacity change from 0 to 512 [ 625.032306][T10261] EXT4-fs: Ignoring removed nobh option [ 625.058294][T10261] /dev/loop7: Can't open blockdev [ 625.158636][T10261] net_ratelimit: 10 callbacks suppressed [ 625.158657][T10261] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 625.217676][ T4704] usb 8-1: USB disconnect, device number 8 [ 625.226335][T10286] loop1: detected capacity change from 0 to 256 [ 625.258205][T10286] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 625.287502][T10286] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 625.320208][T10286] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 625.334602][T10286] UDF-fs: Scanning with blocksize 512 failed [ 625.356877][T10286] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 625.397742][T10286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 625.701334][T10294] fuse: Bad value for 'fd' [ 625.755785][T10294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.766170][T10286] loop1: detected capacity change from 0 to 2048 [ 625.790043][T10294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.829498][T10294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.082397][T10298] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1776'. [ 626.121125][T10294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.162613][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1776'. [ 626.203299][T10294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.238416][T10294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.257830][T10294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.277321][T10294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.291209][T10294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.790498][ T5501] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 627.584109][T10317] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 627.611641][T10317] 8021q: adding VLAN 0 to HW filter on device bond4 [ 628.328137][T10317] bond4: (slave geneve2): making interface the new active one [ 628.354740][T10317] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 628.368427][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 628.448703][T10324] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1784'. [ 628.542963][T10317] device veth3 entered promiscuous mode [ 628.677956][T10317] bond4: (slave veth3): Enslaving as an active interface with a down link [ 629.157875][T10325] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 632.451963][T10363] loop7: detected capacity change from 0 to 512 [ 632.459464][T10363] /dev/loop7: Can't open blockdev [ 635.261781][ T4296] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 635.508881][ T4296] usb 2-1: config 0 has no interfaces? [ 635.570825][ T4296] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 635.609112][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.659475][ T4296] usb 2-1: Product: syz [ 635.699735][ T4296] usb 2-1: Manufacturer: syz [ 635.721776][ T4296] usb 2-1: SerialNumber: syz [ 635.769571][ T4296] usb 2-1: config 0 descriptor?? [ 635.825022][T10395] team0: No ports can be present during mode change [ 635.874630][T10395] netlink: 'syz.7.1803': attribute type 10 has an invalid length. [ 636.028441][T10395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.068954][T10395] team0: Port device bond0 added [ 636.087064][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1803'. [ 636.121048][T10397] tipc: Resetting bearer [ 636.993571][T10397] tipc: Disabling bearer [ 637.038838][ T4296] usb 2-1: can't set config #0, error -71 [ 637.046767][ T4296] usb 2-1: USB disconnect, device number 4 [ 637.106313][T10397] team0 (unregistering): Port device team_slave_0 removed [ 637.372382][T10397] team0 (unregistering): Port device team_slave_1 removed [ 638.795141][T10397] team0 (unregistering): Port device bond0 removed [ 638.880746][T10403] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1804'. [ 639.060386][T10419] xt_hashlimit: invalid interval [ 639.137520][T10421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1810'. [ 643.742778][ T4267] Bluetooth: hci5: command 0x0406 tx timeout [ 644.076301][T10453] ip6t_srh: unknown srh invflags 7863 [ 645.950813][T10469] loop7: detected capacity change from 0 to 512 [ 645.971409][T10469] /dev/loop7: Can't open blockdev [ 648.845160][T10493] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 650.493538][ T4358] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 650.881935][ T4358] usb 2-1: Using ep0 maxpacket: 8 [ 650.904007][ T4358] usb 2-1: config 0 has no interfaces? [ 650.925763][ T4358] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 650.998220][ T4358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.010328][ T4358] usb 2-1: Product: syz [ 651.014897][ T4358] usb 2-1: Manufacturer: syz [ 651.019896][ T4358] usb 2-1: SerialNumber: syz [ 651.042332][ T4358] usb 2-1: config 0 descriptor?? [ 652.145521][ T4298] usb 2-1: USB disconnect, device number 5 [ 653.474253][T10542] loop1: detected capacity change from 0 to 1024 [ 653.951444][T10542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 658.838975][T10542] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.857784][ T5518] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 658.990101][ T9211] EXT4-fs (loop1): unmounting filesystem. [ 662.588632][T10602] xt_policy: too many policy elements [ 666.529490][T10615] hsr0 speed is unknown, defaulting to 1000 [ 666.561770][T10615] hsr0 speed is unknown, defaulting to 1000 [ 666.676760][T10615] hsr0 speed is unknown, defaulting to 1000 [ 666.744470][T10615] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 666.830770][T10615] hsr0 speed is unknown, defaulting to 1000 [ 666.865405][ T4297] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 667.115940][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 667.159445][ T4297] usb 2-1: config 0 has an invalid interface number: 198 but max is 0 [ 667.354119][ T4297] usb 2-1: config 0 has no interface number 0 [ 667.528830][ T4297] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 667.580045][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.618098][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1873'. [ 667.629736][T10615] hsr0 speed is unknown, defaulting to 1000 [ 667.649819][ T4297] usb 2-1: Product: syz [ 667.654589][ T4297] usb 2-1: Manufacturer: syz [ 667.660009][T10615] hsr0 speed is unknown, defaulting to 1000 [ 667.662855][ T4297] usb 2-1: SerialNumber: syz [ 667.677358][T10615] hsr0 speed is unknown, defaulting to 1000 [ 667.702881][ T4297] usb 2-1: config 0 descriptor?? [ 667.709461][T10615] hsr0 speed is unknown, defaulting to 1000 [ 667.784644][ T4297] usb_ehset_test: probe of 2-1:0.198 failed with error -32 [ 668.002509][ T4296] usb 2-1: USB disconnect, device number 6 [ 675.097059][T10690] No source specified [ 675.683350][T10692] bond5: (slave erspan0): Releasing active interface [ 675.865603][T10692] bond0: (slave bond_slave_0): Releasing backup interface [ 675.976931][T10692] bond0: (slave bond_slave_1): Releasing backup interface [ 676.201894][T10692] team0: Port device team_slave_0 removed [ 677.190560][T10692] team0: Port device team_slave_1 removed [ 677.213280][T10692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.323512][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.350836][T10692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.985195][T10692] bond1: (slave ip6gretap1): Releasing backup interface [ 678.698360][T10692] bond2: (slave bond3): Releasing backup interface [ 678.761310][T10692] bond4: (slave veth3): Releasing backup interface [ 678.803504][T10692] bond5: (slave veth5): Releasing active interface [ 679.009481][T10692] bond6: (slave geneve2): Releasing active interface [ 679.694865][T10692] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 679.816601][T10692] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 679.837355][T10692] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 679.856864][T10692] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 680.303893][T10692] bond7: (slave geneve3): Releasing active interface [ 682.065799][T10734] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.1899'. [ 682.139811][T10734] net_ratelimit: 998 callbacks suppressed [ 682.139829][T10734] openvswitch: netlink: Flow actions attr not present in new flow. [ 682.167357][T10736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 682.205603][T10736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.476403][T10748] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1905'. [ 683.540154][T10742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 683.551112][T10742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.683620][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.692516][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.995842][T10787] loop1: detected capacity change from 0 to 2048 [ 689.852744][T10787] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.986993][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1916'. [ 692.494288][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1919'. [ 693.326997][ T5242] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 693.383441][T10820] 9pnet_virtio: no channels available for device syz [ 698.074670][T10855] No source specified [ 699.195752][T10860] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 699.884049][T10862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1936'. [ 699.939236][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 700.037347][T10863] tipc: Enabling of bearer rejected, failed to enable media [ 700.096319][T10863] tipc: Enabled bearer , priority 0 [ 700.139426][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1938'. [ 703.948166][T10902] netlink: 180900 bytes leftover after parsing attributes in process `syz.8.1946'. [ 703.999878][T10902] openvswitch: netlink: Flow actions attr not present in new flow. [ 705.900636][ T4706] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 706.332566][ T4706] usb 2-1: Using ep0 maxpacket: 32 [ 707.430938][ T4706] usb 2-1: device descriptor read/all, error -71 [ 708.471275][T10935] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 708.836902][T10941] netlink: 'syz.7.1953': attribute type 3 has an invalid length. [ 709.568438][T10943] device veth5 entered promiscuous mode [ 709.583461][T10943] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 716.863089][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1973'. [ 717.036912][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1973'. [ 717.165499][T11001] bridge0: port 1(syz_tun) entered blocking state [ 717.173438][T11001] bridge0: port 1(syz_tun) entered disabled state [ 720.769476][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1981'. [ 720.791210][T11034] device vlan0 entered promiscuous mode [ 723.284530][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1987'. [ 723.468856][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 724.145153][T11066] device ipvlan2 entered promiscuous mode [ 724.183261][T11066] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 724.230365][T11066] team0: Device ipvlan2 is already an upper device of the team interface [ 728.217504][ T5527] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 733.199822][T11148] I/O error, dev loop12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 733.209223][T11148] F2FS-fs (loop12): Unable to read 1th superblock [ 733.215945][T11148] I/O error, dev loop12, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 733.225253][T11148] F2FS-fs (loop12): Unable to read 2th superblock [ 737.368952][T11175] netlink: 'syz.7.2021': attribute type 1 has an invalid length. [ 738.324430][T11175] 8021q: adding VLAN 0 to HW filter on device bond6 [ 738.390228][T11179] 8021q: adding VLAN 0 to HW filter on device bond6 [ 738.399223][T11179] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 738.498072][T11179] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 739.266867][T11177] netlink: 'syz.1.2022': attribute type 10 has an invalid length. [ 739.292519][T11177] device syz_tun entered promiscuous mode [ 739.319787][T11177] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 739.375034][T11175] device veth5 entered promiscuous mode [ 739.393623][T11175] bond6: (slave veth5): Enslaving as an active interface with a down link [ 739.461797][T11183] bond6: (slave erspan0): making interface the new active one [ 739.502720][T11183] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 740.856546][T11213] netlink: 'syz.7.2029': attribute type 4 has an invalid length. [ 742.558510][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'. [ 747.294732][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.301214][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.520761][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2046'. [ 747.585123][T11268] device bridge0 entered promiscuous mode [ 747.678992][T11270] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 747.703838][T11268] device macvtap1 entered promiscuous mode [ 748.407312][T11274] device bridge0 left promiscuous mode [ 748.519935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.212357][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 755.739407][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2066'. [ 762.772886][T11369] loop1: detected capacity change from 0 to 32768 [ 762.871877][ T5490] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 763.760703][T11375] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 763.771901][T11375] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 763.779750][T11375] tipc: Resetting bearer [ 763.785843][T11375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 763.793857][T11375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 763.811974][T11375] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 