last executing test programs: 24m21.522156837s ago: executing program 32 (id=159): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) 23m37.398498855s ago: executing program 33 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3) 22m57.133729511s ago: executing program 34 (id=484): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r0, 0x407, 0x0) read$FUSE(r0, &(0x7f0000002440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x29, 0x5, 0xffffffffc8001048, 0xffff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80, 0x3}}, 0x50) 22m31.482204627s ago: executing program 35 (id=582): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x113, &(0x7f0000000480)={0x0, 0xfad6, 0x800, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 21m8.625611489s ago: executing program 36 (id=963): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x600, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) 19m21.018980543s ago: executing program 37 (id=1484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000) 18m23.483191607s ago: executing program 38 (id=1747): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x411c, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x3, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r0, r0, 0x0) 18m15.941297692s ago: executing program 39 (id=1774): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) 17m8.327335221s ago: executing program 40 (id=2057): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 16m45.832199466s ago: executing program 41 (id=2155): add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffe) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000fc000000080003400000000008000400000008000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x0) 14m57.267193698s ago: executing program 42 (id=2773): unshare(0x22020400) unshare(0x22020400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 14m24.526812509s ago: executing program 43 (id=2939): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f0000000180)="a8", 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) 13m56.743748851s ago: executing program 44 (id=3087): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 13m8.225605929s ago: executing program 45 (id=3339): sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="030300000000fcffffff0c000000080003004d"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 10m9.326300259s ago: executing program 46 (id=4314): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_io_uring_setup(0x231, &(0x7f0000000040)={0x0, 0x2, 0x10100}, 0x0, 0x0) 9m43.958882306s ago: executing program 47 (id=4398): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 9m31.623418809s ago: executing program 48 (id=4436): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 9m14.411777755s ago: executing program 49 (id=4486): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) close(0x3) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) 7m27.55584534s ago: executing program 50 (id=4997): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0xbc, 0x0, 0x7ffc0002}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) 7m21.61172632s ago: executing program 51 (id=5013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40) syz_emit_ethernet(0x10b2, &(0x7f0000003d80)=ANY=[], 0x0) 6m29.467214549s ago: executing program 52 (id=5262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x44000) 5m3.11133806s ago: executing program 53 (id=5685): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2c, 0x25dfdc01, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc048090}, 0x90) close(0x3) 3m32.784236918s ago: executing program 54 (id=6242): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x200) mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0)='./file0\x00') 3m23.364165828s ago: executing program 55 (id=6285): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)="19a38656", 