last executing test programs: 8m1.52962846s ago: executing program 32 (id=22): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) membarrier(0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000580)={0x1, 0x0, [{0xa5c, 0x0, 0x8}]}) 7m51.613488693s ago: executing program 33 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = msgget$private(0x0, 0x3ac) msgrcv(r1, 0x0, 0x0, 0x1, 0x1000) msgrcv(r1, 0x0, 0x15, 0x3, 0x0) msgsnd(r1, &(0x7f0000000240)={0x3}, 0x8, 0x8fa2496c381b7ad5) 6m1.009908345s ago: executing program 34 (id=1129): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x11, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 6m0.237230933s ago: executing program 35 (id=1139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}}, 0x20}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m45.081619334s ago: executing program 8 (id=1933): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2008}) write$dsp(r0, &(0x7f0000001480)="a52876980a602214f6b4e928d758f38a767cb4b3010009784ca30000000000008ad86036a6aa2e5ce38d2f15db77214a4da2dc9ffcafb2c70dc18999a63e556c9ccd39b77bc26047bbc01cdac92e317eafe185ecbcf9babde3d9c8fc95eec62888d2735fde445bb559a4cdb0e4cff1", 0x6f) 4m44.946006741s ago: executing program 8 (id=1935): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) 4m44.865212836s ago: executing program 8 (id=1938): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/80, 0x50}], 0x1, 0x0, 0x0, 0x3) 4m43.865459035s ago: executing program 8 (id=1955): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000600), 0x1, 0x42f, &(0x7f0000000940)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x3}}, 0x24, 0x1) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) 4m43.575186889s ago: executing program 8 (id=1958): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000412, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000001240)=""/4096, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001c00070c27bd70000000000008000000", @ANYRES32=r1, @ANYBLOB="3f00a20a0a000100"], 0x48}}, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x800) 4m42.621687967s ago: executing program 8 (id=1971): r0 = inotify_init() mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) inotify_add_watch(r0, &(0x7f0000000300)='./file0\x00', 0x6000189) inotify_init1(0x0) r1 = fanotify_init(0x20, 0x2) fanotify_mark(r1, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') rename(0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 4m42.55985816s ago: executing program 36 (id=1971): r0 = inotify_init() mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) inotify_add_watch(r0, &(0x7f0000000300)='./file0\x00', 0x6000189) inotify_init1(0x0) r1 = fanotify_init(0x20, 0x2) fanotify_mark(r1, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') rename(0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 4m13.641844256s ago: executing program 6 (id=2312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x2, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2400c800}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r4, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x54}}, 0x4040000) 4m13.433536136s ago: executing program 6 (id=2316): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) chdir(&(0x7f00000000c0)='./file1/file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m13.230306626s ago: executing program 6 (id=2320): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r2, 0x0, 0x200006, 0x0) 4m11.520063111s ago: executing program 6 (id=2348): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 4m11.109625021s ago: executing program 6 (id=2352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0118020003110000280012800b00010065727370616e000018000280040012000600020007000000050016"], 0x48}}, 0x4000020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 4m8.851910594s ago: executing program 6 (id=2374): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x400000000, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0xc0104d03, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}) 4m8.690910022s ago: executing program 37 (id=2374): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x400000000, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0xc0104d03, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}) 3m12.181636088s ago: executing program 9 (id=2951): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m11.965668758s ago: executing program 9 (id=2952): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x9000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m11.716124441s ago: executing program 9 (id=2955): r0 = io_uring_setup(0x5d38, &(0x7f00000001c0)={0x0, 0xcf32, 0x2, 0x3, 0x109}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) timer_settime(r2, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) close_range(r0, r0, 0x0) 3m10.764495058s ago: executing program 9 (id=2969): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 3m10.627434944s ago: executing program 9 (id=2973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000001, 0x1, 0x0, 0x4, 0x1000, 0x3ff, 0x8, 0x8, 0x8001], 0x54000, 0x100204}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0x48d, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m9.785576497s ago: executing program 9 (id=2981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 3m9.51143437s ago: executing program 38 (id=2981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 2m33.169685355s ago: executing program 2 (id=3297): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 2m32.05369218s ago: executing program 2 (id=3302): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m31.817451651s ago: executing program 2 (id=3307): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x20}}, 0x10, 0x0}, 0x0) 2m31.690171508s ago: executing program 2 (id=3312): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m31.378409694s ago: executing program 2 (id=3317): prlimit64(0x0, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000001f00000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000010) 2m31.009560652s ago: executing program 2 (id=3320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00;'], 0x50) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2m30.869478329s ago: executing program 39 (id=3320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00;'], 0x50) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2m30.8484744s ago: executing program 1 (id=3325): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) dup(0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x8000) 2m30.788913893s ago: executing program 1 (id=3326): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x3, 0x7fff0001}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24004001}, 0x40) r1 = dup(r0) clock_gettime(0x0, &(0x7f0000005dc0)) recvmmsg$unix(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000780)=""/4095, 0x1000}, {&(0x7f0000001780)=""/206, 0xce}, {&(0x7f0000001900)=""/53, 0x35}], 0x3}}], 0x4000116, 0x2, 0x0) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) io_destroy(0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x10000, 0x10, 0xf1c, 0x10000, 0xfffffffffffffffa, 0x8001, 0x8000}, 0x0, 0x0, 0x0, 0x0) 2m30.606707312s ago: executing program 1 (id=3330): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x22}, 0x94) r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m30.408406432s ago: executing program 1 (id=3334): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 2m29.890071368s ago: executing program 1 (id=3341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000030601020000000000000000070000030500010007000000615ca00a215d234844c73073e3d5d6f5af167cb577c7fa5ec49d8d3df9c402341e30cad16faab2f531dfb42bbb49f036616e5528f12d4c47a1ff558b0523afc1c738ce2a074166cda3fb9c170c341808f8e1360c7368bc3f4aa7857c33e10c3e1e1f7b6f06c059e2e036428fa0b4b6c27416657a614d02a463f8a6a0de330811fd8ed13c765e99d231aeafab4bcb6d85a8087cb7334c32"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20080) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) 2m29.24164683s ago: executing program 1 (id=3347): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r1) 2m29.102565627s ago: executing program 40 (id=3347): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r1) 4.681266318s ago: executing program 4 (id=4560): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="eb", 0x1}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) clock_gettime(0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 4.595947802s ago: executing program 4 (id=4562): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f00000007c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000002a80)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008402, &(0x7f0000000300)={[{@delalloc}, {@data_err_abort}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x4068}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b2}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@noacl}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, 0x0, 0x0, 0x9000) pwritev2(r0, 0x0, 0x0, 0x5405, 0xfffffffe, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 4.274659968s ago: executing program 4 (id=4568): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 2.070528167s ago: executing program 7 (id=4601): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002240)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c0000200002801400020020"], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.924859485s ago: executing program 7 (id=4604): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='GPL\x00'}, 0x80) 992.974961ms ago: executing program 7 (id=4609): ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040804) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, 0x0) 917.288645ms ago: executing program 4 (id=4611): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$tun(r2, &(0x7f0000003180)=ANY=[], 0x126b) lseek(0xffffffffffffffff, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 916.590765ms ago: executing program 7 (id=4612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6a7adb551b18868", 0x8, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r0, 0x1) 876.138686ms ago: executing program 3 (id=4613): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 793.645461ms ago: executing program 4 (id=4615): socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0xfffe}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 753.860533ms ago: executing program 3 (id=4616): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000001440)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) unlink(&(0x7f0000000000)='./file1/file3\x00') 744.117403ms ago: executing program 0 (id=4617): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r3) write$cgroup_devices(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 696.123506ms ago: executing program 4 (id=4618): fsmount(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x200006, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x14b042, 0x0) splice(r0, 0x0, r2, 0x0, 0xc, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101442, 0x0) 613.6091ms ago: executing program 0 (id=4619): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x50, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 607.81224ms ago: executing program 3 (id=4620): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00002db000/0x4000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000429000/0x1000)=nil) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r0, &(0x7f0000005200)={0x2020}, 0x2020) 595.587611ms ago: executing program 5 (id=4621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="b8050000009a00780000d000f30f09490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c0c4e20d3095fbffffff1d1d083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x73}], 0x1, 0x50, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 539.013443ms ago: executing program 0 (id=4622): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f00000003c0)=""/128, 0x80, 0x9) 433.736849ms ago: executing program 5 (id=4623): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@in_dx={0x69, 0x20, {0x123, 0x2}}, @out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x48}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x2) 433.413519ms ago: executing program 0 (id=4624): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}, @wr_drn={0x68, 0x20, {0x0, 0x1}}], 0x40}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x10001}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x6) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 426.986139ms ago: executing program 3 (id=4625): socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) process_vm_readv(0x0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) 383.013831ms ago: executing program 5 (id=4626): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000001c0)=""/54, 0x7e) 321.816064ms ago: executing program 0 (id=4627): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 287.435606ms ago: executing program 5 (id=4628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x40, 0x9}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x0, @empty, 0x5}}, 0x0, 0x0, 0x22, 0x0, "0a5c6ceffd1db96261998301d26735b0fcfec622a8d36ce86356e31fb6a2a8caa4b6c8b8496194a71dbc679caa154417766be8e699958b310a96e73d5487a448f5618dacd6ad978ac164dd9833adde0d"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 246.674598ms ago: executing program 0 (id=4629): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200002, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xff, 0x4703, &(0x7f0000004800)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 225.448939ms ago: executing program 3 (id=4630): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x38, {0x0, 0x10, [@uexit={0x0, 0x18, 0xfacefeed}]}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x1000000facefeed) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 178.886851ms ago: executing program 5 (id=4631): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x400000, 0x1}}, @uexit={0x0, 0x18, 0xface}], 0x68}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xface) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 85.611736ms ago: executing program 3 (id=4632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 85.317396ms ago: executing program 7 (id=4633): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x2, 0x2, 0x0, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0xface}], 0x98}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xface) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 76.036336ms ago: executing program 5 (id=4634): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 0s ago: executing program 7 (id=4635): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xc, 0x4000}}, @nested_load_code={0x12e, 0x1b, {0x0, "0f31f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x93}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 4 (level 0) [ 303.040923][T12445] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2468: invalid indirect mapped block 1819239214 (level 1) [ 303.061899][T12445] EXT4-fs (loop9): 1 truncate cleaned up [ 303.071640][T12445] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 303.197188][T12445] EXT4-fs error (device loop9): ext4_remount:6060: comm syz.9.2468: Abort forced by user [ 303.251878][ T9148] Bluetooth: hci4: command 0x0419 tx timeout [ 303.339754][T12445] EXT4-fs (loop9): re-mounted. Opts: . Quota mode: writeback. [ 304.965553][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2477'. [ 305.044710][T12495] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 305.131328][T12504] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 305.313902][T12512] loop2: detected capacity change from 0 to 7 [ 305.378358][T12326] Dev loop2: unable to read RDB block 7 [ 305.392264][T12326] loop2: AHDI p1 p2 p3 [ 305.405707][T12326] loop2: partition table