last executing test programs: 11m18.432852312s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xf, 0x1, 0x8}}) 11m18.139880369s ago: executing program 2 (id=9): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) listen(r0, 0x6) shutdown(r0, 0x1) 11m17.447592723s ago: executing program 2 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7f) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x71, 0x100005, 0xe8e8, 0xf}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000005c0)=0x9) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m16.982194564s ago: executing program 3 (id=14): mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0xc2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x1, 0x35, 0xfffff034}, {0x20, 0x0, 0x0, 0x9ea}, {0x6}]}, 0x10) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m16.550396453s ago: executing program 3 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 11m16.015164445s ago: executing program 2 (id=16): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400008000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x16, 0xc49, &(0x7f0000001cc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x18b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 11m15.550447955s ago: executing program 2 (id=17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='htcp', 0xfffe) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r0, 0x1) 11m15.119143454s ago: executing program 3 (id=20): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) listen(r0, 0x6) shutdown(r0, 0x1) 11m14.823685041s ago: executing program 2 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 11m14.303252602s ago: executing program 32 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 11m14.286468072s ago: executing program 3 (id=26): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2000003, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6465636f6d706f7365008000000000000042000fc32c6e6f636172726965722c6e6f6465636e6d706f736500a580263e005a80c976898113cb9f4680642ce86dd3b5d3ba4a739e6654e4a1277ef2dd52ea98c5ea630da0c29cd73f8b9f4fd077e97f3ec1acc1ac9132611fb53a41b8fdb6b9"], 0x1, 0x62c, &(0x7f0000000680)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x18b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 11m13.487936739s ago: executing program 3 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x2, {0x1, 0xff}, {0x2, 0x0, 0x2}, 0x1, 0xff}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xa, 0xffff}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4016}, 0x20000050) 11m12.131646919s ago: executing program 3 (id=33): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 11m11.673377949s ago: executing program 33 (id=33): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 10m36.022846394s ago: executing program 4 (id=151): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 10m34.916535398s ago: executing program 4 (id=154): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="f24b", 0x2}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 10m34.599730855s ago: executing program 4 (id=156): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") syz_open_procfs(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) epoll_create1(0x0) syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x24806, 0x0, 0xfd, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000480)='./file0/file0\x00') 10m33.89867401s ago: executing program 4 (id=159): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) chdir(0x0) gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec772000) r1 = open(&(0x7f00000000c0)='.\x00', 0x12800, 0x120) getdents(r1, &(0x7f0000000440)=""/4090, 0xffa) 10m33.018279819s ago: executing program 4 (id=163): chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x34, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m32.600375628s ago: executing program 4 (id=164): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file0\x00', 0x1010000, &(0x7f0000000340)=ANY=[], 0x88, 0x2bb, &(0x7f00000007c0)="$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") statfs(&(0x7f0000000000)='./file1\x00', 0x0) 10m32.05384069s ago: executing program 34 (id=164): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file0\x00', 0x1010000, &(0x7f0000000340)=ANY=[], 0x88, 0x2bb, &(0x7f00000007c0)="$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") statfs(&(0x7f0000000000)='./file1\x00', 0x0) 10m30.532497463s ago: executing program 5 (id=173): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r3, 0xa64c000) 10m30.201983491s ago: executing program 5 (id=175): syz_open_procfs$namespace(0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x1100, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1040}], 0x0, 0x0, 0x0}) 10m29.947673946s ago: executing program 5 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) r1 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0x63a7, 0x20c, 0xfffffffd, 0xa0}, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 10m29.75736102s ago: executing program 5 (id=177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@usrjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@orlov}]}, 0x2, 0x45c, &(0x7f0000000b40)="$eJzs28tvG8UfAPDvrpu++0t+pTz6AAIFEfFImrRAD3AAgcQBJCQu5WiStCp1G9QEiVYRBITKEVXijjhW4i/gBBcEnJC4wh1VqlAuFE5Ga+86tmOnSfNwwJ+PtMnM7mxmvp4de3YnDqBvDWc/koj9EfFrRAzWs60Fhuu/bi/OT/61OD+ZRLX61h9Jrdyfi/OTRdHivH15ZiSNSD9N4miHemevXL1QrlSmL+f5sbmL743NXrn6zPmL5XPT56YvTZw+ferk+PPPTTybHa6uN87/Z2098uHMscOvvX39jckz19/58eukiL8tjg0yvNLBx6vrDmlbOdCUTnb0sCGsSSkisu4aqI3/wSjFUucNxqufdD0x3aIGApummutyeKEK/HftHoxeNwHojeKDPrv/rW83tm7ysQ3ceql+A5TFfjvfYiFqO4tbnIG2+9uNNBwRZxb+/jLbYnOeQwAAtPg2m/883Tz/K+YfadzXVO5/+drQUL6WcjAi7qnuikMRcW9Erez9EfHAGutvXyRZPv9Jb95VYKuUzf9eyNe2GvO/er1FkaFSnjtQi38gOXu+Mn0if01GYmBXlh9foY7vXvnl827Hmud/2ZbVX8wF83bc3LGr9Zyp8lx5PTE3u/VxxJEdneJPGisBSUQcjogjd1nH+SdvHOt27M7xN+xctmcD1pmqX0U8Ue//hWiLv5CsvD45tjsq0yfGiqtiuZ9+vvZmt/rXEP+myPp/b8frvxH/UNKyXruw5pXLa7991vWeZnR11/+LzeNrqrw0IIqL4oPy3Nzl8Yidyev1Rjfvn1g6t8gX5bP4R453Hv8HY+mVOBoR2UX8YEQ8FBEP5333SEQ8GhHHV4j/h5cfe7fbse3Q/1Nt/T/UWqS1/5sSO6N9T+dE6cL337T+xaXk6t7/TtVSI/me1bz/raZdWWJdLx4AAAD8S6QRsT+SdLSRTtPR0fr/8B+KvWllZnbuqbMz71+aqn9HYCgG0uJJ12DT89Dx/La+yE+05U/mz42/KO2p5UcnZypTvQ4e+ty+LuM/83up160DNp3va0H/Mv6hfxn/0L+Mf+hfHcb/nl60A9h6nT7/P+pBO4Ct1zb+LftBH2mM/6S37QC2nud/0L+ax78pAPSN2T1x5y/JS0gsS0S6LZqxMYlkk0fB/l4HuPZEr9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANsY/AQAA//9couxY") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[], 0x1, 0x307, &(0x7f0000001b40)="$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") move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 10m29.417910028s ago: executing program 5 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) 10m27.723636864s ago: executing program 5 (id=181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000005c80)=ANY=[@ANYBLOB="040e0c0501101b"], 0xf) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) listen(r0, 0xfffffff8) 10m27.206942585s ago: executing program 35 (id=181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000005c80)=ANY=[@ANYBLOB="040e0c0501101b"], 0xf) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) listen(r0, 0xfffffff8) 10m9.163732957s ago: executing program 7 (id=228): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="510f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x40, 0xd, 0x3, "2cd89c"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3}, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 10m5.199701733s ago: executing program 7 (id=240): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m3.717980176s ago: executing program 7 (id=246): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 10m2.692961058s ago: executing program 7 (id=248): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_uring_setup(0x1c79, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB="0047e0a84bff920d622498ba255d5bf4eb1b53b72b21c9ca37a768b8e3405bd1557fd55e6a445405e6b30408a7fa25f8798484dd82f3225180"], 0x1, 0x153a, &(0x7f0000004a40)="$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") 10m1.499989834s ago: executing program 7 (id=254): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$alg(0x26, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) 10m1.096566813s ago: executing program 7 (id=257): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0xfa, 0x2c0, &(0x7f0000000100)="$eJzs3c+KW1UYAPDvZpKbjLOYWbgSwbvowo2l060LU2QEcVZKFv4BLbaFMgmFCQSqYujKJ3Dhwvdw515w4xsIPoA7iwwcuclNbppMk5nWTKX+fps5fOf77jlnzg1ZXO7JF68PTu48GN579M3v0elk0ehGNx5ncRCNmEmVAABeCo9Tij+f6fu92djWnACA7Vr4/m89JaW9Gnpn29MCALboo48/+eDW8fHRh0XRiRh8N+plMf077b91L+5HP+7GjdiPs/pZQErT9nvvHx9FsygdxLXBeNQrKwef/zpPzWNSfxj7cXB+/WExFdcGZ+2Isn486rXilXZkWcT9bjmRm7Efr67Ul/1HN+v62fjj6OXxZqdaZDn+9diP376MB9GPO5NnGvX43+ZRvJu+/+vrT8vksj4bj3rtSV4t7Vz13gAAAAAAAAAAAAAAAAAAAAAA8PK6Xp2ds1uHqvN3ds4m/bOEhfN9GpP+aXIWkU8aS+cDjVP8ODtf50ZRFCmb5s/O5xntNuO1ZjRfwJIBAAAAAAAAAAAAAAAAAADgP2f48KuT2/3+3dN/pVG95D9/rf9Zr9NdiLwR65Pblxordqr0cq7LOYe/fDaYR8pFPFmeX2iIUauIWDfn1kpkt5zP5iv/nVJKWRbxfNvUushYGxp763PKf/DPP+y9dXI7iw0X7Mw27qfFrjxOhw+X9jSyy8wwXer2y9fk5NUdc6Hr7D3nh+jtP6aDVZFswypaC5FW1Yin3X6dTXvx5CcFAAAAAAAAAAAAAAAAAAC4YvVLv+d0Plpb2tjapAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgitW//183YiWy1BhXxefnpJTG80gep8MXvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4JAAD//7mkaog=") 10m0.409603888s ago: executing program 36 (id=257): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0xfa, 0x2c0, &(0x7f0000000100)="$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") 6m10.583431721s ago: executing program 8 (id=742): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) eventfd2(0x8a, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0) 6m6.267838885s ago: executing program 8 (id=749): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYRES64]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef28", 0x5b}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266", 0x13}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m59.891421195s ago: executing program 8 (id=757): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000900000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 5m57.135637065s ago: executing program 8 (id=761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000018d000/0x9000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m54.815633306s ago: executing program 8 (id=764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001080)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d34101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d7c9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba29875d7399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c319639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff203000000f9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803b7000000009737d210060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d328734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddb1696d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859f65c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 5m50.229459336s ago: executing program 8 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0x8, 0x2, 0x200, 0x101, 0xd53, 0xf, 0xb3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x24040080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m35.064925797s ago: executing program 37 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0x8, 0x2, 0x200, 0x101, 0xd53, 0xf, 0xb3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x24040080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.754775498s ago: executing program 1 (id=1374): io_setup(0x20, &(0x7f0000001140)=0x0) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xfffb, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x0) 3.630967501s ago: executing program 6 (id=1375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 3.583721111s ago: executing program 9 (id=1376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7, 0xb, 0xb3b3}}]}]}]}, 0x4c}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) 3.554247182s ago: executing program 0 (id=1377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340b1bf747ec7f9b12eb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) 3.527772413s ago: executing program 1 (id=1378): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfae8}, 0xf) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="0a000000010001", 0x7) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442a", 0xbc}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{0x0}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x5, 0x27, 0x2006, 0xf1, 0x20008, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x4, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x9f, 0x6, 0x4, 0xee, 0x4, 0x8000]}) 3.412423455s ago: executing program 0 (id=1379): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioperm(0x0, 0x1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 3.355830216s ago: executing program 9 (id=1380): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704", 0x7) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04fc4220"], 0x7) 3.355605276s ago: executing program 6 (id=1381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.261767578s ago: executing program 9 (id=1382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x64e, &(0x7f0000000dc0)="$eJzs3d9u2+YVAPCj/MEMDwiGbQiCIE3ZZAMSIHUkuXFg9EqjKZutJAqkXCRXRdA4RRCnHZIOWHKXm2wDtofo7R5ie6Jij7CBlJw6iW3lX+0u+P2E5PtEHvI7lAUe0xLJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACila61251WDPLR5o1kf+laWQwPmL+zvn8/1xwwbkSr/hcLC3FmOunMb3+cfbr+70Kcmz47Fwt1sxCPf3n6V5/+5sSxneUPSOhQPHz0+N6t7e2tB0edyBFZz0Z5VeTD3nqW5FWRrK6stK9u9Kuknw+y6mY1yYZJWma9SVEml9LLSWd1dTnJlm4Wm6P1td4g25l4/eNuu72SfLY0znplVYyufrZUpRv5YJCP1puYenYdc71+I36eT5JJ1hsmyZ2721vL85KsgzqvEtSdF9Rtd7udTrfbWbm2eu16u33ipQntF8RLEUf/puVoveM9OLy5Y7P6H4PIYxSbcSOSPR9prEUZRQz3mT+zU/9/fzU7cNzd9X+nyp/5cfbZaOr/+emz8/vV/31yObzHw3gUj+Ne3Irt2I6teHDkGR3uYz2yGEUeVRSRxzB6zZRkNiWJ1ViJlWjHl7ER/agiiX7kMYgsqrgZVUwia95RaZSRRS8mUUQZSVyKNC5HEp1YjdVYjiSyWIqbUcRmjGI91qLXrOVO3G1e9+UDcnwW1HmVoO4BQeo/b+/d78ThDf13p/4DAAAA761W89f3+vj/ZHzQ9Pr5IGsfdVoAAADAO9R88n+ubk7WvQ+i5fgfAAAA3jet5hy7VkQsxofT3s6ZUP4IAAAAAO+J5vP/83WzWPc+jJbjfwAAAHjf/HXuNfar8S9a//pPlOXJ1pPxjd+17vfquN7949Pljr+4xkn/bOvUbCVNs3Ji9izNzrVmV798dhHMH2bNnXl5tF5I4NkaXiOB+Ht8NI356Pa0vb0zZzrKYj8fZEtpMfi0E73eqWOT7MbkT9/c/XM0m/+30fBUK+7c3d5a+urb7dtNLk/qtTy5P7uA4kvXUTwgl++a6y0051zsucUnmxMxZuMuTsdt7/4BHJsufuw1xnwaF6YxFxan7eLz279Qj9lZ2m/rZ1l03nLLn8bFaczFSxenzR5ZdOdl0d2dxRu9Fq+QxfK8LJbfMguAo3JnThVqvVz432Av99rV/U1+vYincWkac+lss2M9cXaPPXp73h69/ZbV7Z9xeRpzeSd4vxpbj/uPF6rq9/UC3+87bjXotuqX8Ph39/8Ypx8+evzx3fu3vt76euubbnd5pf1Ju32tGyebzZg1ag8Ae5h/j525Ea1P5hxV//rZVwqW4qv4NrbjdlxpzjZovnGw51oXd30N4cqco9bFXXd4uTLnqG5x141eXj12+RB+EgBweC7MqcOvUv+vzDnufr6WH3x0vLuWAwA/jaz8oRULf2mVZT7+srO62ulNNrKkLNLPkzJfW8+SfDTJynSjN1rPknFZTIq0GNSdL/K1rEqqzfG4KCdJvyiTcVHlN5o7vyezW79X2bA3muRpNR5kvSpL0mI06aWTZC2v0mS8+YdBXm1kZbNwNc7SvJ+nvUlejJKq2CzTbClJqizbFZivZaNJ3s/r7igZl/mwV95MvigGm8MsWcuqtMzHk2K6wp2x8lG/KIfNapeO+sUGgJ+Jh48e37u1vb314CfsHPU2AgDPU6UBAAAAAAAAAAAAAODn7zDO/9PR0fl/6xz1ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXva/AAAA//8tC1ch") 3.234584539s ago: executing program 1 (id=1383): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0xf) 2.583606863s ago: executing program 1 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x64e, &(0x7f0000000dc0)="$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") 2.331993169s ago: executing program 9 (id=1385): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @remote}) 2.314014409s ago: executing program 1 (id=1386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24}, 0x24}}, 0x0) recvmmsg(r5, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/82, 0x52}], 0x1}, 0x3}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000340)) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) 953.349159ms ago: executing program 1 (id=1387): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x3, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x76}, "14bffd076773e618d39a90a7ddede0f1cbbfb5400507109f248002f538054f1d79f119c666d26733442cafd720bdb2541415da118792c9c7d05d58719ec0d92263e2739da7bc6b092a07f4122aea955b70195af1efcdf25f4a45cf1e36245c76d420b0a64fd997374c6ac536273d1c80341fe913eb46"}, 0x7a) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000010c0)={&(0x7f0000001040)=[{0x8a99, 0x5010, 0x0, 0x0}], 0x1}) 827.805971ms ago: executing program 9 (id=1388): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x36314752, 0x2, 0xfffffffa, 0x0, 0xa, 0x1, 0x0, 0x2}}) 651.212795ms ago: executing program 9 (id=1389): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 639.872366ms ago: executing program 0 (id=1390): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) 523.504778ms ago: executing program 6 (id=1391): socket(0xa, 0x3, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x87, 0x0, @local, @local, {[@dstopts={0x3b}]}}}}}, 0x0) 423.661141ms ago: executing program 0 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 395.372451ms ago: executing program 6 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x64e, &(0x7f0000000dc0)="$eJzs3d9u2+YVAPCj/MEMDwiGbQiCIE3ZZAMSIHUkuXFg9EqjKZutJAqkXCRXRdA4RRCnHZIOWHKXm2wDtofo7R5ie6Jij7CBlJw6iW3lX+0u+P2E5PtEHvI7lAUe0xLJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACila61251WDPLR5o1kf+laWQwPmL+zvn8/1xwwbkSr/hcLC3FmOunMb3+cfbr+70Kcmz47Fwt1sxCPf3n6V5/+5sSxneUPSOhQPHz0+N6t7e2tB0edyBFZz0Z5VeTD3nqW5FWRrK6stK9u9Kuknw+y6mY1yYZJWma9SVEml9LLSWd1dTnJlm4Wm6P1td4g25l4/eNuu72SfLY0znplVYyufrZUpRv5YJCP1puYenYdc71+I36eT5JJ1hsmyZ2721vL85KsgzqvEtSdF9Rtd7udTrfbWbm2eu16u33ipQntF8RLEUf/puVoveM9OLy5Y7P6H4PIYxSbcSOSPR9prEUZRQz3mT+zU/9/fzU7cNzd9X+nyp/5cfbZaOr/+emz8/vV/31yObzHw3gUj+Ne3Irt2I6teHDkGR3uYz2yGEUeVRSRxzB6zZRkNiWJ1ViJlWjHl7ER/agiiX7kMYgsqrgZVUwia95RaZSRRS8mUUQZSVyKNC5HEp1YjdVYjiSyWIqbUcRmjGI91qLXrOVO3G1e9+UDcnwW1HmVoO4BQeo/b+/d78ThDf13p/4DAAAA761W89f3+vj/ZHzQ9Pr5IGsfdVoAAADAO9R88n+ubk7WvQ+i5fgfAAAA3jet5hy7VkQsxofT3s6ZUP4IAAAAAO+J5vP/83WzWPc+jJbjfwAAAHjf/HXuNfar8S9a//pPlOXJ1pPxjd+17vfquN7949Pljr+4xkn/bOvUbCVNs3Ji9izNzrVmV798dhHMH2bNnXl5tF5I4NkaXiOB+Ht8NI356Pa0vb0zZzrKYj8fZEtpMfi0E73eqWOT7MbkT9/c/XM0m/+30fBUK+7c3d5a+urb7dtNLk/qtTy5P7uA4kvXUTwgl++a6y0051zsucUnmxMxZuMuTsdt7/4BHJsufuw1xnwaF6YxFxan7eLz279Qj9lZ2m/rZ1l03nLLn8bFaczFSxenzR5ZdOdl0d2dxRu9Fq+QxfK8LJbfMguAo3JnThVqvVz432Av99rV/U1+vYincWkac+lss2M9cXaPPXp73h69/ZbV7Z9xeRpzeSd4vxpbj/uPF6rq9/UC3+87bjXotuqX8Ph39/8Ypx8+evzx3fu3vt76euubbnd5pf1Ju32tGyebzZg1ag8Ae5h/j525Ea1P5hxV//rZVwqW4qv4NrbjdlxpzjZovnGw51oXd30N4cqco9bFXXd4uTLnqG5x141eXj12+RB+EgBweC7MqcOvUv+vzDnufr6WH3x0vLuWAwA/jaz8oRULf2mVZT7+srO62ulNNrKkLNLPkzJfW8+SfDTJynSjN1rPknFZTIq0GNSdL/K1rEqqzfG4KCdJvyiTcVHlN5o7vyezW79X2bA3muRpNR5kvSpL0mI06aWTZC2v0mS8+YdBXm1kZbNwNc7SvJ+nvUlejJKq2CzTbClJqizbFZivZaNJ3s/r7igZl/mwV95MvigGm8MsWcuqtMzHk2K6wp2x8lG/KIfNapeO+sUGgJ+Jh48e37u1vb314CfsHPU2AgDPU6UBAAAAAAAAAAAAAODn7zDO/9PR0fl/6xz1ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXva/AAAA//8tC1ch") 336.640262ms ago: executing program 0 (id=1394): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) 155.643016ms ago: executing program 0 (id=1395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 155.522916ms ago: executing program 6 (id=1396): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)="935f51a0", 0x4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 0s ago: executing program 6 (id=1397): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe030001000000", 0x1b) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x18000000000002a0, 0xa, 0x0, &(0x7f00000005c0)="b9ff03076804268c989e", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, r7, 0xd23, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x4000000) kernel console output (not intermixed with test programs): us: small dir entry [ 99.111632][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 99.143373][ T5772] hfsplus: small dir entry [ 99.322486][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.338998][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.361396][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.397192][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.408137][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.415794][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.048686][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 100.567072][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.579285][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.588257][ T5924] bridge_slave_0: entered allmulticast mode [ 100.598317][ T5924] bridge_slave_0: entered promiscuous mode [ 100.699212][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.723944][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.752497][ T5924] bridge_slave_1: entered allmulticast mode [ 100.772687][ T5924] bridge_slave_1: entered promiscuous mode [ 100.976939][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.019985][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.037113][ T5953] syz.0.35 uses obsolete (PF_INET,SOCK_PACKET) [ 101.322922][ T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 101.462934][ T5774] Bluetooth: hci1: command tx timeout [ 101.505178][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.539868][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 101.583619][ T5081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.592114][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.607155][ T5081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.619483][ T5081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.628863][ T8] usb 2-1: config 0 descriptor?? [ 101.638893][ T5081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.647207][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 101.664244][ T5081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 101.671581][ T40] hsr_slave_0: left promiscuous mode [ 101.677410][ T5081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.733215][ T40] hsr_slave_1: left promiscuous mode [ 101.769661][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.783923][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.801661][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.820528][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.863937][ T40] bridge_slave_1: left allmulticast mode [ 101.869665][ T40] bridge_slave_1: left promiscuous mode [ 101.894183][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.916020][ T40] bridge_slave_0: left allmulticast mode [ 101.921738][ T40] bridge_slave_0: left promiscuous mode [ 101.928033][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.959637][ T40] veth1_macvtap: left promiscuous mode [ 101.966742][ T40] veth0_macvtap: left promiscuous mode [ 101.972436][ T40] veth1_vlan: left promiscuous mode [ 101.978233][ T40] veth0_vlan: left promiscuous mode [ 102.590012][ T40] team0 (unregistering): Port device team_slave_1 removed [ 102.639411][ T40] team0 (unregistering): Port device team_slave_0 removed [ 102.677847][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.718786][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.017014][ T40] bond0 (unregistering): Released all slaves [ 103.101279][ T5924] team0: Port device team_slave_0 added [ 103.151645][ T5924] team0: Port device team_slave_1 added [ 103.229249][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.236564][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.264451][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.278062][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.290887][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.320819][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.523077][ T5774] Bluetooth: hci1: command tx timeout [ 103.556130][ T5924] hsr_slave_0: entered promiscuous mode [ 103.576932][ T5924] hsr_slave_1: entered promiscuous mode [ 103.679812][ T5976] loop0: detected capacity change from 0 to 512 [ 103.699070][ T5976] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.773114][ T5774] Bluetooth: hci3: command tx timeout [ 103.807488][ T5976] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 103.857922][ T5976] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.38: attempt to clear invalid blocks 2 len 1 [ 103.910605][ T5976] EXT4-fs (loop0): Remounting filesystem read-only [ 103.937915][ T5976] EXT4-fs (loop0): 1 truncate cleaned up [ 103.945283][ T5976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.044247][ T8] usb 2-1: USB disconnect, device number 3 [ 104.219008][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 104.322149][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.349388][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.584310][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.599589][ T6000] tipc: Started in network mode [ 104.620270][ T6000] tipc: Node identity 3ea8bc76f4c4, cluster identity 4711 [ 104.646335][ T6000] tipc: Enabled bearer , priority 0 [ 104.725035][ T6002] syzkaller0: entered promiscuous mode [ 104.730622][ T6002] syzkaller0: entered allmulticast mode [ 104.737377][ T6002] tipc: Resetting bearer [ 104.768438][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.822293][ T5999] tipc: Resetting bearer [ 105.606443][ T5774] Bluetooth: hci1: command tx timeout [ 105.853077][ T5774] Bluetooth: hci3: command tx timeout [ 106.116620][ T5999] tipc: Disabling bearer [ 106.158514][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.204734][ T8] tipc: Node number set to 3396123766 [ 106.219970][ T5924] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.252367][ T5924] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.271952][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.286988][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.303940][ T5961] bridge_slave_0: entered allmulticast mode [ 106.311381][ T5961] bridge_slave_0: entered promiscuous mode [ 106.320483][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.328371][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.335647][ T5961] bridge_slave_1: entered allmulticast mode [ 106.344415][ T5961] bridge_slave_1: entered promiscuous mode [ 106.371210][ T5924] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.408954][ T5924] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.520603][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.569941][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.629609][ T6021] loop0: detected capacity change from 0 to 2048 [ 106.675798][ T6021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.769452][ T5961] team0: Port device team_slave_0 added [ 106.842378][ T5961] team0: Port device team_slave_1 added [ 106.993169][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.018198][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.071174][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.095460][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.102510][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.189770][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.484623][ T5961] hsr_slave_0: entered promiscuous mode [ 107.500117][ T5961] hsr_slave_1: entered promiscuous mode [ 107.529494][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.549942][ T5961] Cannot create hsr debugfs directory [ 107.690923][ T5774] Bluetooth: hci1: command tx timeout [ 107.923823][ T5774] Bluetooth: hci3: command tx timeout [ 107.999409][ T6043] loop1: detected capacity change from 0 to 512 [ 108.046699][ T6043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.069125][ T6043] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.195215][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.279777][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.289478][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.323651][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.330850][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.465657][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.472892][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.869343][ T5961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.913805][ T5961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.929312][ T5961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.946620][ T6060] loop1: detected capacity change from 0 to 256 [ 108.964787][ T6060] ======================================================= [ 108.964787][ T6060] WARNING: The mand mount option has been deprecated and [ 108.964787][ T6060] and is ignored by this kernel. Remove the mand [ 108.964787][ T6060] option from the mount to silence this warning. [ 108.964787][ T6060] ======================================================= [ 109.082584][ T5961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.091084][ T6060] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1099e8fd, utbl_chksum : 0xe619d30d) [ 110.003292][ T5774] Bluetooth: hci3: command tx timeout [ 110.148750][ T6076] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 110.167158][ T48] hsr_slave_0: left promiscuous mode [ 110.179288][ T48] hsr_slave_1: left promiscuous mode [ 110.263815][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.271309][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.309248][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.340291][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.354382][ T48] bridge_slave_1: left allmulticast mode [ 110.360091][ T48] bridge_slave_1: left promiscuous mode [ 110.371261][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.397600][ T48] bridge_slave_0: left allmulticast mode [ 110.409906][ T48] bridge_slave_0: left promiscuous mode [ 110.418352][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.959766][ T48] veth1_macvtap: left promiscuous mode [ 110.967049][ T48] veth0_macvtap: left promiscuous mode [ 110.983443][ T48] veth1_vlan: left promiscuous mode [ 110.994261][ T48] veth0_vlan: left promiscuous mode [ 111.618140][ T6095] loop0: detected capacity change from 0 to 4096 [ 111.841868][ T6095] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.859322][ T6095] EXT4-fs (loop0): Test dummy encryption mode enabled [ 111.891609][ T6095] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0003] [ 111.917984][ T6095] System zones: 0-5 [ 111.962981][ T6095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.079269][ T48] team0 (unregistering): Port device team_slave_1 removed [ 112.129795][ T48] team0 (unregistering): Port device team_slave_0 removed [ 112.175554][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.205619][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.286342][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.399688][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b73cc00: rx timeout, send abort [ 112.409138][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807b73cc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 112.428627][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802bd44400: rx timeout, send abort [ 112.437677][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802bd44400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.750426][ T48] bond0 (unregistering): Released all slaves [ 113.068938][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.164206][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.238386][ T6112] loop0: detected capacity change from 0 to 4096 [ 113.242480][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.317744][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.325003][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.327618][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.393376][ T27] audit: type=1800 audit(1784173446.152:2): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.63" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 113.478558][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.485824][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.180011][ T5924] veth0_vlan: entered promiscuous mode [ 114.224657][ T5924] veth1_vlan: entered promiscuous mode [ 114.316233][ T5924] veth0_macvtap: entered promiscuous mode [ 114.362346][ T5924] veth1_macvtap: entered promiscuous mode [ 114.413885][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.449411][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.478177][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.510718][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.522158][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.533061][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.546268][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.606660][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.633623][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.678010][ T5924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.711481][ T5924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.752502][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.799722][ T5924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.817715][ T5924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.827808][ T5924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.853078][ T5924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.874627][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 115.177986][ T6072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.205626][ T6072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.306619][ T6072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.325920][ T6072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.427927][ T5961] veth0_vlan: entered promiscuous mode [ 115.489714][ T5961] veth1_vlan: entered promiscuous mode [ 115.622035][ T5961] veth0_macvtap: entered promiscuous mode [ 115.642571][ T5961] veth1_macvtap: entered promiscuous mode [ 115.706004][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.742992][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.782928][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.802891][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.833247][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.862905][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.904745][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.987073][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.031700][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.066677][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.078408][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.333135][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.406369][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.431544][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.607615][ T6181] bridge0: port 3(wlan1) entered blocking state [ 116.649787][ T6181] bridge0: port 3(wlan1) entered disabled state [ 116.713456][ T6181] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 116.780277][ T6181] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 116.806883][ T6181] bridge0: port 3(wlan1) entered blocking state [ 116.813668][ T6181] bridge0: port 3(wlan1) entered forwarding state [ 116.839206][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 116.912143][ T5961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.957228][ T5961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.999230][ T5961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.051253][ T5961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.302004][ T6191] loop4: detected capacity change from 0 to 2048 [ 117.379127][ T6191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 117.495030][ T6191] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 117.569572][ T11] bridge0: port 3(wlan1) entered disabled state [ 117.620243][ T6191] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 117.717124][ T6191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.745416][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.802928][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.834670][ T27] audit: type=1800 audit(1784173450.612:3): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.72" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 117.888324][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.902208][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.943009][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.954454][ T27] audit: type=1800 audit(1784173450.722:4): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.72" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 118.140174][ T28] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 118.182188][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.200542][ T28] usb 1-1: Product: syz [ 118.210812][ T28] usb 1-1: Manufacturer: syz [ 118.220782][ T28] usb 1-1: SerialNumber: syz [ 118.473671][ T28] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 118.528051][ T28] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 119.472377][ T6221] &  [ 119.746750][ T6226] < [ 119.773611][ T28] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -71 [ 119.810690][ T28] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 119.812388][ T6231] lo: entered allmulticast mode [ 119.826652][ T28] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 119.871783][ T28] lan78xx: probe of 1-1:1.0 failed with error -71 [ 119.911326][ T28] usb 1-1: USB disconnect, device number 2 [ 120.613982][ T6255] loop0: detected capacity change from 0 to 2048 [ 120.653251][ T28] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.740871][ T6255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.852971][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 120.869973][ T28] usb 2-1: config 0 has no interfaces? [ 120.903115][ T28] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 120.912242][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.974681][ T28] usb 2-1: config 0 descriptor?? [ 121.314144][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.866671][ T6251] loop4: detected capacity change from 0 to 40427 [ 121.922401][ T6251] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 121.964557][ T6251] F2FS-fs (loop4): Image doesn't support compression [ 121.971403][ T6251] F2FS-fs (loop4): Image doesn't support compression [ 122.013633][ T6251] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 122.052090][ T6251] F2FS-fs (loop4): invalid crc value [ 122.102666][ T6251] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.326963][ T6251] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.429787][ T6285] syz_tun: entered allmulticast mode [ 122.605309][ T5924] syz-executor: attempt to access beyond end of device [ 122.605309][ T5924] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.657169][ T5924] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 123.421199][ T6308] loop0: detected capacity change from 0 to 512 [ 123.429991][ T23] usb 2-1: USB disconnect, device number 4 [ 123.451687][ T6308] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.483650][ T6308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.524192][ T6308] EXT4-fs (loop0): 1 truncate cleaned up [ 123.539127][ T6308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.846391][ T6324] loop4: detected capacity change from 0 to 512 [ 123.945947][ T6324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.086796][ T6324] EXT4-fs (loop4): shut down requested (2) [ 124.146296][ T6308] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.96: Invalid block bitmap block 3639385208 in block_group 0 [ 124.177695][ T6308] EXT4-fs (loop0): Remounting filesystem read-only [ 124.252075][ T5924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.331043][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.953865][ T6345] kvm: emulating exchange as write [ 124.959833][ T6345] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.432146][ T6363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.831393][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 125.854998][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 125.867976][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 125.883970][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 125.910415][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 125.931523][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 125.997110][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 126.025607][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 126.052240][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 126.154546][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 128.345348][ T6404] loop5: detected capacity change from 0 to 32768 [ 128.418869][ T6404] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.114 (6404) [ 128.829239][ T6402] loop1: detected capacity change from 0 to 40427 [ 128.882845][ C0] sched: RT throttling activated [ 129.003327][ T6404] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.033700][ T6404] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 129.086341][ T6404] BTRFS info (device loop5): allowing degraded mounts [ 129.094604][ T6402] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.147611][ T6404] BTRFS info (device loop5): turning on flush-on-commit [ 129.197248][ T6404] BTRFS info (device loop5): max_inline at 0 [ 129.270961][ T6404] BTRFS info (device loop5): setting nodatasum [ 129.326106][ T6404] BTRFS info (device loop5): turning on sync discard [ 129.400701][ T6404] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 129.483050][ T6404] BTRFS info (device loop5): trying to use backup root at mount time [ 129.491324][ T6404] BTRFS info (device loop5): using free space tree [ 129.556800][ T6402] F2FS-fs (loop1): Start checkpoint disabled! [ 129.633266][ T6402] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 129.777015][ T6404] BTRFS info (device loop5): enabling ssd optimizations [ 130.323145][ T11] kworker/u4:0: attempt to access beyond end of device [ 130.323145][ T11] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.381082][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.720528][ T6471] binder_alloc: 6469: binder_alloc_buf size -256 failed, no address space [ 130.763198][ T6471] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 131.353930][ T5961] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.537133][ T6495] loop4: detected capacity change from 0 to 128 [ 131.698118][ T6495] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 131.744490][ T5774] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 131.790786][ T6495] FAT-fs (loop4): Filesystem has been set read-only [ 132.140734][ T6510] process 'syz.0.132' launched './file2' with NULL argv: empty string added [ 132.314298][ T6515] binder: 6513:6515 ioctl c0306201 200000000080 returned -14 [ 132.341083][ T6515] binder: 6513:6515 ioctl c0306201 2000000003c0 returned -14 [ 133.057511][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.068235][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.548504][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.138'. [ 134.053531][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.138'. [ 134.150950][ T6533] syz_tun: entered promiscuous mode [ 134.342336][ T6533] syz_tun: left promiscuous mode [ 135.581333][ T6574] binder: 6572:6574 ioctl c0306201 200000000080 returned -14 [ 135.607491][ T6574] binder: 6572:6574 ioctl c0306201 2000000003c0 returned -14 [ 136.244009][ T6585] loop1: detected capacity change from 0 to 32768 [ 136.321142][ T6585] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 136.867868][ T6585] (syz.1.148,6585,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 137.006292][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 137.282546][ T6589] loop5: detected capacity change from 0 to 32768 [ 137.385416][ T6589] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.649415][ T6589] XFS (loop5): Ending clean mount [ 137.696903][ T6589] XFS (loop5): Quotacheck needed: Please wait. [ 137.807756][ T6589] XFS (loop5): Quotacheck: Done. [ 138.045563][ T6631] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 138.080255][ T6631] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 138.095093][ T6634] loop4: detected capacity change from 0 to 256 [ 138.107195][ T6634] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.148534][ T6634] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 138.223745][ T6634] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 138.529165][ T27] audit: type=1800 audit(1784173471.302:5): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.156" name="file1" dev="loop4" ino=1048605 res=0 errno=0 [ 138.628172][ T5961] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.894258][ T6649] loop4: detected capacity change from 0 to 2048 [ 138.929642][ T6649] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.610403][ T5924] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 139.639346][ T5924] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 140.068118][ T1086] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.233481][ T1086] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.343758][ T1086] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.511683][ T1086] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.541316][ T6687] tipc: Started in network mode [ 141.549280][ T6687] tipc: Node identity b6adc71a14e9, cluster identity 4711 [ 141.573083][ T6687] tipc: Enabled bearer , priority 0 [ 141.627970][ T5081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.637792][ T5081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.652468][ T5081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.660951][ T5081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.669100][ T5081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.687273][ T5081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.765644][ T6683] syzkaller0: entered promiscuous mode [ 141.779467][ T6683] syzkaller0: entered allmulticast mode [ 141.787082][ T6683] tipc: Resetting bearer [ 141.914825][ T6689] : renamed from bond0 (while UP) [ 142.115288][ T6681] tipc: Resetting bearer [ 142.521200][ T6718] binder: 6717:6718 ioctl c0306201 200000000080 returned -14 [ 142.537469][ T6718] binder: 6717:6718 ioctl c0306201 2000000003c0 returned -14 [ 142.877391][ T6727] loop5: detected capacity change from 0 to 512 [ 142.885600][ T6727] EXT4-fs: Ignoring removed orlov option [ 142.902970][ T6727] EXT4-fs (loop5): Test dummy encryption mode enabled [ 142.925025][ T6727] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.976702][ T6727] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.177: bad orphan inode 16 [ 142.992590][ T6727] ext4_test_bit(bit=15, block=4) = 0 [ 143.000877][ T6727] EXT4-fs (loop5): 1 orphan inode deleted [ 143.008876][ T6727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.170680][ T5961] EXT4-fs error (device loop5): __ext4_iget:5078: inode #11: block 524051: comm syz-executor: invalid block [ 143.200843][ T5961] EXT4-fs error (device loop5): __ext4_iget:5078: inode #11: block 524051: comm syz-executor: invalid block [ 143.772785][ T5081] Bluetooth: hci1: command tx timeout [ 144.462267][ T6681] tipc: Disabling bearer [ 144.518320][ T28] tipc: Node number set to 2722416410 [ 144.753591][ T5961] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.137197][ T1086] bridge0: port 3(wlan1) entered disabled state [ 145.189765][ T1086] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode [ 145.198680][ T5813] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.239282][ T1086] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 145.260708][ T1086] bridge0: port 3(wlan1) entered disabled state [ 145.412928][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 145.453118][ T5813] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 145.462240][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.509454][ T5813] usb 1-1: Product: syz [ 145.520255][ T5813] usb 1-1: Manufacturer: syz [ 145.553527][ T5813] usb 1-1: SerialNumber: syz [ 145.587720][ T5813] usb 