last executing test programs: 25m58.418180679s ago: executing program 32 (id=219): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/306], 0x1, 0xc32, &(0x7f0000000e00)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000380)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@test_dummy_encryption_v1}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f0000000000)={[{@shortname_winnt}, {@fat=@gid}, {@shortname_lower}, {@shortname_winnt}, {@shortname_lower}]}, 0x11, 0x305, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 25m41.611079546s ago: executing program 33 (id=303): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0xa, 0x3, 0x87) close(0x3) r2 = socket$inet(0x2b, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 25m38.234625786s ago: executing program 34 (id=321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300), &(0x7f0000000400)=""/154}, 0x20) 25m30.355848061s ago: executing program 35 (id=279): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec77a000) kexec_load(0x2, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000, 0x2000000}], 0x0) 25m24.434415545s ago: executing program 36 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "1000", 0x44, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x6488, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0x4c289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1, 0x4}, 0x2, {0x200004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 25m3.777031626s ago: executing program 37 (id=531): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 24m28.547645775s ago: executing program 38 (id=811): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x4d0d) 24m25.092349745s ago: executing program 39 (id=839): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x22) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r1}, './file1\x00'}) 23m28.564948316s ago: executing program 40 (id=1264): socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x3, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000070479940a5043530efb80102030109020a"], 0x0) 22m46.926897218s ago: executing program 41 (id=1588): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) write$P9_RVERSION(r2, 0x0, 0x13) close(0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 21m12.090317951s ago: executing program 42 (id=2350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 20m47.811677278s ago: executing program 43 (id=2521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x1, 0x80, 0x7, 0x400, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x67, 0x0, 0x6, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x32}}}}}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x24, 0x0, &(0x7f0000000480)=0xffffff57) 20m35.41690022s ago: executing program 44 (id=2621): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$char_usb(r2, &(0x7f0000000000)="ef", 0x1) write$6lowpan_control(r2, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 20m20.731595446s ago: executing program 7 (id=2740): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) unshare(0x8040480) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c085}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 20m19.404934805s ago: executing program 7 (id=2761): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r1, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000010280)='./file0\x00') 20m19.213430278s ago: executing program 7 (id=2764): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 20m18.968213882s ago: executing program 7 (id=2770): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, 0x0) 20m18.709349296s ago: executing program 7 (id=2773): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 20m18.339629151s ago: executing program 7 (id=2777): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) pselect6(0xffffff7f, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x2]}, 0x8}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 20m18.139729324s ago: executing program 45 (id=2777): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) pselect6(0xffffff7f, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x2]}, 0x8}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 19m41.755978549s ago: executing program 0 (id=3129): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r0) 19m41.592437852s ago: executing program 0 (id=3130): r0 = socket$kcm(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @empty, 0x4e20, 0x3, 'wlc\x00', 0x3, 0xa7e, 0x100070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e23, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@private=0xa010101, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xce, 0x40000000}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 19m41.473603933s ago: executing program 0 (id=3131): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x437, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000000)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r3, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 19m41.261263856s ago: executing program 0 (id=3135): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e949e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 19m41.127005788s ago: executing program 0 (id=3139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 19m40.690468945s ago: executing program 0 (id=3149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x400) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 19m40.405040259s ago: executing program 46 (id=3149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x400) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 9m39.210250826s ago: executing program 3 (id=6571): sched_setparam(0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x30040a9, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_off, 0x3a}], [], 0x2f}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 9m37.455086501s ago: executing program 3 (id=6578): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x100, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 9m35.399464791s ago: executing program 3 (id=6584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xd, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x7}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="70b7f0", 0x5dc}], 0x1}, 0x0) 9m35.234697124s ago: executing program 3 (id=6585): set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5d2, &(0x7f00000006c0)="$eJzs3c1rHOcdB/DvrNey1wVHSezELYGKGNJSUVvSorTqpW4pRYdQQnroWdjrePFaCdKmKKEU9/3aQ/6A9KBbT4XeDem5veWqY6DQS066uczs7GpjKYoUy95V/PmIZ57nmWfmmWd+87I7u4gN8MxanU/zQYqszr+xVdZ3ttu9ne32vWE5ybkkjaQ5yFKsJ8XHyY0MUr5Zzqy7K75oOx92V9765LOdTwe1Zp2q5RuHrXc09+uUuSRn6vyk+rv52P0Voz0sA3Z1GDiYtIf73D/O6o953QLToBi8bu4zm1xIcr5+H5D67tB4uqM7ece6ywEAAMAp9dxudrOVi5MeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwm9e//F3VqDMtzKYa//z9Tz0tdPtUeTHoAAAAAAAAAAHACvr2b3Wzl4rD+sKi+83+1qlyqpt/Ie9lMJxu5lq2spZ9+NrKYZHaso5mttX5/Y/EIay4duObS09lfAAAAAAAAAPia+n1W977/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAaVAkZwZZlS4Ny7NpNJOcTzJTLnc/+c+wfJo9mPQAAAAA4Cl4bje72crFYf1hUT3zv1Q995/Pe1lPP93000snt6rPAgZP/Y2d7XZvZ7t9r0z7+/3J/441jKrHDD57OHjLV6olWrmdbjXnWm7mnfRyK41qzdKV4XgOHtfvyjEVP64dcWS36rzc87/W+XSYrSJydhSRhXpsZTSePzwSxzw6j25pMY3RJz+XnkDML9R5uT9/nuqYL42dfS8dHonkO//8+6/u9Nbv3rm9OT89u/QVPRqJ9lgkXn6mIrFQReLyqL6an+eXmc9c3sxGuvl11tJPJ3P5WVVaq8/ncjp7eKRufK725peNZKY+LoO76PHG9Gq17sV084u8k1vp5PXqbymL+UGWs5yVsSN8+QhXfeN4V/3V79aFVpK/1Pl0KOP6/Fhcx++5s1Xb+Jy9KL1w8vfG5rfqQrmNP9T5dHg0EotjkXjx8Ej87WE53eyt3924s/buEbf3Wp2X19GfpupVojxfXigPVlX7/NlRtr14YNti1XZp1NbY13Z51PZlV+pM/R5uf09LVdvLB7a1q7YrY20Hvd8CYOpd+N6FmdZ/W/9ufdT6Y+tO643zPz33w3OvzOTsv87+qLlw5rXGK8U/8lF+u/f8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHWb739wd63X62woKCgojAqTvjMBT9r1/r13r2++/8H3u/fW3u683VlfWV5eWVhZfr19/Xa311kYTCc9SuBJ2HvRn/RIAAAAAAAAAAAAgKN6Gv9OMOl9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE631fk0H6TI4sK1hbK+s93ulWlY3luymaSRpPhNUnyc3MggZXasu+KLtvNhd+WtTz7b+XSvr+Zw+cZh6x3N/TplLsmZOj+p/m4+dn/FaA/LgF0dBg4m7f8BAAD//w+LD6w=") creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40025b0c, &(0x7f0000000000)={0x103, 0x200, 0x0, 0x101, 0x5, 0x7f77901d}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 9m28.921320176s ago: executing program 3 (id=6607): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) 9m22.479951689s ago: executing program 3 (id=6628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) unlink(&(0x7f0000000280)='./file1\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file2\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x90000000}) close(0x3) r3 = mq_open(0x0, 0x2, 0x0, &(0x7f0000000200)={0x2, 0xae3, 0x100, 0x3}) mq_notify(r3, &(0x7f0000000380)={0x0, 0x3b, 0x1, @thr={&(0x7f00000002c0)="64b86834c149ddd78afe9ff18ca9f0de151c26ac0954118b67edd8460507b7e363bc05cfb8e9175436fbb43cc43f1ea4dd13654b3e4643b5c58f3cab514c724ee8e58fb45434ca65bce40f6cd52f37d9196a6f6d55c89c6a", &(0x7f0000000340)="e42e42a15a19171058af80403e69b7d04d"}}) 9m20.637473006s ago: executing program 47 (id=6628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) unlink(&(0x7f0000000280)='./file1\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file2\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x90000000}) close(0x3) r3 = mq_open(0x0, 0x2, 0x0, &(0x7f0000000200)={0x2, 0xae3, 0x100, 0x3}) mq_notify(r3, &(0x7f0000000380)={0x0, 0x3b, 0x1, @thr={&(0x7f00000002c0)="64b86834c149ddd78afe9ff18ca9f0de151c26ac0954118b67edd8460507b7e363bc05cfb8e9175436fbb43cc43f1ea4dd13654b3e4643b5c58f3cab514c724ee8e58fb45434ca65bce40f6cd52f37d9196a6f6d55c89c6a", &(0x7f0000000340)="e42e42a15a19171058af80403e69b7d04d"}}) 8m46.856136888s ago: executing program 9 (id=6800): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) capset(&(0x7f0000000100)={0x20080522}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m46.746759799s ago: executing program 9 (id=6801): r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4800) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 8m46.408048764s ago: executing program 9 (id=6802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000240), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000050000009500000000000000c3492895246348bf79855db116f785cc6b65"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create(0x100) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x600) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000380)={0x90000004}) 8m45.543289787s ago: executing program 9 (id=6806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xc, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 8m45.129320043s ago: executing program 9 (id=6808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x200042, 0x4}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) 8m44.374836374s ago: executing program 9 (id=6812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000980)=@migrate={0xd8, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@loopback}}, @migrate={0x50, 0x11, [{@in=@broadcast, @in=@multicast1, @in=@multicast2, @in6=@remote}]}]}, 0xd8}}, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@name={'name', 0x3d, '_-\x10].-@*'}}]}) 8m28.669541853s ago: executing program 48 (id=6812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000980)=@migrate={0xd8, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@loopback}}, @migrate={0x50, 0x11, [{@in=@broadcast, @in=@multicast1, @in=@multicast2, @in6=@remote}]}]}, 0xd8}}, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@name={'name', 0x3d, '_-\x10].-@*'}}]}) 5m2.780141291s ago: executing program 4 (id=7509): socket$pptp(0x18, 0x1, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) io_uring_enter(r1, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) 5m2.073520681s ago: executing program 4 (id=7516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, &(0x7f00000003c0)) 4m59.801370824s ago: executing program 4 (id=7521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(r1, 0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/163, 0xa3}, {&(0x7f0000001100)=""/86, 0x56}, {0x0}], 0x3, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x21b0, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32], 0x3c}}, 0x0) 4m58.150254138s ago: executing program 4 (id=7523): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000002c0)=0x2c) io_setup(0x9, &(0x7f0000000340)=0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) io_submit(r3, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r4, 0x0}]) io_cancel(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x4a, 0xffffffffffffffff, &(0x7f0000000000)="6d51133714ebca4dde74c0d7f9dd", 0xe, 0x1, 0x0, 0x1}, 0x0) 4m51.754360711s ago: executing program 4 (id=7533): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x1, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000480)={@private2, 0x18, r8}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 4m50.680441867s ago: executing program 4 (id=7539): r0 = syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsv0}, {@i_version}, {@jqfmt_vfsv0}, {@nombcache}]}, 0x1, 0x7b8, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x8c0) 4m34.878755247s ago: executing program 49 (id=7539): r0 = syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsv0}, {@i_version}, {@jqfmt_vfsv0}, {@nombcache}]}, 0x1, 0x7b8, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x8c0) 24.00361586s ago: executing program 5 (id=8107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}}, 0x20}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x44}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4000) 22.141892697s ago: executing program 5 (id=8113): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) ptrace(0xffffffffffffffff, 0x0) 20.185073626s ago: executing program 5 (id=8118): socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) io_setup(0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 17.220113799s ago: executing program 8 (id=8125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='geneve0\x00', 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r3, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x4004010) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @rand_addr=0x64010101}, 0x10) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x7, "3eb05b"}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 17.029232141s ago: executing program 2 (id=8126): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@arp={0x806, @generic={0x4d99d0b4842805fb, 0x8906, 0x6, 0x0, 0x3, @local, "", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}}}}, 0x0) 16.913354433s ago: executing program 8 (id=8127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24048040) io_uring_setup(0x4a86, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000022c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES32], 0x2, 0xc36, &(0x7f0000002540)="$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") r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 15.347313006s ago: executing program 8 (id=8128): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 15.08043052s ago: executing program 2 (id=8130): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f1, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2808000, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$eJzs3c1qY1UcAPD/TZM0VSFZuBLBC7pwFabzBBOkwmBWSha60cHpgCSh0EDAD4xduRdc+Q6+gw/gxjdw4VJwZxfilfTem6+mrYE0HcLvt8k/55z/+cppC4V78tmbw/7zs9GLi29+j0YjicqTeBKXSbSiEqXvAgDYJ5dZFn9lubvaVqMeEVmzeFfZwfQAgHuwyd9/AGA/fPTxJx90ut2TD9O0ETH8ftxLIn/N6zsv4osYxGk8imb8E5HN5PFrT7snUU3T8p8B46PoRQw//bV43/kz4ir/OJrRup7//tPuyXGai3eGk3FvOvL0tRavJBGdLMk7ehzNeD0iq0XRyTz/8Zr86NXj3bd/Kub/72m0oxm/fR5nMYjnV13M8789TtP3sh///jpfQS8imYx7h1ft5rKDnX0oAAAAAAAAAAAAAAAAAAAAAADsvXY601q8P6e8DbDdXl9/4/1AxQ0/k4X7dR6laVpe4zPu1SLPr8Yb1ag+3MoBAAAAAAAAAAAAAAAAAADg5TH68qv+s8Hg9Hwp+CVbLbk7qC6UlI/1b5C+FPR/jtg86/8EcVBMbZBcGyIpq7Yw1uEmjY/WDRqVm/awOoh88j9sPrG3trXAW4PydPWfJXFH48b6Q7JwMo+Kzs5Hya2HdjnI1mzdwY1Z9S2tvf7qdjdzuuLabDOX2zSmn+RCSW3LPykrknv5/QMAAAAAAAAAAAAAAAAAAMzNH/qNP65VXjzIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5+bf/z8LorVashpMiuTb2pTB4flozbCtHS8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPfdfAAAA///SBV2L") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 14.951716432s ago: executing program 8 (id=8131): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8004) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xfffff) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a36, 0x202}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x37ea}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 13.128168998s ago: executing program 6 (id=8132): r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18030000000000000000000000000080851000000600000018000000000000000000000000020000660002000000000018000000000000000000000000000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) listen(r0, 0xff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x815}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000002200)={0xa, 0x4e1f, 0xfffffffd, @empty, 0xb}, 0x1c) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) 12.818354563s ago: executing program 1 (id=8133): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44c, &(0x7f0000000b40)="$eJzs28tvG8UfAPDv2kn6/iW/qjz6AAIFEV5Jk5bSKwgkDkVCgkM5hiStQt0GNUGiVQSBQzmiSpy4II5I/AWc4IKAExJXuKNKFcqlgZPR2ruN49hJHZws1J+PtPHM7toz390de2YnG0DPGk7/JBH7I+LXiBisZ9fuMFx/WVlenPpzeXEqiWr1jT+S2n63lxen8l3z9+3LM30RpV1JHG1R7vzVaxcnK5WZK1l+bOHSu2PzV689N3tp8sLMhZnLE2fOnDo5/sLpiee7Emca1+0jH8wdO/zqWzdemzp34+0fv07y+Jvi6JLhjTY+Ua12ubhiHWhIJ30FVoSOlOvNNPpr7X8wyrF68gbjlY8LrRywrarVavX+9puXqsA9LImiawAUI/+hT8e/+bJDXY9/hVsv1gdAadwr2VLf0helbJ/+pvFtNw1HxLmlv75Il9ie+xAAAGt8m/Z/nm3V/ytF432h/2VzKEMR8f+IOBgRpyPiUETcF1Hb94GIeLDD8psnSdb3f0o3G3PVpMMCNrE7e11Z1//Le38xVM5yB2rx9yfnZyszJ7JjMhL9u9L8eOxqW8Z3L//yabttjf2/dEnLz/uCWT1u9jV99PTkwuTWI17r1kcRR/qa4j8btQm8fCYgPeSHI+LIFsuYffqrY+22bR7/Browz1T9MuLJ+vlfijXnf/VCSzaenxzbHZWZE2P5VbHeTz9ff71d+f8o/i5Iz//eltf/nfiHksb52vlOPv3zp9K/13/7pO2YZqvX/0DyZi09kK17f3Jh4cp4xEBytl7pxvUTq+/N8/n+afwjx1u3/4OxeiSORkR6ET8UEQ9HxCNZ3R+NiMci4vgGR+GHlx5/Z+vxb680/umOzv9qYiCa17ROlC9+/82aQoc6iT89/6dqqZFszd18/91NvTq9mgEAAOC/qhQR+yMpjd5Jl0qjo/X/4T8Ue0uVufmFZ87PvXd5uv6MwFD0l/I7XYMN90PHs2F9np9oyp/M7ht/Vt5Ty49OzVWmiw4eety+Nu0/9Xu56NoB2655Hs3zW9A7tHfoXdo/9C7tH3pXi/a/p4h6ADuv1e//hwXUA9h5Te3ftB/0EON/6F1baf++M+DesGFbHti5egA7an5PbP6QvITEukSUCip9d/Gx90Ki6G8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7vg7AAD//+yS5sM=") syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x43861, &(0x7f0000000500)={[{@nobarrier}, {@oldalloc}, {@barrier}]}, 