partially beyond EOD, truncated [ 305.431852][T12326] loop2: p1 start 1818582900 is beyond EOD, truncated [ 305.454225][T12326] loop2: p3 start 335544320 is beyond EOD, truncated [ 305.497472][T12512] Dev loop2: unable to read RDB block 7 [ 305.511761][T12512] loop2: AHDI p1 p2 p3 [ 305.526271][T12512] loop2: partition table partially beyond EOD, truncated [ 305.549194][T12512] loop2: p1 start 1818582900 is beyond EOD, truncated [ 305.577373][T12512] loop2: p3 start 335544320 is beyond EOD, truncated [ 305.688299][T12529] netlink: 'syz.5.2486': attribute type 10 has an invalid length. [ 305.805757][T12529] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 305.871869][T12529] team0: Failed to send options change via netlink (err -105) [ 305.901748][T12529] team0: Port device dummy0 added [ 306.409324][T12562] overlayfs: failed to clone lowerpath [ 306.836779][T12545] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.844241][T12545] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.004590][T12577] overlayfs: failed to clone upperpath [ 307.617543][T12545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.669109][T12545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.146243][T12545] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.157424][T12545] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.166858][T12545] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.176474][T12545] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.426360][T12583] device batadv_slave_0 entered promiscuous mode [ 308.467645][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2503'. [ 308.603018][T12583] device batadv_slave_0 left promiscuous mode [ 308.852300][ T5739] Bluetooth: hci3: command 0x0406 tx timeout [ 309.192272][T12643] netlink: 'syz.2.2515': attribute type 9 has an invalid length. [ 309.211985][T12643] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2515'. [ 309.695720][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2525'. [ 309.750662][T12677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.757973][T12677] IPv6: NLM_F_CREATE should be set when creating new route [ 309.846833][T12674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.854158][T12674] IPv6: NLM_F_CREATE should be set when creating new route [ 310.615477][T12715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2532'. [ 310.638455][T12715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2532'. [ 310.969802][T12729] lo speed is unknown, defaulting to 1000 [ 311.343239][T12746] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 311.533227][T12755] xt_hashlimit: size too large, truncated to 1048576 [ 311.984323][T12729] netlink: 'syz.5.2537': attribute type 5 has an invalid length. [ 312.563644][T12800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2550'. [ 312.671695][T12756] ipt_CLUSTERIP: Please specify destination IP [ 313.213549][T12817] tipc: Failed to remove unknown binding: 66,0,0/2126:3317642460/3317642461 [ 314.990108][T12864] team0: Port device dummy0 removed [ 315.012696][T12864] batman_adv: batadv0: Adding interface: dummy0 [ 315.019085][T12864] batman_adv: batadv0: The MTU of interface dummy0 is too small (0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.059110][T12864] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 315.213809][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2561'. [ 315.292778][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2561'. [ 316.047457][T12911] netlink: 'syz.5.2569': attribute type 10 has an invalid length. [ 316.071785][T12911] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2569'. [ 316.127309][T12911] device team0 entered promiscuous mode [ 316.172334][T12911] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.210321][T12911] bridge0: port 1(team0) entered blocking state [ 316.240561][T12911] bridge0: port 1(team0) entered disabled state [ 316.461684][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 316.461697][ T26] audit: type=1326 audit(1774326108.433:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.0.2572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8f9256799 code=0x0 [ 317.018127][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.024512][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.654221][T12966] netlink: 'syz.0.2580': attribute type 1 has an invalid length. [ 317.729909][T12966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.828161][T12971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.881282][T12971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.926001][T12971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.961646][T12971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.006185][T12971] bond3: (slave geneve2): making interface the new active one [ 318.036586][T12971] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 318.066320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 318.600500][T12993] loop9: detected capacity change from 0 to 4096 [ 318.680565][T12993] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 318.692501][T12993] EXT4-fs (loop9): Test dummy encryption mode enabled [ 318.782661][T12993] Quota error (device loop9): v2_read_file_info: Free block number too big (32769 >= 6). [ 318.802013][T12993] EXT4-fs warning (device loop9): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 318.919685][T12993] EXT4-fs (loop9): mount failed [ 319.102219][T13005] tipc: Failed to remove unknown binding: 66,1,1/0:3803718835/3803718837 [ 319.150069][T13005] tipc: Failed to remove unknown binding: 66,1,1/0:3803718835/3803718837 [ 319.215711][T13005] tipc: Failed to remove unknown binding: 66,1,1/0:3803718835/3803718837 [ 319.601215][T13029] overlayfs: failed to clone upperpath [ 320.012852][T13042] tipc: Enabling of bearer rejected, failed to enable media [ 320.953350][ T4837] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 320.966464][T13071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.221609][ T4837] usb 10-1: Using ep0 maxpacket: 8 [ 321.358882][T13077] overlayfs: failed to clone upperpath [ 321.381701][ T4837] usb 10-1: unable to get BOS descriptor or descriptor too short [ 321.441697][ T4837] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 321.455794][ T4837] usb 10-1: can't read configurations, error -71 [ 321.600772][T13086] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2610'. [ 321.670169][T13089] x_tables: duplicate underflow at hook 3 [ 322.179607][T13098] loop9: detected capacity change from 0 to 4096 [ 322.848003][T13115] loop2: detected capacity change from 0 to 128 [ 323.119717][T13129] lo speed is unknown, defaulting to 1000 [ 323.691426][T13132] loop2: detected capacity change from 0 to 40427 [ 323.807268][T13132] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 323.841746][T13132] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 323.920465][T13132] F2FS-fs (loop2): invalid crc value [ 323.964720][T13132] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 324.121243][T13132] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 324.137728][T13132] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 324.271421][ T26] audit: type=1800 audit(1774326116.243:71): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2627" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 324.517840][T13162] loop9: detected capacity change from 0 to 512 [ 324.582118][T13162] EXT4-fs (loop9): Test dummy encryption mode enabled [ 324.611706][T13162] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 324.685788][T13162] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.2637: bad orphan inode 131083 [ 324.727190][ T26] audit: type=1800 audit(1774326116.703:72): pid=13157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2627" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 324.756187][T13162] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 324.875565][T12133] attempt to access beyond end of device [ 324.875565][T12133] loop2: rw=2049, want=45104, limit=40427 [ 325.746225][T13199] overlayfs: failed to clone upperpath [ 325.878372][T13203] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2652'. [ 326.167392][ T4837] libceph: connect (1)[c::]:6789 error -101 [ 326.174148][ T4837] libceph: mon0 (1)[c::]:6789 connect error [ 326.459578][ T4837] libceph: connect (1)[c::]:6789 error -101 [ 326.468021][ T4837] libceph: mon0 (1)[c::]:6789 connect error [ 326.972153][T13211] ceph: No mds server is up or the cluster is laggy [ 326.991923][ T4837] libceph: connect (1)[c::]:6789 error -101 [ 326.997966][ T4837] libceph: mon0 (1)[c::]:6789 connect error [ 327.025638][T13215] ceph: No mds server is up or the cluster is laggy [ 327.041901][ T4837] libceph: connect (1)[c::]:6789 error -101 [ 327.083483][ T4837] libceph: mon0 (1)[c::]:6789 connect error [ 327.398227][T13235] overlayfs: failed to clone upperpath [ 329.517585][T13279] batman_adv: batadv0: Adding interface: dummy0 [ 329.561799][T13279] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.667640][T13279] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 329.788558][T13285] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 330.130671][T13296] netlink: 'syz.9.2687': attribute type 1 has an invalid length. [ 330.313110][ T4837] libceph: connect (1)[c::]:6789 error -101 [ 330.319999][ T4837] libceph: mon0 (1)[c::]:6789 connect error [ 330.414195][T13302] ceph: No mds server is up or the cluster is laggy [ 330.779025][T13320] overlayfs: failed to clone upperpath [ 330.848633][T13324] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 331.092529][T13340] loop9: detected capacity change from 0 to 8 [ 331.132664][T13340] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 331.215202][T13125] udevd[13125]: incorrect cramfs checksum on /dev/loop9 [ 331.271500][T13125] udevd[13125]: incorrect cramfs checksum on /dev/loop9 [ 331.337069][T13340] cramfs: Error -5 while decompressing! [ 331.357714][T13340] cramfs: ffffffff964030c2(26)->ffff8880473c6000(4096) [ 331.377605][T13340] cramfs: Error -3 while decompressing! [ 331.392966][T13340] cramfs: ffffffff964030dc(16)->ffff888052d6e000(4096) [ 331.416292][T13340] cramfs: Error -5 while decompressing! [ 331.445132][T13340] cramfs: ffffffff964030c2(26)->ffff8880473c6000(4096) [ 331.464449][T13361] Invalid ELF header magic: != ELF [ 331.465703][T13350] loop2: detected capacity change from 0 to 8192 [ 331.476362][ T26] audit: type=1800 audit(1774326123.463:73): pid=13340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2704" name="file2" dev="loop9" ino=348 res=0 errno=0 [ 331.544638][T13125] loop2: p4 < > [ 331.569883][T13350] loop2: p4 < > [ 331.670989][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 331.825027][T13380] batman_adv: batadv0: Adding interface: dummy0 [ 331.849151][T13380] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.903602][T13125] udevd[13125]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 331.930485][T13380] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 331.945377][T13125] udevd[13125]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 332.328742][T13401] loop9: detected capacity change from 0 to 40427 [ 332.335555][T13411] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 332.385769][T13413] lo speed is unknown, defaulting to 1000 [ 332.433962][T13401] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 332.441864][T13401] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 332.455408][T13401] F2FS-fs (loop9): invalid crc value [ 332.492766][T13401] F2FS-fs (loop9): Found nat_bits in checkpoint [ 332.545108][T13401] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 332.552260][T13401] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 332.666532][T13413] netlink: 'syz.7.2733': attribute type 5 has an invalid length. [ 333.329953][T13430] team0: Port device dummy0 removed [ 333.342587][T13430] batman_adv: batadv0: Adding interface: dummy0 [ 333.349971][T13430] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.379182][T13430] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 333.901717][ T4837] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 334.151679][ T4837] usb 10-1: Using ep0 maxpacket: 32 [ 334.271818][ T4837] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 334.290390][ T4837] usb 10-1: config 0 has no interface number 0 [ 334.321467][ T4837] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 334.531920][ T4837] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 334.541082][ T4837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.571607][ T4837] usb 10-1: Product: syz [ 334.575924][ T4837] usb 10-1: Manufacturer: syz [ 334.580615][ T4837] usb 10-1: SerialNumber: syz [ 334.616846][ T4837] usb 10-1: config 0 descriptor?? [ 334.642014][T13450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 334.744542][T13481] lo speed is unknown, defaulting to 1000 [ 334.867873][T13450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 336.197325][T13529] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.2775'. [ 336.237146][T13529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2775'. [ 337.101732][ T4837] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 337.121613][ T4837] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 337.141718][ T4837] asix: probe of 10-1:0.188 failed with error -71 [ 337.188532][ T4837] usb 10-1: USB disconnect, device number 7 [ 337.273803][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 337.627630][T13571] tipc: Enabling of bearer rejected, failed to enable media [ 337.844191][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2795'. [ 338.172667][T13563] loop9: detected capacity change from 0 to 40427 [ 338.271762][T13563] F2FS-fs (loop9): invalid crc value [ 338.312422][T13581] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2797'. [ 338.343387][T13563] F2FS-fs (loop9): Found nat_bits in checkpoint [ 338.362554][T13581] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2797'. [ 338.492385][T13563] F2FS-fs (loop9): Cannot turn on quotas: -2 on 1 [ 338.516186][T13563] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 338.730146][T11053] attempt to access beyond end of device [ 338.730146][T11053] loop9: rw=2049, want=45104, limit=40427 [ 339.040189][T13601] loop2: detected capacity change from 0 to 32768 [ 339.093241][T13601] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2805 (13601) [ 339.131908][T13601] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 339.140657][T13601] BTRFS info (device loop2): turning on sync discard [ 339.147440][T13601] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 339.156969][T13601] BTRFS info (device loop2): use zstd compression, level 3 [ 339.164293][T13601] BTRFS info (device loop2): turning on async discard [ 339.171072][T13601] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 339.181964][T13601] BTRFS info (device loop2): trying to use backup root at mount time [ 339.190047][T13601] BTRFS info (device loop2): force zlib compression, level 3 [ 339.197493][T13601] BTRFS info (device loop2): using free space tree [ 339.204525][T13601] BTRFS info (device loop2): has skinny extents [ 339.363733][ T4247] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 339.376152][T13601] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 339.386652][ T4247] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 339.401415][T13601] BTRFS warning (device loop2): couldn't read tree root [ 339.408983][T13601] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 339.421251][T13601] BTRFS warning (device loop2): couldn't read tree root [ 339.449134][T13601] BTRFS info (device loop2): enabling ssd optimizations [ 339.457503][T13601] BTRFS info (device loop2): clearing free space tree [ 339.464465][T13601] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 339.474200][T13601] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 339.495327][T13601] BTRFS info (device loop2): creating free space tree [ 339.504110][T13601] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 339.513800][T13601] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 339.715037][T13637] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2810'. [ 340.575905][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2813'. [ 340.831187][T13668] loop2: detected capacity change from 0 to 164 [ 340.933129][T13668] rock: directory entry would overflow storage [ 340.951613][T13668] rock: sig=0x5053, size=7, remaining=4 [ 340.957783][T13668] isofs_fill_super: root inode is not a directory. Corrupted media? [ 341.474451][T13686] lo speed is unknown, defaulting to 1000 [ 341.878110][T13704] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.2839'. [ 342.985941][ T26] audit: type=1326 audit(1774326134.963:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.2.2856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9629bc799 code=0x0 [ 343.121417][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2861'. [ 343.280952][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2862'. [ 343.493325][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2865'. [ 343.559248][T13767] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2865'. [ 343.753831][ T26] audit: type=1326 audit(1774326135.733:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.7.