1-1: config 0 descriptor?? [ 145.700023][ T6692] chnl_net:caif_netlink_parms(): no params data found [ 145.756718][ T6755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.183'. [ 145.795148][ T6755] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 145.833711][ T5813] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 145.844403][ T5081] Bluetooth: hci1: command tx timeout [ 145.975760][ T6759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.183'. [ 146.044393][ T6759] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 146.273616][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.284641][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.292745][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.311350][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.323546][ T1086] hsr_slave_0: left promiscuous mode [ 146.329438][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.342906][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.350674][ T1086] hsr_slave_1: left promiscuous mode [ 146.360876][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.368584][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.390653][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.401837][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.411215][ T1086] bridge_slave_1: left allmulticast mode [ 146.417011][ T1086] bridge_slave_1: left promiscuous mode [ 146.423323][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.439157][ T1086] bridge_slave_0: left allmulticast mode [ 146.445233][ T1086] bridge_slave_0: left promiscuous mode [ 146.451019][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.487086][ T1086] veth1_macvtap: left promiscuous mode [ 146.492802][ T1086] veth0_macvtap: left promiscuous mode [ 146.499379][ T1086] veth1_vlan: left promiscuous mode [ 146.507956][ T1086] veth0_vlan: left promiscuous mode [ 146.689721][ T5813] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 146.717102][ T5813] usb 1-1: USB disconnect, device number 3 [ 147.167786][ T6793] loop1: detected capacity change from 0 to 1024 [ 147.783586][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 147.882751][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 147.923464][ T5081] Bluetooth: hci1: command tx timeout [ 147.996433][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.090999][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.403932][ T5081] Bluetooth: hci3: command tx timeout [ 149.786111][ T1086] bond0 (unregistering): Released all slaves [ 150.003117][ T5081] Bluetooth: hci1: command tx timeout [ 150.060464][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 150.341510][ T6692] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.383234][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.404578][ T6692] bridge_slave_0: entered allmulticast mode [ 150.434634][ T6692] bridge_slave_0: entered promiscuous mode [ 150.472802][ T6692] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.494912][ T5081] Bluetooth: hci3: command tx timeout [ 150.499686][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.508293][ T6692] bridge_slave_1: entered allmulticast mode [ 150.524121][ T6692] bridge_slave_1: entered promiscuous mode [ 150.752506][ T6692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.789150][ T6692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.882598][ T6692] team0: Port device team_slave_0 added [ 150.905106][ T6692] team0: Port device team_slave_1 added [ 151.200205][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.289288][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.524901][ T6692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.961526][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.986730][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.012659][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.077284][ T6692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.238649][ T6863] loop0: detected capacity change from 0 to 128 [ 152.287504][ T6863] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 152.327174][ T6692] hsr_slave_0: entered promiscuous mode [ 152.351547][ T6863] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.365126][ T6692] hsr_slave_1: entered promiscuous mode [ 152.472999][ T2181] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.483614][ T6863] overlay: ./file1 is not a directory [ 152.501376][ T1086] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.546391][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.574987][ T5081] Bluetooth: hci3: command tx timeout [ 152.636325][ T1086] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.685238][ T2181] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.697398][ T2181] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.711901][ T2181] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.722248][ T2181] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.747956][ T2181] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.768178][ T2181] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.783700][ T2181] usb 2-1: Product: syz [ 152.787935][ T2181] usb 2-1: Manufacturer: syz [ 152.815542][ T2181] cdc_wdm 2-1:1.0: skipping garbage [ 152.823974][ T2181] cdc_wdm 2-1:1.0: skipping garbage [ 152.858816][ T1086] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.870257][ T2181] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 152.881764][ T2181] cdc_wdm 2-1:1.0: Unknown control protocol [ 152.909261][ T6781] chnl_net:caif_netlink_parms(): no params data found [ 152.955302][ T1086] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.052774][ T2181] usb 2-1: USB disconnect, device number 5 [ 153.190150][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.197863][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.205490][ T6781] bridge_slave_0: entered allmulticast mode [ 153.213984][ T6781] bridge_slave_0: entered promiscuous mode [ 153.223085][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.230270][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.243032][ T6781] bridge_slave_1: entered allmulticast mode [ 153.250842][ T6781] bridge_slave_1: entered promiscuous mode [ 153.420719][ T6781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.439058][ T6781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.522479][ T6781] team0: Port device team_slave_0 added [ 153.554397][ T6781] team0: Port device team_slave_1 added [ 153.643422][ T2181] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.761665][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.773763][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.809590][ T6781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.862545][ T2181] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.881376][ T2181] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.900517][ T2181] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.901176][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.922145][ T2181] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.925601][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.959751][ T6781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.974393][ T2181] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.975702][ T6692] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 153.994589][ T2181] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.005677][ T2181] usb 2-1: Product: syz [ 154.010215][ T2181] usb 2-1: Manufacturer: syz [ 154.024779][ T2181] cdc_wdm 2-1:1.0: skipping garbage [ 154.032284][ T2181] cdc_wdm 2-1:1.0: skipping garbage [ 154.046513][ T2181] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 154.052470][ T2181] cdc_wdm 2-1:1.0: Unknown control protocol [ 154.092132][ T6692] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 154.136979][ T6692] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 154.187569][ T6692] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 154.272343][ T6781] hsr_slave_0: entered promiscuous mode [ 154.283774][ T6781] hsr_slave_1: entered promiscuous mode [ 154.303009][ T6781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.310714][ T6781] Cannot create hsr debugfs directory [ 154.643793][ T5081] Bluetooth: hci3: command tx timeout [ 155.151446][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 155.158344][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 155.166023][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 155.172864][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 155.182913][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 155.189574][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 155.196014][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 155.202658][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 155.208994][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 155.215641][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 155.221907][ T5813] usb 2-1: USB disconnect, device number 6 [ 155.221984][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 155.222003][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 155.222019][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 155.288843][ T1086] hsr_slave_0: left promiscuous mode [ 155.320583][ T1086] hsr_slave_1: left promiscuous mode [ 155.329373][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.347083][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.365778][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.386654][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.402383][ T1086] bridge_slave_1: left allmulticast mode [ 155.408918][ T1086] bridge_slave_1: left promiscuous mode [ 155.417139][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.427485][ T1086] bridge_slave_0: left allmulticast mode [ 155.434043][ T1086] bridge_slave_0: left promiscuous mode [ 155.439994][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.513590][ T1086] veth1_macvtap: left promiscuous mode [ 155.519197][ T1086] veth0_macvtap: left promiscuous mode [ 155.533412][ T1086] veth1_vlan: left promiscuous mode [ 155.538795][ T1086] veth0_vlan: left promiscuous mode [ 156.461138][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 156.509845][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 156.552519][ T1086]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.605805][ T1086]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.950730][ T1086]  (unregistering): Released all slaves [ 157.214858][ T6692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.264626][ T6781] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 157.300315][ T6781] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 157.338691][ T6781] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 157.399894][ T6781] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 157.425531][ T6692] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.446679][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.453877][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.489752][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.496981][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.722561][ T6781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.780034][ T6781] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.811832][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.819124][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.841625][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.848877][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.203790][ T6692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.389495][ T6781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.799394][ T6692] veth0_vlan: entered promiscuous mode [ 158.836267][ T6692] veth1_vlan: entered promiscuous mode [ 158.921072][ T6692] veth0_macvtap: entered promiscuous mode [ 158.950119][ T6692] veth1_macvtap: entered promiscuous mode [ 159.017558][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.029419][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.039808][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.051674][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.070552][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.097932][ T6781] veth0_vlan: entered promiscuous mode [ 159.107433][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.125988][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.140172][ T6692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.151184][ T6692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.163197][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.185382][ T6692] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.194905][ T6692] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.209412][ T6692] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.218267][ T6692] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.234286][ T6781] veth1_vlan: entered promiscuous mode [ 159.408886][ T6781] veth0_macvtap: entered promiscuous mode [ 159.441897][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.448424][ T6781] veth1_macvtap: entered promiscuous mode [ 159.462132][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.546796][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.559428][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.573625][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.589026][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.599251][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.613646][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.628704][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.646206][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.657979][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.675847][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.688787][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.700201][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.715185][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.726571][ T6781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.740730][ T6781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.758631][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.801710][ T6781] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.811036][ T6781] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.830999][ T6781] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.840180][ T6781] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.060765][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.102526][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.190190][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.204007][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.296587][ T5813] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 160.536055][ T5813] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 160.553205][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.583400][ T5813] usb 1-1: config 0 descriptor?? [ 160.710213][ T5813] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 162.512862][ T7020] loop5: detected capacity change from 0 to 7 [ 162.568379][ T7020] loop5: [POWERTEC] p1 p2 p3 p4 [ 162.602522][ T7020] loop5: p1 start 29388150 is beyond EOD, truncated [ 162.660009][ T7020] loop5: p2 start 4294901760 is beyond EOD, truncated [ 162.666997][ T5813] gspca_stv06xx: I2C: Read error writing address: -71 [ 162.679582][ T5813] usb 1-1: USB disconnect, device number 4 [ 162.759014][ T7020] loop5: p3 start 65535 is beyond EOD, truncated [ 162.774374][ T7020] loop5: p4 size 327680 extends beyond EOD, truncated [ 162.907684][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 163.115713][ T7040] loop6: detected capacity change from 0 to 16 [ 163.166013][ T7040] erofs: (device loop6): mounted with root inode @ nid 36. [ 163.258396][ T5081] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 163.296647][ T7040] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 163.373639][ T27] audit: type=1800 