766.223716][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 766.223732][ T27] audit: type=1326 audit(2000000605.193:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 766.255326][T11399] __vm_enough_memory: pid: 11399, comm: syz.4.2086, no enough memory for the allocation [ 766.332232][T11409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.349807][ T27] audit: type=1326 audit(2000000605.193:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 767.351572][T11408] loop1: detected capacity change from 0 to 4096 [ 767.374011][ T27] audit: type=1326 audit(2000000605.193:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 767.937254][ T27] audit: type=1326 audit(2000000605.193:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 768.028044][T11408] NILFS (loop1): invalid segment: Checksum error in segment payload [ 768.088226][T11408] NILFS (loop1): trying rollback from an earlier position [ 768.102085][ T27] audit: type=1326 audit(2000000605.193:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 769.749319][T11408] NILFS (loop1): recovery complete [ 769.780722][T11408] NILFS (loop1): error -4 creating segctord thread [ 769.817667][ T27] audit: type=1326 audit(2000000605.243:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 769.866609][ T27] audit: type=1326 audit(2000000605.243:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 771.776272][T11460] device bond_slave_1 entered promiscuous mode [ 771.818839][T11460] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2100'. [ 772.872098][ T4296] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 773.337560][ T4296] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 773.375470][ T4296] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 773.410674][ T4296] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 773.429344][ T4296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.812353][T11467] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 775.425954][ T27] audit: type=1326 audit(2000000613.902:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.1.2107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x0 [ 775.714974][ T4298] usb 8-1: USB disconnect, device number 9 [ 778.180507][T11512] ip6gretap0 speed is unknown, defaulting to 1000 [ 778.187271][T11512] ip6gretap0 speed is unknown, defaulting to 1000 [ 778.207490][T11512] ip6gretap0 speed is unknown, defaulting to 1000 [ 778.225324][T11513] loop7: detected capacity change from 0 to 512 [ 778.234270][T11513] /dev/loop7: Can't open blockdev [ 778.255735][T11512] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 779.257583][T11512] ip6gretap0 speed is unknown, defaulting to 1000 [ 779.300192][T11512] ip6gretap0 speed is unknown, defaulting to 1000 [ 780.031229][T11512] ip6gretap0 speed is unknown, defaulting to 1000 [ 780.044347][T11512] ip6gretap0 speed is unknown, defaulting to 1000 [ 780.052640][T11512] ip6gretap0 speed is unknown, defaulting to 1000 [ 780.505659][T11529] tipc: Enabled bearer , priority 10 [ 782.895959][T11540] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 782.972983][T11545] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2125'. [ 782.992863][T11544] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2125'. [ 784.277924][ T27] audit: type=1326 audit(2000000623.241:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.8.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 784.311870][ T27] audit: type=1326 audit(2000000623.241:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.8.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 784.416304][T11561] IPv6: Can't replace route, no match found [ 784.574033][T11565] loop1: detected capacity change from 0 to 512 [ 784.589180][T11565] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 784.626206][T11565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 784.892957][T11565] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.2130: corrupted in-inode xattr [ 784.919335][T11565] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2130: couldn't read orphan inode 15 (err -117) [ 785.647926][T11565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 787.253038][ T9211] EXT4-fs (loop1): unmounting filesystem. [ 790.884089][T11621] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.892923][T11621] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.901746][T11621] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.910508][T11621] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.335713][T11612] loop7: detected capacity change from 0 to 512 [ 791.370253][T11612] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 791.389527][T11612] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 791.406051][T11612] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 791.427461][T11627] loop1: detected capacity change from 0 to 256 [ 791.443052][T11612] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 791.467769][T11612] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 791.480877][T11612] EXT4-fs (loop7): failed to initialize system zone (-117) [ 791.489095][T11612] EXT4-fs (loop7): mount failed [ 791.558345][T11632] device veth0_vlan left promiscuous mode [ 791.573733][T11632] device veth0_vlan entered promiscuous mode [ 791.869303][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 792.354365][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 792.364222][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 792.378782][ T27] audit: type=1326 audit(2000000631.340:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 792.421604][ T27] audit: type=1326 audit(2000000631.340:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 792.445442][ T27] audit: type=1326 audit(2000000631.340:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 792.525464][ T27] audit: type=1326 audit(2000000631.340:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 792.589172][ T27] audit: type=1326 audit(2000000631.340:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 792.667671][ T27] audit: type=1326 audit(2000000631.340:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 792.730353][ T27] audit: type=1326 audit(2000000631.340:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 792.937530][ T27] audit: type=1326 audit(2000000631.340:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 793.235426][ T27] audit: type=1326 audit(2000000631.340:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426678e969 code=0x7ffc0000 [ 794.061841][T11661] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.070705][T11661] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.079640][T11661] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.088443][T11661] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.948417][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2157'. [ 795.710246][T11669] ptrace attach of "./syz-executor exec"[4262] was attempted by ""[11669] [ 