0x0, 0x53b, &(0x7f0000000780)="$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") timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) keyctl$restrict_keyring(0x3, r4, 0x0, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 12.805310173s ago: executing program 2 (id=8134): openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000ac0)='fuseblk\xb7\x860z\x1b\x02\xd4\xad\xac!zoNb\xd9\xf6\xd13o\x0f>\x1a\xc0\"\xf7)\x0e\x00\x00\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\x0e\x1e\x9a\xa2\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xc5\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{j&\x16I\xd9\xfb\xb5\xf2\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9`\xc2\x176\x8az\xdcn\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 12.660127965s ago: executing program 6 (id=8135): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r0, 0x0) 11.311927635s ago: executing program 6 (id=8136): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsopen(&(0x7f0000000200)='omfs\x00', 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x6c, @private=0xa010100, 0x4e22, 0x6, 'rr\x00', 0x11, 0x1, 0x71}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e22, 0x0, 'lc\x00', 0x7, 0x1, 0x77}, {@rand_addr=0x64010100, 0x4e20, 0x4, 0x8001}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000200)=0xdc, 0x7, 0xc) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) 10.98541561s ago: executing program 2 (id=8137): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f7", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYRESHEX=0x0]) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x38, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5c}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c20", 0x7e, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x90, 0x117, 0x2, 0x78, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245"}], 0x90, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.071326873s ago: executing program 8 (id=8138): socket$l2tp(0x2, 0x2, 0x73) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000100)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0x2, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181042, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) socket(0x2, 0x80805, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.986083284s ago: executing program 1 (id=8139): fsopen(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0xc000, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4004) 9.836068716s ago: executing program 6 (id=8140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) epoll_create1(0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e20, @broadcast}, 0x2, 0x9800}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) 8.614304574s ago: executing program 6 (id=8141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 8.078998291s ago: executing program 2 (id=8142): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.849404445s ago: executing program 5 (id=8143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1d0, 0x194, 0x194, 0x1d0, 0x194, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0x100, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x20, 0xcd361cdfb8470df8, 0x5, 0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x2, 0x2, 0x2, 'pptp\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0xa, 0x0, 0x1, 0x2], 0x5, 0xe}, {0x1, [0x7, 0x4, 0x6, 0x0, 0x4, 0x2], 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r4 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000200)={'veth0_to_batadv\x00', {0x2, 0x4e22, @empty}}) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x800, @mcast1, 0x6}, 0x1c) syz_usb_connect$uac1(0x2, 0x79, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x3, 0x10, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x5, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8c, 0x10, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x6, 0x1, {0x7, 0x25, 0x1, 0xc, 0x0, 0x2}}}}}}}}]}}, 0x0) 6.352268127s ago: executing program 6 (id=8144): signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r0 = inotify_init1(0x800) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa402, 0x0) fallocate(r1, 0x11, 0x600, 0x7c000) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000961) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000100)='./control\x00') 6.321078428s ago: executing program 1 (id=8145): fanotify_init(0x40, 0x101c00) openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket(0xb, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x40800) ioctl$SG_SET_DEBUG(r3, 0x227e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 6.250476119s ago: executing program 8 (id=8146): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) prlimit64(r1, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r3, r0, 0x0, 0x4) truncate(&(0x7f00000000c0)='./file1\x00', 0x5) 4.76810551s ago: executing program 1 (id=8147): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r0, 0x0) 3.221530972s ago: executing program 5 (id=8148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) pread64(0xffffffffffffffff, &(0x7f0000032400)=""/102357, 0x18fd5, 0x1c29) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) socket$netlink(0x10, 0x3, 0x0) 3.167631173s ago: executing program 2 (id=8149): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) timerfd_create(0x9, 0x800) close(0x3) poll(&(0x7f0000000040), 0x0, 0x7f) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getdents64(r2, 0x0, 0x0) 2.224963507s ago: executing program 1 (id=8150): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) 965.333375ms ago: executing program 5 (id=8151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0xe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x67) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r6, &(0x7f0000000480)=ANY=[], 0xb) splice(r5, 0x0, r4, 0x0, 0x9aa3, 0x1) 0s ago: executing program 1 (id=8152): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x1f1, 0x1) read$msr(r3, &(0x7f0000000380)=""/116, 0x74) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x3ff, 0x7, 0x0, 0xfffd, 0x0, 0x6f0a, 0x1, {0x0, @in={{0x2, 0x4e21, @remote}}, 0xffff, 0x80, 0xbc0, 0x5, 0x6}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000400)={r4}, &(0x7f0000000480)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0x4, &(0x7f00000013c0)=0x0) io_submit(r6, 0x1, &(0x7f0000002c00)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r5, 0x0}]) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x604a}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) kernel console output (not intermixed with test programs): found: bulk [ 908.766852][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 908.907835][T26758] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 908.941102][T26758] team0: Failed to send options change via netlink (err -105) [ 908.965178][T26758] team0: Port device netdevsim0 added [ 909.159960][T26768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5901'. [ 909.172127][T26768] bond0: option arp_all_targets: invalid value (18446744071564623876) [ 909.707143][T19920] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 910.157501][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 910.527224][T19920] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 911.236956][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 911.928161][T26793] xt_CT: No such helper "snmp_trap" [ 912.197295][T19920] em28xx 4-1:0.0: board has no eeprom [ 912.286845][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 912.438754][T19920] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 912.465549][T19920] em28xx 4-1:0.0: dvb set to bulk mode. [ 912.491677][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5911'. [ 912.538175][T19920] usb 4-1: USB disconnect, device number 27 [ 912.544905][T19920] em28xx 4-1:0.0: Disconnecting em28xx [ 912.654539][T19919] em28xx 4-1:0.0: Binding DVB extension [ 912.661497][T26810] tipc: Enabled bearer , priority 0 [ 913.316907][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 913.411746][T26819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5916'. [ 913.470595][T19919] em28xx 4-1:0.0: Registering input extension [ 913.519721][T19920] em28xx 4-1:0.0: Closing input extension [ 913.575417][T26810] device syzkaller0 entered promiscuous mode [ 913.648207][T19920] em28xx 4-1:0.0: Freeing device [ 913.679853][T26806] tipc: Resetting bearer [ 913.803847][T26806] tipc: Disabling bearer [ 914.357399][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 915.397523][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 916.436878][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 917.885662][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 918.926849][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 919.957408][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 921.006860][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 922.046891][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 923.086806][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 923.176039][T26919] xt_CT: No such helper "syz1" [ 924.116868][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 925.166814][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 926.119430][T26986] overlayfs: failed to clone upperpath [ 926.129019][T26986] overlayfs: failed to clone upperpath [ 926.197361][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 926.335260][T27002] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5972'. [ 926.438676][T27006] netlink: 'syz.6.5974': attribute type 1 has an invalid length. [ 926.479605][T27006] device veth21 entered promiscuous mode [ 926.489755][T27006] bond9: (slave veth21): Enslaving as an active interface with a down link [ 926.519964][T27006] bond9: (slave veth23): Enslaving as an active interface with a down link [ 927.225457][T27035] tipc: Failed to remove unknown binding: 66,0,0/2886997162:286820116/286820118 [ 927.255796][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 927.290936][T27035] tipc: Failed to remove unknown binding: 66,0,0/2886997162:286820116/286820117 [ 927.331085][T27038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5983'. [ 927.341971][T27038] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 927.354228][T27035] tipc: Failed to remove unknown binding: 66,0,0/2886997162:286820116/286820118 [ 927.364628][T27038] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 927.380948][T27035] tipc: Failed to remove unknown binding: 66,0,0/2886997162:286820116/286820117 [ 928.286889][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 929.326834][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 929.534828][T27089] netlink: 'syz.3.5999': attribute type 3 has an invalid length. [ 929.556022][T27089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5999'. [ 929.573849][T27093] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6002'. [ 930.357454][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 931.406824][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 932.229557][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.436850][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 933.473984][T27132] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6013'. [ 933.486839][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 934.516834][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 934.695634][T27149] IPv6: NLM_F_CREATE should be specified when creating new route [ 935.333155][T27160] device syzkaller0 entered promiscuous mode [ 935.471725][T27163] netlink: 798 bytes leftover after parsing attributes in process `syz.4.6022'. [ 935.566793][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 935.973003][T27175] xt_CT: No such helper "syz1" [ 936.597415][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 937.647259][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 938.124246][T27205] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6035'. [ 938.686857][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 939.515141][T27219] xt_CT: No such helper "syz1" [ 939.727405][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 939.745174][T27234] netlink: 277 bytes leftover after parsing attributes in process `syz.6.6045'. [ 941.641432][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 942.677412][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 943.716910][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 944.113304][T27274] device macvtap0 entered promiscuous mode [ 944.167528][T27274] device veth1_vlan entered promiscuous mode [ 944.768914][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 945.042808][T27277] device macvtap1 entered promiscuous mode [ 945.806886][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 946.846859][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 947.877471][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 948.916802][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 949.068830][T27321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6069'. [ 949.404571][T27333] tipc: Enabling of bearer rejected, failed to enable media [ 949.669658][T27343] tipc: Enabling of bearer rejected, failed to enable media [ 949.966859][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 951.006802][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 952.047021][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 952.061165][T27370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 952.526322][T27376] loop3: detected capacity change from 0 to 512 [ 952.696137][T27376] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 952.716897][T27376] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.792799][T27381] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6087'. [ 952.860804][T27381] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6087'. [ 952.879186][T27381] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6087'. [ 953.077331][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 953.147658][T27389] tipc: Enabling of bearer rejected, failed to enable media [ 954.126860][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 954.271676][T27398] futex_wake_op: à³OñJ÷N\ìg´é tries to shift op by 144; fix this program [ 954.666881][T27417] netlink: 'syz.3.6099': attribute type 10 has an invalid length. [ 954.731268][T27417] team0: Port device dummy0 added [ 954.742994][T27418] netlink: 'syz.3.6099': attribute type 10 has an invalid length. [ 955.110328][T27418] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 955.156880][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 955.581235][T27418] team0: Failed to send options change via netlink (err -105) [ 955.612523][T27418] team0: Port device dummy0 removed [ 955.651630][T27418] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 955.665065][T27435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6102'. [ 955.700660][ T5067] tipc: Resetting bearer [ 956.206895][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 957.129639][T27452] netlink: 'syz.3.6107': attribute type 10 has an invalid length. [ 957.241553][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 957.275749][T27452] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 957.599211][T27460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6108'. [ 958.276873][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 959.326908][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 959.806093][T27485] netlink: 'syz.4.6115': attribute type 10 has an invalid length. [ 960.625158][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 961.647440][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 961.858968][T27485] team0: Port device dummy0 added [ 961.874575][T27494] netlink: 'syz.4.6115': attribute type 10 has an invalid length. [ 961.966835][T27494] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 962.017376][T27494] team0: Failed to send options change via netlink (err -105) [ 962.054676][T27494] team0: Port device dummy0 removed [ 962.071612][T27494] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 962.237128][T27527] netlink: 'syz.9.6128': attribute type 7 has an invalid length. [ 962.249527][T27527] netlink: 'syz.9.6128': attribute type 7 has an invalid length. [ 962.677403][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 963.292404][T27544] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6132'. [ 963.726813][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 964.775676][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 964.944888][T27566] netlink: 'syz.6.6137': attribute type 10 has an invalid length. [ 965.029940][T27566] team0: Device dummy0 failed to register rx_handler [ 965.134635][T27582] netlink: 'syz.6.6137': attribute type 10 has an invalid length. [ 965.797442][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 966.836826][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 968.091840][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 968.615707][T27596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6146'. [ 968.725881][ T26] audit: type=1800 audit(1782502373.935:1102): pid=27604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6150" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 968.869422][T27615] bond4: (slave geneve2): Releasing active interface [ 968.917202][T27615] team0: Failed to send options change via netlink (err -105) [ 968.962186][T27615] team0: Failed to send options change via netlink (err -105) [ 968.991672][T27615] team0: Mode changed to "activebackup" [ 969.043294][T27626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6158'. [ 969.157037][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 970.196911][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 971.237454][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 972.030437][T27663] netlink: 'syz.9.6169': attribute type 10 has an invalid length. [ 972.277472][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 972.535741][T27663] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 972.690840][T27663] team0: Failed to send options change via netlink (err -105) [ 972.809926][T27663] team0: Port device netdevsim0 added [ 973.098721][T27675] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6174'. [ 973.326832][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 973.557458][T27686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6167'. [ 974.222425][T27691] team0: Port device syz_tun removed [ 974.274914][T27691] bond0: (slave dummy0): Releasing backup interface [ 974.343523][T27691] team0: Port device netdevsim0 removed [ 974.366825][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 974.390752][T27693] team0: Mode changed to "roundrobin" [ 974.422236][T27692] netlink: 'syz.5.6187': attribute type 10 has an invalid length. [ 974.452384][T27694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6178'. [ 974.689579][T27707] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 975.397327][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 976.437450][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 976.651023][T27723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.663355][T27726] device syzkaller0 entered promiscuous mode [ 976.840222][T27723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.014641][T27723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.486812][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 978.516838][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 979.557398][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 980.141073][T27764] x_tables: ip_tables: osf match: only valid for protocol 6 [ 980.597362][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 981.637352][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 982.677350][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 983.983768][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 986.123898][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 987.157517][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 987.588944][T27820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6214'. [ 988.197317][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 989.237392][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 989.671054][T27833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6214'. [ 989.782655][T27835] tipc: Enabling of bearer rejected, failed to enable media [ 990.286837][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 990.619927][T27856] netlink: 'syz.6.6232': attribute type 4 has an invalid length. [ 990.650725][T27856] netlink: 'syz.6.6232': attribute type 4 has an invalid length. [ 991.326827][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 992.628030][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 993.002992][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.028083][T27883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6229'. [ 993.646812][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 994.686783][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 995.726818][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 996.033363][ T26] audit: type=1326 audit(1782502401.245:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27931 comm="syz.3.6248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cef31ae59 code=0x0 [ 996.756798][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 996.987868][T27957] tipc: Enabling of bearer rejected, failed to enable media [ 997.806828][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 998.546147][T27976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6260'. [ 998.636036][T27976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6260'. [ 998.782695][T27986] loop3: detected capacity change from 0 to 256 [ 998.847434][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 998.885972][T27986] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 998.987586][T27988] device bridge6 entered promiscuous mode [ 998.995650][T27988] team0: Port device bridge6 added [ 999.886817][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 999.901349][T27990] device bridge7 entered promiscuous mode [ 999.931926][T27990] team0: Port device bridge7 added [ 999.969357][T27991] bridge0: port 1(team0) entered blocking state [ 999.996007][T27991] bridge0: port 1(team0) entered disabled state [ 1000.221266][T28004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6264'. [ 1000.926775][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1001.966791][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1003.006770][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1004.046845][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1005.077346][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1005.491334][T28078] syz.4.6288[28078] is installing a program with bpf_probe_write_user helper that may corrupt user memory!: renamed from bond_slave_1 [ 1005.585846][T28081] raw_sendmsg: syz.6.6287 forgot to set AF_INET. Fix it! [ 1005.742078][T28089] loop3: detected capacity change from 0 to 512 [ 1005.877139][T28089] FAT-fs (loop3): bogus sectors per cluster 0 [ 1005.884409][T28089] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1006.117416][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1006.765367][T28089] loop3: detected capacity change from 0 to 1024 [ 1006.858645][T28089] EXT4-fs (loop3): Ignoring removed oldalloc option [ 1007.071486][T28089] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nodioread_nolock,oldalloc,delalloc,journal_dev=0x0000000000000004,dioread_lock,,errors=continue. Quota mode: none. [ 1007.166775][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1007.619511][T28089] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.206809][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1009.236800][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1010.277364][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1010.414948][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6305'. [ 1010.485741][T28154] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6305'. [ 1010.559856][T28157] netlink: 'syz.9.6318': attribute type 1 has an invalid length. [ 1010.634816][T28157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1011.317507][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1012.366814][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1014.619714][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1014.641636][ T26] audit: type=1800 audit(1782502419.855:1104): pid=28176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6314" name="bus" dev="ramfs" ino=108604 res=0 errno=0 [ 1015.655362][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1015.856430][T28193] loop3: detected capacity change from 0 to 128 [ 1015.873312][T28191] tipc: Enabling of bearer rejected, failed to enable media [ 1015.972342][T28197] overlayfs: failed to clone upperpath [ 1015.980583][T28193] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1015.992656][T28201] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6320'. [ 1016.017850][T28193] ext4 filesystem being mounted at /515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.676894][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1017.357514][T28218] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1017.726839][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1018.757457][T28230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6327'. [ 1018.766900][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1019.806828][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1020.810950][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6339'. [ 1020.837454][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1021.877690][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1022.926777][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1023.335670][T28306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6354'. [ 1023.431816][T28306] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1023.545245][T28306] device macvlan2 entered promiscuous mode [ 1023.581256][T28306] device bond6 entered promiscuous mode [ 1023.597829][T28306] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1023.611116][T28306] device bond6 left promiscuous mode [ 1024.515859][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1025.557557][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1025.603642][T28336] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6361'. [ 1026.598436][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1026.736229][T28355] tipc: Enabled bearer , priority 0 [ 1027.646779][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1028.468189][T28372] syz.6.6372[28372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1028.468346][T28372] syz.6.6372[28372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1028.676849][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1029.275948][T28377] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1029.666410][T28393] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1029.717210][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1030.743171][T28409] device bridge8 entered promiscuous mode [ 1030.757352][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1031.000699][T28415] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1031.114235][T28416] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1031.797346][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1032.075995][T28422] lo speed is unknown, defaulting to 1000 [ 1032.087188][T28422] lo speed is unknown, defaulting to 1000 [ 1032.417617][T28434] syz.3.6387[28434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1032.417765][T28434] syz.3.6387[28434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1032.837351][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1033.229988][T28422] lo speed is unknown, defaulting to 1000 [ 1033.252822][T28422] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1033.305973][T28422] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1033.458349][T28422] lo speed is unknown, defaulting to 1000 [ 1033.466392][T28422] lo speed is unknown, defaulting to 1000 [ 1033.491818][T28440] device bridge8 entered promiscuous mode [ 1034.199536][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1034.241179][T28440] team0: Port device bridge8 added [ 1034.250731][T28422] lo speed is unknown, defaulting to 1000 [ 1034.262919][T28442] device bridge9 entered promiscuous mode [ 1034.278796][T28442] team0: Port device bridge9 added [ 1034.334101][T28422] lo speed is unknown, defaulting to 1000 [ 1034.341115][T28440] bridge0: port 1(team0) entered blocking state [ 1034.367662][T28440] bridge0: port 1(team0) entered disabled state [ 1034.381443][T28440] device team0 entered promiscuous mode [ 1034.392499][T28440] device netdevsim0 entered promiscuous mode [ 1034.403718][T28422] lo speed is unknown, defaulting to 1000 [ 1034.664400][T28478] netlink: 'syz.3.6400': attribute type 10 has an invalid length. [ 1035.246852][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1035.669653][T28488] netlink: 'syz.9.6403': attribute type 1 has an invalid length. [ 1035.905160][T28488] netlink: 'syz.9.6403': attribute type 2 has an invalid length. [ 1036.277452][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1036.780744][T28503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6406'. [ 1037.326832][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1037.861495][T28528] device bridge7 entered promiscuous mode [ 1038.356922][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1038.690379][T28524] device bridge7 entered promiscuous mode [ 1038.987216][T28513] orangefs_mount: mount request failed with -4 [ 1039.396803][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1039.868282][T28566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6423'. [ 1039.893043][T28566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6423'. [ 1040.437525][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1040.586301][T28615] sch_tbf: burst 1023 is lower than device lo mtu (1550) ! [ 1041.153793][T28623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6434'. [ 1041.476809][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1041.575720][T28633] netlink: 'syz.4.6437': attribute type 1 has an invalid length. [ 1042.332897][T28633] device bond8 entered promiscuous mode [ 1042.371235][T28633] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1042.517042][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1043.315472][T28633] bond8: (slave bridge7): making interface the new active one [ 1043.331911][ T26] audit: type=1326 audit(1782502448.545:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28651 comm="syz.9.6441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8075514e59 code=0x0 [ 1043.333283][T28633] device bridge7 entered promiscuous mode [ 1043.364650][T28633] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 1043.426595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 1043.557433][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1044.262243][T28655] netlink: 'syz.3.6443': attribute type 10 has an invalid length. [ 1044.332560][T28668] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6447'. [ 1044.390548][T28670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6457'. [ 1044.606959][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1044.808624][T28680] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6449'. [ 1046.618232][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1047.638314][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1048.594305][T28703] siw: device registration error -23 [ 1048.677370][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1050.281792][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1051.326934][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1051.822918][T28765] netlink: 'syz.5.6475': attribute type 21 has an invalid length. [ 1051.832132][T28765] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6475'. [ 1052.152864][T28778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6480'. [ 1052.182704][T28779] loop3: detected capacity change from 0 to 512 [ 1052.204978][T28779] EXT4-fs (loop3): bad s_min_extra_isize: 40992 [ 1052.356948][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1052.862734][T28778] bridge9: port 1(veth25) entered blocking state [ 1052.886136][T28778] bridge9: port 1(veth25) entered disabled state [ 1052.913580][T28778] device veth25 entered promiscuous mode [ 1052.992805][T28781] bridge9: port 2(veth27) entered blocking state [ 1053.027542][T28781] bridge9: port 2(veth27) entered disabled state [ 1053.035660][T28781] device veth27 entered promiscuous mode [ 1053.397311][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1054.437678][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1054.445885][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.477576][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1056.517583][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1056.538940][T28826] device batadv_slave_0 entered promiscuous mode [ 1056.560417][T28825] device batadv_slave_0 left promiscuous mode [ 1056.602906][T28830] netlink: 'syz.5.6495': attribute type 39 has an invalid length. [ 1057.557391][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1057.753975][T28838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6496'. [ 1058.455414][T28838] bridge8: port 1(veth9) entered blocking state [ 1058.473002][T28838] bridge8: port 1(veth9) entered disabled state [ 1058.498075][T28838] device veth9 entered promiscuous mode [ 1058.596979][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1058.665917][T28842] bridge8: port 2(veth11) entered blocking state [ 1058.691461][T28842] bridge8: port 2(veth11) entered disabled state [ 1058.702343][T28842] device veth11 entered promiscuous mode [ 1058.710831][T28847] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1058.752813][T28855] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1058.867416][T28855] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1058.978847][T28880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6504'. [ 1059.233523][T28883] loop3: detected capacity change from 0 to 1024 [ 1059.636763][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1059.714534][T28883] EXT4-fs (loop3): inline encryption not supported [ 1059.940666][T28883] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 1060.686931][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1061.717412][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1061.986713][T28924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6511'. [ 1062.767032][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1063.979453][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1064.465988][T28957] cgroup: No subsys list or none specified [ 1064.997639][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1066.530834][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1067.557489][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1067.985068][T29005] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6534'. [ 