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 343.821830][ T26] audit: type=1326 audit(1774326135.763:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.7.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 343.888695][ T26] audit: type=1326 audit(1774326135.763:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.7.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 344.007852][ T26] audit: type=1326 audit(1774326135.763:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.7.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 344.079516][ T26] audit: type=1326 audit(1774326135.763:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.7.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 344.148206][ T26] audit: type=1326 audit(1774326135.763:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.7.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 344.204527][ T26] audit: type=1326 audit(1774326135.763:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.7.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 344.313933][ T26] audit: type=1326 audit(1774326135.763:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.7.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 344.362301][ T26] audit: type=1326 audit(1774326135.763:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.7.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 344.449798][T13805] overlayfs: failed to clone upperpath [ 344.885211][T13820] overlayfs: failed to clone upperpath [ 345.144695][T13827] loop2: detected capacity change from 0 to 2048 [ 345.159387][T13830] netlink: 'syz.5.2891': attribute type 1 has an invalid length. [ 345.249302][T13830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.265574][T13835] bond3: (slave vlan3): Opening slave failed [ 345.287483][T13827] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 345.420714][T13834] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.429737][T13834] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.439267][T13834] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.448608][T13834] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.539467][ T1254] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.640115][T13851] loop2: detected capacity change from 0 to 1024 [ 345.678900][ T1254] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.737103][T13851] EXT4-fs (loop2): Ignoring removed bh option [ 345.754247][T13851] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 345.780780][ T1254] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.843311][T13851] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 345.945679][T13864] EXT4-fs (loop2): shut down requested (0) [ 345.974100][ T1254] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.014645][T13867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2901'. [ 346.079706][T13870] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 346.570946][T13895] VFS: Mount too revealing [ 347.448987][T13937] overlayfs: failed to clone upperpath [ 347.590230][ T1254] device hsr_slave_0 left promiscuous mode [ 347.608484][ T1254] device hsr_slave_1 left promiscuous mode [ 347.637470][ T1254] batman_adv: batadv0: Interface deactivated: dummy0 [ 347.669695][ T1254] batman_adv: batadv0: Removing interface: dummy0 [ 347.692412][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.719792][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.762572][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.770048][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.796597][ T1254] device vlan2 left promiscuous mode [ 347.811649][ T1254] device geneve0 left promiscuous mode [ 347.825493][ T1254] bridge0: port 3(vlan2) entered disabled state [ 347.838921][T13925] loop2: detected capacity change from 0 to 40427 [ 347.857415][ T1254] device bridge_slave_1 left promiscuous mode [ 347.870153][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.888934][ T1254] device bridge_slave_0 left promiscuous mode [ 347.889407][T13925] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 347.901960][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.929917][T13925] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 347.943567][ T1254] device veth1_macvtap left promiscuous mode [ 347.950150][ T1254] device veth0_macvtap left promiscuous mode [ 347.958916][T13925] F2FS-fs (loop2): Encoding requested by superblock is unknown [ 347.972026][ T1254] device veth1_vlan left promiscuous mode [ 347.981699][ T1254] device veth0_vlan left promiscuous mode [ 348.510146][T13925] loop2: detected capacity change from 0 to 32768 [ 348.652639][ T1254] team0 (unregistering): Port device team_slave_1 removed [ 348.661150][T13925] XFS (loop2): Mounting V5 Filesystem [ 348.699573][ T1254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.720903][T13925] XFS (loop2): Ending clean mount [ 348.734585][ T1254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.747263][T13925] XFS (loop2): Quotacheck needed: Please wait. [ 348.884337][ T1254] bond0 (unregistering): Released all slaves [ 348.904157][T13925] XFS (loop2): Quotacheck: Done. [ 348.985625][T13966] lo speed is unknown, defaulting to 1000 [ 349.198778][T13987] loop9: detected capacity change from 0 to 8 [ 349.460312][T12133] XFS (loop2): Unmounting Filesystem [ 349.615020][T14003] tipc: Enabling of bearer rejected, failed to enable media [ 350.219259][T14027] loop9: detected capacity change from 0 to 512 [ 350.270510][T14027] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 350.369580][T14027] EXT4-fs (loop9): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 350.441857][T14027] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.637778][T14027] EXT4-fs (loop9): shut down requested (1) [ 350.651132][T13125] udevd[13125]: incorrect ext4 checksum on /dev/loop9 [ 350.777349][T13125] udevd[13125]: incorrect ext4 checksum on /dev/loop9 [ 351.218043][T14057] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 352.965322][T14140] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2975'. [ 353.737783][ T1254] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.771383][ T1254] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.863497][ T1254] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.917901][ T1254] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.057983][ T1254] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.101770][ T1254] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.161941][T14173] xt_recent: Unsupported userspace flags (000000b1) [ 354.256165][ T1254] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.325444][ T1254] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.437615][T14178] lo speed is unknown, defaulting to 1000 [ 355.380362][T14205] lo speed is unknown, defaulting to 1000 [ 355.533091][T14178] chnl_net:caif_netlink_parms(): no params data found [ 355.958461][T14178] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.994295][T14178] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.029977][T14178] device bridge_slave_0 entered promiscuous mode [ 356.059654][T14178] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.095233][T14178] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.124670][T14178] device bridge_slave_1 entered promiscuous mode [ 356.168760][T14218] ODEBUG: Out of memory. ODEBUG disabled [ 356.237305][T14178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.267074][T14178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.290165][T14224] lo speed is unknown, defaulting to 1000 [ 356.372274][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 356.392526][T14178] team0: Port device team_slave_0 added [ 356.448561][T14178] team0: Port device team_slave_1 added [ 356.514531][T14178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.530256][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.605323][T14178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.658929][T14178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.668408][T14178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.752982][T14178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.884124][T14178] device hsr_slave_0 entered promiscuous mode [ 356.901323][T14178] device hsr_slave_1 entered promiscuous mode [ 356.918084][T14178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.928405][T14178] Cannot create hsr debugfs directory [ 357.080603][T14238] loop2: detected capacity change from 0 to 32768 [ 357.137895][T14238] XFS (loop2): Mounting V5 Filesystem [ 357.180797][T14238] XFS (loop2): Ending clean mount [ 357.202800][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 357.202816][ T26] audit: type=1800 audit(1774326149.183:114): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3002" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 357.234443][T14238] XFS (loop2): User initiated shutdown received. [ 357.242959][T14238] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 357.259574][T14238] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 357.316106][T12133] XFS (loop2): Unmounting Filesystem [ 357.837852][T14278] netlink: 'syz.2.3010': attribute type 1 has an invalid length. [ 357.851632][T14278] netlink: 'syz.2.3010': attribute type 4 has an invalid length. [ 357.859381][T14278] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3010'. [ 357.901012][T14281] netlink: 'syz.2.3010': attribute type 1 has an invalid length. [ 357.911737][T14281] netlink: 'syz.2.3010': attribute type 4 has an invalid length. [ 357.925583][T14281] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3010'. [ 358.020598][ T1254] device hsr_slave_0 left promiscuous mode [ 358.045581][ T1254] device hsr_slave_1 left promiscuous mode [ 358.055359][ T1254] batman_adv: batadv0: Removing interface: dummy0 [ 358.084452][ T1254] device veth1_macvtap left promiscuous mode [ 358.090501][ T1254] device veth0_macvtap left promiscuous mode [ 358.108180][ T1254] device veth1_vlan left promiscuous mode [ 358.122932][ T1254] device veth0_vlan left promiscuous mode [ 358.451790][ T4453] Bluetooth: hci2: command 0x041b tx timeout [ 358.695983][ T1254] team0 (unregistering): Port device vxcan1 removed [ 358.774176][ T1254] bond0 (unregistering): Released all slaves [ 358.859130][T14294] tipc: Started in network mode [ 358.881687][T14294] tipc: Node identity ac141441, cluster identity 4711 [ 358.893097][T14294] tipc: Enabled bearer , priority 10 [ 359.062937][T14178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.102604][T14178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.138609][T14178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.191035][T14178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.301174][T14330] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3025'. [ 359.398585][T14338] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 359.439046][ T26] audit: type=1326 audit(1774326151.413:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.7.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 359.445275][T14178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.491830][ T26] audit: type=1326 audit(1774326151.413:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.7.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 359.510125][T14178] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.560789][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.572572][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.579971][ T26] audit: type=1326 audit(1774326151.473:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.7.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 359.594342][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.621317][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.625560][ T26] audit: type=1326 audit(1774326151.473:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.7.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 359.639271][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.656055][ T26] audit: type=1326 audit(1774326151.473:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.7.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 359.659452][ T4753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.686419][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.692500][ T26] audit: type=1326 audit(1774326151.503:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.7.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 359.705893][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.738240][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.745593][ T4753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.759332][ T26] audit: type=1326 audit(1774326151.503:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.7.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 359.760640][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.798486][ T26] audit: type=1326 audit(1774326151.503:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.7.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 359.828818][ T26] audit: type=1326 audit(1774326151.513:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.7.