797.059122][T10181] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 797.169958][T11679] kernel profiling enabled (shift: 9) [ 805.063997][ T27] audit: type=1326 audit(2000000643.978:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11742 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 805.146129][ T27] audit: type=1326 audit(2000000643.978:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11742 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 805.185063][ T27] audit: type=1326 audit(2000000643.978:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11742 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 805.257854][ T27] audit: type=1326 audit(2000000643.978:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11742 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 805.376794][ T27] audit: type=1326 audit(2000000643.988:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11742 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 805.408442][ T27] audit: type=1326 audit(2000000644.058:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11742 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 805.470433][ T27] audit: type=1326 audit(2000000644.058:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11742 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 805.548212][ T27] audit: type=1326 audit(2000000644.058:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11742 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 805.809485][T11772] netlink: 'syz.8.2191': attribute type 1 has an invalid length. [ 806.975086][T11772] device bond8 entered promiscuous mode [ 806.980959][T11772] 8021q: adding VLAN 0 to HW filter on device bond8 [ 807.125230][T11781] device ip6gretap2 entered promiscuous mode [ 807.152575][T11781] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 807.230258][ T5500] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 807.242774][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 807.423537][ T5165] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 807.846045][T11789] loop7: detected capacity change from 0 to 2048 [ 808.000924][T11789] /dev/loop7: Can't open blockdev [ 808.861005][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.869944][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.149869][T11814] bond0 speed is unknown, defaulting to 1000 [ 810.156975][T11814] hsr0 speed is unknown, defaulting to 1000 [ 810.163693][T11814] ip6gretap0 speed is unknown, defaulting to 1000 [ 810.199983][ T27] audit: type=1326 audit(2000000649.158:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 810.228769][ T27] audit: type=1326 audit(2000000649.188:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 810.287260][ T27] audit: type=1326 audit(2000000649.208:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 810.487299][ T27] audit: type=1326 audit(2000000649.218:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 810.625196][ T27] audit: type=1326 audit(2000000649.218:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 810.652154][ T27] audit: type=1326 audit(2000000649.218:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 810.771097][ T27] audit: type=1326 audit(2000000649.218:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 810.850360][ T27] audit: type=1326 audit(2000000649.218:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 810.878009][ T27] audit: type=1326 audit(2000000649.218:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 810.921182][ T27] audit: type=1326 audit(2000000649.218:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfa38e969 code=0x7ffc0000 [ 811.140012][T11832] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2207'. [ 811.216067][T11833] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2204'. [ 812.489117][T11844] SET target dimension over the limit! [ 812.888238][T11846] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2210'. [ 821.847662][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 821.847679][ T27] audit: type=1326 audit(2000000660.806:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 821.938458][ T27] audit: type=1326 audit(2000000660.806:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 822.160112][ T27] audit: type=1326 audit(2000000660.806:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 822.370361][T11932] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2232'. [ 823.723744][ T27] audit: type=1326 audit(2000000660.806:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 823.766858][ T27] audit: type=1326 audit(2000000660.806:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 823.789817][ T27] audit: type=1326 audit(2000000660.806:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 826.665478][ T27] audit: type=1326 audit(2000000660.806:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 826.991778][ T27] audit: type=1326 audit(2000000660.806:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 827.056930][ T27] audit: type=1326 audit(2000000660.816:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 827.139474][ T27] audit: type=1326 audit(2000000660.816:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 828.610052][ T27] audit: type=1326 audit(2000000660.816:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.7.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d38e969 code=0x7ffc0000 [ 832.719476][T11723] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 839.999305][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2268'. [ 840.044231][T12053] loop7: detected capacity change from 0 to 512 [ 840.064192][T12053] EXT4-fs (loop7): inodes count not valid: 32769 vs 32 [ 845.703045][T12097] CIFS: Unable to determine destination address [ 846.540824][T12103] xt_connbytes: Forcing CT accounting to be enabled [ 846.561430][T12103] set match dimension is over the limit! [ 847.523613][T12122] virtio-fs: tag not found [ 852.533917][T12162] trusted_key: encrypted_key: insufficient parameters specified [ 852.559400][T12164] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 860.328270][ T8299] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 860.608023][ T8299] usb 2-1: Using ep0 maxpacket: 16 [ 860.709173][ T8299] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.909648][ T8299] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 860.921912][ T8299] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 860.931099][ T8299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.939810][ T8299] usb 2-1: Product: syz [ 860.944110][ T8299] usb 2-1: Manufacturer: syz [ 860.949136][ T8299] usb 2-1: SerialNumber: syz [ 861.838152][ T8299] usb 2-1: 0:2 : does not exist [ 862.087739][ T8299] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 862.222640][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2320'. [ 862.432596][ T8299] usb 2-1: USB disconnect, device number 9 [ 864.118745][T12255] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2323'. [ 