0x4}], 0x1, 0x20000000, 0x1ff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0xa23, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m17.426206236s ago: executing program 1 (id=6309): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 3m16.191285828s ago: executing program 1 (id=6316): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a7fbb}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3m15.374223008s ago: executing program 1 (id=6320): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000018000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 3m13.968448534s ago: executing program 1 (id=6327): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020400) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f000000ac40)={0x2020}, 0x2020) 3m13.470356884s ago: executing program 1 (id=6330): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0xffffd8ee}, 0x10) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 3m12.690058873s ago: executing program 1 (id=6333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x21, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 3m11.117896807s ago: executing program 56 (id=6333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x21, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2m27.515320106s ago: executing program 5 (id=6542): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) 2m26.865047256s ago: executing program 5 (id=6547): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x8, 0x8, 0x8001, 0xfffffffc, 0x9, 0x0, 0x0, 0x7, 0x60b, 0x4, 0x0, 0x8, 0x3, 0xfffffffc, 0x5, 0xd, 0x5, 0xc, 0x91, 0x5fc, 0x7, 0x8, 0x7f, 0x0, 0x75b, 0x85, 0x0, 0x1, 0x10000, 0x7ea5, 0x5, 0x4, 0x9, 0x1, 0x800, 0x2, 0x45a099cf, 0x1, 0x3ff, 0x8, 0x7, 0x8, 0xae64, 0x7, 0x4, 0x7, 0x6, 0x7, 0x1, 0xb3, 0x5, 0xffffffff, 0x0, 0x6, 0x9, 0xf93, 0x5, 0xfffffff7, 0x7fffffff, 0x9, 0x6, 0x753, 0x5, 0x0, 0x1, 0x5, 0x0, 0xe47f, 0xa, 0x10001, 0x4, 0x8000, 0x5d, 0x7fff, 0xe8d6, 0x4, 0x200, 0x94a, 0x857, 0x10000, 0x3, 0x0, 0x4, 0xd, 0x89d7, 0x1000, 0x5, 0xe, 0xc8, 0xfffffff7, 0x5, 0x2, 0x7, 0xffffffff, 0x9, 0x5, 0x1, 0x1, 0x9, 0x7b5dff07, 0x7, 0xf1a, 0x0, 0x9, 0xd, 0x10, 0x6, 0xb9, 0xffff, 0x2, 0x3, 0x7, 0x101, 0x0, 0x3ff, 0xfffffff7, 0x6, 0x0, 0x3, 0xffff, 0x7ff, 0xfffffffd, 0xa, 0x0, 0x80, 0x5539, 0x1a3, 0x5, 0x3, 0x9, 0x8000, 0x8, 0x9, 0x3, 0x1, 0x2, 0x5, 0x4, 0x4, 0x3, 0x30000000, 0x271a, 0x1, 0x7fffffff, 0x3, 0x909e, 0x1, 0x5, 0xffffff03, 0x1, 0x7, 0x3, 0x7, 0x3, 0x6, 0x4, 0x9, 0x9, 0x7, 0x60cc, 0xcf, 0x40, 0x80000001, 0x5, 0x0, 0x6, 0x0, 0x6, 0x5, 0xfffffffa, 0xc02, 0x1, 0x200, 0x8, 0x3, 0xb9f0, 0x7fff, 0x9, 0x7f, 0x3, 0x9, 0xac5, 0x2, 0x0, 0x93e, 0x5, 0x1000, 0x8000, 0x0, 0x3, 0x3e, 0x0, 0x9, 0x1, 0x101, 0xfffffff7, 0xffffff01, 0x3, 0x7fffffff, 0x8, 0x79b, 0xae46, 0x1, 0x2, 0x1, 0x80, 0x2, 0x2, 0x8, 0x0, 0x3, 0xa, 0x4, 0x22ec, 0x1, 0x7ff, 0x0, 0xe, 0xfe, 0x6, 0x5, 0x8000, 0x6, 0x8, 0x34, 0x734, 0x7ff, 0xda, 0x400, 0x27, 0x9d56, 0x1, 0x1, 0x1, 0x401, 0x60000000, 0x5, 0xffffffff, 0x1, 0x4, 0x48a, 0xa23e, 0x401, 0x80000000, 0x5, 0x7fff, 0x1, 0x7, 0x10, 0x6, 0xffffffff, 0x1, 0x3, 0xfffffffd]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 2m25.957483168s ago: executing program 5 (id=6550): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 2m25.291029673s ago: executing program 5 (id=6554): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) 2m24.681537806s ago: executing program 5 (id=6558): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001080)=""/159, 0x9f}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000001180)=""/226, 0xe2}, {&(0x7f0000001000)=""/29, 0x1d}, {&(0x7f0000001280)=""/227, 0xe3}, {&(0x7f0000001380)=""/115, 0x73}], 0x7, &(0x7f00000035c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x40010100) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f00000002c0)=0x6, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, &(0x7f0000000180)) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2m23.92017792s