audit(1784173496.142:6): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.224" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 163.833041][ T2181] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 163.948222][ T7040] syz.6.224 (7040) used greatest stack depth: 19888 bytes left [ 164.023102][ T2181] usb 8-1: Using ep0 maxpacket: 16 [ 164.055036][ T2181] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 164.071776][ T2181] usb 8-1: config 0 has no interface number 0 [ 164.087958][ T2181] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 164.108701][ T2181] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 164.132505][ T2181] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 164.172537][ T2181] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.190113][ T2181] usb 8-1: Product: syz [ 164.212896][ T2181] usb 8-1: Manufacturer: syz [ 164.217568][ T2181] usb 8-1: SerialNumber: syz [ 164.245945][ T2181] usb 8-1: config 0 descriptor?? [ 164.265974][ T7050] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 164.293204][ T7050] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 164.312708][ T7047] loop0: detected capacity change from 0 to 32768 [ 164.582329][ T7050] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 164.619659][ T7050] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 164.873125][ T2181] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 166.703933][ T2181] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 166.734729][ T2181] asix: probe of 8-1:0.34 failed with error -71 [ 166.772683][ T2181] usb 8-1: USB disconnect, device number 2 [ 167.469617][ T7121] syzkaller0: entered promiscuous mode [ 167.485184][ T7121] syzkaller0: entered allmulticast mode [ 168.020618][ T7141] tipc: Failed to remove unknown binding: 66,0,0/2722416410:4289995953/4289995955 [ 168.041751][ T7141] tipc: Failed to remove unknown binding: 66,0,0/2722416410:4289995953/4289995954 [ 168.489867][ T7145] tipc: Failed to remove unknown binding: 66,0,0/2722416410:4289995953/4289995955 [ 168.682898][ T7145] tipc: Failed to remove unknown binding: 66,0,0/2722416410:4289995953/4289995954 [ 168.711913][ T7147] loop1: detected capacity change from 0 to 128 [ 168.878831][ T7147] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.021557][ T7147] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.897344][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.746318][ T7168] loop7: detected capacity change from 0 to 256 [ 170.868201][ T7168] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 172.854208][ T7215] syzkaller0: entered promiscuous mode [ 172.859767][ T7215] syzkaller0: entered allmulticast mode [ 173.300587][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.310649][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.319612][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.329116][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.338230][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 173.346216][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.779534][ T7237] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 174.637670][ T7227] chnl_net:caif_netlink_parms(): no params data found [ 174.996793][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.039883][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.065590][ T7227] bridge_slave_0: entered allmulticast mode [ 175.090826][ T7227] bridge_slave_0: entered promiscuous mode [ 175.124377][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.148540][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.173169][ T7227] bridge_slave_1: entered allmulticast mode [ 175.192017][ T7227] bridge_slave_1: entered promiscuous mode [ 175.351549][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.402423][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.448901][ T5081] Bluetooth: hci3: command tx timeout [ 175.618283][ T7227] team0: Port device team_slave_0 added [ 175.648314][ T7227] team0: Port device team_slave_1 added [ 175.790681][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.809188][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.861400][ T7227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.895304][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.902324][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.003000][ T7227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.227380][ T7227] hsr_slave_0: entered promiscuous mode [ 176.303732][ T7227] hsr_slave_1: entered promiscuous mode [ 176.319690][ T7227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.353135][ T7227] Cannot create hsr debugfs directory [ 176.947252][ T7227] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 176.980004][ T7227] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 177.028097][ T7227] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 177.067788][ T7227] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 177.524259][ T5081] Bluetooth: hci3: command tx timeout [ 178.342095][ T7227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.400358][ T7227] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.441438][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.448715][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.512660][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.519932][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.932470][ T7319] tipc: Started in network mode [ 178.938841][ T7319] tipc: Node identity 4, cluster identity 4711 [ 178.945129][ T7319] tipc: Node number set to 4 [ 179.317278][ T7227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.563664][ T969] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 179.613569][ T5081] Bluetooth: hci3: command tx timeout [ 179.815363][ T969] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.836989][ T969] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 179.892470][ T969] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.915590][ T969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 179.972985][ T969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 180.008374][ T969] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.030698][ T969] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.073049][ T969] usb 1-1: Product: syz [ 180.080816][ T969] usb 1-1: Manufacturer: syz [ 180.116106][ T969] cdc_wdm 1-1:1.0: skipping garbage [ 180.122411][ T969] cdc_wdm 1-1:1.0: skipping garbage [ 180.174683][ T969] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 180.180714][ T969] cdc_wdm 1-1:1.0: Unknown control protocol [ 180.471547][ T7327] warning: `syz.0.278' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 180.531049][ T7227] veth0_vlan: entered promiscuous mode [ 180.549214][ T969] usb 1-1: USB disconnect, device number 5 [ 180.581583][ T7227] veth1_vlan: entered promiscuous mode [ 180.691959][ T7367] loop1: detected capacity change from 0 to 64 [ 180.712414][ T7227] veth0_macvtap: entered promiscuous mode [ 180.748998][ T7227] veth1_macvtap: entered promiscuous mode [ 180.792210][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.833022][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.868349][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.903602][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.914495][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.925283][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.942391][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.970006][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.002228][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.026840][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.041445][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.057658][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.070797][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.085703][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.110033][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.130502][ T7227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.152224][ T7227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.175375][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.208178][ T7227] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.234392][ T7227] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.283151][ T7227] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.312752][ T7227] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.693256][ T5081] Bluetooth: hci3: command tx timeout [ 181.832860][ T7385] loop1: detected capacity change from 0 to 512 [ 182.011536][ T7385] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.285: invalid indirect mapped block 2 (level 1) [ 182.028834][ T7385] EXT4-fs (loop1): 1 truncate cleaned up [ 182.036672][ T7385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.436780][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.714920][ T7416] loop1: detected capacity change from 0 to 128 [ 184.787969][ T7416] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.815872][ T7416] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.967261][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.796707][ T6072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.797407][ T7404] tipc: Enabling of bearer rejected, failed to enable media [ 186.810071][ T6072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.068347][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.102947][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.125601][ T7434] loop0: detected capacity change from 0 to 128 [ 187.150829][ T7432] syzkaller0: entered promiscuous mode [ 187.170710][ T7434] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 187.203173][ T7432] syzkaller0: entered allmulticast mode [ 187.468772][ T7439] loop8: detected capacity change from 0 to 1024 [ 188.442303][ T7448] syzkaller0: entered promiscuous mode [ 188.489452][ T7448] syzkaller0: entered allmulticast mode [ 191.020151][ T7486] binder: 7485:7486 ioctl c0306201 2000000006c0 returned -14 [ 191.186244][ T27] audit: type=1326 audit(1784173523.962:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.0.312" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff20b79de59 code=0x0 [ 191.477336][ T7498] loop1: detected capacity change from 0 to 512 [ 193.301724][ T7498] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.403686][ T7498] EXT4-fs (loop1): orphan cleanup on readonly fs [ 193.439366][ T7498] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.313: Allocating blocks 41-42 which overlap fs metadata [ 193.472237][ T7498] Quota error (device loop1): write_blk: dquota write failed [ 193.481207][ T7498] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 193.491411][ T7498] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.313: Failed to acquire dquot type 0 [ 193.523699][ T7498] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 193.541538][ T7498] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.313: corrupted inode contents [ 193.595375][ T7498] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #12: comm syz.1.313: mark_inode_dirty error [ 193.613321][ T7498] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.313: corrupted inode contents [ 193.645509][ T7498] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.313: mark_inode_dirty error [ 193.669970][ T7498] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.313: corrupted inode contents [ 193.702876][ T7498] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 193.714475][ T7498] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.313: corrupted inode contents [ 193.738684][ T7498] EXT4-fs error (device loop1): ext4_truncate:4301: inode #12: comm syz.1.313: mark_inode_dirty error [ 193.771122][ T7498] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 193.798364][ T7498] EXT4-fs (loop1): 1 truncate cleaned up [ 193.955864][ T7498] EXT4-fs (loop1): pa ffff8880765803a0: logic 1, phys. 41, len 23 [ 193.964381][ T7498] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23 [ 193.989297][ T7498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.493536][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.499941][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.609945][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.097961][ T7557] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 197.141619][ T27] audit: type=1326 audit(1784173529.922:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.1.323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc497d9de59 code=0x0 [ 197.310418][ T7562] VFS: Mount too revealing [ 198.954707][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.964133][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.037339][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.045502][ T7597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.054968][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.062180][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.145247][ T7597] team0: Port device bridge0 added [ 199.198610][ T7599] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 199.292231][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.317504][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.351172][ T7599] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 199.395179][ T7599] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 199.776456][ T7609] loop0: detected capacity change from 0 to 764 [ 201.891124][ T7626] binder_alloc: 7625: pid 7625 spamming oneway? 2 buffers allocated for a total size of 5120 [ 201.923314][ T7626] binder_alloc: 7625: pid 7625 spamming oneway? 