864.795159][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2320'. [ 865.059487][ T52] block nbd1: Attempted send on invalid socket [ 865.080161][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 866.316217][ T5490] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 870.011614][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.025003][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.634989][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2343'. [ 872.654444][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.674608][T12320] batadv0: mtu less than device minimum [ 873.161650][T12320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 873.174116][T12320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 873.186523][T12320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 873.198923][T12320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 873.211309][T12320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 873.223684][T12320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 873.236105][T12320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 873.248491][T12320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 873.260921][T12320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 873.776695][T12320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.286689][T12339] loop1: detected capacity change from 0 to 8 [ 874.294799][T12339] squashfs: Unknown parameter 'net/arp' [ 875.730518][ T27] audit: type=1326 audit(2000000714.690:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12344 comm="syz.8.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 875.797494][ T27] audit: type=1326 audit(2000000714.710:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12344 comm="syz.8.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 876.114351][T12366] bad cache= option: no%e+m [ 876.114351][T12366] [ 876.123235][T12366] CIFS: VFS: bad cache= option: no%e+m [ 877.111650][T12383] netlink: 'syz.8.2360': attribute type 10 has an invalid length. [ 878.236023][T12391] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 884.457152][T12451] netlink: 'syz.8.2377': attribute type 10 has an invalid length. [ 885.111983][T12451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.122429][T12451] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 897.155623][T12566] loop1: detected capacity change from 0 to 8 [ 899.757345][T12601] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 903.014243][T12622] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2419'. [ 903.310170][ T5536] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 904.325778][T12614] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 904.361365][T12636] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2422'. [ 904.442488][T12636] bridge0: port 1(syz_tun) entered disabled state [ 908.302781][T12679] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.162123][T12691] loop1: detected capacity change from 0 to 40427 [ 910.257474][T12691] F2FS-fs (loop1): invalid crc value [ 910.415899][T12691] F2FS-fs (loop1): Found nat_bits in checkpoint [ 910.501441][T12691] F2FS-fs (loop1): Start checkpoint disabled! [ 910.571576][T12691] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 912.054241][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2439'. [ 913.713897][ T5487] kworker/u4:28: attempt to access beyond end of device [ 913.713897][ T5487] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 913.771568][ T5487] kworker/u4:28: attempt to access beyond end of device [ 913.771568][ T5487] loop1: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 921.969578][T12771] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 928.075051][ T4298] libceph: connect (1)[c::]:6789 error -22 [ 928.082077][ T4298] libceph: mon0 (1)[c::]:6789 connect error [ 928.325272][T12823] ceph: No mds server is up or the cluster is laggy [ 928.997388][ T4298] libceph: connect (1)[c::]:6789 error -22 [ 929.003412][ T4298] libceph: mon0 (1)[c::]:6789 connect error [ 931.547988][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.554384][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.109264][T12858] bridge0: port 1(netdevsim0) entered blocking state [ 932.116268][T12858] bridge0: port 1(netdevsim0) entered disabled state [ 932.123885][T12858] device netdevsim0 entered promiscuous mode [ 936.683842][ T8299] libceph: connect (1)[c::]:6789 error -101 [ 936.704532][ T8299] libceph: mon0 (1)[c::]:6789 connect error [ 937.327642][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 937.473564][T12895] ceph: No mds server is up or the cluster is laggy [ 937.539075][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 938.716266][T12912] overlayfs: failed to clone upperpath [ 939.134603][ T5525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 939.239256][T12918] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 943.003172][T12955] loop7: detected capacity change from 0 to 1024 [ 943.845742][T12959] loop1: detected capacity change from 0 to 2048 [ 944.159527][T12962] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 944.338663][T12959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 945.370770][ T9211] EXT4-fs (loop1): unmounting filesystem. [ 945.490541][T12988] overlayfs: failed to clone upperpath [ 947.693828][T12994] usb usb1: usbfs: process 12994 (syz.1.2508) did not claim interface 0 before use [ 951.715789][T13031] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2522'. [ 956.115965][T13062] loop1: detected capacity change from 0 to 8 [ 958.108171][T13080] capability: warning: `syz.6.2536' uses 32-bit capabilities (legacy support in use) [ 958.163162][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2534'. [ 958.974822][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2534'. [ 959.061457][T13091] loop1: detected capacity change from 0 to 64 [ 961.850901][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2545'. [ 962.802371][T13117] __vm_enough_memory: pid: 13117, comm: syz.4.2546, no enough memory for the allocation [ 966.115592][ T27] audit: type=1326 audit(2000000805.069:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.4.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 967.135108][ T27] audit: type=1326 audit(2000000805.069:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.4.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 967.215912][ T27] audit: type=1326 audit(2000000805.069:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.4.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 967.449716][ T27] audit: type=1326 audit(2000000805.069:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.4.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 967.481413][ T27] audit: type=1326 audit(2000000805.069:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.4.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 967.524901][ T27] audit: type=1326 audit(2000000805.069:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.4.