ago: executing program 5 (id=6563): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001f00)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) setxattr$trusted_overlay_upper(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540), 0x0, 0x0, 0x2) 2m22.345606734s ago: executing program 57 (id=6563): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001f00)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) setxattr$trusted_overlay_upper(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540), 0x0, 0x0, 0x2) 1m24.787954812s ago: executing program 3 (id=6877): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) 1m21.948980979s ago: executing program 3 (id=6888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000d00)=""/223, 0xdf}], 0x1) tkill(r2, 0xb) 1m21.077868702s ago: executing program 3 (id=6892): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m20.968647742s ago: executing program 4 (id=6893): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m20.626256589s ago: executing program 3 (id=6896): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) move_mount(r2, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x100) 1m19.389687946s ago: executing program 3 (id=6906): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) mount$9p_virtio(0x0, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2000000, 0x0) 1m17.733210817s ago: executing program 4 (id=6914): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) 1m17.053368945s ago: executing program 3 (id=6917): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) close_range(r0, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m15.848625923s ago: executing program 58 (id=6917): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) close_range(r0, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m15.811353257s ago: executing program 4 (id=6921): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000000080)=""/123, 0xfc73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 1m13.808128425s ago: executing program 4 (id=6930): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) move_mount(r2, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x100) 1m12.539131543s ago: executing program 4 (id=6937): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1m11.885338079s ago: executing program 4 (id=6942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m10.096002185s ago: executing program 59 (id=6942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 38.112648192s ago: executing program 7 (id=7107): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 37.65172053s ago: executing program 7 (id=7111): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000410, &(0x7f0000000180)=ANY=[], 0xfd, 0x1500, &(0x7f00000002c0)="$eJzs3Au0TlX3MPA511qb4+TyJLnvuebmSS6LJAklySVJkpA7CUmSJEnikFsSkpDrSXIPuaeTjvv9knvSyStJkpCQZH3jdPn8ey//3vf99//0vWf+xtjjrPnsPdee68zxnGfvPcZ5vuo2vHqjGlXqMzP8O/SvA/z5RxIAJADAIADIAQABAJTNWTZn+v4sGpP+rZOI/yUNZl7pCsSVJP3P2KT/GZv0P2OT/mds0v+MTfqfsUn/MzbpvxAZ2ux8V8uWcTd5/v//OfU/SZbP/wwB/9EO6f9/Gv0vHS39z9ik/xmb9D9jk/5nZMGVLkBcYfL+z9ik/0JkaH/4M+WN56/0M23Z/oVNCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYT4f+C8v8wAwK/jK12XEEIIIYQQQggh/jj+nStdgRBCCCGEEEIIIf73ISjQYCCATJAZEiALJMJVkBWyQXbIATG4GnLCNZALroXckAfyQj7IDwWgIIRAYIEhgkJQGOJwHRSB66EoFIPiUAIclIRScAOUhhuhDNwEZeFmKAe3QHmo8NM5090OleEOqAJ3QlWoBtWhBtwFNeFuqAX3QG24F+rAfVAX7od68ADUhwbQEB6ERtAYmkBTaAbNoQW0hFa/k5+c4+/lPwc94XnoBb0hCfpAX3gB+kF/GAADYRC8CIPhJRgCL8NQGAbD4RUYAa/CSHgNRsFoGAOvw1gYB+NhAkyESZAMb8BkeBOmwFuNs8E0mA4zYCbMgtnwNsyBuTAP3oH5sAAWQnKWxbAElsK7sAzegxR4H5bDB5AKK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A4fwg7YCbtgN+yBvbAPPoL98DEcgE8gDT/9F/PP/TYfuiMgoEKFBg1mwkyYgAmYiImYFbNidsyOMYxhTsyJuTAX5sbcmBfzYhLmx4JYEAkJGRkLYSGMYxyLYBEsikWxOBZHhw5LYSksjTdiGSyDZbEslsNyWB4rYAW8FW/FSlgJK2NlrIJVsCpWxepYHe/