3 buffers allocated for a total size of 5128 [ 202.924760][ T7649] syzkaller0: entered promiscuous mode [ 202.930327][ T7649] syzkaller0: entered allmulticast mode [ 203.082648][ T7651] team0: Port device bridge0 removed [ 203.110668][ T7651] bridge_slave_0: left allmulticast mode [ 203.121086][ T7651] bridge_slave_0: left promiscuous mode [ 203.128620][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.154866][ T7651] bridge_slave_1: left allmulticast mode [ 203.168751][ T7651] bridge_slave_1: left promiscuous mode [ 203.178464][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.252428][ T7651] bond0: (slave bond_slave_0): Releasing backup interface [ 203.291218][ T7651] bond0: (slave bond_slave_1): Releasing backup interface [ 203.417348][ T7651] team0: Port device team_slave_0 removed [ 203.533387][ T7651] team0: Port device team_slave_1 removed [ 203.565536][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.592997][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.630083][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.649792][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.682671][ T7681] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.724109][ T969] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.745373][ T7683] loop0: detected capacity change from 0 to 1024 [ 204.939837][ T969] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.969501][ T969] usb 2-1: config 0 has an invalid interface number: 59 but max is 2 [ 204.998263][ T969] usb 2-1: config 0 has an invalid interface number: 59 but max is 2 [ 205.033029][ T969] usb 2-1: config 0 has an invalid interface number: 56 but max is 2 [ 205.071428][ T969] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 205.099990][ T969] usb 2-1: config 0 has no interface number 0 [ 205.123210][ T969] usb 2-1: config 0 has no interface number 1 [ 205.151953][ T969] usb 2-1: config 0 interface 59 has no altsetting 0 [ 205.189457][ T969] usb 2-1: config 0 interface 59 has no altsetting 1 [ 205.213004][ T969] usb 2-1: config 0 interface 56 has no altsetting 0 [ 205.287135][ T969] usb 2-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 205.301571][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.331396][ T969] usb 2-1: Product: syz [ 205.363569][ T969] usb 2-1: Manufacturer: syz [ 205.368242][ T969] usb 2-1: SerialNumber: syz [ 205.421837][ T969] usb 2-1: config 0 descriptor?? [ 205.713584][ T969] usb 2-1: bad CDC descriptors [ 205.755121][ T969] usb 2-1: bad CDC descriptors [ 205.760562][ T969] cdc_acm 2-1:0.59: Zero length descriptor references [ 205.803033][ T969] cdc_acm: probe of 2-1:0.59 failed with error -22 [ 205.864181][ T969] usb 2-1: USB disconnect, device number 7 [ 212.174027][ T7743] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.999928][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 214.003442][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 214.039557][ T7747] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 221.777923][ T7839] syzkaller0: entered promiscuous mode [ 221.793751][ T7839] syzkaller0: entered allmulticast mode [ 222.784711][ T7874] syzkaller0: entered promiscuous mode [ 222.793073][ T7874] syzkaller0: entered allmulticast mode [ 222.961037][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.8.389'. [ 229.135930][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 229.236271][ T7935] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 229.470878][ T7942] fuse: Bad value for 'fd' [ 229.494896][ T7942] 9pnet_fd: Insufficient options for proto=fd [ 230.434843][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.442736][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.267492][ T8008] netlink: 'syz.1.412': attribute type 4 has an invalid length. [ 233.750797][ T8023] syzkaller0: entered promiscuous mode [ 233.790440][ T8023] syzkaller0: entered allmulticast mode [ 234.283253][ T8034] netlink: 'syz.6.419': attribute type 1 has an invalid length. [ 234.348985][ T8034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.630413][ T8034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.703446][ T8034] bond1: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 234.725490][ T8034] bond1: (slave ip6gre0): Error -95 calling set_mac_address [ 236.632570][ T8043] bond1: entered promiscuous mode [ 236.652970][ T8043] bond1: entered allmulticast mode [ 247.855289][ T8153] loop1: detected capacity change from 0 to 64 [ 255.793071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 257.583307][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.589682][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.989944][ T8225] pim6reg: entered allmulticast mode [ 260.334934][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.8.454'. [ 260.694185][ T8235] veth5: entered allmulticast mode [ 260.725646][ T8235] bond1: (slave veth5): Enslaving as an active interface with an up link [ 260.779968][ T27] audit: type=1326 audit(1784173593.552:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8245 comm="syz.6.456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa38e39de59 code=0x0 [ 261.671156][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 262.070092][ T8281] o2cb: This node has not been configured. [ 262.076595][ T8281] o2cb: Cluster check failed. Fix errors before retrying. [ 262.084411][ T8281] (syz.8.459,8281,0):user_dlm_register:674 ERROR: status = -22 [ 262.092049][ T8281] (syz.8.459,8281,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 263.248959][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.8.467'. [ 268.045659][ T8372] tipc: Enabling of bearer rejected, failed to enable media [ 268.327757][ T5081] Bluetooth: hci1: command 0x0406 tx timeout [ 272.435722][ T8427] tipc: Enabling of bearer rejected, failed to enable media [ 279.158916][ T8510] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 279.288439][ T8510] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 283.305186][ T8552] tipc: Enabling of bearer rejected, failed to enable media [ 284.480907][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 284.752208][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.517'. [ 284.773134][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.517'. [ 284.837106][ T8570] bridge0: entered promiscuous mode [ 284.887345][ T8570] ip6gretap0: entered promiscuous mode [ 290.892342][ T8665] netlink: 'syz.6.534': attribute type 1 has an invalid length. [ 298.969594][ T5081] Bluetooth: hci3: command 0x0406 tx timeout [ 306.566931][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.6.566'. [ 310.016004][ T8844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.206039][ T8852] bond_slave_0: entered promiscuous mode [ 310.212282][ T8852] bond_slave_1: entered promiscuous mode [ 310.374007][ T8852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 310.537532][ T8852] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 312.112902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 313.423764][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 317.381320][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.388278][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.429442][ T8915] tipc: Enabling of bearer rejected, failed to enable media [ 324.928011][ T9025] tipc: Enabling of bearer rejected, failed to enable media [ 327.018808][ T9065] capability: warning: `syz.0.604' uses deprecated v2 capabilities in a way that may be insecure [ 328.231170][ T9075] vlan2: entered promiscuous mode [ 328.246426][ T9075] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 337.965224][ T9158] tipc: Enabling of bearer rejected, failed to enable media [ 340.514677][ T9188] libceph: secret too big 32 [ 346.620287][ T27] audit: type=1326 audit(1784173679.392:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.1.630" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc497d9de59 code=0x0 [ 347.539630][ T9263] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 347.807422][ T9267] bond2: (slave gretap1): making interface the new active one [ 347.818087][ T9267] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 348.575180][ T9273] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 349.036172][ T9263] macvlan2: entered promiscuous mode [ 349.041551][ T9263] macvlan2: entered allmulticast mode [ 349.073351][ T9263] bond2: entered promiscuous mode [ 349.078509][ T9263] gretap1: entered promiscuous mode [ 349.090698][ T9263] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 349.099528][ T9263] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 349.123895][ T9263] bond2: left promiscuous mode [ 349.132222][ T9263] gretap1: left promiscuous mode [ 349.221172][ T9276] tipc: Enabling of bearer rejected, failed to enable media [ 358.192865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 362.802831][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.8.672'. [ 366.016287][ T7001] IPVS: starting estimator thread 0... [ 366.196579][ T9396] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 366.265787][ T9404] IPVS: using max 16 ests per chain, 38400 per kthread [ 369.493281][ T9418] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 369.506743][ T9418] Error parsing options; rc = [-22] [ 370.992803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 371.432941][ T9440] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 372.011934][ T5814] IPVS: starting estimator thread 0... [ 372.112900][ T9441] IPVS: using max 17 ests per chain, 40800 per kthread [ 378.820112][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.826619][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.561486][ T5774] Bluetooth: hci0: Unknown advertising packet type: 0x33 [ 379.561525][ T5774] Bluetooth: hci0: Malformed LE Event: 0x0d [ 380.524126][ T9539] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 383.553726][ T5774] Bluetooth: hci0: unexpected event for opcode 0x6b2f [ 388.600518][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 390.203936][ T9610] overlayfs: failed to clone lowerpath [ 395.666758][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.732'. [ 395.682828][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.732'. [ 395.760792][ T9644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.805501][ T9644] bond2: (slave bond0): making interface the new active one [ 395.903980][ T9644] bond2: (slave bond0): Enslaving as an active interface with an up link [ 395.918864][ T9647] netlink: 'syz.6.732': attribute type 4 has an invalid length. [ 395.937852][ T9647] netlink: 152 bytes leftover after parsing attributes in process `syz.6.732'. [ 396.012251][ T9647] .`: renamed from bond0 (while UP) [ 396.077481][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.734'. [ 397.745218][ T9661] netlink: 'syz.0.726': attribute type 2 has an invalid length. [ 405.980683][ T9710] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.990255][ T9710] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.999079][ T9710] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.008002][ T9710] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.064648][ T9710] vxlan0: entered promiscuous mode [ 406.071042][ T9710] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 408.143819][ T9727] tmpfs: Unknown parameter 'nr_blocks00000000000000000000' [ 434.992764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 437.424068][ T9852] tipc: Enabling of bearer rejected, failed to enable media [ 437.576987][ T9860] tipc: Enabling of bearer rejected, failed to enable media [ 438.015778][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.785'. [ 438.028502][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.785'. [ 438.037954][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.785'. [ 438.047718][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.785'. [ 438.056777][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.785'. [ 440.994036][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.007085][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.265511][ T5081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 441.275789][ T5081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 441.284703][ T5081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 441.293748][ T5081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 441.304792][ T5081] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 441.312210][ T5081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 441.574846][ T9899] veth1_to_bond: entered allmulticast mode [ 441.612113][ T9899] veth1_to_bond: entered promiscuous mode [ 441.680618][ T9899] veth1_to_bond: left promiscuous mode [ 441.693148][ T9899] veth1_to_bond: left allmulticast mode [ 441.727437][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.765142][ T9904] batadv_slave_1: entered promiscuous mode [ 442.762390][ T9525] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.814793][ T5774] Bluetooth: hci4: command tx timeout [ 444.049297][ T9892] chnl_net:caif_netlink_parms(): no params data found [ 445.430709][ T9525] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.853022][ T5774] Bluetooth: hci4: command tx timeout [ 446.307139][ T9525] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.386265][ T9892] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.415576][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.429246][ T9892] bridge_slave_0: entered allmulticast mode [ 446.438348][ T9892] bridge_slave_0: entered promiscuous mode [ 447.195034][ T9525] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.419059][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.445107][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.452462][ T9892] bridge_slave_1: entered allmulticast mode [ 447.464401][ T9892] bridge_slave_1: entered promiscuous mode [ 447.547001][ T9892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.623447][ T9892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.716617][ T9892] team0: Port device team_slave_0 added [ 447.725820][ T9892] team0: Port device team_slave_1 added [ 447.760190][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.955704][ T5774] Bluetooth: hci4: command tx timeout [ 447.969318][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.467755][ T9892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.495938][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.503090][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.562325][ T9892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.818874][ T9892] hsr_slave_0: entered promiscuous mode [ 448.853502][ T9892] hsr_slave_1: entered promiscuous mode [ 448.863644][ T9892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.871271][ T9892] Cannot create hsr debugfs directory [ 450.163747][ T5774] Bluetooth: hci4: command tx timeout [ 454.419775][ T9892] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 454.453853][ T9892] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 454.559371][ T9892] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 454.663540][ T9892] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 455.340923][ T9892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.365912][ T9892] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.532278][T10026] netlink: 20 bytes leftover after parsing attributes in process `syz.6.818'. [ 457.939132][T10026] team0 (unregistering): Port device team_slave_0 removed [ 459.712052][T10026] team0 (unregistering): Port device team_slave_1 removed [ 461.018069][ T9517] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.025407][ T9517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.084799][ T9517] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.092125][ T9517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.273065][ T9525] hsr_slave_0: left promiscuous mode [ 461.322799][ T9525] hsr_slave_1: left promiscuous mode [ 462.470836][ T9525] veth1_macvtap: left promiscuous mode [ 462.478930][ T9525] veth0_macvtap: left promiscuous mode [ 462.503135][ T9525] veth1_vlan: left promiscuous mode [ 462.508602][ T9525] veth0_vlan: left promiscuous mode [ 463.983880][ T9525] bond1 (unregistering): (slave veth5): Releasing backup interface [ 464.014331][ T9525] bond1 (unregistering): Released all slaves [ 464.042882][ T9525] pim6reg (unregistering): left allmulticast mode [ 465.273486][ T9525] bond0 (unregistering): Released all slaves [ 465.503525][T10069] tipc: Enabled bearer , priority 0 [ 468.218904][T10108] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.831'. [ 470.169350][ T9892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.638961][ T9892] veth0_vlan: entered promiscuous mode [ 472.663963][ T9892] veth1_vlan: entered promiscuous mode [ 474.076418][ T9892] veth0_macvtap: entered promiscuous mode [ 474.145967][ T9892] veth1_macvtap: entered promiscuous mode [ 474.240957][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.261273][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.282181][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.322324][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.351098][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.382876][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.402770][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.417062][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.454923][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.488524][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.512870][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.530118][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.553133][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.592859][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.623058][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.644459][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.721114][ T9892] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.768872][ T9892] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.811397][ T9892] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.842830][ T9892] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.390746][ T9515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.408530][ T9515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.525533][ T9517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.545036][ T9517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.358979][T10177] tmpfs: Unknown parameter '/dev/cpu/#/msr' [ 486.224599][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.9.850'. [ 491.739524][T10258] overlayfs: failed to clone lowerpath [ 491.759548][T10258] overlayfs: failed to clone lowerpath [ 493.951387][T10279] syzkaller0: entered promiscuous mode [ 493.957288][T10279] syzkaller0: entered allmulticast mode [ 494.348352][T10283] trusted_key: syz.0.856 sent an empty control message without MSG_MORE. [ 496.172838][T10295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.863'. [ 496.432774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 499.417653][T10310] xt_hashlimit: size too large, truncated to 1048576 [ 499.424577][T10310] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 502.462494][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.472819][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.037326][T10377] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.876'. [ 513.813768][ T5774] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 513.824146][T10410] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 515.147393][T10424] 9pnet_fd: Insufficient options for proto=fd [ 515.493874][ T5774] Bluetooth: hci4: Malformed LE Event: 0x1b [ 516.357230][T10434] xt_CT: No such helper "pptp" [ 519.443935][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.891'. [ 520.733426][T10483] loop9: detected capacity change from 0 to 764 [ 522.534341][T10498] overlayfs: failed to clone upperpath [ 524.807831][T10503] Bluetooth: hci4: command 0x0406 tx timeout [ 525.735153][T10521] xt_CT: No such helper "pptp" [ 528.768529][T10558] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 528.776419][T10558] netlink: 40 bytes leftover after parsing attributes in process `syz.0.908'. [ 528.785833][T10558] bridge0: port 3(dummy0) entered blocking state [ 528.792835][T10558] bridge0: port 3(dummy0) entered disabled state [ 528.799331][T10558] dummy0: entered allmulticast mode [ 529.565820][T10558] dummy0: entered promiscuous mode [ 531.309380][T10588] loop9: detected capacity change from 0 to 512 [ 532.170657][T10588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.183789][T10588] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.673468][ T9892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.662810][ T7002] IPVS: starting estimator thread 0... [ 534.772900][T10600] IPVS: using max 17 ests per chain, 40800 per kthread [ 536.335103][T10624] loop9: detected capacity change from 0 to 764 [ 537.903693][T10673] loop9: detected capacity change from 0 to 512 [ 538.047123][T10673] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 538.219749][T10673] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 538.405159][T10673] EXT4-fs (loop9): 1 truncate cleaned up [ 538.704394][T10673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.272948][ T9892] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.551532][T10744] loop9: detected capacity change from 0 to 64 [ 546.571819][T10744] hfs: unable to parse mount options [ 547.152364][T10728] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 547.933327][T10752] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 548.210507][T10754] bridge0: entered promiscuous mode [ 548.217171][T10754] vlan2: entered promiscuous mode [ 557.128117][T10818] capability: warning: `syz.6.951' uses 32-bit capabilities (legacy support in use) [ 558.207249][T10830] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 558.641236][T10755] IPVS: starting estimator thread 0... [ 558.792878][T10831] IPVS: using max 16 ests per chain, 38400 per kthread [ 562.879076][ T27] audit: type=1800 audit(1784173895.652:11): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.965" name="file0" dev="overlay" ino=187 res=0 errno=0 [ 563.131155][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.138495][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.995480][T10896] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 565.233635][T10503] Bluetooth: hci4: command 0x0406 tx timeout [ 565.546538][T10907] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 565.557753][T10907] overlayfs: missing 'lowerdir' [ 566.744903][T10910] loop9: detected capacity change from 0 to 32768 [ 566.803491][T10907] mmap: syz.6.971 (10907) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 573.083738][T10969] syz.9.984 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 576.092942][ T27] audit: type=1107 audit(1784173908.802:12): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 577.709216][T11007] bridge0: entered promiscuous mode [ 577.714711][T11007] vlan3: entered promiscuous mode [ 578.276509][ T27] audit: type=1326 audit(1784173911.012:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc497d9de59 code=0x7ffc0000 [ 578.679997][ T27] audit: type=1326 audit(1784173911.012:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc497d9de59 code=0x7ffc0000 [ 579.181330][ T27] audit: type=1326 audit(1784173911.012:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc497d9de59 code=0x7ffc0000 [ 579.240245][ T27] audit: type=1326 audit(1784173911.012:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc497d9de59 code=0x7ffc0000 [ 579.268343][ T27] audit: type=1326 audit(1784173911.012:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc497d9de59 code=0x7ffc0000 [ 579.337825][ T27] audit: type=1326 audit(1784173911.022:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc497d9de59 code=0x7ffc0000 [ 579.374385][ T27] audit: type=1326 audit(1784173911.022:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc497d9de59 code=0x7ffc0000 [ 579.444286][ T27] audit: type=1326 audit(1784173911.022:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc497d9de59 code=0x7ffc0000 [ 579.612886][ T27] audit: type=1326 audit(1784173911.022:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc497d9de59 code=0x7ffc0000 [ 580.913157][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 582.060228][T11042] syz.0.999: attempt to access beyond end of device [ 582.060228][T11042] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 582.073495][T11042] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 582.181346][T11034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.407554][T11056] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9892] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11056] [ 582.487092][T11034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.057674][T11066] loop9: detected capacity change from 0 to 764 [ 583.883027][T11079] loop9: detected capacity change from 0 to 256 [ 583.890580][T11079] exfat: Deprecated parameter 'utf8' [ 583.896098][T11079] exfat: Deprecated parameter 'utf8' [ 583.901431][T11079] exfat: Deprecated parameter 'utf8' [ 584.114026][T11080] vlan2: entered promiscuous mode [ 585.189445][T11079] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7bade8ae, utbl_chksum : 0xe619d30d) [ 586.131400][T11100] overlayfs: failed to clone upperpath [ 586.746961][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1008'. [ 587.422074][T11103] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 587.431805][T11103] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 587.441748][T11103] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 587.460127][T11103] syz.6.1008 (11103) used greatest stack depth: 17416 bytes left [ 587.484950][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 587.485032][ T27] audit: type=1800 audit(1784173920.192:36): pid=11103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1008" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 588.184677][T11114] overlayfs: failed to resolve './bus': -2 [ 588.493364][T11121] pim6reg9: entered allmulticast mode [ 591.029268][T11138] vlan2: entered promiscuous mode [ 591.034536][T11138] bridge0: entered promiscuous mode [ 593.234152][ T5774] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 593.805294][T11149] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 595.812140][T11162] futex_wake_op: syz.0.1020 tries to shift op by 144; fix this program [ 605.940703][T11251] loop9: detected capacity change from 0 to 764 [ 609.072753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 610.491858][T11284] IPVS: Unknown mcast interface: vcan0 [ 612.874504][ T27] audit: type=1326 audit(1784173945.652:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11293 comm="syz.1.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc497d9de59 code=0x0 [ 613.219411][ T5774] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 613.356294][ T7002] libceph: connect (1)[c::]:6789 error -101 [ 613.372216][ T7002] libceph: mon0 (1)[c::]:6789 connect error [ 613.383901][ T7002] libceph: connect (1)[c::]:6789 error -101 [ 613.390001][ T7002] libceph: mon0 (1)[c::]:6789 connect error [ 613.672129][ T7002] libceph: connect (1)[c::]:6789 error -101 [ 613.855047][ T7002] libceph: mon0 (1)[c::]:6789 connect error [ 614.332103][T11281] ceph: No mds server is up or the cluster is laggy [ 614.799939][T11317] loop9: detected capacity change from 0 to 764 [ 616.306705][ T7002] libceph: connect (1)[c::]:6789 error -101 [ 616.343826][ T7002] libceph: mon0 (1)[c::]:6789 connect error [ 617.145369][T11326] syz_tun: entered allmulticast mode [ 618.021494][T11325] syz_tun: left allmulticast mode [ 619.862164][T11336] loop9: detected capacity change from 0 to 764 [ 621.872787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 625.156729][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.163167][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.834363][T11395] tipc: Can't bind to reserved service type 1 [ 633.210830][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1078'. [ 633.547624][ T5774] Bluetooth: hci0: hcon ffff88802f5b2000 sent 1 < count 257 [ 635.709389][T11438] syz.9.1071: attempt to access beyond end of device [ 635.709389][T11438] loop9: rw=0, sector=64, nr_sectors = 1 limit=0 [ 635.722908][T11438] syz.9.1071: attempt to access beyond end of device [ 635.722908][T11438] loop9: rw=0, sector=256, nr_sectors = 1 limit=0 [ 635.736016][T11438] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 635.746079][T11438] syz.9.1071: attempt to access beyond end of device [ 635.746079][T11438] loop9: rw=0, sector=512, nr_sectors = 1 limit=0 [ 635.759298][T11438] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 635.769065][T11438] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 635.777049][T11438] UDF-fs: Scanning with blocksize 512 failed [ 635.786243][T11438] syz.9.1071: attempt to access beyond end of device [ 635.786243][T11438] loop9: rw=0, sector=64, nr_sectors = 2 limit=0 [ 635.800228][T11438] syz.9.1071: attempt to access beyond end of device [ 635.800228][T11438] loop9: rw=0, sector=512, nr_sectors = 2 limit=0 [ 635.815274][T11438] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 635.825427][T11438] syz.9.1071: attempt to access beyond end of device [ 635.825427][T11438] loop9: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 635.838910][T11438] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 635.848939][T11438] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 635.856947][T11438] UDF-fs: Scanning with blocksize 1024 failed [ 635.864813][T11438] syz.9.1071: attempt to access beyond end of device [ 635.864813][T11438] loop9: rw=0, sector=64, nr_sectors = 4 limit=0 [ 635.878298][T11438] syz.9.1071: attempt to access beyond end of device [ 635.878298][T11438] loop9: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 635.891727][T11438] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 635.902145][T11438] syz.9.1071: attempt to access beyond end of device [ 635.902145][T11438] loop9: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 635.915592][T11438] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 635.925630][T11438] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 635.933544][T11438] UDF-fs: Scanning with blocksize 2048 failed [ 635.940938][T11438] syz.9.1071: attempt to access beyond end of device [ 635.940938][T11438] loop9: rw=0, sector=64, nr_sectors = 8 limit=0 [ 635.954469][T11438] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 635.964556][T11438] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 635.974526][T11438] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 635.982277][T11438] UDF-fs: Scanning with blocksize 4096 failed [ 635.988538][T11438] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 636.920537][T11445] loop9: detected capacity change from 0 to 764 [ 637.746293][T11457] overlayfs: failed to clone upperpath [ 639.990421][T11471] loop9: detected capacity change from 0 to 764 [ 641.351422][T11483] netlink: 'syz.9.1092': attribute type 21 has an invalid length. [ 641.359471][T11483] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1092'. [ 643.066899][T11496] bridge_slave_1: left allmulticast mode [ 643.088786][T11496] bridge_slave_1: left promiscuous mode [ 643.195027][T11496] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.270642][T11496] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 643.381419][T11498] loop9: detected capacity change from 0 to 764 [ 646.585092][T11536] loop9: detected capacity change from 0 to 128 [ 648.316844][T11549] loop9: detected capacity change from 0 to 764 [ 649.327921][T11560] loop9: detected capacity change from 0 to 128 [ 649.400181][T11560] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 649.415212][T11560] hpfs: filesystem error: improperly stopped [ 649.421925][T11560] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 649.429996][T11560] hpfs: You really don't want any checks? You are crazy... [ 649.439494][T11560] hpfs: hpfs_map_sector(): read error [ 649.445176][T11560] hpfs: code page support is disabled [ 649.464213][T11560] hpfs: hpfs_map_4sectors(): unaligned read [ 649.473189][T11560] hpfs: hpfs_map_4sectors(): unaligned read [ 649.479202][T11560] hpfs: filesystem error: unable to find root dir [ 656.320427][T11595] xt_CT: No such helper "netbios-ns" [ 657.089032][T11605] loop9: detected capacity change from 0 to 764 [ 659.779804][T11625] autofs4:pid:11625:autofs_fill_super: called with bogus options [ 662.131643][T11640] netlink: 'syz.9.1127': attribute type 10 has an invalid length. [ 664.464040][T11640] team0: Port device dummy0 added [ 666.813327][T10503] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 669.944428][T11690] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 670.023754][T11690] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 670.132503][T11690] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 672.019919][ T27] audit: type=1326 audit(1784174004.792:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.6.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e39de59 code=0x7ffc0000 [ 672.044341][ T27] audit: type=1326 audit(1784174004.792:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.6.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e39de59 code=0x7ffc0000 [ 672.070246][ T27] audit: type=1326 audit(1784174004.792:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.6.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa38e39de59 code=0x7ffc0000 [ 672.234506][ T27] audit: type=1326 audit(1784174004.792:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.6.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e39de59 code=0x7ffc0000 [ 672.259282][ T27] audit: type=1326 audit(1784174004.792:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.6.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e39de59 code=0x7ffc0000 [ 672.293009][ T27] audit: type=1326 audit(1784174004.792:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.6.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa38e39de59 code=0x7ffc0000 [ 672.317668][ T27] audit: type=1326 audit(1784174004.792:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.6.