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f255b0dd799 code=0x7ffc0000 [ 359.860168][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.892998][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.904826][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.925670][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.948562][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.960938][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.970302][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.979591][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.989035][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.998176][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.007466][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.030460][ T7764] tipc: Node number set to 2886997057 [ 360.430667][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.447577][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.469285][T14178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.531910][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 360.543411][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.558051][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.598931][T14386] serio: Serial port ttyS3 [ 360.610782][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.632446][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.668715][T14178] device veth0_vlan entered promiscuous mode [ 360.704036][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.718111][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.744470][T14178] device veth1_vlan entered promiscuous mode [ 360.856231][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.872288][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 360.897029][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.926364][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.968024][T14178] device veth0_macvtap entered promiscuous mode [ 361.026863][T14178] device veth1_macvtap entered promiscuous mode [ 361.074125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.087671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.117941][T14178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.160306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.172625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.207089][T14178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.221681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.236746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.268775][T14178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.278408][T14178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.287387][T14178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.296371][T14178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.331796][ T7764] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 361.513935][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.541559][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.563309][ T6908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 361.598076][ T6908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.626601][ T7764] usb 3-1: Using ep0 maxpacket: 32 [ 361.638565][ T6908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.662953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 361.791808][ T7764] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 361.813970][ T7764] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.835013][ T7764] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 361.864276][ T7764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.894036][ T7764] usb 3-1: config 0 descriptor?? [ 362.404134][T14456] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.567225][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'. [ 362.605377][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3061'. [ 362.614777][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 362.683717][T14456] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.726052][ T7764] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 362.883288][T14456] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.960667][T14456] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.143722][ T7764] corsair-cpro: probe of 0003:1B1C:0C10.000D failed with error -71 [ 363.169224][ T7764] usb 3-1: USB disconnect, device number 2 [ 363.200180][T14490] overlayfs: failed to clone upperpath [ 363.307786][T14456] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.370317][T14456] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.390471][T14492] fido_id[14492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 363.417169][T14456] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.460816][T14456] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.466386][T14549] overlayfs: failed to clone upperpath [ 365.807662][T14625] kvm: pic: non byte write [ 368.103072][T14730] overlayfs: upper fs does not support file handles, falling back to index=off. [ 369.553507][T14798] lo speed is unknown, defaulting to 1000 [ 369.641696][ T5739] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 370.053049][ T5739] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 370.066821][ T5739] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 370.082727][ T5739] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 370.107124][ T5739] usb 2-1: config 220 has no interface number 2 [ 370.120270][ T5739] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 370.151382][ T5739] usb 2-1: config 220 interface 0 has no altsetting 0 [ 370.177186][ T5739] usb 2-1: config 220 interface 76 has no altsetting 0 [ 370.209336][ T5739] usb 2-1: config 220 interface 1 has no altsetting 0 [ 370.457839][ T5739] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 370.474897][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.500923][ T5739] usb 2-1: Product: syz [ 370.513134][ T5739] usb 2-1: Manufacturer: syz [ 370.525587][ T5739] usb 2-1: SerialNumber: syz [ 370.932885][ T5739] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 370.939285][ T5739] usb 2-1: No valid video chain found. [ 370.961636][ T5739] usb 2-1: selecting invalid altsetting 0 [ 371.082825][ T5739] usb 2-1: selecting invalid altsetting 0 [ 371.121638][ T5739] usbtest: probe of 2-1:220.1 failed with error -22 [ 371.146575][ T5739] usb 2-1: USB disconnect, device number 2 [ 371.995944][T14901] lo speed is unknown, defaulting to 1000 [ 372.311775][ T4229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 372.601031][ T5739] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 372.648846][T14922] overlayfs: failed to clone upperpath [ 372.671810][ T4229] usb 3-1: config 0 has no interfaces? [ 372.831866][ T4229] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 372.840948][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.871067][ T4229] usb 3-1: Product: syz [ 372.881131][ T4229] usb 3-1: Manufacturer: syz [ 372.909458][ T4229] usb 3-1: SerialNumber: syz [ 372.941497][ T4229] usb 3-1: config 0 descriptor?? [ 373.301355][ T4226] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 373.398109][ T4229] usb 3-1: USB disconnect, device number 3 [ 374.257072][ T4226] usb 2-1: config 0 has no interfaces? [ 374.262999][ T4226] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 374.313417][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.343155][ T4226] usb 2-1: config 0 descriptor?? [ 374.874904][ T4259] usb 2-1: USB disconnect, device number 3 [ 375.235359][T14971] loop2: detected capacity change from 0 to 32768 [ 375.271243][T15004] netlink: 'syz.7.3176': attribute type 6 has an invalid length. [ 375.458463][T14971] XFS (loop2): Mounting V5 Filesystem [ 375.558521][T15018] lo speed is unknown, defaulting to 1000 [ 375.652113][T14971] XFS (loop2): Ending clean mount [ 375.700405][T14971] XFS (loop2): Quotacheck needed: Please wait. [ 375.881040][T14971] XFS (loop2): Quotacheck: Done. [ 375.892203][ T26] kauditd_printk_skb: 810 callbacks suppressed [ 375.892216][ T26] audit: type=1800 audit(1774326167.873:934): pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3166" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 376.008746][ T26] audit: type=1800 audit(1774326167.923:935): pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3166" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 376.094708][T14971] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 376.147084][T14971] File: /127/file0/file1 PID: 14971 Comm: syz.2.3166 [ 376.291728][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 376.348180][T12133] XFS (loop2): Unmounting Filesystem [ 376.799672][T15066] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 376.817006][T15066] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 377.560625][T15103] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3197'. [ 378.319298][T15132] loop2: detected capacity change from 0 to 8192 [ 378.404535][T15149] netlink: 'syz.1.3210': attribute type 32 has an invalid length. [ 378.458450][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.467046][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.037853][T15156] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 379.056628][T15156] FAT-fs (loop2): Filesystem has been set read-only [ 379.127399][T15156] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 379.231992][T15156] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 379.272848][T15156] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 379.638224][T15171] loop1: detected capacity change from 0 to 512 [ 379.788338][T15171] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 379.811747][T15171] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 379.855743][T15171] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3215: Corrupt directory, running e2fsck is recommended [ 379.945009][T15171] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 380.051389][T15171] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.3215: corrupted in-inode xattr [ 380.118726][T15171] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3215: couldn't read orphan inode 15 (err -117) [ 380.182079][T15171] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback. [ 380.233018][T15195] Disabled LAPIC found during irq injection [ 380.298833][T15171] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 380.343228][T15171] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 380.384837][T15171] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3215: Corrupt directory, running e2fsck is recommended [ 380.453077][T15205] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 380.510964][T15205] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 380.542043][T15205] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3215: Corrupt directory, running e2fsck is recommended [ 380.585758][T15212] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 380.666421][T15212] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 380.709046][T15212] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3215: Corrupt directory, running e2fsck is recommended [ 380.765640][T15171] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 380.812297][T15171] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.3215: path /30/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 380.979567][T15171] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 22: comm syz.1.3215: path /30/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 381.022099][T15171] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 8: comm syz.1.3215: path /30/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 381.380727][T15234] loop1: detected capacity change from 0 to 2048 [ 381.500147][T15234] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.096033][T15249] loop2: detected capacity change from 0 to 131072 [ 382.113643][T15249] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 382.120727][T15249] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 382.130712][T15249] F2FS-fs (loop2): invalid crc value [ 382.202125][T15249] F2FS-fs (loop2): Found nat_bits in checkpoint [ 382.257110][T15254] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3228: bg 0: block 234: padding at end of block bitmap is not set [ 382.337975][T15249] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 382.345175][T15249] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 382.442197][T15254] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 586 with error 28 [ 382.501675][T15254] EXT4-fs (loop1): This should not happen!! Data will be lost [ 382.501675][T15254] [ 382.534367][T15254] EXT4-fs (loop1): Total free blocks count 0 [ 382.540385][T15254] EXT4-fs (loop1): Free/Dirty block details [ 382.581793][T15254] EXT4-fs (loop1): free_blocks=0 [ 382.598950][T15254] EXT4-fs (loop1): dirty_blocks=592 [ 382.604297][T15254] EXT4-fs (loop1): Block reservation details [ 382.617490][T15254] EXT4-fs (loop1): i_reserved_data_blocks=37 [ 382.746717][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3240'. [ 382.831764][T15275] netlink: 'syz.7.3240': attribute type 2 has an invalid length. [ 383.235504][T15298] netlink: 264 bytes leftover after parsing attributes in process `syz.5.3245'. [ 383.572181][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 383.627349][T15305] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3249'. [ 383.781318][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3251'. [ 383.866627][T15314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 384.001266][T15317] device bond5 entered promiscuous mode [ 384.701584][T15313] loop1: detected capacity change from 0 to 32768 [ 384.910787][T15313] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 385.533840][T14178] ocfs2: Unmounting device (7,1) on (node local) [ 385.872446][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3260'. [ 386.110481][T15373] loop1: detected capacity change from 0 to 2048 [ 386.257248][T15373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.213205][T15383] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1438: i_size: 106496 lbcount: 110592 extent 129+110080 [ 387.710946][T15375] loop2: detected capacity change from 0 to 40427 [ 387.817081][T15375] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 387.833757][T15375] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 387.922919][T15375] F2FS-fs (loop2): Found nat_bits in checkpoint [ 388.173742][T15375] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 388.197392][T15375] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 388.308986][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3276'. [ 388.672070][T12133] attempt to access beyond end of device [ 388.672070][T12133] loop2: rw=2049, want=45112, limit=40427 [ 389.383160][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'. [ 390.156178][T15514] loop2: detected capacity change from 0 to 7 [ 390.183393][T15514] Dev loop2: unable to read RDB block 7 [ 390.203687][T15514] loop2: AHDI p1 p2 p3 [ 390.216912][T15514] loop2: partition table partially beyond EOD, truncated [ 390.237997][T15514] loop2: p1 start 1818582900 is beyond EOD, truncated [ 390.256260][T15514] loop2: p3 start 335544320 is beyond EOD, truncated [ 391.146819][T15526] overlayfs: failed to clone upperpath [ 391.320416][ T26] audit: type=1326 audit(1774326183.293:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4513de799 code=0x7ffc0000 [ 391.418412][ T26] audit: type=1326 audit(1774326183.333:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4513de799 code=0x7ffc0000 [ 391.528984][ T26] audit: type=1326 audit(1774326183.333:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4513de799 code=0x7ffc0000 [ 391.632092][ T26] audit: type=1326 audit(1774326183.333:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4513de799 code=0x7ffc0000 [ 391.696127][ T26] audit: type=1326 audit(1774326183.333:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4513de799 code=0x7ffc0000 [ 391.721611][ T26] audit: type=1326 audit(1774326183.333:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4513de799 code=0x7ffc0000 [ 391.744337][ T26] audit: type=1326 audit(1774326183.333:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4513de799 code=0x7ffc0000 [ 391.745344][T15549] all (unregistering): Released all slaves [ 391.766939][ T26] audit: type=1326 audit(1774326183.333:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4513de799 code=0x7ffc0000 [ 391.766975][ T26] audit: type=1326 audit(1774326183.333:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4513de799 code=0x7ffc0000 [ 391.767003][ T26] audit: type=1326 audit(1774326183.333:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15531 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb4513de799 code=0x7ffc0000 [ 391.906125][T15570] netlink: 'syz.0.3314': attribute type 1 has an invalid length. [ 391.985064][T15570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.175004][T15574] bond4: (slave vlan3): Opening slave failed [ 392.846708][T15617] netlink: 'syz.0.3333': attribute type 10 has an invalid length. [ 392.979530][T15609] lo speed is unknown, defaulting to 1000 [ 393.190767][T15627] loop1: detected capacity change from 0 to 8192 [ 393.213436][T15609] chnl_net:caif_netlink_parms(): no params data found [ 393.271985][T15627] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 