Cu/BurIW1sDbWxjpYB+tiXayH9bA+1seG2BAbYSNsgk2wGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHbAjdsRO2Ak7Y2fsgl2wK3bFbtgNu+Oz+Cw+h8/h8/g89saqqg/2xb7YD/vhAByIA/FFHIwv4Uv4Mg7FYTgcX8FX8FUciWdxFI7GMTgGK6lxOB4nIKtJmIzJmBkm4xScglNxGk7DGTgTZ+FsnI1zcC7OxXdwPi7ABbgIF+ESXIpLcRm+hymYgsvxHKbiClyJq3A1rsHVuA7X4zrciJtwI27BLbgNt+GH+CHuxJ24G3fjXtyLH+FH+DF+jEMxDdPwIB7EQ3gID+NhPIJH8CgexWN4DI/jcTyBJ/AknsLTeArP4Bk8i+fwPABcwAt4ES/iJbyU/uZX6YwyKpPKpBJUgkpUiSqryqqyq+wqpmIqp8qpcqlcKrfKrfKqvCq/yq8KqoKKFClWkSqkCqm4iqsiqogqqoqq4qq4csqpUqqUKq1KqzKqjCqrblbl1C2qvKqg2rpb1a2qkmrnKqs7VBVVRVVV1VR1VUPVUDVVTVVL1VK1VW1VR9VRddX9qp7qgwOwgUrvTCM1DJuo4dhMNVctVEv1Kj6kWquR2Ea1Ve3UI2o0jsIOqrXrqB5XndR47KyeVBPwKdVVTcJu6hnVXT2reqjnVE/VxvVSvdVU7KP6qhnYT/VXA9RANQerqfSOVVcvq+cyD1PD1StqCb6qRqrX1Cg1Wo1Rr6uxapwaryaoiWqSSlZvqMnqTTVFvaWmqmlqupqhZqpZarZ6W81Rc9U89Y6arxaohWqRWqyWqKXqXbVMvadS1PtqufpApaoVaqVapVarNWqtWqfWqw1qo9qkNqstaqvaprarD9UOtVPtUrvVHrVX7VMfqf3qY3VAfaLS1KfqoPqLOqQ+U4fV5+qI+kIdVV+qY+ordVx9rU6ob9RJdUqdVt+qM+o7dVadU+fV9+qC+kFdVD+qS8or0KiV1troQGfSmXWCzqIT9VU6q86ms+scOqav1jn1NTqXvlbn1nl0XpNP59cFdEEdatJWs450IV1Yx/V1uoi+XhfVxXRxXUI7XVKX0jfo0vpGXUbfpMvqm3U5fYsuryvoih70bbqSvl1X1nfoKvpOXVVX09V1DX2Xrqnv1rX0Pbq2vlfX0ffpuvp+XU8/oOvrBrqhflA30o11E91UN9PNdQvdUrfSD+nW+mHdRrfV7fQjur1+VHfQj+mO+nHdST+hO+sndRf9lO6qn9bd9DO6u35W99A/6kva6166t07SfXRf/YLup/vrAXqgHqRf1IP1S3qIflkP1cP0cP2KHqFf1SP1a3qUHq3H6Nf1WD1Oj9cT9EQ9SSfrN/Rk/aaeot/SU/U0PV3P0DP1LD3gl5nm/RP5b/6d/CE/nX2b3q4/1Dv0Tr1L79Z79F69T+/T+/V+fUAf0Gk6TR/UB/UhfUgf1of1EX1EH9VH9TF9TB/Xx/UJfUKf1Kf09/pbfUZ/p8/qc/qc/l5f0Bf0xV9+B2DQKKONMYHJZDKbBJPFJJqrTFaTzWQ3OUzMXG1ymmtMLnOtyW3ymLwmn8lvCpiCJjRkrGETmUKmsImb60wRc70paoqZ4qaEcaakKWVu+B/n/159rUwr09q0Nm1MG9POtDPtTXvTwXQwHU1H08l0Mp1NZ9PFdDFdTVfTzXQz3U1308P0MD1NT9PL9DJJJsn0NS+Yfqa/GWAGmkHmRTPYDDZDzBAz1Aw1w81wM8KMMCPNSDPKjDJjzBgz1ow14814M9FMNMk+h5lsJpspZoqZaqaa6YNymJlmppltZps5Zo6ZZ+aZ+Wa+WWgWmsVmsVlqlpplZplJMSlmuVluUs0Ks8KsMqvMGrPGrDPrzAazwWwym8wWs8Wkmu1mu9lhdphdZpfZY/aYfWaf2W/2mwPmgEkzaeagOWgOmUPmsDlsjpgj5qg5ao6ZY+a4OW5OmBPmpDlpTpvT5ow5Y86as+a8OW8umAvmorloLplL6Zd9gQpUYAITZAoyBQlBQpAYJAZZg6xB9iB7EAtiQc4gZ5AruDbIHeQJ8gb5gvxBgaBgEAYU2ICDKCgUFA7iwXVBkeD6oGhQLCgelAhcUDIoFdwQlA5uDMoENwVlg5uDcsEtQfmgQlAxuDW4LagU3B5UDu4IqgR3BlWDakH1oEZwV1AzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf2gQdAweDBoFDQOmgRNg2ZB86BF0DJo9YfO7/3ZPA+7XmHvMCnsE/YNXwj7hf3DAeHAcFD4Yjg4fCkcEr4cDg2HhcPDV8IR4avhyPC1cFQ4OhwTvh6ODceF48MJ4cRwUpgcvhFODt8Mp4RvhVPDaeH0YEY4M5wVzg7fDueEc8N54Tvh/HBBuDBcFC4Ol4T48yUxpITvh8vDD8LUcEW4MlwVrg7XhGvDdeH6cEO4MdwUbg63lB3886HhjnBnuCvcHe4J94b7wo/C/eHH4YHwkzAt/DQ8GP4lPBR+Fh4OPw+PhF+ER8Mvw2PhV+Hx8OvwRPhNeDI8FZ4Ovw3PhN+FZ8Nz4fnw+/BC+EN4MfwxvBT69Iv79I93MmQoE2WiBEqgREqkrJSVslN2ilGMclJOykW5KDflpryUl/JTfipIBSkdE1MhKkRxilMRKkJFqSgVp+LkyFEpKkWlqTSVoTJUlspSOSpH5ak8VaSKdBvdRrfT7XQH3UF30p1UjapRDapBNakm1aJaVJtqUx2qQ3WpLtWjelSf6lNDakiNqBE1oSbUjJpRC2pBragVtabW1IbaUDtqR+2pPXWgDtSROlIn6kSdqTN1oS7UlbpSN+pG3ak79aAe1JN6Ui/qRUmURH2pL/WjfjSABtAgGkSDaTANoSE0lIbScBpOI2gEjaSRNIpG0xh6ncbSOBpPE2giTaJkSqbJNJmm0BSaSlNpOk2nmTSTZtNsmkNzaB7No/k0nxbSQlpMi2kpLaVltIxSKIWW03JKpVRaSStpNa2mtbSW1tN62kgbaTNtpq20lbbTdtpBO2gX7aI9tIf20T7aT/vpAB2gNEqjg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kEnaCTdJJO02k6Q2foLJ2l83SeLtAPdJF+pEvkKcFmsYn2KpvVZrPZbQ7713Fem8/mtwVsQRva3DbPb2Ky1ha1xWxxW8I6W9KWsjf8TVzeVrAV7a32NlvJ3m4r2/I2C/zXuKa929ay99ja9l5bw971m7iOvc/WtY1tPdvU1rfNbUPb0jayjW0T29Q2s81tC9vStreP2g72MdvRPm472Sf+Jl5m37Pr7Qa70W6y++3H9rz93h6zX9kL9gfby/a2g+yLdrB9yQ6xL9uhdthvYwA7xr5ux9pxdrydYCfaSX8TT7cz7Ew7y862b9s5du7fxEvtu3a+TbEL7SK72C75KU6vKcW+b5fbD2yqXWFX2lV2tV1j19p1/7fWVXaL3Wq32X32I7vD7rS77G67x+79KU5fxwH7iU2zn9qj9kt7yH5mD9vj9oj94qc4fX3H7df2hP3GnrSn7Gn7rT1jv7Nn7bmf1p++9m/tj/aS9RYYWbFmwwFn4sycwFk4ka/irJyNs3MOjvHVnJOv4Vx8LefmPJyX83F+LsAFOWRiy8wRF+LCHOfruAhfz0W5GBfnEuy4JJfiG7g038hl+CYuyzdzOb6Fy3MFrsi38m1ciW/nynwHV+E7uSpX4+pcg+/imnw31+J7uDbfy3X4Pq7L93M9foDrcwNuyA9yI27MTbgpN+Pm3IJbcit+iFvzw9yG23I7foTb86PcgR/jjvw4d+InuDM/yV34Ke7KT3M3