1068.006720][T29005] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6534'. [ 1068.021623][T29005] netlink: 39 bytes leftover after parsing attributes in process `syz.5.6534'. [ 1068.280093][T29028] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6542'. [ 1068.295595][T29019] loop3: detected capacity change from 0 to 512 [ 1068.832901][T29030] Invalid ELF header magic: != ELF [ 1068.852020][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1068.895364][T29028] device bond6 entered promiscuous mode [ 1068.907052][T29019] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1069.073520][T29019] EXT4-fs (loop3): 1 truncate cleaned up [ 1069.088778][T29019] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 1069.877619][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1070.926786][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1072.620057][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1075.211531][T29069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6546'. [ 1075.510622][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1075.614436][T29089] loop3: detected capacity change from 0 to 512 [ 1075.736800][T29089] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1076.526749][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1077.557307][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1079.753887][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1080.078352][T29152] overlayfs: bad mount option "redirect_dir=off:/" [ 1080.756727][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1081.797270][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1083.617475][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1083.980362][T29191] netlink: 'syz.4.6593': attribute type 1 has an invalid length. [ 1084.677686][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1085.073346][T29191] device bond9 entered promiscuous mode [ 1085.091736][T29191] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1085.166716][T29191] bond9: (slave bridge9): making interface the new active one [ 1085.176145][T29191] device bridge9 entered promiscuous mode [ 1085.190485][T29191] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 1085.200254][T24450] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 1085.717312][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1086.247934][T29211] loop3: detected capacity change from 0 to 1024 [ 1086.309367][T29218] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6590'. [ 1086.757248][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1087.366774][T29197] loop3: detected capacity change from 1024 to 0 [ 1087.650175][T29247] hfsplus: xattr searching failed [ 1087.722028][T29247] hfsplus: xattr searching failed [ 1087.806816][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1088.090096][T29247] hfsplus: xattr searching failed [ 1090.183840][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1091.237543][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1091.594359][T29281] netlink: 'syz.9.6608': attribute type 2 has an invalid length. [ 1091.820932][T29294] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1091.900488][T29294] bond5: (slave macvlan3): Enslaving as an active interface with a down link [ 1091.912417][T29297] xt_connbytes: Forcing CT accounting to be enabled [ 1092.136129][T29297] xt_CT: No such helper "netbios-ns" [ 1092.143479][T29304] netlink: 'syz.9.6613': attribute type 1 has an invalid length. [ 1092.277476][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1092.525058][T29304] device bond7 entered promiscuous mode [ 1092.630283][T29304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1093.044252][T29308] bond7: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1093.130089][T29308] bond7: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 1093.317367][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1094.127086][T29308] bond7: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 1094.366997][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1094.490977][T29326] tipc: Enabling of bearer rejected, failed to enable media [ 1094.937221][T29328] tipc: Enabling of bearer rejected, failed to enable media [ 1094.978474][T29326] tipc: Enabled bearer , priority 12 [ 1095.406781][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1096.446863][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1096.559818][T28969] tipc: Node number set to 2820887545 [ 1096.706075][T29357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6627'. [ 1097.486728][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1097.565478][T29361] tipc: Enabling of bearer rejected, failed to enable media [ 1098.526891][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1098.624117][T29369] netlink: 'syz.9.6631': attribute type 40 has an invalid length. [ 1099.038162][T29384] lo speed is unknown, defaulting to 1000 [ 1099.566793][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1100.088721][T29403] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6641'. [ 1100.146463][T29403] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6641'. [ 1100.194862][T29403] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6641'. [ 1100.337812][T29384] lo speed is unknown, defaulting to 1000 [ 1100.552420][T29384] chnl_net:caif_netlink_parms(): no params data found [ 1100.596933][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1100.672412][T29384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.679746][T29384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.688359][T29384] device bridge_slave_0 entered promiscuous mode [ 1100.699266][T29384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.706721][T29384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.715239][T29384] device bridge_slave_1 entered promiscuous mode [ 1100.742369][T29384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.754520][T29384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.804421][T29384] team0: Port device team_slave_0 added [ 1100.820773][T29384] team0: Port device team_slave_1 added [ 1101.013863][ T5246] Bluetooth: hci0: command 0x0409 tx timeout [ 1101.038866][T29384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.047688][T29384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.094869][T29384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.563549][T29384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.646731][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1101.746772][T29384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.871721][T29384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.974018][T29384] device hsr_slave_0 entered promiscuous mode [ 1101.983981][T29384] device hsr_slave_1 entered promiscuous mode [ 1102.010810][T29384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1102.035872][T29384] Cannot create hsr debugfs directory [ 1102.686871][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1103.295955][T28969] Bluetooth: hci0: command 0x041b tx timeout [ 1103.669985][T29492] rdma_rxe: ignoring netdev event = 23 for lo [ 1103.698716][T29492] rdma_rxe: lo changed mtu to 1536 [ 1103.717362][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1104.601951][T29517] device macsec2 entered promiscuous mode [ 1104.608365][T29517] device virt_wifi0 entered promiscuous mode [ 1104.766965][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1105.589742][T28969] Bluetooth: hci0: command 0x040f tx timeout [ 1105.775977][T29541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.796761][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1105.814728][T29384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1105.845124][T29384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1105.877188][T29541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.899918][T29384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1105.919541][T29384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1106.846936][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1107.880447][T28969] Bluetooth: hci0: command 0x0419 tx timeout [ 1107.886828][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1108.056422][T29565] device virt_wifi0 left promiscuous mode [ 1108.241747][T29384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.714691][T29384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.741815][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1108.752266][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1108.773031][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1108.802924][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1108.821491][ T5067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.828885][ T5067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.951459][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1108.961438][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1108.980235][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1109.014599][ T5067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.021815][ T5067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.051145][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1109.078000][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1109.121829][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1109.144819][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1109.256426][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1109.398249][T29384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1109.410695][T29384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1109.899720][T29608] xt_TCPMSS: Only works on TCP SYN packets [ 1109.966811][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1110.143485][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1110.219742][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1110.277660][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1110.287141][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1110.296435][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1110.305960][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1110.315070][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1110.324096][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1111.006868][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1111.779946][T29641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6692'. [ 1111.819698][T29639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.905545][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1111.914770][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1111.932225][T29639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.948100][T29384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.985826][T29639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.046752][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1112.158458][T29384] device veth0_vlan entered promiscuous mode [ 1112.175816][T29384] device veth1_vlan entered promiscuous mode [ 1112.304819][T29658] MPTCP: kernel_bind error, err=-99 [ 1112.834158][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1112.885394][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1113.068003][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1113.077452][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1113.085661][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1113.095064][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1113.765059][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1113.774171][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1113.784386][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1113.809101][T29384] device veth0_macvtap entered promiscuous mode [ 1113.835314][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1113.870663][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1113.921927][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1113.969149][T29384] device veth1_macvtap entered promiscuous mode [ 1114.007725][T29384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.033548][T29384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.065284][T29384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.085855][T29384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.126760][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1114.253311][T29384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.271043][T29384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.285514][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1114.338374][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1114.370218][T29701] trusted_key: encrypted_key: master key parameter 'šÙ|™{E' is invalid [ 1114.729505][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1114.751990][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1114.790715][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1115.110365][T23882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.144880][T23882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.156933][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1115.186452][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1115.209304][T29723] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6712'. [ 1115.244941][ T5067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.261992][T29723] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 1115.287765][ T5067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.308936][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1115.843148][T29755] IPv6: Can't replace route, no match found [ 1115.879887][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.690691][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1116.781924][T29766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6723'. [ 1116.920624][T29771] syz.5.6725[29771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1116.920773][T29771] syz.5.6725[29771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1116.987788][T29768] VFS: Mount too revealing [ 1117.726887][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1118.002184][T29786] netlink: 209844 bytes leftover after parsing attributes in process `syz.9.6728'. [ 1118.757329][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1119.807012][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1120.480755][T29852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6745'. [ 1120.846800][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1120.963965][T29866] netlink: 'syz.1.6748': attribute type 1 has an invalid length. [ 1122.470476][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1122.887443][T29889] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.6753'. [ 1122.992692][T29892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6755'. [ 1123.486718][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1124.526947][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1125.557579][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1126.597457][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1126.737470][T19920] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1126.784752][T29952] 9pnet: Insufficient options for proto=fd [ 1126.837369][T29904] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.846363][T29904] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.856511][T29904] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.865570][T29904] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.986869][T19920] usb 2-1: Using ep0 maxpacket: 32 [ 1127.106873][T19920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.127943][T19920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.146733][T19920] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1127.166385][T19920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.177134][T19920] usb 2-1: config 0 descriptor?? [ 1127.206368][T28979] lo speed is unknown, defaulting to 1000 [ 1127.217088][T29948] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6769'. [ 1127.227809][T19920] hub 2-1:0.0: USB hub found [ 1127.426836][T19920] hub 2-1:0.0: 1 port detected [ 1127.646721][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1127.646731][T19920] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1127.730166][T19920] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1127.866876][T19920] usbhid 2-1:0.0: can't add hid device: -71 [ 1127.876829][T19920] usbhid: probe of 2-1:0.0 failed with error -71 [ 1127.890811][T29981] netlink: 'syz.9.6773': attribute type 3 has an invalid length. [ 1127.937624][T19920] usb 2-1: USB disconnect, device number 11 [ 1128.687364][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1128.941603][T29996] ip6t_srh: unknown srh match flags 4000 [ 1128.962956][T29988] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.972500][T29988] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.981957][T29988] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.991369][T29988] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1129.167854][T30001] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6776'. [ 1129.219940][T30001] device bond0 left promiscuous mode [ 1129.237382][T30001] bond0 (unregistering): Released all slaves [ 1129.253842][T30003] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6779'. [ 1129.726712][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1130.081415][T30045] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6791'. [ 1131.008950][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1131.501985][T30061] nfs: Bad value for 'source' [ 1132.036776][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1133.077416][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1133.731173][T30096] device syzkaller0 entered promiscuous mode [ 1133.759321][T30101] tipc: Enabling of bearer rejected, already enabled [ 1134.116697][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1134.698109][T30112] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4069149385/4069149386 [ 1134.712565][T30112] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4069149385/4069149386 [ 1134.875616][T30117] device syzkaller0 entered promiscuous mode [ 1134.888254][T30117] tipc: Started in network mode [ 1134.893416][T30117] tipc: Node identity 7a664c3d5adf, cluster identity 4711 [ 1134.901597][T30117] tipc: Enabled bearer , priority 0 [ 1134.916993][T30116] tipc: Resetting bearer [ 1135.166908][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1136.196802][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1136.338089][T30116] tipc: Disabling bearer [ 1136.454518][T19920] tipc: Node number set to 549014589 [ 1137.324685][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1138.357304][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1139.396880][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1140.446687][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1141.477814][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1141.992240][T30178] futex_wake_op: syz.1.6827 tries to shift op by 144; fix this program [ 1142.526712][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1143.556927][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1144.596717][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1145.637357][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1145.842271][T30225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.923088][T30225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1146.706786][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1147.726859][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1148.757363][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1149.796970][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1150.836719][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1150.923737][T30320] tipc: Enabling of bearer rejected, failed to enable media [ 1151.888180][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1152.926723][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1153.413039][T30342] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1153.956851][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1155.568739][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1155.919273][T30350] lo speed is unknown, defaulting to 1000 [ 1156.816844][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1156.970368][T30374] bond5: option mode: unable to set because the bond device has slaves [ 1157.064019][T30374] bond5: (slave macvlan4): Error -98 calling set_mac_address [ 1157.146002][T30380] bond5: (slave ip6gretap1): making interface the new active one [ 1157.202460][T30380] device ip6gretap1 entered promiscuous mode [ 1157.224537][T30380] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1157.486863][T30350] lo speed is unknown, defaulting to 1000 [ 1157.886836][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1157.976321][ T4597] Bluetooth: hci5: command 0x0409 tx timeout [ 1158.374674][T30350] chnl_net:caif_netlink_parms(): no params data found [ 1158.916860][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1158.949269][T30420] xt_CONNSECMARK: invalid mode: 0 [ 1159.966759][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1160.930920][T30350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.961009][T19921] Bluetooth: hci5: command 0x041b tx timeout [ 1161.344178][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1161.356106][T30350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.366449][T30350] device bridge_slave_0 entered promiscuous mode [ 1161.376848][T30439] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1161.377334][T30350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.386297][T30439] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1161.397368][T30350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.403327][T30439] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1161.416918][T30350] device bridge_slave_1 entered promiscuous mode [ 1161.517116][T30350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.564076][T30350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.766636][T30350] team0: Port device team_slave_0 added [ 1162.357307][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1162.623296][T30350] team0: Port device team_slave_1 added [ 1162.696794][T30454] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6886'. [ 1162.872264][T30350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.018355][T30350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.406855][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1163.722308][T19921] Bluetooth: hci5: command 0x040f tx timeout [ 1163.804276][T30350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.864478][T30478] tipc: Enabling of bearer rejected, failed to enable media [ 1163.892567][T30350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.921320][T30350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.088678][T30350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.319811][T30350] device hsr_slave_0 entered promiscuous mode [ 1164.331479][T30350] device hsr_slave_1 entered promiscuous mode [ 1164.346206][T30350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1164.372791][T30350] Cannot create hsr debugfs directory [ 1164.459747][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1165.898653][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1166.310307][ T4597] Bluetooth: hci5: command 0x0419 tx timeout [ 1166.917400][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1167.201462][T30550] overlayfs: missing 'lowerdir' [ 1167.238545][T25364] device netdevsim0 left promiscuous mode [ 1167.474022][T25364] team0: Port device netdevsim0 removed [ 1167.956902][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1168.997680][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1170.046907][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1171.067812][T30649] cgroup: Invalid name [ 1171.077408][ C0] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 1171.411743][ T26] audit: type=1326 audit(1782502577.607:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.4.6916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47363e59 code=0x7ffc0000 [ 1171.514687][T25364] tipc: Disabling bearer [ 1171.616725][T25364] tipc: Disabling bearer [ 1171.697760][ T26] audit: type=1326 audit(1782502577.847:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.4.6916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47363e59 code=0x7ffc0000 [ 1171.741376][T25364] tipc: Left network mode [ 1171.807473][ T26] audit: type=1326 audit(1782502577.847:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.4.6916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47363e59 code=0x7ffc0000 [ 1171.833428][ T26] audit: type=1326 audit(1782502577.847:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.4.6916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f47363e59 code=0x7ffc0000 [ 1171.862609][ T26] audit: type=1326 audit(1782502577.847:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.4.6916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47363e59 code=0x7ffc0000 [ 1171.915315][T30661] loop1: detected capacity change from 0 to 512 [ 1171.969378][ T26] audit: type=1326 audit(1782502577.847:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.4.6916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47363e59 code=0x7ffc0000 [ 1172.055164][ T26] audit: type=1326 audit(1782502577.847:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.4.6916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47363e59 code=0x7ffc0000 [ 1172.117596][T30661] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1172.167966][ T26] audit: type=1326 audit(1782502577.847:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.4.6916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47363e59 code=0x7ffc0000 [ 1172.233356][ T26] audit: type=1326 audit(1782502577.847:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.4.6916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9f47363e59 code=0x7ffc0000 [ 1172.265370][ T26] audit: type=1326 audit(1782502577.847:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.4.6916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f47363e59 code=0x7ffc0000 [ 1175.872082][ T5067] device ip6gretap1 left promiscuous mode [ 1177.337542][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.818134][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1178.827497][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1178.836682][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1178.846091][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1178.855324][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1178.864701][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1178.873872][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1178.883005][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1178.892895][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1178.903651][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1178.930547][T25364] device team0 left promiscuous mode [ 1178.973118][T25364] bridge0: port 1(team0) entered disabled state [ 1179.067290][T25364] bond7 (unregistering): Released all slaves [ 1179.305864][T25364] bond6 (unregistering): Released all slaves [ 1179.882299][T25364] team0 (unregistering): Port device bridge9 removed [ 1180.083119][T25364] team0 (unregistering): Port device bridge8 removed [ 1180.146296][T25364] bond5 (unregistering): Released all slaves [ 1180.400296][T25364] bond4 (unregistering): Released all slaves [ 1180.420464][T25364] bond3 (unregistering): Released all slaves [ 1180.457810][T25364] bond2 (unregistering): Released all slaves [ 1181.481806][T25364] bond1 (unregistering): Released all slaves [ 1182.537137][T25364] bond0 (unregistering): Released all slaves [ 1182.557047][T25362] smc: removing ib device sz1 [ 1183.956781][T30853] fuse: Unknown parameter '0xffffffffffffffff' [ 1184.162785][T30350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1184.849346][T30350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1184.995271][T30350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1185.049268][T30350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1186.242649][T30350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.296849][T30897] device syzkaller0 entered promiscuous mode [ 1186.335110][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1186.373337][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1186.416075][T30350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.658849][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1186.679291][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1186.711078][T25694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.718242][T25694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.763063][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1186.831686][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1186.877523][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1186.915213][T25694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.922398][T25694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.958319][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1186.979886][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1187.007224][T30918] loop1: detected capacity change from 0 to 512 [ 1187.080363][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1187.144086][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1187.197725][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1187.231779][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1187.334031][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1187.353631][T30350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1187.374962][T30350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1188.199863][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1188.220114][T30918] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1188.250758][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1188.327994][T30918] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1188.444124][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1188.767478][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1188.917225][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1189.184690][T30947] netlink: 'syz.6.6972': attribute type 3 has an invalid length. [ 1191.362382][T30527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1191.429205][T30527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1191.640525][T30350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.706155][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1191.740151][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1191.782950][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1191.794241][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1191.805861][T30350] device veth0_vlan entered promiscuous mode [ 1191.813832][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1191.823506][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1191.842049][T30350] device veth1_vlan entered promiscuous mode [ 1191.869802][T30971] device ipip0 entered promiscuous mode [ 1191.887742][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1191.902055][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1191.920972][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1191.963078][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1192.003513][T30350] device veth0_macvtap entered promiscuous mode [ 1192.015966][T30350] device veth1_macvtap entered promiscuous mode [ 1192.041355][T30350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.053710][T30350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.065922][T30350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.075119][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1192.098652][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1192.162116][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1192.185691][T30974] loop1: detected capacity change from 0 to 2048 [ 1192.207954][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1192.220252][T30350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.231809][T30350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.255042][T30974] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1192.296843][T30974] NILFS (loop1): mounting unchecked fs [ 1192.348233][T30350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.431087][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1192.475307][T30974] NILFS (loop1): recovery complete [ 1192.487592][T24290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1192.528765][T30981] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1192.559456][T30350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.579282][T30350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.611432][T30350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.669445][T30350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.741474][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 1192.741492][ T26] audit: type=1804 audit(1782502598.947:1150): pid=30974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6978" name="/newroot/54/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1192.943390][ T26] audit: type=1800 audit(1782502598.987:1151): pid=30988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6978" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1193.099494][T24290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.153834][T24290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.239344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1193.374855][T30527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.402296][T30527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.647258][T26556] IPVS: ip_vs_send_async error -101 [ 1193.795712][T25362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1194.909291][T31030] bridge0: port 1(team0) entered disabled state [ 1196.303225][T31030] bond9: (slave veth21): Releasing active interface [ 1196.343473][T31030] bond9: (slave veth21): the permanent HWaddr of slave - 7a:e2:47:a2:1d:da - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1196.417858][T31030] bond9: (slave veth23): Releasing active interface [ 1196.476440][T31030] team0: Port device bridge6 removed [ 1196.514120][T31030] team0: Port device bridge7 removed [ 1196.570293][T31030] device veth25 left promiscuous mode [ 1196.597563][T31030] bridge9: port 1(veth25) entered disabled state [ 1196.636397][T31030] device veth27 left promiscuous mode [ 1196.669557][T31030] bridge9: port 2(veth27) entered disabled state [ 1196.731834][T31040] bridge0: port 3(macvlan2) entered blocking state [ 1196.771990][T31040] bridge0: port 3(macvlan2) entered disabled state [ 1196.810833][T31040] device macvlan2 entered promiscuous mode [ 1196.834565][T31040] bridge0: port 3(macvlan2) entered blocking state [ 1196.841449][T31040] bridge0: port 3(macvlan2) entered forwarding state [ 1200.312548][T31123] tipc: Enabling of bearer rejected, failed to enable media [ 1202.908549][T31153] sctp: [Deprecated]: syz.1.7015 (pid 31153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.908549][T31153] Use struct sctp_sack_info instead [ 1202.984931][T31159] sctp: [Deprecated]: syz.1.7015 (pid 31159) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.984931][T31159] Use struct sctp_sack_info instead [ 1205.846407][T31167] device veth1_vlan left promiscuous mode [ 1206.354162][T31207] Cannot find del_set index 0 as target [ 1208.443363][T31249] __nla_validate_parse: 11 callbacks suppressed [ 1208.443386][T31249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7035'. [ 1209.876928][T23882] wlan1: Trigger new scan to find an IBSS to join [ 