393.341774][T15609] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.349002][T15609] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.357390][T15609] device bridge_slave_0 entered promiscuous mode [ 393.366072][T15609] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.373722][T15609] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.386775][T15609] device bridge_slave_1 entered promiscuous mode [ 393.409158][T15609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.423510][T15609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.486126][T15609] team0: Port device team_slave_0 added [ 393.500731][T15609] team0: Port device team_slave_1 added [ 393.539476][T15609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.561141][T15609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.663021][T15609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.714121][T15609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.721268][T15609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.754045][T15609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.844999][T15609] device hsr_slave_0 entered promiscuous mode [ 393.861243][T15609] device hsr_slave_1 entered promiscuous mode [ 393.888016][T15609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.905115][T15609] Cannot create hsr debugfs directory [ 394.005388][ T6908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.194749][ T6908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.311306][ T6908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.346095][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3349'. [ 394.386854][T15676] device team1 entered promiscuous mode [ 394.418178][T15676] 8021q: adding VLAN 0 to HW filter on device team1 [ 394.443269][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3349'. [ 394.508643][T15677] device team2 entered promiscuous mode [ 394.525894][T15677] 8021q: adding VLAN 0 to HW filter on device team2 [ 394.576122][ T6908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.668364][T15678] lo speed is unknown, defaulting to 1000 [ 394.903892][T15690] overlayfs: failed to clone upperpath [ 394.941741][ T4229] Bluetooth: hci4: command 0x0409 tx timeout [ 395.093432][T15678] chnl_net:caif_netlink_parms(): no params data found [ 395.226096][T15678] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.233618][T15678] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.242030][T15678] device bridge_slave_0 entered promiscuous mode [ 395.255603][T15678] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.264397][T15678] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.273158][T15678] device bridge_slave_1 entered promiscuous mode [ 395.358060][T15678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.370714][T15678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.419003][T15678] team0: Port device team_slave_0 added [ 395.442118][T15678] team0: Port device team_slave_1 added [ 395.474879][T15678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.482333][T15678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.509273][T15678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.521634][T15678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.528623][T15678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.575841][T15678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.614606][T15678] device hsr_slave_0 entered promiscuous mode [ 395.621223][T15678] device hsr_slave_1 entered promiscuous mode [ 395.628002][T15678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.636396][T15678] Cannot create hsr debugfs directory [ 396.224668][ T6908] device hsr_slave_0 left promiscuous mode [ 396.237344][ T6908] device hsr_slave_1 left promiscuous mode [ 396.245318][ T6908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.260388][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.269702][ T6908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.282546][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.300005][ T6908] device bridge_slave_1 left promiscuous mode [ 396.311235][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.336566][ T6908] device bridge_slave_0 left promiscuous mode [ 396.346821][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.395680][ T6908] device veth1_macvtap left promiscuous mode [ 396.407515][ T6908] device veth0_macvtap left promiscuous mode [ 396.415770][ T6908] device veth1_vlan left promiscuous mode [ 396.424439][ T6908] device veth0_vlan left promiscuous mode [ 396.621752][ T4225] Bluetooth: hci2: command 0x0409 tx timeout [ 396.695633][ T6908] team0 (unregistering): Port device team_slave_1 removed [ 396.729264][ T6908] team0 (unregistering): Port device team_slave_0 removed [ 396.753345][ T6908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.778077][ T6908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.905679][ T6908] bond0 (unregistering): Released all slaves [ 397.032989][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 398.118389][T15609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 398.143497][T15609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 398.171404][T15609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 398.205491][T15609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 398.291948][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.458724][T15800] xt_TPROXY: Can be used only with -p tcp or -p udp [ 398.691402][T15609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.701837][ T4445] Bluetooth: hci2: command 0x041b tx timeout [ 398.788497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.816756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.869413][T15609] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.907229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.942080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.971080][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.978214][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.017047][T15678] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 399.064181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.075443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.092243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.101763][ T4453] Bluetooth: hci4: command 0x040f tx timeout [ 399.128066][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.135206][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.160338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.181683][T15678] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 399.202366][T15678] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 399.229955][T15678] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 399.260534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.290042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 399.320455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 399.359849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.399044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 399.417389][T15609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.446983][ T5739] kernel write not supported for file bpf-prog (pid: 5739 comm: kworker/0:8) [ 399.459788][T15609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.550469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.562559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 399.592264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.611287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.636989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.671145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.810457][T15678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.859468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 399.878965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.906449][T15678] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.930558][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 399.953413][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 399.985882][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.005845][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.040517][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.047683][ T4753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.086816][T15609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.111394][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 400.129355][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 400.155327][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 400.169198][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.176346][ T4753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.217508][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 400.233945][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 400.250826][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 400.270544][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 400.281279][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 400.299653][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 400.309988][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 400.326058][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 400.338544][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 400.353092][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 400.370057][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 400.386607][T15678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 400.414273][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 400.431020][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 400.490895][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 400.509257][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.535135][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.558107][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.577610][T15609] device veth0_vlan entered promiscuous mode [ 400.606551][T15609] device veth1_vlan entered promiscuous mode [ 400.671489][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 400.690571][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 400.716579][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 400.745519][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.771728][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 400.784238][T15609] device veth0_macvtap entered promiscuous mode [ 400.818141][T15678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.837522][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 400.852516][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.860086][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.912261][T15609] device veth1_macvtap entered promiscuous mode [ 400.960100][T15609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.986206][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.005549][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.027482][T15609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.056476][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.069406][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.103172][T15609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.119040][T15609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.139002][T15609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.161571][T15609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.172146][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 401.328604][ T6908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.348703][ T6908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.390088][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 401.402884][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 401.416453][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.434737][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3403'. [ 401.462883][T15881] device team1 entered promiscuous mode [ 401.471973][T15881] 8021q: adding VLAN 0 to HW filter on device team1 [ 401.521381][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3403'. [ 401.521400][ T1254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.568827][ T1254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.572033][T15884] device team2 entered promiscuous mode [ 401.593143][T15884] 8021q: adding VLAN 0 to HW filter on device team2 [ 401.612372][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 401.627531][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 401.645886][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.662971][T15678] device veth0_vlan entered promiscuous mode [ 401.689504][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.708065][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.729561][T15678] device veth1_vlan entered promiscuous mode [ 401.800992][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 401.823129][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 401.850525][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 401.902663][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 401.924219][T15678] device veth0_macvtap entered promiscuous mode [ 401.942702][T15900] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3321'. [ 401.988507][T15900] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.996143][T15900] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.046221][T15909] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3410'. [ 402.078046][T15904] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3321'. [ 402.119372][T15904] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.126535][T15904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.134037][T15904] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.141123][T15904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.156162][T15904] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3321'. [ 402.186163][T15904] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.194481][T15904] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.227784][T15678] device veth1_macvtap entered promiscuous mode [ 402.249115][T15907] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 402.285508][T15907] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 402.316919][T15907] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 402.342306][T15907] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 402.358824][T15907] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 402.368241][T15907] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 402.386027][T15907] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 402.419108][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.446205][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.464828][T15678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.493996][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 402.514643][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 402.533222][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.549883][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.565271][T15678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.582807][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 402.603334][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 402.629319][T15678] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.661245][T15678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.676409][T15678] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.690392][T15678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.851963][ T4445] Bluetooth: hci2: command 0x0419 tx timeout [ 402.898900][ T6903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.929075][ T6903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.948862][ T6901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 402.980587][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3417'. [ 403.041231][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3417'. [ 403.101153][ T6903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.122592][ T6903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.159671][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 404.680922][T16026] loop4: detected capacity change from 0 to 128 [ 404.915922][T16035] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.419436][T16071] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3448'. [ 405.888560][T16083] loop3: detected capacity change from 0 to 32768 [ 406.014498][T16083] XFS (loop3): Mounting V5 Filesystem [ 406.064178][T16083] XFS (loop3): Ending clean mount [ 406.220615][T15609] XFS (loop3): Unmounting Filesystem [ 406.455415][T16122] netlink: 'syz.0.3458': attribute type 1 has an invalid length. [ 406.478044][T16122] netlink: 'syz.0.3458': attribute type 4 has an invalid length. [ 406.509380][T16122] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3458'. [ 406.525124][T16126] netlink: 'syz.0.3458': attribute type 1 has an invalid length. [ 406.549512][T16126] netlink: 'syz.0.3458': attribute type 4 has an invalid length. [ 406.571350][T16126] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3458'. [ 406.981633][ T4447] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 407.351851][ T4447] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.372351][ T4447] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 407.408664][ T4447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.413973][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3468'. [ 407.440694][ T4447] usb 4-1: config 0 descriptor?? [ 407.494128][ T4447] pwc: Askey VC010 type 2 USB webcam detected. [ 407.903835][T16197] tipc: Enabled bearer , priority 10 [ 407.922126][ T4447] pwc: recv_control_msg error -32 req 02 val 2b00 [ 407.971723][ T4447] pwc: recv_control_msg error -32 req 02 val 2700 [ 408.002858][T16208] 9p: Unknown uid 18446744073709551615 [ 408.011219][T16208] overlayfs: failed to clone upperpath [ 408.021718][ T4447] pwc: recv_control_msg error -32 req 02 val 2c00 [ 408.072633][ T4447] pwc: recv_control_msg error -32 req 04 val 1000 [ 408.131708][ T4447] pwc: recv_control_msg error -32 req 04 val 1300 [ 408.931878][ T4447] pwc: recv_control_msg error -32 req 04 val 1400 [ 408.971746][ T4447] pwc: recv_control_msg error -32 req 02 val 2000 [ 409.231715][ T4447] pwc: recv_control_msg error -71 req 04 val 1500 [ 409.251671][ T4447] pwc: recv_control_msg error -71 req 02 val 2500 [ 409.273698][ T4447] pwc: recv_control_msg error -71 req 02 val 2400 [ 409.311711][ T4447] pwc: recv_control_msg error -71 req 02 val 2600 [ 409.351684][ T4447] pwc: recv_control_msg error -71 req 02 val 2900 [ 409.391087][T16255] loop2: detected capacity change from 0 to 7 [ 409.397414][ T4447] pwc: recv_control_msg error -71 req 02 val 2800 [ 409.431695][ T4447] pwc: recv_control_msg error -71 req 04 val 1100 [ 409.432116][T16255] Dev loop2: unable to read RDB block 7 [ 409.454411][ T4447] pwc: recv_control_msg error -71 req 04 val 1200 [ 409.484426][ T4447] pwc: Registered as video103. [ 409.499716][T16255] loop2: AHDI p1 p2 p3 [ 409.518303][ T4447] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 409.542968][T16255] loop2: partition table partially beyond EOD, truncated [ 409.584735][ T4447] usb 4-1: USB disconnect, device number 6 [ 409.589374][T16255] loop2: p1 start 1818582900 is beyond EOD, truncated [ 409.626035][T16255] loop2: p3 start 335544320 is beyond EOD, truncated [ 410.499437][T16292] loop3: detected capacity change from 0 to 128 [ 411.121688][ T9148] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 411.371732][ T9148] usb 4-1: Using ep0 maxpacket: 16 [ 411.501740][ T9148] usb 4-1: config 0 has no interfaces? [ 411.507520][ T9148] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 411.535129][ T9148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.575246][ T9148] usb 4-1: config 0 descriptor?? [ 412.018393][ T9148] usb 4-1: USB disconnect, device number 7 [ 412.108129][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 412.108143][ T26] audit: type=1326 audit(1774326204.083:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16346 comm="syz.5.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf147b2799 code=0x7ffc0000 [ 412.192036][T16351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3514'. [ 412.223365][ T26] audit: type=1326 audit(1774326204.113:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16346 comm="syz.5.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdf147b2799 code=0x7ffc0000 [ 412.355044][ T26] audit: type=1326 audit(1774326204.113:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16346 comm="syz.5.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf147b2799 code=0x7ffc0000 [ 412.407956][ T26] audit: type=1326 audit(1774326204.113:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16346 comm="syz.5.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf147b2799 code=0x7ffc0000 [ 412.520668][ T26] audit: type=1326 audit(1774326204.123:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16346 comm="syz.5.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdf147b2799 code=0x7ffc0000 [ 412.586258][ T26] audit: type=1326 audit(1774326204.123:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16346 comm="syz.5.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf147b2799 code=0x7ffc0000 [ 412.656717][ T26] audit: type=1326 audit(1774326204.123:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16346 comm="syz.5.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf147b2799 code=0x7ffc0000 [ 412.714968][ T26] audit: type=1326 audit(1774326204.123:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16346 comm="syz.5.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdf147b2799 code=0x7ffc0000 [ 412.774155][ T26] audit: type=1326 audit(1774326204.123:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16346 comm="syz.5.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf147b2799 code=0x7ffc0000 [ 412.888805][ T26] audit: type=1326 audit(1774326204.123:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16346 comm="syz.5.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdf147b2799 code=0x7ffc0000 [ 413.124953][T16393] VFS: Mount too revealing [ 413.144539][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3526'. [ 413.184721][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3526'. [ 413.821918][T16426] loop4: detected capacity change from 0 to 1024 [ 414.868228][T16486] VFS: Mount too revealing [ 415.023996][T16492] loop4: detected capacity change from 0 to 512 [ 417.231748][ T4447] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 417.333173][T16553] fuse: Bad value for 'fd' [ 417.481619][ T4447] usb 5-1: Using ep0 maxpacket: 16 [ 417.601876][ T4447] usb 5-1: config 0 has no interfaces? [ 417.607473][ T4447] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 417.671437][ T4447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.730577][ T4447] usb 5-1: config 0 descriptor?? [ 418.211758][ T4447] usb 5-1: USB disconnect, device number 9 [ 420.648471][T16667] cgroup: fork rejected by pids controller in /syz5 [ 423.427541][T16791] device bond4 entered promiscuous mode [ 423.443292][T16797] cgroup: fork rejected by pids controller in /syz3 [ 423.740752][T16856] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 423.787744][T16843] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.814893][T16843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.704675][T16887] bond5: (slave veth25): Enslaving as an active interface with a down link [ 425.483685][ T5739] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 425.902012][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.917534][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.937276][ T5739] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 425.953354][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.978634][ T5739] usb 5-1: config 0 descriptor?? [ 426.367328][T16995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3627'. [ 426.417405][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3627'. [ 426.439165][T16999] netlink: 'syz.0.3627': attribute type 10 has an invalid length. [ 426.551816][ T5739] usbhid 5-1:0.0: can't add hid device: -71 [ 426.557832][ T5739] usbhid: probe of 5-1:0.0 failed with error -71 [ 426.597269][ T5739] usb 5-1: USB disconnect, device number 10 [ 428.144793][T17030] lo speed is unknown, defaulting to 1000 [ 428.439510][T17043] device bridge1 entered promiscuous mode [ 429.703246][T17103] bond6: (slave bridge7): making interface the new active one [ 429.748031][T17103] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 430.082874][T17124] loop4: detected capacity change from 0 to 4096 [ 430.684303][T13125] Trying to write to read-only block-device loop4 [ 431.679654][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3672'. [ 432.301531][ C0] sched: RT throttling activated [ 432.823293][T17207] device vlan2 entered promiscuous mode [ 432.893222][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 433.578099][T17242] netlink: 'syz.4.3689': attribute type 6 has an invalid length. [ 433.977705][T17260] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3693'. [ 434.223899][T17273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3697'. [ 434.343134][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'. [ 434.458587][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3699'. [ 434.624410][T17291] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3701'. [ 435.034283][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3706'. [ 436.566774][ T4225] libceph: connect (1)[c::]:6789 error -101 [ 436.574069][ T4225] libceph: mon0 (1)[c::]:6789 connect error [ 437.271718][T17337] ceph: No mds server is up or the cluster is laggy [ 437.491762][T17369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3731'. [ 437.581971][ T4225] libceph: connect (1)[c::]:6789 error -101 [ 437.587978][ T4225] libceph: mon0 (1)[c::]:6789 connect error [ 439.893935][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.900253][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.324192][T17429] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 440.541124][T17433] device bridge0 entered promiscuous mode [ 440.707415][ T26] kauditd_printk_skb: 1851 callbacks suppressed [ 440.707430][ T26] audit: type=1804 audit(1774326232.683:2836): pid=17446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3738" name="bus" dev="ramfs" ino=79111 res=1 errno=0 [ 440.840233][ T26] audit: type=1804 audit(1774326232.723:2837): pid=17446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3738" name="bus" dev="ramfs" ino=79111 res=1 errno=0 [ 440.944547][T17451] device bridge8 entered promiscuous mode [ 441.015066][T17451] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 445.442148][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801c019c00: rx timeout, send abort [ 445.770620][ T6903] tipc: Left network mode [ 445.816421][T17583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3773'. [ 445.942226][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e0d8800: rx timeout, send abort [ 445.950580][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801c019c00: abort rx timeout. Force session deactivation [ 446.450471][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e0d8800: abort rx timeout. Force session deactivation [ 447.718441][T17615] ceph: No mds server is up or the cluster is laggy [ 448.841458][T17662] netlink: 'syz.5.3791': attribute type 1 has an invalid length. [ 449.018387][T17662] device bond6 entered promiscuous mode [ 449.077701][T17662] 8021q: adding VLAN 0 to HW filter on device bond6 [ 449.205473][T17664] device veth27 entered promiscuous mode [ 449.255441][T17664] bond6: (slave veth27): making interface the new active one [ 449.296351][T17664] bond6: (slave veth27): Enslaving as an active interface with an up link [ 449.311809][ T6908] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 449.334786][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3796'. [ 449.360641][T17677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3796'. [ 449.424338][T17677] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.433309][T17677] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.442091][T17677] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.450763][T17677] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.540466][T17680] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.598399][T17680] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.645394][T17686] lo speed is unknown, defaulting to 1000 [ 450.426223][ T6903] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 450.455118][ T6903] device bridge5 left promiscuous mode [ 450.565698][ T6903] bond3 (unregistering): Released all slaves [ 451.159415][ T6903] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 451.274783][ T4445] libceph: connect (1)[c::]:6789 error -22 [ 451.280964][ T4445] libceph: mon0 (1)[c::]:6789 connect error [ 451.288238][ T6903] bond2 (unregistering): Released all slaves [ 451.369755][T17708] ceph: No mds server is up or the cluster is laggy [ 451.478496][ T6903] bond1 (unregistering): (slave bond0): Releasing active interface [ 451.525842][ T6903] bond1 (unregistering): Released all slaves [ 451.593429][ T4445] libceph: connect (1)[c::]:6789 error -22 [ 451.601803][ T4445] libceph: mon0 (1)[c::]:6789 connect error [ 451.773136][T17726] loop4: detected capacity change from 0 to 2048 [ 452.635864][ T6903] bond0 (unregistering): Released all slaves [ 452.744357][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3806'. [ 453.308349][ T7] libceph: connect (1)[c::]:6789 error -101 [ 453.314939][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 453.661670][ T4226] libceph: connect (1)[c::]:6789 error -101 [ 453.688972][T17772] loop4: detected capacity change from 0 to 256 [ 453.707578][ T4226] libceph: mon0 (1)[c::]:6789 connect error [ 454.006287][T17772] /dev/loop4: Can't open blockdev [ 454.122093][T17765] ceph: No mds server is up or the cluster is laggy [ 454.376615][T17770] loop4: detected capacity change from 0 to 4096 [ 454.426145][T17770] /dev/loop4: Can't open blockdev [ 454.698386][T17791] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3824'. [ 454.738075][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3825'. [ 455.007320][T17805] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3828'. [ 455.134923][T17810] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 455.683143][T17821] 9pnet: Insufficient options for proto=fd [ 455.937663][T17834] loop4: detected capacity change from 0 to 256 [ 456.049748][T17834] exfat: Deprecated parameter 'utf8' [ 456.101862][T17834] /dev/loop4: Can't open blockdev [ 456.933612][ T7764] libceph: connect (1)[c::]:6789 error -101 [ 456.976069][ T7764] libceph: mon0 (1)[c::]:6789 connect error [ 458.013889][ T7] libceph: connect (1)[c::]:6789 error -101 [ 458.020349][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 458.146796][T17865] tipc: Failed to remove unknown binding: 66,1,1/2126:3076309538/3076309540 [ 458.162851][T17865] tipc: Failed to remove unknown binding: 66,1,1/2126:3076309538/3076309540 [ 458.193772][T17855] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.204354][T17865] tipc: Failed to remove unknown binding: 66,1,1/2126:3076309538/3076309540 [ 458.308599][T17855] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.387062][T17850] ceph: No mds server is up or the cluster is laggy [ 458.440621][T17855] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.638966][T17855] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.896840][T17855] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.958061][T17855] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.794222][T17855] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.838523][T17855] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.861960][T17907] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 460.097458][T17918] overlayfs: failed to clone upperpath [ 460.814607][T17911] loop4: detected capacity change from 0 to 40427 [ 461.087767][ T26] audit: type=1326 audit(1774326253.063:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.3.