foa787Pcg5/jnvw89+LenMR9uC+/wP24Pw/ggTyIX+TB/BIP4Zd5KA/j4fwKj+BXeSS/xqN4NI/h13ksj+PxPIEn8iRO5jd4Mr/JU/gtnsrTeDrP4Jk8i2fz2zyH5/I8fofn8wJeyIt4MS/hpfwuL+P3OIXf5+X8AafyCl7Jq3g1r+G1vI7X8wbeyJt4M2/hrbyNt/OHvIN38i7ezXt4L+/jj3g/f8wH+BNO40/5IP+FD/FnfJg/5yP8BR/lL/kYf8XH+Ws+wd/wST7Fp/lbPsPf8Vk+x+f5e77AP/BF/pEvsWeIMFKRjkwURJmizFFClCVKjK6KskbZouxRjigWXR3ljK6JckXXRrmjPFHeKF+UPyoQFYzCiCIbcRRFhaLCUTy6LioSXR8VjYpFxaMSkYtKRqWiG6LS0Y1RmeimqGx0c1QuuiUqH1WIKka3RrdFlaLbo8rRHVGV6M6oalQtqh7ViO6KakZ3R7Wie6La0b1Rmei+qG50f1QveiCqHzWIGkYPRo2ixlGTqGnULGoetYhaRq2ih6LW0cNRm6ht1C56JGofPRp1iB6LOkaPR52iJy7vLxb8/Gn6V/uToj6R/uUJ2T16cXxJfGn83fiy+Hvxxt1+fjU1viK+Mr4qvjq+Jr42vi6+Pr4hvjG+Kb45viW+Nb4t7n2NzOAw/UYYjAtcJpfZJbgsLtFd5bK6bC67y+Fi7mqX013jcrlrXW6Xx+V1+Vx+V8AVdKEjZx27yBVyhV3cXeeKuOtdUVfMFXclnHMlXSnX0rVyrVxr97Br49q6du4R94h71D3qHkv4pXDX2T3purinXFf3tHvaPeO6u2ddD/ec6+med71cb5fkklxf19f1c/3cADfADXKD3GA32A1xQ9xQN9QNd8PdCDfCjXQj3Sg3yo1xY9xYN9aNd+PdRDfRJbtkN9lNdlPcFDfVTXXT3XQ30810s91sN8fNcfPcPDffzXcL3UK32C12S91St8wtcykuxS13y12qS3Ur3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1waS7NHXQH3SF3yB12n7sj7gt31H3pjrmv3HH3tTvhvnEn3Sl32nl9xn3nzrpz7rz73l1wP7iL7kd3yXmXHHsjNjn2ZmxK7K3Y1Ni02PTYjNjM2KzY7NjbsTmxubF5sXdi82MLYgtji2KLY0tiS2PvxpbF3oulxN6PLY99EEuNrYitjK2KrY6tiXlfYEfkC/nCPu6v80X89b6oL+aL+xLe+ZK+lL/Bl/Y3+jL+Jl/W3+zL+Vt8eV/BV/RNfTPf3LfwLX0r/5Bv7R/2bXxb384/4tv7R30H/5jv6B/3nfwTvrN/0nfxT/mu/mnfzT+z4Jcu+57+ed/L9/ZJvo/v61/w/Xx/P8AP9IP8i36wf8kP8S/7oX6YH+5f8SP8q36kf82P8qP9GP+6H+vH+fF+gp/oJ/lk/4af7N/0U/xbfqqf5qf7GX6mn+Vn+7f9HD/Xz/Pv+Pl+gV/oF/nFfolf6t/1y/x7PsW/75f7D3yqX+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u//Q7/A7/S6/2+/xe/0+/5Hf7z/2B/wnPs1/6g/6v/hD/jN/2H/uj/gv/FH/pT/mv/LH/df+hP/Gn/Sn/Gn/rT/jv/Nn/Tl/3n/vL/gf/EX/o78k/7MmhBBCCPFP0b+zv8/feU39sqXrCwDZduY78tdzbs7987i/2t8pBgCP9+7W4NetQYOkpKRfjk3VEBReBACxy/k/ff/AL/EKaAePQkdoC6X/bn39VcWfrvv+u/njNwMkAmT5NSf99igR/nr+G//B/E3f5d+bfxFA0cKXc9JP9Gt8ef4y/2D+ve1/Z/4snyUDtPkvOVnhcnx5/lLwMDwBHX9zpBBCCCGEEEII8bP+6kL337u/Tb8/z28u52SGy/Hv3Z//jsp/xBqEEEIIIYQQQgjx33vq2R6PPdSxY9su/8mDzH+OMv4EAwSAP0EZMvjzD670XyYhhBBCCCHEH+3yRf+VrkQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMi4/v1vCFP/9MFXeo1CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfZ/AgAA///M7VMc") r0 = syz_open_procfs(0x0, 0x0) openat(r0, 0x0, 0x105042, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 36.906177907s ago: executing program 7 (id=7116): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x200000000000000e, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r1, r2) tkill(r0, 0x20) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 36.385300596s ago: executing program 7 (id=7121): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300), 0x1, 0x444, &(0x7f0000000d80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 35.138677455s ago: executing program 7 (id=7128): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = fsmount(r0, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x100, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 34.737558153s ago: executing program 7 (id=7130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 32.914988968s ago: executing program 60 (id=7130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 9.845943654s ago: executing program 8 (id=7217): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xf8, 0x122, 0x0, 0x0) memfd_create(0x0, 0x1) 9.398352471s ago: executing program 8 (id=7222): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) 9.187469311s ago: executing program 9 (id=7223): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000480)=[{r2, 0x589}, {r1, 0x2799}], 0x2, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) 9.026907286s ago: executing program 8 (id=7224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 8.760854399s ago: executing program 8 (id=7225): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.711608614s ago: executing program 9 (id=7226): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x180, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0xa, 0x0, 0x966, {0xfffffffffffffffc, 0xfffffffffffffffe, 0xd, 0x9b8e, 0xe, 0x1, 0x0, 0xfffffffc, 0x2, 0x4000, 0x200000, 0x0, r2, 0x2012, 0x8000}}, {0x2, 0x1ff, 0xd7, 0x0, '\x014D\xd6\xdfC\x19u\xaa7\xa3]\xf7:Bz\xa8M\xff]\xb1R\x84\xca\x8e\x81V\xdco2\x9a\x8c\x04(\xf9\x1b\xb7}\xd0\xb7#\tw]\xfcoZ\x80\xce\xff\x83v\xd1\xc3S\x8bH\xc6\x00\x00\x00\x00\x00\x00\x00d\xee\xd4Z2\xf3\xb8\xde\x9atiy\xe1Z<\x10\x00\x00I&s\xb8\x19\xf0\xdf\xff\x06e\xdd\xa7#Z\x1b^\xbe\xcc\x1bm\xa4\xa6r\x8a\xd0nu)\x98@\x1f\xda\xfa\x7f\xfe\x89\b-\xe3\xd0\x12\xa9\xa7\xd4\x87\x11\xf2\x17N\x19N\xb3\x84q\"\xa2j\xf7\x9dx\f\x17\xc4\xd3k\xc4Q\xe0\x84k\xa9\xc5\x03?\x89\xd1\x9a\x8a\x83\xb4\xea\xd3\xbb\nu\x9fS\x89|n\xb2\xb7\xfe\xb2\x8a:[S\xdd\x92K\xc1&\xbf2\x1c1\xa5\x80\\'}}]}, 0x0, 0x0, 0x0}) 8.636093219s ago: executing program 0 (id=7228): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) 8.303479713s ago: executing program 2 (id=7229): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x1000000}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) 8.282303799s ago: executing program 9 (id=7230): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$IPVS_CMD_DEL_DEST(r0, 0x0, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100004000000100010000000000", @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4050) 7.191277971s ago: executing program 9 (id=7232): io_uring_setup(0x6001, &(0x7f0000000280)={0x0, 0xfd00, 0x800, 0xfffffffe, 0x116}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0xdc2, 0x400c8460, 0x955, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}}, 0x50) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0xa, 0xb4, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.992784953s ago: executing program 6 (id=7233): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r0, &(0x7f0000000100)='./file0/bus\x00', 0xc4000169) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 6.369096529s ago: executing program 2 (id=7234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000500)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 6.206241393s ago: executing program 9 (id=7235): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080005000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x0, 0xc1, 0x7f, 0xc}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.166254919s ago: executing program 6 (id=7236): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000300)='L\t\xdf\x92[\r|>\xeeZ:\xd5\x80\xe7\x1b*\x82\xb6z\xe8\xb4\xf6\x80\xb9\xa9RQ\a\x8e\x80\xd0W\x94\t\t\xc8f\x8e\x8b#&)A9\xdb\x05\a\xe8\xbe\xee@\xbc\xdb\x1d\"\xf6\x05\xac\xef\xdb\x18\xaa\x9a\xcb8q\xf63\x18d\xfbO\x8c\xf4\xc6\x14\xb4\xba_9\xcb\x059&\xda\xdf\x8d\x1d\xfe\xf6\xf3Ux\xc6w\x90\xd7\x882\xf0LO\x0f\xd4@KE\x9e\xecF\x9c\x1b\xa2\xbe\nL,\xcc\xfe}Q\xdc\xe9t\x9c\x89Z\xed\x12\xb6\xd1qj\x04\xae\x97\xe0\xbd\x88K\x9c\xb5SR\x18(\x90-]\xb6h\xb1\x11\x01\xa1\xc7\xc7\xd9;Q\xd4\xc7&Q\"\xad\xf7(\x80\x0f\xde>U\x98\x83H>\xd5\xb1Y\xb6T\xb4\xcf\xd2\x01\x1a\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='user\x00N\xbd]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) pause() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x200, 0x0, 'queue1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) 5.794544609s ago: executing program 0 (id=7237): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x4236}, {r1, 0x8}], 0x3, 0x0, 0x0, 0x0) close(r0) 4.898891169s ago: executing program 0 (id=7238): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0xaa68, @loopback, 0x9}}, 0x6, 0x7, 0x0, 0xffffffff, 0x3}, &(0x7f0000000340)=0x98) 4.892139588s ago: executing program 2 (id=7239): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 4.220014624s ago: executing program 6 (id=7240): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes256, 