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e39de59 code=0x7ffc0000 [ 672.378721][ T27] audit: type=1326 audit(1784174004.792:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.6.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e39de59 code=0x7ffc0000 [ 672.413612][T11722] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1143'. [ 672.518880][ T27] audit: type=1326 audit(1784174004.792:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.6.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa38e39de59 code=0x7ffc0000 [ 672.843039][ T27] audit: type=1326 audit(1784174004.792:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.6.1143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e39de59 code=0x7ffc0000 [ 674.305531][T11733] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 681.403564][T11774] GUP no longer grows the stack in syz.6.1156 (11774): 200000006000-200000009000 (200000004000) [ 681.414749][T11774] CPU: 1 PID: 11774 Comm: syz.6.1156 Not tainted syzkaller #0 [ 681.422254][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 681.432370][T11774] Call Trace: [ 681.435763][T11774] [ 681.438796][T11774] dump_stack_lvl+0x18c/0x250 [ 681.443733][T11774] ? show_regs_print_info+0x20/0x20 [ 681.449052][T11774] ? load_image+0x420/0x420 [ 681.453754][T11774] ? find_vma+0x134/0x1b0 [ 681.458214][T11774] fixup_user_fault+0x691/0x750 [ 681.463144][T11774] fault_in_user_writeable+0x71/0xd0 [ 681.468511][T11774] futex_lock_pi+0x276/0xa00 [ 681.473180][T11774] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 681.478676][T11774] ? userfaultfd_unmap_prep+0x3c0/0x3c0 [ 681.484329][T11774] do_futex+0x23d/0x3e0 [ 681.488560][T11774] ? __ia32_sys_get_robust_list+0x110/0x110 [ 681.494544][T11774] __se_sys_futex+0x3a9/0x440 [ 681.499286][T11774] ? __x64_sys_futex+0xf0/0xf0 [ 681.504123][T11774] ? __x64_sys_futex+0x21/0xf0 [ 681.508982][T11774] do_syscall_64+0x55/0xb0 [ 681.513485][T11774] ? clear_bhb_loop+0x40/0x90 [ 681.518310][T11774] ? clear_bhb_loop+0x40/0x90 [ 681.523071][T11774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.529091][T11774] RIP: 0033:0x7fa38e39de59 [ 681.533614][T11774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.553421][T11774] RSP: 002b:00007fa38f1ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 681.561899][T11774] RAX: ffffffffffffffda RBX: 00007fa38e626270 RCX: 00007fa38e39de59 [ 681.569949][T11774] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 681.577978][T11774] RBP: 00007fa38e433e6f R08: 0000000000000000 R09: 0000000000000082 [ 681.586005][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.594117][T11774] R13: 00007fa38e626308 R14: 00007fa38e626270 R15: 00007fff1f2e5438 [ 681.602159][T11774] [ 683.175967][T11790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1157'. [ 683.688825][T11785] Error parsing options; rc = [-22] [ 683.808977][T11794] overlayfs: failed to resolve './cgroup': -2 [ 683.947413][T11785] loop9: detected capacity change from 0 to 64 [ 686.189447][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.195939][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.772649][T11809] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 687.901021][T11817] tc_dump_action: action bad kind [ 688.545498][T11828] overlayfs: missing 'lowerdir' [ 689.276165][T11836] loop9: detected capacity change from 0 to 764 [ 689.347873][T11832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1168'. [ 690.591708][T11846] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 690.600651][T11846] overlayfs: missing 'lowerdir' [ 694.462819][ T5774] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 695.119165][T11853] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.939882][T11870] IPVS: length: 217 != 24 [ 696.001769][T11870] 9pnet_fd: Insufficient options for proto=fd [ 696.177858][T11875] loop9: detected capacity change from 0 to 764 [ 697.518248][T11890] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 702.584612][T11918] loop9: detected capacity change from 0 to 764 [ 703.194444][T11932] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1191'. [ 703.575305][T11930] overlayfs: failed to clone lowerpath [ 705.175349][T11958] netlink: 200 bytes leftover after parsing attributes in process `syz.9.1196'. [ 706.759579][T11968] loop9: detected capacity change from 0 to 256 [ 706.938363][T11968] FAT-fs (loop9): Directory bread(block 64) failed [ 706.967731][T11968] FAT-fs (loop9): Directory bread(block 65) failed [ 706.998262][T11968] FAT-fs (loop9): Directory bread(block 66) failed [ 707.023154][T11968] FAT-fs (loop9): Directory bread(block 67) failed [ 707.029870][T11968] FAT-fs (loop9): Directory bread(block 68) failed [ 707.288201][T11968] FAT-fs (loop9): Directory bread(block 69) failed [ 707.417282][T11968] FAT-fs (loop9): Directory bread(block 70) failed [ 707.539558][T11968] FAT-fs (loop9): Directory bread(block 71) failed [ 707.638308][T11968] FAT-fs (loop9): Directory bread(block 72) failed [ 707.893099][T11968] FAT-fs (loop9): Directory bread(block 73) failed [ 707.967407][T11968] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 710.592691][T12005] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 712.182408][T12025] fuse: Unknown parameter '0x0000000000000006' [ 715.045993][T12036] loop9: detected capacity change from 0 to 764 [ 719.292818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 720.992852][T12094] netlink: 'syz.0.1228': attribute type 1 has an invalid length. [ 721.056074][T12094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 722.016380][T12105] No such timeout policy "syz1" [ 722.823989][T12094] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1228'. [ 722.890529][T12094] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 723.950128][T12116] netlink: 'syz.9.1224': attribute type 1 has an invalid length. [ 724.148816][T12117] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 724.157299][T12117] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 724.168705][T12117] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 724.177142][T12117] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 725.394593][T12134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1236'. [ 725.497661][T12137] netlink: 'syz.6.1237': attribute type 4 has an invalid length. [ 726.133980][T12154] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 726.140620][T12154] PKCS7: Only support pkcs7_signedData type [ 726.869571][T12138] udevd[12138]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 726.918887][T12114] udevd[12114]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 727.286780][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d59e400: rx timeout, send abort [ 727.295903][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d59e400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 730.160594][T12190] fuse: Bad value for 'fd' [ 730.575178][T12197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 731.270916][T12194] 9pnet_virtio: no channels available for device syz [ 734.997726][T12235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1255'. [ 735.840806][T12248] loop9: detected capacity change from 0 to 764 [ 737.468751][T12266] overlayfs: failed to clone lowerpath [ 737.938248][T12279] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 739.102763][T10503] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 739.284040][T12301] wlan0 speed is unknown, defaulting to 1000 [ 739.290268][T12301] wlan0 speed is unknown, defaulting to 1000 [ 739.300431][T12301] wlan0 speed is unknown, defaulting to 1000 [ 739.315840][T12301] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 739.335988][T12301] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 739.426628][T12301] wlan0 speed is unknown, defaulting to 1000 [ 739.470038][T12301] wlan0 speed is unknown, defaulting to 1000 [ 739.513809][T12301] wlan0 speed is unknown, defaulting to 1000 [ 739.554028][T12301] wlan0 speed is unknown, defaulting to 1000 [ 739.593221][T12301] wlan0 speed is unknown, defaulting to 1000 [ 740.610255][T12308] loop9: detected capacity change from 0 to 128 [ 742.072236][T12319] loop9: detected capacity change from 0 to 2048 [ 742.247005][T12322] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 742.330032][T10503] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 742.853945][T12334] loop9: detected capacity change from 0 to 2048 [ 745.360593][T12367] loop9: detected capacity change from 0 to 32768 [ 745.446178][T12367] loop9: p1 p9 p11 [ 746.910096][T12204] udevd[12204]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 746.926584][T12307] udevd[12307]: inotify_add_watch(7, /dev/loop9p9, 10) failed: No such file or directory [ 746.928161][T12303] udevd[12303]: inotify_add_watch(7, /dev/loop9p11, 10) failed: No such file or directory [ 747.450480][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.457867][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.874603][T10503] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 749.464228][T12413] loop9: detected capacity change from 0 to 764 [ 750.021280][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 750.378422][ T5759] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 750.820838][T12431] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 751.016131][ T5759] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 751.042713][ T5759] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.078034][ T5759] usb 10-1: config 0 descriptor?? [ 751.582627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 753.573060][ T5759] ath6kl: Failed to submit usb control message: -110 [ 753.638381][ T5759] ath6kl: unable to send the bmi data to the device: -110 [ 753.663109][T12446] team0: Device wg0 is of different type [ 753.688013][T12446] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 753.748476][ T5759] ath6kl: Unable to send get target info: -110 [ 753.789727][ T5759] ath6kl: Failed to init ath6kl core: -110 [ 753.842028][ T5759] ath6kl_usb: probe of 10-1:0.0 failed with error -110 [ 754.676215][ T5835] usb 10-1: USB disconnect, device number 2 [ 755.603003][ T5774] Bluetooth: hci4: command 0x0406 tx timeout [ 759.964948][ T5774] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 761.529585][ T5774] Bluetooth: hci4: unexpected event for opcode 0x042f [ 761.868247][T12529] loop9: detected capacity change from 0 to 2048 [ 761.974766][T12529] loop9: p4 < > [ 762.374713][T12529] loop9: detected capacity change from 0 to 4096 [ 762.519637][T12529] ntfs3: loop9: Different NTFS sector size (2048) and media sector size (512). [ 763.098837][T12529] ntfs3: loop9: $Secure::$SDH is corrupted. [ 763.160558][T12529] ntfs3: loop9: Failed to initialize $Secure (-22). [ 763.202978][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 764.009152][T12548] loop9: detected capacity change from 0 to 764 [ 769.237151][ T5774] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 769.532037][ T5774] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 769.952817][T12629] loop9: detected capacity change from 0 to 764 [ 772.232942][ T5835] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 772.426338][ T5835] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 772.447569][ T5835] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 772.469047][ T5835] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 772.489539][ T5835] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.537176][ T5835] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 772.563292][ T5835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.617399][ T5835] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 772.654507][ T5835] usb 10-1: invalid MIDI out EP 0 [ 773.018821][T12652] udevd[12652]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.198756][ T9541] [ 773.201248][ T9541] ============================================ [ 773.207429][ T9541] WARNING: possible recursive locking detected [ 773.213627][ T9541] syzkaller #0 Not tainted [ 773.218068][ T9541] -------------------------------------------- [ 773.224241][ T9541] kworker/u4:21/9541 is trying to acquire lock: [ 773.230515][ T9541] ffffe8ffffd39598 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x624/0xa40 [ 773.239827][ T9541] [ 773.239827][ T9541] but task is already holding lock: [ 773.247215][ T9541] ffffe8ffffc59408 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 773.256498][ T9541] [ 773.256498][ T9541] other info that might help us debug this: [ 773.264588][ T9541] Possible unsafe locking scenario: [ 773.264588][ T9541] [ 773.272072][ T9541] CPU0 [ 773.275383][ T9541] ---- [ 773.278701][ T9541] lock(&pd_list->lock); [ 773.283075][ T9541] lock(&pd_list->lock); [ 773.287466][ T9541] [ 773.287466][ T9541] *** DEADLOCK *** [ 773.287466][ T9541] [ 773.295650][ T9541] May be due to missing lock nesting notation [ 773.295650][ T9541] [ 773.304029][ T9541] 3 locks held by kworker/u4:21/9541: [ 773.309446][ T9541] #0: ffff88814267ad38 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 773.321502][ T9541] #1: ffffc90004d17d00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 773.333427][ T9541] #2: ffffe8ffffc59408 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 773.343198][ T9541] [ 773.343198][ T9541] stack backtrace: [ 773.349118][ T9541] CPU: 0 PID: 9541 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 773.356878][ T9541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 773.366976][ T9541] Workqueue: pencrypt_parallel padata_parallel_worker [ 773.373800][ T9541] Call Trace: [ 773.377115][ T9541] [ 773.380101][ T9541] dump_stack_lvl+0x18c/0x250 [ 773.384838][ T9541] ? show_regs_print_info+0x20/0x20 [ 773.390094][ T9541] ? print_deadlock_bug+0x435/0x5d0 [ 773.395368][ T9541] __lock_acquire+0x6809/0x7d80 [ 773.400270][ T9541] ? __lock_acquire+0x7d80/0x7d80 [ 773.405344][ T9541] ? do_raw_spin_unlock+0x121/0x230 [ 773.410600][ T9541] ? verify_lock_unused+0x140/0x140 [ 773.415849][ T9541] ? mark_lock+0x94/0x320 [ 773.420230][ T9541] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 773.426282][ T9541] ? __lock_acquire+0x7d80/0x7d80 [ 773.431384][ T9541] lock_acquire+0x19e/0x420 [ 773.435939][ T9541] ? padata_do_serial+0x624/0xa40 [ 773.441010][ T9541] ? lockdep_hardirqs_on+0x98/0x150 [ 773.446256][ T9541] ? queue_work_on+0x19a/0x1f0 [ 773.451086][ T9541] ? read_lock_is_recursive+0x20/0x20 [ 773.456512][ T9541] ? __rwlock_init+0x150/0x150 [ 773.461319][ T9541] ? generic_gcmaes_encrypt+0x289/0x3d0 [ 773.466948][ T9541] _raw_spin_lock+0x2e/0x40 [ 773.471579][ T9541] ? padata_do_serial+0x624/0xa40 [ 773.476652][ T9541] padata_do_serial+0x624/0xa40 [ 773.481558][ T9541] ? padata_parallel_worker+0x44/0x1c0 [ 773.487067][ T9541] padata_parallel_worker+0x6f/0x1c0 [ 773.492403][ T9541] ? process_scheduled_works+0x975/0x1600 [ 773.498183][ T9541] process_scheduled_works+0xa60/0x1600 [ 773.503824][ T9541] ? worker_attach_to_pool+0x370/0x370 [ 773.509335][ T9541] ? assign_work+0x3cc/0x5d0 [ 773.514024][ T9541] worker_thread+0xa5e/0xfe0 [ 773.518671][ T9541] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 773.524630][ T9541] ? _raw_spin_unlock+0x40/0x40 [ 773.529610][ T9541] ? __kthread_parkme+0x71/0x1c0 [ 773.534589][ T9541] kthread+0x2fa/0x390 [ 773.538698][ T9541] ? pr_cont_work+0x550/0x550 [ 773.543437][ T9541] ? kthread_blkcg+0xd0/0xd0 [ 773.548170][ T9541] ret_from_fork+0x48/0x80 [ 773.552641][ T9541] ? kthread_blkcg+0xd0/0xd0 [ 773.557277][ T9541] ret_from_fork_asm+0x11/0x20 [ 773.562135][ T9541] [ 773.606478][ T5835] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 773.635536][ T5835] usb 10-1: USB disconnect, device number 3 [ 773.970129][ T5759] libceph: connect (1)[c::]:6789 error -101 [ 773.976250][ T5759] libceph: mon0 (1)[c::]:6789 connect error [ 774.015737][ T5774] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 774.233751][ T5759] libceph: connect (1)[c::]:6789 error -101 [ 774.247917][ T5759] libceph: mon0 (1)[c::]:6789 connect error [ 774.631981][T12674] ceph: No mds server is up or the cluster is laggy