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 461.215886][ T26] audit: type=1326 audit(1774326253.093:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.3.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 461.367707][ T26] audit: type=1326 audit(1774326253.093:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.3.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 461.437058][T17974] netlink: 'syz.3.3877': attribute type 10 has an invalid length. [ 461.536588][ T26] audit: type=1326 audit(1774326253.093:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.3.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 461.568711][T17974] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 461.696894][ T26] audit: type=1326 audit(1774326253.093:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.3.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 461.828755][ T26] audit: type=1326 audit(1774326253.093:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.3.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 461.960973][ T26] audit: type=1326 audit(1774326253.093:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.3.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 462.024719][ T26] audit: type=1326 audit(1774326253.093:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.3.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 462.099527][ T26] audit: type=1326 audit(1774326253.093:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.3.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 462.205650][ T26] audit: type=1326 audit(1774326253.093:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17963 comm="syz.3.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbffcb2842b code=0x7ffc0000 [ 462.397014][T18024] loop4: detected capacity change from 0 to 256 [ 462.434526][T18024] /dev/loop4: Can't open blockdev [ 464.481319][T18094] binder: 18093:18094 ioctl c0306201 2000000003c0 returned -14 [ 464.534179][T18095] binder_alloc: 18093: pid 18093 spamming oneway? 1 buffers allocated for a total size of 5240 [ 464.668561][T18100] : renamed from vlan0 [ 465.516950][T18139] overlayfs: failed to clone upperpath [ 465.720096][T18138] process 'newroot/106/bus/file0' started with executable stack [ 465.987079][T18155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.109547][T18163] overlayfs: failed to clone upperpath [ 466.931229][T18189] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3929'. [ 467.165545][T18202] ptrace attach of "./syz-executor exec"[4184] was attempted by "\x0a #     H  k  [ 468.569802][T18275] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 468.868279][T18275] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 468.931891][T18275] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 469.188486][T18309] loop4: detected capacity change from 0 to 2048 [ 469.616626][T18333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3964'. [ 469.620819][T18331] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000007 [ 471.233771][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3972'. [ 472.643014][T18414] tipc: Started in network mode [ 472.647919][T18414] tipc: Node identity 4, cluster identity 4711 [ 472.702001][T18414] tipc: Node number set to 4 [ 473.178701][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3993'. [ 474.967156][T18490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 476.131659][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 476.972929][T18549] netlink: 'syz.7.4016': attribute type 10 has an invalid length. [ 477.237583][T18567] x_tables: duplicate underflow at hook 3 [ 477.249702][T18565] loop4: detected capacity change from 0 to 512 [ 477.407471][T18573] overlayfs: failed to clone upperpath [ 477.480749][T18578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4027'. [ 480.128528][T18666] 9pnet: p9_client_clunk (18666): Trying to clunk with invalid fid [ 480.147195][T18666] CPU: 1 PID: 18666 Comm: syz.4.4050 Not tainted syzkaller #0 [ 480.154687][T18666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.164773][T18666] Call Trace: [ 480.168063][T18666] [ 480.171007][T18666] dump_stack_lvl+0x188/0x250 [ 480.175706][T18666] ? show_regs_print_info+0x20/0x20 [ 480.180941][T18666] ? load_image+0x400/0x400 [ 480.185460][T18666] ? v9fs_fid_find+0x2d1/0x320 [ 480.190246][T18666] p9_client_clunk+0x2b3/0x380 [ 480.195029][T18666] v9fs_statfs+0x1b7/0x380 [ 480.199456][T18666] ? v9fs_drop_inode+0x130/0x130 [ 480.204414][T18666] fd_statfs+0x18e/0x390 [ 480.208675][T18666] __x64_sys_fstatfs+0x11d/0x260 [ 480.213629][T18666] ? __ia32_sys_statfs64+0x2a0/0x2a0 [ 480.218930][T18666] ? __context_tracking_exit+0x4c/0x80 [ 480.224410][T18666] ? __lock_acquire+0x7d10/0x7d10 [ 480.229468][T18666] ? lockdep_hardirqs_on+0x94/0x140 [ 480.234703][T18666] do_syscall_64+0x4c/0xa0 [ 480.239128][T18666] ? clear_bhb_loop+0x30/0x80 [ 480.243905][T18666] ? clear_bhb_loop+0x30/0x80 [ 480.248601][T18666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.254700][T18666] RIP: 0033:0x7f7d15241799 [ 480.259136][T18666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.278930][T18666] RSP: 002b:00007f7d1349b028 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 480.287360][T18666] RAX: ffffffffffffffda RBX: 00007f7d154bafa0 RCX: 00007f7d15241799 [ 480.295347][T18666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 480.303331][T18666] RBP: 00007f7d152d7c99 R08: 0000000000000000 R09: 0000000000000000 [ 480.311316][T18666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.319300][T18666] R13: 00007f7d154bb038 R14: 00007f7d154bafa0 R15: 00007fff6dea6888 [ 480.327304][T18666] [ 480.540752][T18684] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 480.578104][T18688] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4059'. [ 481.986897][T18743] kvm: pic: non byte write [ 484.055610][T18805] ptrace attach of "./syz-executor exec"[4333] was attempted by "\x0a #     H  k  [ 484.297223][T18816] sctp: [Deprecated]: syz.3.4089 (pid 18816) Use of int in max_burst socket option deprecated. [ 484.297223][T18816] Use struct sctp_assoc_value instead [ 484.432846][T18795] loop4: detected capacity change from 0 to 32768 [ 484.508063][T18795] /dev/loop4: Can't open blockdev [ 484.571662][T18795] loop_set_status: loop4 () has still dirty pages (nrpages=6) [ 485.971445][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 485.971459][ T26] audit: type=1326 audit(1774326277.943:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18892 comm="syz.5.4111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf147b2799 code=0x0 [ 487.016485][T18934] overlayfs: failed to clone upperpath [ 489.567799][T18968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4114'. [ 489.580488][T18971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4118'. [ 490.742074][T19045] sctp: [Deprecated]: syz.5.4136 (pid 19045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.742074][T19045] Use struct sctp_sack_info instead [ 491.024801][T19058] team0: Port device vlan2 added [ 491.146355][T19075] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4143'. [ 491.401749][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4149'. [ 493.856953][T19181] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4167'. [ 493.904917][T19181] device ip6gre1 entered promiscuous mode [ 493.942342][T19183] netlink: 'syz.7.4168': attribute type 27 has an invalid length. [ 494.038180][T19189] netlink: 'syz.5.4167': attribute type 6 has an invalid length. [ 494.071737][T19189] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4167'. [ 495.716353][T19249] overlayfs: failed to clone upperpath [ 496.118684][T19273] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4190'. [ 497.117680][T19292] netlink: 'syz.3.4198': attribute type 27 has an invalid length. [ 498.114362][T19345] loop4: detected capacity change from 0 to 512 [ 498.140333][T19350] netlink: 'syz.0.4220': attribute type 1 has an invalid length. [ 499.236127][T19391] overlayfs: failed to clone upperpath [ 499.918647][T19419] netlink: 'syz.4.4231': attribute type 1 has an invalid length. [ 499.975914][T19419] bond1: (slave geneve2): Error -99 calling set_mac_address [ 500.153336][T19423] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4232'. [ 500.238182][T19423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4232'. [ 501.107170][T19467] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.116948][T19467] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.125418][T19467] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.133829][T19467] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.344316][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.350681][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.495577][T19508] lo speed is unknown, defaulting to 1000 [ 502.529237][T19508] lo speed is unknown, defaulting to 1000 [ 502.562447][T19508] lo speed is unknown, defaulting to 1000 [ 502.598079][T19508] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 502.694162][T19508] lo speed is unknown, defaulting to 1000 [ 502.727716][T19508] lo speed is unknown, defaulting to 1000 [ 502.762587][T19508] lo speed is unknown, defaulting to 1000 [ 502.796126][T19508] lo speed is unknown, defaulting to 1000 [ 502.808776][T19508] lo speed is unknown, defaulting to 1000 [ 502.818411][T19508] lo speed is unknown, defaulting to 1000 [ 503.135108][T19543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4258'. [ 503.394075][T19559] loop4: detected capacity change from 0 to 256 [ 504.705120][T19618] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 504.714977][T19616] overlayfs: failed to clone upperpath [ 504.746503][T19618] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4275'. [ 504.779703][T19619] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4276'. [ 505.191301][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4282'. [ 505.351174][T19648] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4285'. [ 507.370930][T19682] syz.5.4299[19682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.371029][T19682] syz.5.4299[19682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.399980][T19686] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 507.464353][T19688] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4298'. [ 507.764202][T19704] overlayfs: failed to clone upperpath [ 510.209889][T19727] loop4: detected capacity change from 0 to 32768 [ 510.293626][T19727] /dev/loop4: Can't open blockdev [ 510.567619][T19777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4313'. [ 510.619645][T19777] device macvtap1 entered promiscuous mode [ 511.490117][T19811] kvm: pic: single mode not supported [ 511.490138][T19811] kvm: pic: level sensitive irq not supported [ 511.510401][T19811] kvm: pic: single mode not supported [ 511.530600][T19811] kvm: pic: single mode not supported [ 511.536245][T19811] kvm: pic: level sensitive irq not supported [ 511.586327][T19811] kvm: pic: single mode not supported [ 511.592523][T19811] kvm: pic: level sensitive irq not supported [ 511.648835][T19811] kvm: pic: level sensitive irq not supported [ 511.668543][T19811] kvm: pic: single mode not supported [ 511.675573][T19811] kvm: pic: single mode not supported [ 511.680997][T19811] kvm: pic: level sensitive irq not supported [ 513.070930][T19841] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4329'. [ 513.117049][ T7764] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 513.167419][T19846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4329'. [ 513.707251][ T7764] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 513.729482][ T7764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.758500][ T7764] usb 5-1: Product: syz [ 513.766318][ T7764] usb 5-1: Manufacturer: syz [ 513.781190][ T7764] usb 5-1: SerialNumber: syz [ 513.828109][ T7764] usb 5-1: config 0 descriptor?? [ 513.922221][ T7764] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 515.754637][T19950] device bond5 entered promiscuous mode [ 517.025809][T19971] netlink: 'syz.7.4360': attribute type 1 has an invalid length. [ 517.066430][T19971] 8021q: adding VLAN 0 to HW filter on device bond8 [ 517.144955][ T7764] gspca_stk1135: reg_w 0x203 err -71 [ 517.153373][ T7764] gspca_stk1135: serial bus timeout: status=0x00 [ 517.170871][ T7764] gspca_stk1135: Sensor write failed [ 517.194951][ T7764] gspca_stk1135: serial bus timeout: status=0x00 [ 517.202534][ T7764] gspca_stk1135: Sensor write failed [ 517.217831][ T7764] gspca_stk1135: serial bus timeout: status=0x00 [ 517.224841][ T7764] gspca_stk1135: Sensor read failed [ 517.230061][ T7764] gspca_stk1135: serial bus timeout: status=0x00 [ 517.236538][ T7764] gspca_stk1135: Sensor read failed [ 517.241864][ T7764] gspca_stk1135: Detected sensor type unknown (0x0) [ 517.248489][ T7764] gspca_stk1135: serial bus timeout: status=0x00 [ 517.260511][ T7764] gspca_stk1135: Sensor read failed [ 517.271594][ T7764] gspca_stk1135: serial bus timeout: status=0x00 [ 517.279060][ T7764] gspca_stk1135: Sensor read failed [ 517.284505][ T7764] gspca_stk1135: serial bus timeout: status=0x00 [ 517.291460][ T7764] gspca_stk1135: Sensor write failed [ 517.297403][ T7764] gspca_stk1135: serial bus timeout: status=0x00 [ 517.306854][ T7764] gspca_stk1135: Sensor write failed [ 517.314829][ T7764] stk1135: probe of 5-1:0.0 failed with error -71 [ 517.343141][ T7764] usb 5-1: USB disconnect, device number 11 [ 517.367495][T19973] bond8: (slave ip6gretap0): making interface the new active one [ 517.385379][T19973] bond8: (slave ip6gretap0): Enslaving as an active interface with an up link [ 517.409305][T19971] device veth1 entered promiscuous mode [ 517.425704][T19971] bond8: (slave veth1): Enslaving as an active interface with a down link [ 517.437970][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4365'. [ 517.461773][T19986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4366'. [ 517.536309][T19986] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 517.549824][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 517.649425][T19998] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4371'. [ 517.888962][T20008] siw: device registration error -23 [ 517.930371][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4377'. [ 517.942491][T20016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.738820][T20016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.819816][T20011] lo speed is unknown, defaulting to 1000 [ 519.011724][ T7764] Bluetooth: hci4: command 0x0406 tx timeout [ 519.026681][ T7764] Bluetooth: hci2: command 0x0406 tx timeout [ 519.089804][T20038] lo speed is unknown, defaulting to 1000 [ 519.118014][T20040] device veth0_vlan left promiscuous mode [ 519.299804][T20011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4376'. [ 519.639295][T20054] lo speed is unknown, defaulting to 1000 [ 519.683785][T20025] loop4: detected capacity change from 0 to 40427 [ 519.879425][T20061] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4387'. [ 520.533877][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4394'. [ 520.929245][T20110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4398'. [ 520.981042][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4398'. [ 521.179580][T20122] x_tables: unsorted underflow at hook 2 [ 522.152695][T20139] netlink: 'syz.0.4407': attribute type 1 has an invalid length. [ 522.258588][T20139] 8021q: adding VLAN 0 to HW filter on device bond6 [ 522.280655][T20145] device ipip0 entered promiscuous mode [ 522.306700][T20150] loop2: detected capacity change from 0 to 7 [ 522.337024][T20145] 8021q: adding VLAN 0 to HW filter on device bond6 [ 