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 968.515609][ T27] audit: type=1326 audit(2000000805.069:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.4.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 968.971000][ T27] audit: type=1326 audit(2000000805.069:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.4.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcea18e969 code=0x7ffc0000 [ 969.892959][T13183] loop7: detected capacity change from 0 to 4096 [ 973.815420][T13214] printk: syz.8.2572 (13214): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 978.727257][T13253] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.2583'. [ 978.758810][ T4298] libceph: connect (1)[c::]:6789 error -101 [ 978.768386][T13250] ceph: No mds server is up or the cluster is laggy [ 978.777127][T13248] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2593'. [ 978.786539][ T4298] libceph: mon0 (1)[c::]:6789 connect error [ 983.563144][T13287] syz.7.2589 (13287): drop_caches: 2 [ 983.640702][T13288] netlink: 'syz.6.2590': attribute type 29 has an invalid length. [ 983.734443][T13288] netlink: 'syz.6.2590': attribute type 29 has an invalid length. [ 983.742883][T13291] netlink: 'syz.6.2590': attribute type 29 has an invalid length. [ 990.728818][T13354] loop7: detected capacity change from 0 to 1024 [ 992.822210][T13367] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2610'. [ 993.326947][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.333339][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.393756][T13387] xt_NFQUEUE: number of total queues is 0 [ 1003.217508][T13427] kvm [13413]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x200007ca0 [ 1003.287914][ T4264] Bluetooth: Frame is too long (len 24, expected len 4) [ 1003.967840][T13427] kvm [13413]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x20000fa70 [ 1004.499674][T13452] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1012.518798][ T27] audit: type=1800 audit(2000000006.259:446): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2645" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1013.542222][ T27] audit: type=1326 audit(2000000007.119:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.8.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 1013.574880][ T27] audit: type=1326 audit(2000000007.119:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.8.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 1015.414684][ T27] audit: type=1326 audit(2000000009.109:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.8.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f57ae78e969 code=0x7ffc0000 [ 1017.167853][T13549] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1017.167853][T13549] The task syz.6.2651 (13549) triggered the difference, watch for misbehavior. [ 1017.804123][ T4296] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1022.585498][ T4296] usb 2-1: Using ep0 maxpacket: 16 [ 1028.122092][ T4296] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1028.170914][ T4296] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 1028.194567][ T4296] usb 2-1: chopping to 0 config(s) [ 1028.199776][ T4296] usb 2-1: can't read configurations, error -32 [ 1030.124139][ T4296] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1030.377095][ T4296] usb 2-1: device descriptor read/64, error -32 [ 1030.653734][ T4296] usb usb2-port1: attempt power cycle [ 1032.056987][ T4296] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1032.097019][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2677'. [ 1032.217103][ T4296] usb 2-1: device descriptor read/8, error -32 [ 1032.554199][ T4296] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1033.154341][ T4296] usb 2-1: device descriptor read/8, error -32 [ 1033.274209][ T4296] usb usb2-port1: unable to enumerate USB device [ 1035.374758][T13659] loop7: detected capacity change from 0 to 16 [ 1035.385774][T13659] /dev/loop7: Can't open blockdev [ 1036.545368][T13665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1036.576236][T13665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1036.585888][ T4267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1036.594013][T13665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1036.601936][T13665] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1036.611623][T13665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1036.758637][T12942] bond0: (slave syz_tun): Releasing backup interface [ 1037.230040][ T5487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.292018][ T5487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.337628][T13662] bond0 speed is unknown, defaulting to 1000 [ 1037.401993][T13678] fuse: Bad value for 'fd' [ 1037.422332][T13667] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.433803][T13667] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.460526][T13662] hsr0 speed is unknown, defaulting to 1000 [ 1037.528796][ T5487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.553148][ T5487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.736087][T13662] ip6gretap0 speed is unknown, defaulting to 1000 [ 1037.782146][T13667] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.793059][T13667] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.635614][ T5487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.656366][ T5487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.747764][T13665] Bluetooth: hci1: command 0x0409 tx timeout [ 1038.924810][T13667] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.935578][T13667] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.286375][ T5487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.348992][ T5487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.688244][T13667] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.698701][T13667] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.808850][T13667] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.817871][T13667] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.836755][T13667] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.845152][T13667] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.859862][T13667] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.868167][T13667] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.883157][T13667] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.891459][T13667] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.884375][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 1040.950366][T13705] loop7: detected capacity change from 0 to 2048 [ 1041.853523][T13709] 8021q: VLANs not supported on bond0 [ 1041.904638][T13662] chnl_net:caif_netlink_parms(): no params data found [ 1042.914936][T13665] Bluetooth: hci1: command 0x040f tx timeout [ 1044.019182][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.028452][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.037838][T13662] device