1211.278864][T25694] wlan1: Trigger new scan to find an IBSS to join [ 1211.605126][T31262] bridge0: port 3(macvlan2) entered disabled state [ 1211.611838][T31262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.619324][T31262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.191903][T31262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1212.248600][T31262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.494660][T31262] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.504445][T31262] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.514944][T31262] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.524879][T31262] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.719076][T31311] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1213.783785][T31311] bond0 (unregistering): Released all slaves [ 1213.841869][T31321] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.191237][T31329] device syzkaller0 entered promiscuous mode [ 1214.688746][T31321] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.764796][T31336] tipc: Failed to remove unknown binding: 66,0,0/2820887545:1864521387/1864521388 [ 1214.782576][T31336] tipc: Failed to remove unknown binding: 66,0,0/2820887545:1864521387/1864521388 [ 1214.882895][T31321] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.908176][T31342] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1214.968986][T31321] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.061032][T31321] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.078117][T31321] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.093453][T31321] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.110282][T31321] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.408330][T31373] xt_policy: output policy not valid in PREROUTING and INPUT [ 1217.802359][T31392] ip6t_srh: unknown srh match flags 4000 [ 1218.892170][T31399] tipc: Enabling of bearer rejected, failed to enable media [ 1221.513345][T31444] device vlan2 entered promiscuous mode [ 1221.557041][T30928] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1222.133566][T30928] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1222.832879][T30928] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1222.843312][T30928] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1222.852731][T30928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.887049][T31421] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1224.956156][ T4233] usb 3-1: USB disconnect, device number 17 [ 1225.515985][ T5246] Bluetooth: hci0: command 0x0406 tx timeout [ 1226.489294][T31534] loop2: detected capacity change from 0 to 1024 [ 1226.913551][T31534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 1226.953909][T31534] System zones: 0-1, 3-12 [ 1226.995340][T31534] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 1227.503022][T31551] Cannot find add_set index 0 as target [ 1229.889247][ T26] audit: type=1800 audit(1782502636.097:1152): pid=31568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7104" name="bus" dev="ramfs" ino=117148 res=0 errno=0 [ 1231.096602][T30928] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1231.358177][T31609] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 1231.434567][T31608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7116'. [ 1231.456817][T30928] usb 3-1: config 0 has no interfaces? [ 1231.462394][T30928] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1231.530832][T30928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.597164][T31609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7116'. [ 1231.677046][T30928] usb 3-1: config 0 descriptor?? [ 1232.032104][T31580] udc-core: couldn't find an available UDC or it's busy [ 1232.203481][T31580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1232.271485][T19920] usb 3-1: USB disconnect, device number 18 [ 1233.618882][T31657] device erspan0 entered promiscuous mode [ 1234.502860][T31657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7124'. [ 1234.695358][T31657] device erspan0 left promiscuous mode [ 1235.664334][T31678] device ip6_vti0 entered promiscuous mode [ 1235.717809][T31678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7129'. [ 1235.818053][T31684] bridge0: failed insert local address into bridge forwarding table [ 1238.763393][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.747311][T31764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7146'. [ 1242.786039][T31767] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 1242.870620][T31754] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.991726][T31754] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1243.078636][T19919] lo speed is unknown, defaulting to 1000 [ 1243.936887][T31793] netlink: 324 bytes leftover after parsing attributes in process `syz.5.7151'. [ 1245.303760][T31794] futex_wake_op: syz.2.7155 tries to shift op by 32; fix this program [ 1247.903515][T31876] xt_policy: output policy not valid in PREROUTING and INPUT [ 1254.807964][T31958] xt_policy: output policy not valid in PREROUTING and INPUT [ 1259.982584][ T4205] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 1262.565953][T32043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7206'. [ 1264.634266][T32064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1264.658042][T32087] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7211'. [ 1266.635472][T32138] netlink: 79 bytes leftover after parsing attributes in process `syz.4.7223'. [ 1267.377901][T32145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7223'. [ 1267.447893][T32145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7223'. [ 1267.466932][T32145] netlink: 'syz.4.7223': attribute type 11 has an invalid length. [ 1268.462183][T32155] __sock_release: fasync list not empty! [ 1269.376985][ T4233] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1269.767113][ T4233] usb 3-1: Using ep0 maxpacket: 32 [ 1270.048074][ T4233] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1270.100973][ T4233] usb 3-1: config 0 has no interface number 0 [ 1270.347939][ T4233] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1270.551310][ T4233] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1270.711901][T32205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7248'. [ 1271.277399][ T4233] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1271.294616][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.323089][ T4233] usb 3-1: Product: syz [ 1271.329983][T32209] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 1271.339398][ T4233] usb 3-1: Manufacturer: syz [ 1271.364116][ T4233] usb 3-1: SerialNumber: syz [ 1271.389040][ T4233] usb 3-1: config 0 descriptor?? [ 1271.427610][T32173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1272.504737][ T4233] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 1273.147579][T32237] ecryptfs_parse_options: eCryptfs: unrecognized option [³] [ 1273.154990][T32237] ecryptfs_parse_options: eCryptfs: unrecognized option [z\)] [ 1273.162510][T32237] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1273.176084][T32237] Error parsing options; rc = [-22] [ 1273.503873][ T4233] usb 3-1: USB disconnect, device number 19 [ 1273.627375][ T4233] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1274.527735][T32254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7252'. [ 1275.670961][T32276] netlink: 'syz.2.7256': attribute type 11 has an invalid length. [ 1277.009782][T32288] device syzkaller0 entered promiscuous mode [ 1277.433362][T32303] blk_update_request: I/O error, dev loop13, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 1277.446994][T32303] hfsplus: unable to find HFS+ superblock [ 1277.835802][T32305] device ip6_vti0 left promiscuous mode [ 1277.961177][T32305] device dummy0 left promiscuous mode [ 1277.969824][T32305] device wlan1 left promiscuous mode [ 1277.975638][T32305] device ip6gre1 left promiscuous mode [ 1277.982800][T32305] device bond6 left promiscuous mode [ 1277.991660][T32305] device macvtap0 left promiscuous mode [ 1278.638203][T32348] device vlan5 entered promiscuous mode [ 1279.186798][ T4177] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1279.646876][ T4177] usb 3-1: config index 0 descriptor too short (expected 5117, got 37) [ 1279.709054][ T4177] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.867740][ T4177] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1279.956927][ T4177] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1279.982670][ T4177] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1279.991398][ T4177] usb 3-1: Manufacturer: syz [ 1280.016309][ T4177] usb 3-1: config 0 descriptor?? [ 1281.812067][ T4177] Bluetooth: hci5: command 0x0406 tx timeout [ 1282.899553][ T4233] usb 3-1: USB disconnect, device number 20 [ 1286.435169][T32460] loop2: detected capacity change from 0 to 40427 [ 1286.549507][T32460] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1286.557520][T32460] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1286.578618][T32460] F2FS-fs (loop2): invalid crc value [ 1286.674192][T32460] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1287.665151][T32460] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1287.672369][T32460] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1287.692927][T32483] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1288.209483][T32497] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7305'. [ 1288.755639][T32505] IPVS: Error connecting to the multicast addr [ 1294.939215][T32556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7318'. [ 1294.948780][T32556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7318'. [ 1297.645993][T32595] (syz.1.7325,32595,0):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 1297.730360][T32596] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1298.833966][T32614] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 1300.559617][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.772488][T32648] loop2: detected capacity change from 0 to 1024 [ 1300.918293][T32659] tipc: Enabling of bearer rejected, failed to enable media [ 1303.345276][ T5067] hfsplus: b-tree write err: -5, ino 25 [ 1303.358130][ T5067] hfsplus: b-tree write err: -5, ino 4 [ 1303.400589][ T5067] hfsplus: b-tree write err: -5, ino 2 [ 1304.110552][T32697] bad cache= option: none$Ån TNàæ-m [ 1304.110552][T32697] [ 1304.118765][T32697] CIFS: VFS: bad cache= option: none$Ån TNàæ-m [ 1309.775794][ T360] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1311.764685][ T386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7363'. [ 1313.083148][ T406] netlink: 'syz.2.7374': attribute type 1 has an invalid length. [ 1313.202466][ T406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1313.622250][ T412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.687379][ T412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.716631][ T412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.921102][ T426] gfs2: gfs2 mount does not exist [ 1313.940534][ T412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.352000][ T412] bond1: (slave geneve2): making interface the new active one [ 1314.445598][ T412] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1314.498523][T23882] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1316.153291][T19919] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1316.976655][T19919] usb 3-1: Using ep0 maxpacket: 32 [ 1316.985056][ T474] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7389'. [ 1317.097931][T19919] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1317.113587][T19919] usb 3-1: config 0 has no interface number 0 [ 1317.122486][T19919] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1317.138370][T19919] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1317.297953][T19919] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1317.317969][T19919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.338008][T19919] usb 3-1: Product: syz [ 1317.342402][T19919] usb 3-1: Manufacturer: syz [ 1317.351872][T19919] usb 3-1: SerialNumber: syz [ 1317.360115][T19919] usb 3-1: config 0 descriptor?? [ 1317.377064][ T437] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1317.696728][T19919] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1317.714587][T19919] ipheth: probe of 3-1:0.196 failed with error -71 [ 1317.751367][T19919] usb 3-1: USB disconnect, device number 21 [ 1323.575584][ T572] device syzkaller0 entered promiscuous mode [ 1326.300349][ T616] netlink: 'syz.5.7424': attribute type 4 has an invalid length. [ 1326.308522][ T616] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.7424'. [ 1326.934260][ T627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7414'. [ 1328.217744][ T643] libceph: resolve '400' (ret=-3): failed [ 1328.763444][ T672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1336.770688][ T780] tipc: Enabling of bearer rejected, failed to enable media [ 1338.631045][ T826] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 1341.685348][ T888] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1341.696561][ T888] tipc: Enabled bearer , priority 10 [ 1343.057358][ T914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7471'. [ 1343.066378][ T914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7471'. [ 1344.011295][ T927] loop2: detected capacity change from 0 to 2048 [ 1344.543895][ T927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1350.549904][ T1007] netlink: 'syz.5.7494': attribute type 1 has an invalid length. [ 1350.650677][T28979] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1350.898090][T28979] usb 3-1: Using ep0 maxpacket: 32 [ 1350.922662][ T1007] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1351.038433][T28979] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1351.408622][T28979] usb 3-1: config 0 has no interface number 0 [ 1352.007305][T28979] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1352.769798][T28979] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1352.946767][T28979] usb 3-1: string descriptor 0 read error: -71 [ 1352.953145][T28979] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1354.794901][T28979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.639208][T28979] usb 3-1: config 0 descriptor?? [ 1355.659831][T28979] usb 3-1: can't set config #0, error -71 [ 1355.693288][T28979] usb 3-1: USB disconnect, device number 22 [ 1360.261688][ T1152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7521'. [ 1360.271117][ T1152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7521'. [ 1363.357175][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.465314][ T1227] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7530'. [ 1368.395940][ T1235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7534'. [ 1368.447149][ T1235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7534'. [ 1368.514289][ T1242] device syzkaller0 entered promiscuous mode [ 1371.498216][ T1291] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1372.306237][ T1315] loop2: detected capacity change from 0 to 1024 [ 1372.404083][ T1319] netlink: 288 bytes leftover after parsing attributes in process `syz.6.7552'. [ 1373.318395][ T1315] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1375.024546][ T1337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7563'. [ 1377.344396][ T1402] IPVS: stopping master sync thread 26556 ... [ 1379.993453][ T1420] hub 8-0:1.0: USB hub found [ 1380.005512][ T1420] hub 8-0:1.0: 1 port detected [ 1381.204155][ T1455] netlink: 'syz.6.7571': attribute type 49 has an invalid length. [ 1381.521532][ T1455] device ip6gretap0 entered promiscuous mode [ 1381.789305][ T1484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7575'. [ 1383.952155][ T1501] tipc: Enabling of bearer rejected, failed to enable media [ 1384.148837][ T1505] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7579'. [ 1384.159697][ C1] hrtimer: interrupt took 1226600 ns [ 1387.341217][ T1526] loop2: detected capacity change from 0 to 512 [ 1387.361194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1388.228959][ T1529] overlayfs: failed to clone lowerpath [ 1388.281095][ T1526] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1388.367386][ T1526] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.062270][ T26] audit: type=1107 audit(1782502795.267:1153): pid=1518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1390.164839][ T1558] lo speed is unknown, defaulting to 1000 [ 1390.208527][ T1576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7591'. [ 1390.257103][ T1576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7591'. [ 1390.353546][ T1576] device syzkaller0 entered promiscuous mode [ 1391.877099][ T4233] Bluetooth: hci1: command 0x0409 tx timeout [ 1394.534895][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 1394.717181][ T1558] chnl_net:caif_netlink_parms(): no params data found [ 1395.281860][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.291789][ T1558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.303058][ T1558] device bridge_slave_0 entered promiscuous mode [ 1395.315944][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.324231][ T1558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.337611][ T1558] device bridge_slave_1 entered promiscuous mode [ 1395.407412][ T4233] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1395.442993][ T1558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.662507][ T1558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.712729][ T1558] team0: Port device team_slave_0 added [ 1395.747894][ T1558] team0: Port device team_slave_1 added [ 1396.842564][ T5246] Bluetooth: hci1: command 0x040f tx timeout [ 1397.039116][ T1558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.065316][ T1558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.185131][ T1558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.197897][ T4233] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1397.212407][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.261123][ T4233] usb 3-1: Product: syz [ 1397.270115][ T1558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.297382][ T4233] usb 3-1: Manufacturer: syz [ 1397.312809][ T4233] usb 3-1: SerialNumber: syz [ 1397.318831][ T1558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.388002][ T4233] usb 3-1: config 0 descriptor?? [ 1397.468159][ T1558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.657562][ T4233] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1397.787084][ T1558] device hsr_slave_0 entered promiscuous mode [ 1397.849974][ T1558] device hsr_slave_1 entered promiscuous mode [ 1397.886392][ T1558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1397.904326][ T1558] Cannot create hsr debugfs directory [ 1398.928045][ T5246] Bluetooth: hci1: command 0x0419 tx timeout [ 1400.498824][ T4233] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1400.524635][ T4233] usb 3-1: USB disconnect, device number 23 [ 1401.861450][ T4233] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1402.247658][ T4233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.304584][ T4233] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1402.508108][ T4233] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1402.585476][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1402.879516][ T4233] usb 3-1: SerialNumber: syz [ 1403.990061][ T4233] usb 3-1: 0:2 : does not exist [ 1404.012607][ T4233] usb 3-1: USB disconnect, device number 24 [ 1404.216662][ T1741] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1404.801700][ T1701] udevd[1701]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1408.667899][ T1558] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1408.708066][ T1558] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1408.756205][ T1558] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1409.552752][ T1558] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1414.011287][ T1830] netlink: 'syz.5.7641': attribute type 13 has an invalid length. [ 1414.320552][ T1833] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7641'. [ 1414.505308][ T1558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.535328][T21676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1414.560364][T21676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1415.231647][ T1558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.684271][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1415.699133][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1417.341736][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.348967][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.658289][ T1869] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7651'. [ 1417.931550][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1417.962337][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1419.001144][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.009230][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.187664][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1419.466551][ T1558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1419.479249][ T1558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1420.878804][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1421.070402][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1421.124430][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1421.155011][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1421.262339][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1421.339636][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1421.350976][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1421.361950][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1421.373388][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1421.384529][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1421.395499][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1421.406251][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1421.762792][ T1895] loop2: detected capacity change from 0 to 4096 [ 1422.393770][ T1899] lo speed is unknown, defaulting to 1000 [ 1422.617931][ T1895] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 1423.088421][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.270881][ T1924] overlayfs: failed to clone upperpath [ 1425.518491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1425.526096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1425.600528][ T1558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.638376][ T26] audit: type=1107 audit(1782502835.837:1154): pid=1935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1431.344705][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1431.370618][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1431.519874][ T1987] device syzkaller0 entered promiscuous mode [ 1431.636273][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1433.705240][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1433.864195][ T1558] device veth0_vlan entered promiscuous mode [ 1434.359571][ T1558] device veth1_vlan entered promiscuous mode [ 1434.611843][ T1558] device veth0_macvtap entered promiscuous mode [ 1434.692386][ T1558] device veth1_macvtap entered promiscuous mode [ 1434.823338][ T1558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.913772][ T1558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.974212][ T1558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1435.052070][ T1558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.127770][ T1558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.214473][ T1558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1435.326310][ T1558] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.390830][ T1558] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.435728][ T1558] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.502513][ T1558] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.989637][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1436.012686][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1436.218920][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1437.125502][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1437.200507][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1437.216206][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1437.227997][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1437.239009][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1437.338531][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1437.369633][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1437.402727][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1437.652354][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1437.909416][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.923956][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.419608][ T26] audit: type=1107 audit(1782502844.627:1155): pid=2029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1438.603237][T25694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1439.568399][T21676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.717129][T21676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.728867][T21676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1439.974444][ T2054] tipc: Started in network mode [ 1440.015597][ T2054] tipc: Node identity defc4c70541f, cluster identity 4711 [ 1440.063567][ T2054] tipc: Enabled bearer , priority 0 [ 1440.133653][ T2061] device syzkaller0 entered promiscuous mode [ 1441.077290][ T4233] tipc: Node number set to 2330152048 [ 1441.214830][ T2052] tipc: Resetting bearer [ 1441.337379][ T2052] tipc: Disabling bearer [ 1456.579062][ T2186] tipc: Enabled bearer , priority 0 [ 1456.651132][ T2190] tipc: Resetting bearer [ 1457.384234][ T2186] device syzkaller0 entered promiscuous mode [ 1457.419738][ T2186] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1457.561131][ T2183] tipc: Resetting bearer [ 1457.875645][ T2201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7721'. [ 1458.668612][ T2183] tipc: Disabling bearer [ 1460.044881][ T2225] netlink: 292 bytes leftover after parsing attributes in process `syz.1.7726'. [ 1464.005157][ T2262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7735'. [ 1471.613812][ T2324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7750'. [ 1477.743053][ T2382] binder: 2372:2382 ioctl 40406f06 200000000000 returned -22 [ 1479.121810][ T2389] loop8: detected capacity change from 0 to 128 [ 1480.696663][ T2389] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1481.024473][ T2389] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1484.637582][ T2457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7777'. [ 1484.700806][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1496.287531][ T2589] netlink: 292 bytes leftover after parsing attributes in process `syz.5.7794'. [ 1496.942743][ T2589] tunl0: Caught tx_queue_len zero misconfig [ 1498.819539][ T2619] loop2: detected capacity change from 0 to 8 [ 1499.741167][ T2619] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1499.750412][ T2619] SQUASHFS error: Failed to read block 0x9b: -5 [ 1499.757310][ T2619] SQUASHFS error: Unable to read metadata cache entry [99] [ 1499.764801][ T2619] SQUASHFS error: Unable to read inode 0x127 [ 1500.428085][ T2634] loop2: detected capacity change from 0 to 2048 [ 1500.582012][ T2634] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1500.612137][ T2652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7808'. [ 1500.662141][ T2652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.047979][ T2768] netlink: 'syz.2.7829': attribute type 1 has an invalid length. [ 1512.197216][T28969] Bluetooth: hci1: command 0x0406 tx timeout [ 1512.650556][ T2799] loop8: detected capacity change from 0 to 8192 [ 1512.664601][ T2812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7837'. [ 1516.628791][ T2850] batman_adv: batadv0: Adding interface: vxlan0 [ 1516.652785][ T2850] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.841967][ T2866] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7849'. [ 1517.853379][ T2850] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 1519.750128][ T2883] batman_adv: batadv0: Adding interface: dummy0 [ 1519.800866][ T2883] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.917249][ T2883] batman_adv: batadv0: Interface activated: dummy0 [ 1519.954939][ T2891] batadv0: mtu less than device minimum [ 1519.987210][ T2891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1519.999888][ T2891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1520.012448][ T2891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1520.025159][ T2891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1520.037766][ T2891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1520.050392][ T2891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1520.063026][ T2891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1520.075624][ T2891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1520.088289][ T2891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1520.158092][ T2889] loop2: detected capacity change from 0 to 8192 [ 1525.204343][ T2965] loop2: detected capacity change from 0 to 32768 [ 1525.268768][ T2967] loop8: detected capacity change from 0 to 512 [ 1525.301035][ T2965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.7864 (2965) [ 1525.354614][ T2969] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1525.376739][ T2965] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1525.386271][ T2965] BTRFS info (device loop2): turning on sync discard [ 1525.393733][ T2965] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1525.404022][ T2965] BTRFS info (device loop2): use zstd compression, level 3 [ 1525.411964][ T2965] BTRFS info (device loop2): turning on async discard [ 1525.419431][ T2965] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1525.431327][ T2965] BTRFS info (device loop2): trying to use backup root at mount time [ 1525.440404][ T2965] BTRFS info (device loop2): enabling auto defrag [ 1525.447770][ T2965] BTRFS info (device loop2): using free space tree [ 1525.454958][ T2965] BTRFS info (device loop2): has skinny extents [ 1525.500349][ T2967] device batadv_slave_0 entered promiscuous mode [ 1527.082802][ T2967] device batadv_slave_0 left promiscuous mode [ 1527.859255][ T2965] BTRFS error (device loop2): open_ctree failed: -12 [ 1529.299720][ T3021] netlink: 160 bytes leftover after parsing attributes in process `syz.5.7875'. [ 1529.355750][ T3021] netlink: 160 bytes leftover after parsing attributes in process `syz.5.7875'. [ 1529.626100][ T3021] netlink: 160 bytes leftover after parsing attributes in process `syz.5.7875'. [ 1530.381208][ T3039] autofs4:pid:3039:autofs_fill_super: called with bogus options [ 1533.206984][ T26] audit: type=1326 audit(1782502939.387:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3037 comm="syz.2.7877" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf1a649e59 code=0x0 [ 1536.441056][ T3084] loop2: detected capacity change from 0 to 32768 [ 1536.962675][ T3084] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.7886 (3084) [ 1537.549142][ T3084] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1537.559188][ T3084] BTRFS info (device loop2): use zlib compression, level 3 [ 1537.567198][ T3084] BTRFS info (device loop2): turning on sync discard [ 1537.573918][ T3084] BTRFS info (device loop2): using free space tree [ 1537.581334][ T3084] BTRFS info (device loop2): has skinny extents [ 1537.678754][ T3099] netlink: 160 bytes leftover after parsing attributes in process `syz.6.7889'. [ 1537.723974][ T3099] netlink: 160 bytes leftover after parsing attributes in process `syz.6.7889'. [ 1537.772333][ T3099] netlink: 160 bytes leftover after parsing attributes in process `syz.6.7889'. [ 1537.991224][ T3084] BTRFS info (device loop2): enabling ssd optimizations [ 1538.294421][ T3113] loop8: detected capacity change from 0 to 4096 [ 1538.487687][ T26] audit: type=1800 audit(1782502944.677:1157): pid=3129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7886" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1539.344466][ T3113] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1540.380325][ T3141] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7893'. [ 1540.830693][ T3151] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7898'. [ 1540.970906][ T2983] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (2983) [ 1543.139425][ T3192] device syzkaller0 entered promiscuous mode [ 1546.640089][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.062466][ T3224] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7907'. [ 1548.363945][ T3230] device bond0 entered promiscuous mode [ 1548.428018][ T3230] device bond_slave_0 entered promiscuous mode [ 1548.435543][ T3230] device bond_slave_1 entered promiscuous mode [ 1549.969133][ T3251] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7913'. [ 1551.300280][ T3276] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7921'. [ 1555.000129][ T3329] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7933'. [ 1555.406691][ T3342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7936'. [ 1555.420103][ T3342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7936'. [ 1560.167765][ T3403] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7946'. [ 1560.452032][ T3408] loop8: detected capacity change from 0 to 512 [ 1561.106530][ T3421] blk_update_request: I/O error, dev loop11, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 1561.126548][ T3421] hfsplus: unable to find HFS+ superblock [ 1562.255737][ T3408] device batadv_slave_0 entered promiscuous mode [ 1562.313838][ T3411] tc action pedit 'at' offset 46 out of bounds [ 1562.566818][ T3425] device batadv_slave_0 left promiscuous mode [ 1563.260140][ T3443] blktrace: Concurrent blktraces are not allowed on loop12 [ 1567.929955][ T3455] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7962'. [ 1571.707268][ T3510] net_ratelimit: 10 callbacks suppressed [ 1571.707299][ T3510] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1571.966010][ T3514] lo speed is unknown, defaulting to 1000 [ 1571.972633][ T3514] lo speed is unknown, defaulting to 1000 [ 1571.979775][ T3514] lo speed is unknown, defaulting to 1000 [ 1571.991916][ T3514] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1572.014992][ T3514] lo speed is unknown, defaulting to 1000 [ 1572.022894][ T3514] lo speed is unknown, defaulting to 1000 [ 1572.030598][ T3514] lo speed is unknown, defaulting to 1000 [ 1572.038402][ T3514] lo speed is unknown, defaulting to 1000 [ 1572.045177][ T3514] lo speed is unknown, defaulting to 1000 [ 1572.052589][ T3514] lo speed is unknown, defaulting to 1000 [ 1572.060024][ T3514] lo speed is unknown, defaulting to 1000 [ 1572.153673][ T3526] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7975'. [ 1577.185410][ T3601] device bond0 entered promiscuous mode [ 1577.204894][ T3601] device bond_slave_0 entered promiscuous mode [ 1577.953802][ T3601] device bond_slave_1 entered promiscuous mode [ 1580.228929][ T3642] loop8: detected capacity change from 0 to 32768 [ 1580.868170][ T3650] Cannot find del_set index 0 as target [ 1581.471500][ T3642] XFS (loop8): Mounting V5 Filesystem [ 1581.590318][ T3665] binder_alloc: 3662: pid 3662 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1581.922974][ T3671] binder_alloc: 3662: pid 3662 spamming oneway? 