522.360556][T19724] Dev loop2: unable to read RDB block 7 [ 522.367750][T19724] loop2: AHDI p1 p2 p3 [ 522.382287][T20145] bond6: (slave ipip0): The slave device specified does not support setting the MAC address [ 522.394805][T19724] loop2: partition table partially beyond EOD, truncated [ 522.414677][T19724] loop2: p1 start 1818582900 is beyond EOD, truncated [ 522.434029][T19724] loop2: p3 start 335544320 is beyond EOD, truncated [ 522.454529][T20150] Dev loop2: unable to read RDB block 7 [ 522.458977][T20145] bond6: (slave ipip0): Error -95 calling set_mac_address [ 522.465815][T20150] loop2: AHDI p1 p2 p3 [ 522.471653][T20150] loop2: partition table partially beyond EOD, truncated [ 522.494887][T20150] loop2: p1 start 1818582900 is beyond EOD, truncated [ 522.511694][T20150] loop2: p3 start 335544320 is beyond EOD, truncated [ 522.700546][T20169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4411'. [ 522.726864][T20171] overlayfs: failed to clone upperpath [ 524.882422][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4432'. [ 525.068760][T20266] overlayfs: failed to clone lowerpath [ 525.104621][ T1254] bond0: (slave bond_slave_0): interface is now down [ 525.121857][ T1254] bond0: (slave bond_slave_1): interface is now down [ 525.128790][ T1254] bond0: (slave wlan1): interface is now down [ 525.182964][T20268] bond0: ARP monitoring cannot be used with MII monitoring [ 525.254430][ T1254] bond0: (slave wlan1): link status definitely down, disabling slave [ 525.951187][ T26] audit: type=1800 audit(1774326317.921:2889): pid=20276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4439" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 526.299924][T20319] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4450'. [ 526.508128][T20329] 9pnet: p9_fd_create_unix (20329): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 527.285502][T20341] device wg1 entered promiscuous mode [ 527.408155][T20349] xt_hashlimit: size too large, truncated to 1048576 [ 527.751711][T20361] PKCS8: Unsupported PKCS#8 version [ 529.463773][T20438] netlink: 16158 bytes leftover after parsing attributes in process `syz.3.4479'. [ 530.635082][T20502] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 530.635082][T20502] Q&|xX [ 531.291371][T20528] overlayfs: failed to clone upperpath [ 531.622016][T20538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4509'. [ 531.826784][T20547] overlayfs: failed to clone upperpath [ 532.016163][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4512'. [ 532.084949][ T26] audit: type=1326 audit(1774326324.064:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.3.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 532.156268][ T26] audit: type=1326 audit(1774326324.064:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.3.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 532.231391][ T26] audit: type=1326 audit(1774326324.064:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.3.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 532.280074][ T26] audit: type=1326 audit(1774326324.064:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.3.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 532.338986][ T26] audit: type=1326 audit(1774326324.064:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.3.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 532.406798][ T26] audit: type=1326 audit(1774326324.064:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.3.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 532.463796][ T26] audit: type=1326 audit(1774326324.064:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.3.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 532.512975][ T26] audit: type=1326 audit(1774326324.064:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.3.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 532.584795][ T26] audit: type=1326 audit(1774326324.064:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.3.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 532.629557][ T26] audit: type=1326 audit(1774326324.064:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20561 comm="syz.3.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbffcb28799 code=0x7ffc0000 [ 532.800701][T20585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4518'. [ 533.683291][T20629] device sit0 entered promiscuous mode [ 533.713307][T20629] netlink: 'syz.3.4527': attribute type 1 has an invalid length. [ 533.738744][T20629] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4527'. [ 534.318681][T20657] overlayfs: failed to clone upperpath [ 534.661444][T20641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.856647][T20641] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.865738][T20641] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.876453][T20641] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.948651][T20641] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.957722][T20641] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.966636][T20641] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.082218][ T4225] lo speed is unknown, defaulting to 1000 [ 535.086551][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4533'. [ 535.223287][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4535'. [ 538.359544][T20773] overlayfs: failed to clone upperpath [ 538.531937][T20781] 9pnet: Insufficient options for proto=fd [ 538.780408][T20793] loop4: detected capacity change from 0 to 256 [ 538.834433][T20793] /dev/loop4: Can't open blockdev [ 538.932409][T20793] loop4: detected capacity change from 0 to 1024 [ 539.404546][T20669] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 539.806640][T20669] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 539.832444][T20669] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 539.843053][T20669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.854338][T20669] usb 5-1: config 0 descriptor?? [ 539.948177][T20839] sctp: [Deprecated]: syz.0.4580 (pid 20839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.948177][T20839] Use struct sctp_sack_info instead [ 540.012526][T20846] overlayfs: failed to clone upperpath [ 540.030802][T20849] device sit0 left promiscuous mode [ 540.037603][T20848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4584'. [ 540.447943][T20889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.505028][T20889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.585241][T20889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.663677][T20889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.166079][T20891] device vxlan0 left promiscuous mode [ 541.171664][T20891] device ip6tnl1 left promiscuous mode [ 541.177818][T20891] device bond5 left promiscuous mode [ 541.248856][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4601'. [ 541.279499][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4601'. [ 541.332539][T20904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.333024][T20899] lo speed is unknown, defaulting to 1000 [ 542.348573][ T4225] usb 5-1: USB disconnect, device number 12 [ 542.578479][T20944] overlayfs: failed to clone upperpath [ 543.223450][T20982] ------------[ cut here ]------------ [ 543.250436][T20982] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 543.283818][T20982] WARNING: CPU: 1 PID: 20982 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 543.368490][T20982] Modules linked in: [ 543.386434][T20990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.412607][T20982] CPU: 0 PID: 20982 Comm: syz.3.4632 Not tainted syzkaller #0 [ 543.439348][T20982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.505139][T20982] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 543.535900][T20982] Code: 39 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 20 39 8b 4c 89 e6 89 ea e8 05 86 71 00 <0f> 0b e9 07 fd ff ff e8 a9 2d 39 f8 0f 0b e9 b1 fe ff ff e8 9d 2d [ 543.596500][T20982] RSP: 0018:ffffc9000351f248 EFLAGS: 00010246 [ 543.616516][T20982] RAX: d47e68ff58d8ad00 RBX: 0000000000400000 RCX: 0000000000080000 [ 543.637302][T20982] RDX: ffffc9000db3b000 RSI: 0000000000006be2 RDI: 0000000000006be3 [ 543.662297][T20982] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 543.680527][T20982] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88804ac70000 [ 543.710877][T20982] R13: ffff88804ac71290 R14: ffff8880783d8e40 R15: ffff88804ac72268 [ 543.735073][T20982] FS: 00007fbffad826c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 543.754458][T20982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.761490][T20982] CR2: 00007fbffa91f000 CR3: 0000000024e46000 CR4: 00000000003506e0 [ 543.790212][T20982] Call Trace: [ 543.800322][T20982] [ 543.810437][T20982] ? netif_carrier_off+0x31/0xc0 [ 543.820569][T20982] ieee80211_ocb_leave+0x26f/0x320 [ 543.840812][T20982] __cfg80211_leave_ocb+0x219/0x3f0 [ 543.854868][T20982] cfg80211_leave_ocb+0x53/0x70 [ 543.859785][T20982] cfg80211_change_iface+0x4f1/0xeb0 [ 543.885573][T20982] nl80211_set_interface+0x5a7/0x7e0 [ 543.890927][T20982] ? nl80211_dump_interface+0x5c0/0x5c0 [ 543.916368][T20982] ? mutex_lock_nested+0x17/0x20 [ 543.936450][T20982] genl_rcv_msg+0xcea/0xf90 [ 543.941015][T20982] ? genl_bind+0x380/0x380 [ 543.956986][T20982] ? verify_lock_unused+0x140/0x140 [ 543.963341][T20982] ? verify_lock_unused+0x140/0x140 [ 543.968949][T20982] ? nl80211_dump_interface+0x5c0/0x5c0 [ 543.996535][T20982] netlink_rcv_skb+0x1f5/0x440 [ 544.001355][T20982] ? genl_bind+0x380/0x380 [ 544.006886][T20982] ? netlink_ack+0xb50/0xb50 [ 544.011509][T20982] ? __lock_acquire+0x7d10/0x7d10 [ 544.021039][T20982] ? down_read+0x1aa/0x2e0 [ 544.025551][T20982] genl_rcv+0x24/0x40 [ 544.029539][T20982] netlink_unicast+0x774/0x920 [ 544.039963][T20982] netlink_sendmsg+0x8ba/0xbe0 [ 544.044929][T20982] ? netlink_getsockopt+0x570/0x570 [ 544.050234][T20982] ? aa_sock_msg_perm+0x94/0x150 [ 544.059701][T20982] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 544.066337][T20982] ? security_socket_sendmsg+0x7c/0xa0 [ 544.071823][T20982] ? netlink_getsockopt+0x570/0x570 [ 544.081530][T20982] ____sys_sendmsg+0x5b7/0x8f0 [ 544.086480][T20982] ? __sys_sendmsg_sock+0x30/0x30 [ 544.091527][T20982] ? import_iovec+0x6f/0xa0 [ 544.100581][T20982] ___sys_sendmsg+0x236/0x2e0 [ 544.105351][T20982] ? __sys_sendmsg+0x2a0/0x2a0 [ 544.110169][T20982] __se_sys_sendmsg+0x1af/0x290 [ 544.119469][T20982] ? __x64_sys_sendmsg+0x80/0x80 [ 544.124485][T20982] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 544.130570][T20982] ? lockdep_hardirqs_on+0x94/0x140 [ 544.140185][T20982] do_syscall_64+0x4c/0xa0 [ 544.144819][T20982] ? clear_bhb_loop+0x30/0x80 [ 544.149512][T20982] ? clear_bhb_loop+0x30/0x80 [ 544.158841][T20982] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 544.164819][T20982] RIP: 0033:0x7fbffcb28799 [ 544.169663][T20982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.194912][T20982] RSP: 002b:00007fbffad82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.204096][T20982] RAX: ffffffffffffffda RBX: 00007fbffcda1fa0 RCX: 00007fbffcb28799 [ 544.212254][T20982] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 544.220245][T20982] RBP: 00007fbffcbbec99 R08: 0000000000000000 R09: 0000000000000000 [ 544.228351][T20982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.236351][T20982] R13: 00007fbffcda2038 R14: 00007fbffcda1fa0 R15: 00007ffd5fb627a8 [ 544.244443][T20982] [ 544.247505][T20982] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 544.254788][T20982] CPU: 0 PID: 20982 Comm: syz.3.4632 Not tainted syzkaller #0 [ 544.262771][T20982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.272833][T20982] Call Trace: [ 544.276110][T20982] [ 544.279038][T20982] dump_stack_lvl+0x188/0x250 [ 544.283729][T20982] ? show_regs_print_info+0x20/0x20 [ 544.288969][T20982] ? load_image+0x400/0x400 [ 544.293486][T20982] panic+0x2e5/0x810 [ 544.297397][T20982] ? bpf_jit_dump+0xd0/0xd0 [ 544.301921][T20982] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 544.308337][T20982] __warn+0x248/0x2b0 [ 544.312326][T20982] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 544.318750][T20982] report_bug+0x1b7/0x2e0 [ 544.323097][T20982] handle_bug+0x3a/0x70 [ 544.327258][T20982] exc_invalid_op+0x16/0x40 [ 544.331765][T20982] asm_exc_invalid_op+0x16/0x20 [ 544.336620][T20982] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 544.344085][T20982] Code: 39 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 20 39 8b 4c 89 e6 89 ea e8 05 86 71 00 <0f> 0b e9 07 fd ff ff e8 a9 2d 39 f8 0f 0b e9 b1 fe ff ff e8 9d 2d [ 544.363779][T20982] RSP: 0018:ffffc9000351f248 EFLAGS: 00010246 [ 544.369851][T20982] RAX: d47e68ff58d8ad00 RBX: 0000000000400000 RCX: 0000000000080000 [ 544.377827][T20982] RDX: ffffc9000db3b000 RSI: 0000000000006be2 RDI: 0000000000006be3 [ 544.385805][T20982] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 544.393784][T20982] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88804ac70000 [ 544.401763][T20982] R13: ffff88804ac71290 R14: ffff8880783d8e40 R15: ffff88804ac72268 [ 544.409765][T20982] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 544.416188][T20982] ? netif_carrier_off+0x31/0xc0 [ 544.421135][T20982] ieee80211_ocb_leave+0x26f/0x320 [ 544.426271][T20982] __cfg80211_leave_ocb+0x219/0x3f0 [ 544.431477][T20982] cfg80211_leave_ocb+0x53/0x70 [ 544.436339][T20982] cfg80211_change_iface+0x4f1/0xeb0 [ 544.441643][T20982] nl80211_set_interface+0x5a7/0x7e0 [ 544.446949][T20982] ? nl80211_dump_interface+0x5c0/0x5c0 [ 544.452513][T20982] ? mutex_lock_nested+0x17/0x20 [ 544.457465][T20982] genl_rcv_msg+0xcea/0xf90 [ 544.461987][T20982] ? genl_bind+0x380/0x380 [ 544.466423][T20982] ? verify_lock_unused+0x140/0x140 [ 544.471634][T20982] ? verify_lock_unused+0x140/0x140 [ 544.476851][T20982] ? nl80211_dump_interface+0x5c0/0x5c0 [ 544.482601][T20982] netlink_rcv_skb+0x1f5/0x440 [ 544.487368][T20982] ? genl_bind+0x380/0x380 [ 544.491791][T20982] ? netlink_ack+0xb50/0xb50 [ 544.496385][T20982] ? __lock_acquire+0x7d10/0x7d10 [ 544.501413][T20982] ? down_read+0x1aa/0x2e0 [ 544.505819][T20982] genl_rcv+0x24/0x40 [ 544.509785][T20982] netlink_unicast+0x774/0x920 [ 544.514547][T20982] netlink_sendmsg+0x8ba/0xbe0 [ 544.519322][T20982] ? netlink_getsockopt+0x570/0x570 [ 544.524508][T20982] ? aa_sock_msg_perm+0x94/0x150 [ 544.529433][T20982] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 544.534705][T20982] ? security_socket_sendmsg+0x7c/0xa0 [ 544.540159][T20982] ? netlink_getsockopt+0x570/0x570 [ 544.545333][T20982] ____sys_sendmsg+0x5b7/0x8f0 [ 544.550083][T20982] ? __sys_sendmsg_sock+0x30/0x30 [ 544.555093][T20982] ? import_iovec+0x6f/0xa0 [ 544.559580][T20982] ___sys_sendmsg+0x236/0x2e0 [ 544.564243][T20982] ? __sys_sendmsg+0x2a0/0x2a0 [ 544.569021][T20982] __se_sys_sendmsg+0x1af/0x290 [ 544.573884][T20982] ? __x64_sys_sendmsg+0x80/0x80 [ 544.578809][T20982] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 544.584789][T20982] ? lockdep_hardirqs_on+0x94/0x140 [ 544.589972][T20982] do_syscall_64+0x4c/0xa0 [ 544.594374][T20982] ? clear_bhb_loop+0x30/0x80 [ 544.599032][T20982] ? clear_bhb_loop+0x30/0x80 [ 544.603714][T20982] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 544.609612][T20982] RIP: 0033:0x7fbffcb28799 [ 544.614015][T20982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.633627][T20982] RSP: 002b:00007fbffad82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.642054][T20982] RAX: ffffffffffffffda RBX: 00007fbffcda1fa0 RCX: 00007fbffcb28799 [ 544.650027][T20982] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 544.657987][T20982] RBP: 00007fbffcbbec99 R08: 0000000000000000 R09: 0000000000000000 [ 544.665941][T20982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.673895][T20982] R13: 00007fbffcda2038 R14: 00007fbffcda1fa0 R15: 00007ffd5fb627a8 [ 544.681969][T20982] [ 544.685320][T20982] Kernel Offset: disabled [ 544.690887][T20982] Rebooting in 86400 seconds..