bridge_slave_0 entered promiscuous mode [ 1044.047289][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.119348][ T4297] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1044.128816][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.137814][T13662] device bridge_slave_1 entered promiscuous mode [ 1044.992607][ T4297] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1045.028698][ T4297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.052120][ T4297] usb 8-1: Product: syz [ 1045.054300][T13665] Bluetooth: hci1: command 0x0419 tx timeout [ 1045.067072][ T4297] usb 8-1: Manufacturer: syz [ 1045.071714][ T4297] usb 8-1: SerialNumber: syz [ 1045.101048][ T4297] usb 8-1: config 0 descriptor?? [ 1045.327677][ T4297] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1045.484765][T13662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.507724][T13662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.358068][T13662] team0: Port device team_slave_0 added [ 1046.435576][T13662] team0: Port device team_slave_1 added [ 1046.769679][T13662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.780883][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.564313][T13662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.630672][T13662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.853577][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.233463][ T4297] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -110 [ 1049.416352][ T4297] usb 8-1: USB disconnect, device number 10 [ 1049.516473][T13662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.090550][T13662] device hsr_slave_0 entered promiscuous mode [ 1051.304849][T13662] device hsr_slave_1 entered promiscuous mode [ 1051.313654][T13662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.450564][T13662] Cannot create hsr debugfs directory [ 1054.655470][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.661913][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.367203][T13847] Invalid ELF header magic: != ELF [ 1055.791700][ T5487] device hsr_slave_0 left promiscuous mode [ 1055.817025][ T5487] device hsr_slave_1 left promiscuous mode [ 1055.947527][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.082482][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.449580][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.467538][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.501744][ T5487] device bridge_slave_1 left promiscuous mode [ 1056.536932][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.565497][ T5487] device bridge_slave_0 left promiscuous mode [ 1056.571899][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.044262][ T5487] device veth1_macvtap left promiscuous mode [ 1061.050394][ T5487] device veth0_macvtap left promiscuous mode [ 1061.073180][ T5487] device veth1_vlan left promiscuous mode [ 1061.079398][ T5487] device veth0_vlan left promiscuous mode [ 1062.909281][ T5487] bond1 (unregistering): (slave veth3): Releasing active interface [ 1062.917439][ T5487] device geneve2 entered promiscuous mode [ 1062.947106][ T5487] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1062.955390][ T5487] device geneve2 left promiscuous mode [ 1063.199176][ T5487] bond1 (unregistering): Released all slaves [ 1063.843740][ T5487] team0 (unregistering): Port device team_slave_1 removed [ 1063.906284][ T5487] team0 (unregistering): Port device team_slave_0 removed [ 1063.969437][ T5487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.037224][ T5487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.886747][ T5487] bond0 (unregistering): Released all slaves [ 1065.125545][T13849] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2735'. [ 1065.166555][T13904] device veth1_to_hsr entered promiscuous mode [ 1065.173023][T13904] device veth1_to_hsr left promiscuous mode [ 1065.180232][T13728] hsr0 speed is unknown, defaulting to 1000 [ 1065.201152][T13728] ================================================================== [ 1065.209390][T13728] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 1065.216661][T13728] Read of size 4 at addr ffff888079b9e0e0 by task kworker/1:3/13728 [ 1065.224669][T13728] [ 1065.227025][T13728] CPU: 1 PID: 13728 Comm: kworker/1:3 Not tainted 6.1.138-syzkaller #0 [ 1065.235271][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1065.245766][T13728] Workqueue: infiniband ib_cache_event_task [ 1065.251686][T13728] Call Trace: [ 1065.254975][T13728] [ 1065.257920][T13728] dump_stack_lvl+0x168/0x22e [ 1065.262626][T13728] ? __lock_acquire+0x7c50/0x7c50 [ 1065.267715][T13728] ? show_regs_print_info+0x12/0x12 [ 1065.272956][T13728] ? load_image+0x3b0/0x3b0 [ 1065.277469][T13728] ? __virt_addr_valid+0x465/0x540 [ 1065.282596][T13728] ? siw_query_port+0x358/0x450 [ 1065.287473][T13728] print_report+0xa8/0x220 [ 1065.291895][T13728] kasan_report+0x10b/0x140 [ 1065.296415][T13728] ? siw_query_port+0x358/0x450 [ 1065.301274][T13728] siw_query_port+0x358/0x450 [ 1065.305952][T13728] ? ib_query_port+0x372/0x820 [ 1065.310744][T13728] ib_cache_update+0x1bb/0x980 [ 1065.315517][T13728] ? ib_cache_setup_one+0x5d0/0x5d0 [ 1065.320740][T13728] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1065.326740][T13728] ? read_lock_is_recursive+0x10/0x10 [ 1065.332119][T13728] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1065.338024][T13728] ? _raw_spin_unlock+0x40/0x40 [ 1065.342882][T13728] ib_cache_event_task+0xd4/0x1c0 [ 1065.347917][T13728] ? process_one_work+0x7a1/0x1160 [ 1065.353031][T13728] process_one_work+0x898/0x1160 [ 1065.357983][T13728] ? worker_detach_from_pool+0x240/0x240 [ 1065.363618][T13728] ? _raw_spin_lock_irq+0xab/0xe0 [ 1065.368649][T13728] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1065.374034][T13728] ? kthread_data+0x4b/0xc0 [ 1065.378563][T13728] worker_thread+0xaa2/0x1250 [ 1065.383250][T13728] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 1065.389159][T13728] ? __kthread_parkme+0x162/0x1c0 [ 1065.394205][T13728] kthread+0x29d/0x330 [ 1065.398281][T13728] ? worker_clr_flags+0x1a0/0x1a0 [ 1065.403317][T13728] ? kthread_blkcg+0xd0/0xd0 [ 1065.407941][T13728] ret_from_fork+0x1f/0x30 [ 1065.412374][T13728] [ 1065.415392][T13728] [ 1065.417716][T13728] Allocated by task 9211: [ 1065.422130][T13728] kasan_set_track+0x4b/0x70 [ 1065.426762][T13728] __kasan_kmalloc+0x8e/0xa0 [ 1065.431381][T13728] __kmalloc_node+0xb0/0x240 [ 1065.436155][T13728] kvmalloc_node+0x6c/0x180 [ 1065.440841][T13728] alloc_netdev_mqs+0x84/0xf00 [ 1065.445616][T13728] rtnl_create_link+0x2fb/0xb80 [ 1065.450475][T13728] rtnl_newlink+0x13ca/0x1ff0 [ 1065.455213][T13728] rtnetlink_rcv_msg+0x79b/0xed0 [ 1065.460192][T13728] netlink_rcv_skb+0x1de/0x420 [ 1065.464964][T13728] netlink_unicast+0x74c/0x8c0 [ 1065.469840][T13728] netlink_sendmsg+0x89e/0xbc0 [ 1065.474639][T13728] __sys_sendto+0x44f/0x5c0 [ 1065.479160][T13728] __x64_sys_sendto+0xda/0xf0 [ 1065.483851][T13728] do_syscall_64+0x4c/0xa0 [ 1065.488281][T13728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1065.494191][T13728] [ 1065.496510][T13728] Freed by task 5487: [ 1065.503712][T13728] kasan_set_track+0x4b/0x70 [ 1065.508323][T13728] kasan_save_free_info+0x2d/0x50 [ 1065.513370][T13728] ____kasan_slab_free+0x126/0x1e0 [ 1065.518513][T13728] slab_free_freelist_hook+0x131/0x1a0 [ 1065.523996][T13728] __kmem_cache_free+0xb6/0x1f0 [ 1065.528854][T13728] device_release+0x92/0x1c0 [ 1065.533453][T13728] kobject_put+0x21d/0x460 [ 1065.537881][T13728] netdev_run_todo+0xc8f/0xd80 [ 1065.542653][T13728] default_device_exit_batch+0x9c8/0xa50 [ 1065.548310][T13728] cleanup_net+0x77b/0xb80 [ 1065.552754][T13728] process_one_work+0x898/0x1160 [ 1065.557708][T13728] worker_thread+0xaa2/0x1250 [ 1065.562593][T13728] kthread+0x29d/0x330 [ 1065.566778][T13728] ret_from_fork+0x1f/0x30 [ 1065.571215][T13728] [ 1065.573538][T13728] The buggy address belongs to the object at ffff888079b9e000 [ 1065.573538][T13728] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1065.587854][T13728] The buggy address is located 224 bytes inside of [ 1065.587854][T13728] 4096-byte region [ffff888079b9e000, ffff888079b9f000) [ 1065.601220][T13728] [ 1065.603543][T13728] The buggy address belongs to the physical page: [ 1065.609946][T13728] page:ffffea0001e6e600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79b98 [ 1065.620128][T13728] head:ffffea0001e6e600 order:3 compound_mapcount:0 compound_pincount:0 [ 1065.628456][T13728] memcg:ffff888073e5fc41 [ 1065.632774][T13728] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1065.640784][T13728] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801744c280 [ 1065.649403][T13728] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff888073e5fc41 [ 1065.658175][T13728] page dumped because: kasan: bad access detected [ 1065.664632][T13728] page_owner tracks the page as allocated [ 1065.670346][T13728] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9211, tgid 9211 (syz-executor), ts 527017887510, free_ts 526951339229 [ 1065.693287][T13728] post_alloc_hook+0x173/0x1a0 [ 1065.698078][T13728] get_page_from_freelist+0x1a26/0x1ac0 [ 1065.703638][T13728] __alloc_pages+0x1df/0x4e0 [ 1065.708236][T13728] alloc_slab_page+0x5d/0x160 [ 1065.712914][T13728] new_slab+0x87/0x2c0 [ 1065.716989][T13728] ___slab_alloc+0xbc6/0x1220 [ 1065.721681][T13728] __kmem_cache_alloc_node+0x1a0/0x260 [ 1065.727175][T13728] __kmalloc_node_track_caller+0x9e/0x230 [ 1065.732918][T13728] kmemdup+0x27/0x60 [ 1065.736860][T13728] __devinet_sysctl_register+0x99/0x320 [ 1065.742442][T13728] devinet_sysctl_register+0x17c/0x1f0 [ 1065.748020][T13728] inetdev_init+0x2b4/0x4f0 [ 1065.752531][T13728] inetdev_event+0x270/0x1410 [ 1065.757220][T13728] raw_notifier_call_chain+0xcb/0x160 [ 1065.762598][T13728] register_netdevice+0x1600/0x1aa0 [ 1065.767893][T13728] veth_newlink+0x7a0/0xbe0 [ 1065.772401][T13728] page last free stack trace: [ 1065.777423][T13728] free_unref_page_prepare+0x8b4/0x9a0 [ 1065.782895][T13728] free_unref_page+0x2e/0x3f0 [ 1065.787582][T13728] __unfreeze_partials+0x1a5/0x200 [ 1065.792707][T13728] put_cpu_partial+0x17c/0x250 [ 1065.797579][T13728] qlist_free_all+0x76/0xe0 [ 1065.802091][T13728] kasan_quarantine_reduce+0x144/0x160 [ 1065.807550][T13728] __kasan_slab_alloc+0x1e/0x80 [ 1065.812409][T13728] slab_post_alloc_hook+0x4b/0x480 [ 1065.817523][T13728] kmem_cache_alloc+0x123/0x2f0 [ 1065.822377][T13728] alloc_buffer_head+0x21/0x100 [ 1065.827240][T13728] alloc_page_buffers+0x309/0x940 [ 1065.832272][T13728] __getblk_gfp+0x460/0xb20 [ 1065.836782][T13728] jbd2_journal_get_descriptor_buffer+0xcd/0x360 [ 1065.843117][T13728] journal_submit_commit_record+0xf4/0x9f0 [ 1065.848924][T13728] jbd2_journal_commit_transaction+0x369c/0x60e0 [ 1065.855255][T13728] kjournald2+0x412/0x810 [ 1065.859585][T13728] [ 1065.861904][T13728] Memory state around the buggy address: [ 1065.867531][T13728] ffff888079b9df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1065.875591][T13728] ffff888079b9e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1065.883665][T13728] >ffff888079b9e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1065.891744][T13728] ^ [ 1065.898941][T13728] ffff888079b9e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1065.907092][T13728] ffff888079b9e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1065.915151][T13728] ================================================================== [ 1065.980595][T13728] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1065.987855][T13728] CPU: 1 PID: 13728 Comm: kworker/1:3 Not tainted 6.1.138-syzkaller #0 [ 1065.996120][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1066.006205][T13728] Workqueue: infiniband ib_cache_event_task [ 1066.012150][T13728] Call Trace: [ 1066.015451][T13728] [ 1066.018403][T13728] dump_stack_lvl+0x168/0x22e [ 1066.023111][T13728] ? memcpy+0x3c/0x60 [ 1066.027121][T13728] ? show_regs_print_info+0x12/0x12 [ 1066.032359][T13728] ? load_image+0x3b0/0x3b0 [ 1066.036897][T13728] panic+0x2c9/0x710 [ 1066.040829][T13728] ? bpf_jit_dump+0xd0/0xd0 [ 1066.045379][T13728] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 1066.051304][T13728] ? _raw_spin_unlock+0x40/0x40 [ 1066.056196][T13728] ? print_memory_metadata+0x314/0x400 [ 1066.061688][T13728] check_panic_on_warn+0x80/0xa0 [ 1066.066657][T13728] ? siw_query_port+0x358/0x450 [ 1066.071533][T13728] end_report+0x66/0x110 [ 1066.075902][T13728] kasan_report+0x118/0x140 [ 1066.080451][T13728] ? siw_query_port+0x358/0x450 [ 1066.085343][T13728] siw_query_port+0x358/0x450 [ 1066.090057][T13728] ? ib_query_port+0x372/0x820 [ 1066.094853][T13728] ib_cache_update+0x1bb/0x980 [ 1066.099655][T13728] ? ib_cache_setup_one+0x5d0/0x5d0 [ 1066.104887][T13728] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1066.110905][T13728] ? read_lock_is_recursive+0x10/0x10 [ 1066.116319][T13728] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1066.122252][T13728] ? _raw_spin_unlock+0x40/0x40 [ 1066.127146][T13728] ib_cache_event_task+0xd4/0x1c0 [ 1066.132186][T13728] ? process_one_work+0x7a1/0x1160 [ 1066.137311][T13728] process_one_work+0x898/0x1160 [ 1066.142260][T13728] ? worker_detach_from_pool+0x240/0x240 [ 1066.147908][T13728] ? _raw_spin_lock_irq+0xab/0xe0 [ 1066.152941][T13728] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1066.158322][T13728] ? kthread_data+0x4b/0xc0 [ 1066.162833][T13728] worker_thread+0xaa2/0x1250 [ 1066.167517][T13728] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 1066.173418][T13728] ? __kthread_parkme+0x162/0x1c0 [ 1066.178454][T13728] kthread+0x29d/0x330 [ 1066.182530][T13728] ? worker_clr_flags+0x1a0/0x1a0 [ 1066.187558][T13728] ? kthread_blkcg+0xd0/0xd0 [ 1066.192155][T13728] ret_from_fork+0x1f/0x30 [ 1066.196601][T13728] [ 1066.199901][T13728] Kernel Offset: disabled [ 1066.204222][T13728] Rebooting in 86400 seconds..