3 buffers allocated for a total size of 5128 [ 1581.945271][ T3642] XFS (loop8): Ending clean mount [ 1582.136916][ T3673] netlink: 348 bytes leftover after parsing attributes in process `syz.5.8000'. [ 1582.148650][ T3673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8000'. [ 1582.606826][ T3642] XFS (loop8): Quotacheck needed: Please wait. [ 1582.943278][ T3642] XFS (loop8): Quotacheck: Done. [ 1583.020138][ T1558] XFS (loop8): Unmounting Filesystem [ 1584.444644][ T3680] loop2: detected capacity change from 0 to 256 [ 1584.582541][ T3680] FAT-fs (loop2): Directory bread(block 64) failed [ 1584.608717][ T3680] FAT-fs (loop2): Directory bread(block 65) failed [ 1584.625417][ T3680] FAT-fs (loop2): Directory bread(block 66) failed [ 1584.635799][ T3680] FAT-fs (loop2): Directory bread(block 67) failed [ 1584.727050][ T3680] FAT-fs (loop2): Directory bread(block 68) failed [ 1584.757027][ T3680] FAT-fs (loop2): Directory bread(block 69) failed [ 1584.763710][ T3680] FAT-fs (loop2): Directory bread(block 70) failed [ 1584.796621][ T3680] FAT-fs (loop2): Directory bread(block 71) failed [ 1584.817087][ T3680] FAT-fs (loop2): Directory bread(block 72) failed [ 1584.839809][ T3680] FAT-fs (loop2): Directory bread(block 73) failed [ 1584.875259][ T3680] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1587.551449][ T3726] tipc: Enabling of bearer rejected, failed to enable media [ 1595.961695][ T3790] loop2: detected capacity change from 0 to 32768 [ 1597.512086][ T3790] XFS (loop2): Mounting V5 Filesystem [ 1597.600001][ T3790] XFS (loop2): Ending clean mount [ 1597.608979][ T3790] XFS (loop2): Quotacheck needed: Please wait. [ 1597.891491][ T3790] XFS (loop2): Quotacheck: Done. [ 1598.754652][ T3815] binder: 3809:3815 ioctl c0306201 2000000003c0 returned -14 [ 1599.471550][T30350] XFS (loop2): Unmounting Filesystem [ 1600.331193][ T3838] tipc: Started in network mode [ 1600.351320][ T3838] tipc: Node identity e254ca2386f8, cluster identity 4711 [ 1600.452049][ T3838] tipc: Enabled bearer , priority 0 [ 1600.506971][ T3844] device syzkaller0 entered promiscuous mode [ 1600.547346][ T3846] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1600.582857][ T3838] tipc: Resetting bearer [ 1600.694124][ T3836] tipc: Resetting bearer [ 1600.768256][ T3836] tipc: Disabling bearer [ 1601.399890][ T3867] loop8: detected capacity change from 0 to 764 [ 1602.213373][ T3867] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1607.405938][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.732818][ T3920] tipc: Enabling of bearer rejected, failed to enable media [ 1612.507339][ T3958] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8054'. [ 1612.562527][ T3959] loop2: detected capacity change from 0 to 512 [ 1612.589823][ T3958] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8054'. [ 1612.658769][ T3958] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8054'. [ 1612.996078][ T3968] loop8: detected capacity change from 0 to 32768 [ 1613.043633][ T3959] EXT4-fs (loop2): inline encryption not supported [ 1614.101239][ T3968] XFS (loop8): Mounting V5 Filesystem [ 1614.657008][ T3996] misc userio: No port type given on /dev/userio [ 1614.692829][ T3968] XFS (loop8): Ending clean mount [ 1614.704192][ T3968] XFS (loop8): Quotacheck needed: Please wait. [ 1616.144966][ T3968] XFS (loop8): Quotacheck: Done. [ 1617.255790][ T1558] XFS (loop8): Unmounting Filesystem [ 1618.098097][ T4026] siw: device registration error -23 [ 1619.746755][ T4037] netlink: 'syz.1.8070': attribute type 1 has an invalid length. [ 1619.884381][ T4037] bond1: (slave bridge1): making interface the new active one [ 1619.909748][ T4037] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1619.959468][ T4043] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1620.180695][ T4037] device team0 entered promiscuous mode [ 1620.230703][ T4037] device team_slave_0 entered promiscuous mode [ 1620.874532][ T4037] device team_slave_1 entered promiscuous mode [ 1620.943514][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1621.003842][ T4037] bond1: (slave team0): Enslaving as an active interface with an up link [ 1621.013674][ T4052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8071'. [ 1621.203602][ T4058] loop2: detected capacity change from 0 to 64 [ 1623.355411][ T4083] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8080'. [ 1623.441169][ T4083] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8080'. [ 1623.488059][ T4083] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8080'. [ 1623.666595][ T4096] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1623.682190][ T4096] Error parsing options; rc = [-22] [ 1624.307103][ T5246] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1624.398420][ T4098] trusted_key: encrypted_key: keylen parameter is missing [ 1624.687571][ T5246] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.759983][ T5246] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1624.808781][ T4113] kcapi: manufacturer command 4294967295 unknown. [ 1624.816987][ T5246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.825351][ T5246] usb 9-1: config 0 descriptor?? [ 1624.900258][ T5246] pwc: Askey VC010 type 2 USB webcam detected. [ 1625.117665][ T5246] pwc: send_video_command error -71 [ 1625.123114][ T5246] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1625.147389][ T5246] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 1625.263931][ T5246] usb 9-1: USB disconnect, device number 5 [ 1626.761989][ T5246] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1626.880248][ T4133] netlink: 112 bytes leftover after parsing attributes in process `syz.6.8091'. [ 1627.137048][ T5246] usb 9-1: device descriptor read/all, error -71 [ 1627.517978][ T3853] eql: remember to turn off Van-Jacobson compression on your slave devices [ 1628.397521][ T4145] siw: device registration error -23 [ 1635.162774][ T4185] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8102'. [ 1635.877560][ T4211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8111'. [ 1635.918621][ T4211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8111'. [ 1635.962024][ T4211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8111'. [ 1641.265661][ T4261] netlink: 'syz.2.8121': attribute type 12 has an invalid length. [ 1642.538215][ T4296] loop8: detected capacity change from 0 to 2048 [ 1642.610766][ T4296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1644.747211][ T4311] loop2: detected capacity change from 0 to 256 [ 1646.021910][ T4310] tipc: Enabled bearer , priority 10 [ 1646.328694][ T4315] loop8: detected capacity change from 0 to 2048 [ 1646.470923][ T4315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1647.048248][ T4324] loop2: detected capacity change from 0 to 512 [ 1647.720036][ T4324] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.8134: inode has both inline data and extents flags [ 1647.739603][ T4324] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.8134: couldn't read orphan inode 15 (err -117) [ 1647.754783][ T4324] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 1649.217141][ T4336] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 1650.880602][ T4366] loop8: detected capacity change from 0 to 256 [ 1651.044488][ T4366] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1651.214721][ T4364] attempt to access beyond end of device [ 1651.214721][ T4364] loop8: rw=524288, want=408, limit=256 [ 1651.297516][ T4364] attempt to access beyond end of device [ 1651.297516][ T4364] loop8: rw=524288, want=664, limit=256 [ 1651.537115][ T5246] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1652.782164][ T4364] attempt to access beyond end of device [ 1652.782164][ T4364] loop8: rw=0, want=288, limit=256 [ 1652.794467][ T26] audit: type=1800 audit(1782503059.007:1158): pid=4364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8138" name="file1" dev="loop8" ino=1048771 res=0 errno=0 [ 1653.488302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 1655.777067][ T5246] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1655.784865][ T5246] usb 3-1: can't read configurations, error -71 [ 1763.674779][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1763.681871][ C0] rcu: 1-...0: (1 GPs behind) idle=067/1/0x4000000000000000 softirq=106510/106511 fqs=1051 [ 1763.695320][ C0] (detected by 0, t=10505 jiffies, g=164589, q=176) [ 1763.702062][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1763.707300][ C1] NMI backtrace for cpu 1 [ 1763.707312][ C1] CPU: 1 PID: 4410 Comm: syz.5.8151 Not tainted syzkaller #0 [ 1763.707328][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1763.707353][ C1] RIP: 0010:kasan_check_range+0x26/0x290 [ 1763.707449][ C1] Code: 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 41 57 41 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 49 c1 e8 2f <41> 81 f8 ff ff 01 00 0f 82 fa 01 00 00 49 bc 01 00 00 00 00 fc ff [ 1763.707465][ C1] RSP: 0018:ffffc90000dd0b70 EFLAGS: 00000807 [ 1763.707480][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff815cd8c6 [ 1763.707491][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d89e068 [ 1763.707502][ C1] RBP: ffffc90000dd0cb0 R08: 000000000001ffff R09: 0000000000000000 [ 1763.707513][ C1] R10: dffffc0000000000 R11: ffffed100eb3fa5e R12: ffffffff8c31ef20 [ 1763.707526][ C1] R13: 1ffff920001ba180 R14: 0000000000000001 R15: dffffc0000000000 [ 1763.707539][ C1] FS: 00007fe822e776c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1763.707553][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1763.707565][ C1] CR2: 00007fe822e76ff8 CR3: 000000006741d000 CR4: 00000000003506e0 [ 1763.707580][ C1] Call Trace: [ 1763.707587][ C1] [ 1763.707598][ C1] lock_acquire+0xb6/0x400 [ 1763.707676][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1763.707704][ C1] ? __rwlock_init+0x140/0x140 [ 1763.707723][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1763.707741][ C1] rcu_lock_acquire+0x2a/0x30 [ 1763.707807][ C1] ? rcu_lock_acquire+0x5/0x30 [ 1763.707829][ C1] advance_sched+0x6b2/0x920 [ 1763.707852][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 1763.707872][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 1763.707912][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1763.707959][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 1763.707979][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1763.708001][ C1] hrtimer_interrupt+0x397/0x8b0 [ 1763.708031][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1763.708073][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1763.708107][ C1] [ 1763.708113][ C1] [ 1763.708118][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1763.708163][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 1763.708203][ C1] Code: 14 7d 89 7e 65 8b 15 15 7d 89 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 <83> fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 48 8d 7e 01 8b 89 14 [ 1763.708217][ C1] RSP: 0018:ffffc900032879d0 EFLAGS: 00000246 [ 1763.708232][ C1] RAX: ffffffff83e1b222 RBX: 0000000000000000 RCX: ffff888059debb80 [ 1763.708244][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1763.708253][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: ffffc90003287d50 [ 1763.708264][ C1] R10: dffffc0000000000 R11: fffff52000650f67 R12: 1ffff92000650f80 [ 1763.708277][ C1] R13: ffffc90003287c00 R14: dffffc0000000000 R15: 0000000000000008 [ 1763.708293][ C1] ? __import_iovec+0x272/0x490 [ 1763.708324][ C1] __import_iovec+0x272/0x490 [ 1763.708349][ C1] import_iovec+0x6f/0xa0 [ 1763.708369][ C1] ___sys_recvmsg+0x4e2/0x5c0 [ 1763.708426][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1763.708448][ C1] ? __sys_recvmsg+0x280/0x280 [ 1763.708478][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 1763.708501][ C1] ? __might_fault+0xb3/0x110 [ 1763.708558][ C1] do_recvmmsg+0x360/0x7f0 [ 1763.708582][ C1] ? __sys_recvmmsg+0x290/0x290 [ 1763.708607][ C1] ? __context_tracking_exit+0x4c/0x80 [ 1763.708652][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 1763.708675][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 1763.708704][ C1] ? do_recvmmsg+0x7f0/0x7f0 [ 1763.708725][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1763.708745][ C1] do_syscall_64+0x4c/0xa0 [ 1763.708762][ C1] ? clear_bhb_loop+0x30/0x80 [ 1763.708778][ C1] ? clear_bhb_loop+0x30/0x80 [ 1763.708796][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1763.708814][ C1] RIP: 0033:0x7fe824c3ee59 [ 1763.708833][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1763.708847][ C1] RSP: 002b:00007fe822e77028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1763.708863][ C1] RAX: ffffffffffffffda RBX: 00007fe824eb8090 RCX: 00007fe824c3ee59 [ 1763.708875][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1763.708886][ C1] RBP: 00007fe824cd4e6f R08: 0000000000000000 R09: 0000000000000000 [ 1763.708897][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1763.708906][ C1] R13: 00007fe824eb8128 R14: 00007fe824eb8090 R15: 00007ffc257128c8 [ 1763.708927][ C1] [ 1763.709295][ C0] rcu: rcu_preempt kthread starved for 5250 jiffies! g164589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1764.176627][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1764.186619][ C0] rcu: RCU grace-period kthread stack dump: [ 1764.192608][ C0] task:rcu_preempt state:R running task stack:27424 pid: 15 ppid: 2 flags:0x00004000 [ 1764.203524][ C0] Call Trace: [ 1764.206921][ C0] [ 1764.209964][ C0] __schedule+0x11c3/0x4350 [ 1764.214581][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1764.220514][ C0] ? rcu_is_watching+0x11/0xa0 [ 1764.225552][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1764.231686][ C0] schedule+0x11b/0x1e0 [ 1764.235882][ C0] schedule_timeout+0x184/0x2d0 [ 1764.240761][ C0] ? console_conditional_schedule+0x40/0x40 [ 1764.246818][ C0] ? update_process_times+0x200/0x200 [ 1764.252448][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 1764.258039][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 1764.263042][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 1764.269311][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 1764.274200][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1764.279437][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1764.284667][ C0] rcu_gp_kthread+0x9a/0x370 [ 1764.289286][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1764.294422][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1764.300350][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 1764.305460][ C0] kthread+0x42e/0x520 [ 1764.309674][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1764.314917][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1764.319539][ C0] ret_from_fork+0x1f/0x30 [ 1764.324057][ C0] [ 1764.327098][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1764.333436][ C0] NMI backtrace for cpu 0 [ 1764.337779][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1764.345030][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1764.355382][ C0] Call Trace: [ 1764.358812][ C0] [ 1764.361682][ C0] dump_stack_lvl+0x188/0x250 [ 1764.366534][ C0] ? show_regs_print_info+0x20/0x20 [ 1764.371768][ C0] ? load_image+0x410/0x410 [ 1764.376323][ C0] ? irq_work_queue+0xbf/0x140 [ 1764.381331][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 1764.386449][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1764.392992][ C0] ? _printk+0xda/0x130 [ 1764.397311][ C0] ? cpu_online+0x1d/0x30 [ 1764.401758][ C0] ? load_image+0x410/0x410 [ 1764.406595][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1764.413551][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1764.420057][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 1764.426276][ C0] print_other_cpu_stall+0x1110/0x1270 [ 1764.431798][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 1764.436782][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 1764.442112][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 1764.447623][ C0] rcu_sched_clock_irq+0x845/0x1120 [ 1764.453145][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 1764.458125][ C0] ? hrtimer_run_queues+0x162/0x400 [ 1764.463461][ C0] ? account_process_tick+0x22a/0x3a0 [ 1764.468970][ C0] update_process_times+0x193/0x200 [ 1764.474317][ C0] tick_sched_timer+0x37d/0x560 [ 1764.479260][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 1764.485011][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 1764.490328][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1764.496355][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 1764.501500][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1764.507693][ C0] hrtimer_interrupt+0x397/0x8b0 [ 1764.512682][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1764.518699][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1764.524478][ C0] [ 1764.527449][ C0] [ 1764.530404][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1764.536698][ C0] RIP: 0010:default_idle+0xb/0x10 [ 1764.541859][ C0] Code: b7 48 89 df e8 a6 ed fa f7 eb ad e8 df b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d f7 a8 62 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1764.561698][ C0] RSP: 0018:ffffffff8c007dc8 EFLAGS: 000002c6 [ 1764.567817][ C0] RAX: e9e1fc9888c31100 RBX: ffffffff8c0bc480 RCX: e9e1fc9888c31100 [ 1764.575812][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a79c980 [ 1764.583826][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 1764.592003][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1800fc4 [ 1764.600114][ C0] R13: dffffc0000000000 R14: 1ffffffff1817890 R15: 0000000000000000 [ 1764.608154][ C0] default_idle_call+0x81/0xc0 [ 1764.613051][ C0] do_idle+0x3a1/0x650 [ 1764.617205][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1764.622553][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1764.628242][ C0] ? schedule_idle+0x57/0x90 [ 1764.632882][ C0] cpu_startup_entry+0x14/0x20 [ 1764.637681][ C0] ? time_init+0x40/0x40 [ 1764.642028][ C0] start_kernel+0x489/0x540 [ 1764.646577][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 1764.652682][ C0]