0x1, @desc2}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mount$afs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x381480, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) 4.170031497s ago: executing program 0 (id=7241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 3.080993311s ago: executing program 6 (id=7242): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, 0x0, 0x48) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) 2.603818717s ago: executing program 8 (id=7243): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) 2.125897877s ago: executing program 0 (id=7244): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x6, 0x3, 0x7ffcfffc}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 1.906860817s ago: executing program 8 (id=7245): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.613275786s ago: executing program 9 (id=7246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) remap_file_pages(&(0x7f0000250000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.399547023s ago: executing program 2 (id=7247): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/120, 0x78}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000006c0)=""/21, 0x15}], 0x63}, 0x4}], 0x2, 0x60, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 1.27973335s ago: executing program 0 (id=7248): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 875.708779ms ago: executing program 6 (id=7249): r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x406, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000580)={0xa0002008}) 462.143892ms ago: executing program 2 (id=7250): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b40)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) dup3(r3, r0, 0x80000) 135.556803ms ago: executing program 6 (id=7251): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r3, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) sendto$packet(r0, &(0x7f0000000200)="26fb80a2b41b3b9889047c52702fbd", 0xf, 0x4000040, &(0x7f0000000240)={0x11, 0x4, r3, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) 0s ago: executing program 2 (id=7252): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x24000045) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xa, 0x0, @opaque="ff5d"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)=""/226, 0xe2}, {&(0x7f00000013c0)=""/50, 0x32}, {&(0x7f0000000300)=""/231}], 0x2}, 0x5}], 0x18a, 0x10000, 0x0) kernel console output (not intermixed with test programs): 1366.644185][T21351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1366.657007][T21351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1366.669641][T21351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1366.682301][T21351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1366.770014][T16028] usb 2-1: config 0 descriptor?? [ 1367.367379][T16028] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1369.310134][T16425] usb 2-1: USB disconnect, device number 24 [ 1370.269451][T21390] loop2: detected capacity change from 0 to 1024 [ 1371.327437][T21407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5617'. [ 1371.399912][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1371.764322][T21415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5621'. [ 1373.231498][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5632'. [ 1377.066882][T21501] overlayfs: failed to clone upperpath [ 1377.507398][T21506] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5661'. [ 1377.761695][T21516] loop1: detected capacity change from 0 to 64 [ 1378.586214][ T32] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1378.782661][ T32] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1378.794327][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.805999][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.817159][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1378.915311][ T32] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1378.926039][ T32] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1378.934624][ T32] usb 2-1: Manufacturer: syz [ 1379.547837][ T32] usb 2-1: config 0 descriptor?? [ 1379.991258][ T32] appleir 0003:05AC:8243.0036: unknown main item tag 0x0 [ 1380.086958][ T32] appleir 0003:05AC:8243.0036: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1380.659872][T21546] loop0: detected capacity change from 0 to 4096 [ 1380.926010][T21546] loop0: detected capacity change from 4096 to 0 [ 1380.938745][T21553] ntfs3(loop0): failed to read volume at offset 0x2000 [ 1381.368053][T20985] Buffer I/O error on dev loop0, logical block 4, lost sync page write [ 1381.376831][T20985] ntfs3(loop0): ino=3, ntfs_set_state failed, -5. [ 1381.384454][T20985] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1381.392207][T20985] Buffer I/O error on dev loop0, logical block 4, lost sync page write [ 1381.403112][T20985] ntfs3(loop0): ino=3, ntfs_set_state failed, -5. [ 1381.421958][T14788] Buffer I/O error on dev loop0, logical block 4, lost sync page write [ 1381.430858][T14788] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -5. [ 1381.613577][T14788] bridge_slave_1: left allmulticast mode [ 1381.619750][T14788] bridge_slave_1: left promiscuous mode [ 1381.626600][T14788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.733448][T14788] bridge_slave_0: left allmulticast mode [ 1381.739599][T14788] bridge_slave_0: left promiscuous mode [ 1381.746559][T14788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.080258][ T32] usb 2-1: USB disconnect, device number 25 [ 1382.563855][T14788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.627831][T14788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.659304][T14788] bond0 (unregistering): Released all slaves [ 1383.103757][T14788] hsr_slave_0: left promiscuous mode [ 1383.116397][T14788] hsr_slave_1: left promiscuous mode [ 1383.124434][T14788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.136724][T14788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.156477][T14788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.164055][T14788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.192167][T14788] veth1_macvtap: left promiscuous mode [ 1383.198253][T14788] veth0_macvtap: left promiscuous mode [ 1383.204097][T14788] veth1_vlan: left promiscuous mode [ 1383.210207][T14788] veth0_vlan: left promiscuous mode [ 1383.504019][T21571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5690'. [ 1383.513688][T21571] netlink: 'syz.6.5690': attribute type 7 has an invalid length. [ 1383.521799][T21571] netlink: 'syz.6.5690': attribute type 8 has an invalid length. [ 1383.530489][T21571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5690'. [ 1384.165088][T14788] team0 (unregistering): Port device team_slave_1 removed [ 1384.307292][T14788] team0 (unregistering): Port device team_slave_0 removed [ 1384.500094][T13901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1384.511667][T13901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1384.521863][T13901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1384.535466][T13901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1384.551881][T13901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1385.396190][T21581] chnl_net:caif_netlink_parms(): no params data found [ 1385.678567][T21607] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5699'. [ 1385.878711][T21607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.917628][T21607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.938183][T21607] bond0 (unregistering): Released all slaves [ 1386.090590][T21609] overlayfs: failed to resolve './file0': -2 [ 1386.588818][T21581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.597701][T21581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.605724][T21581] bridge_slave_0: entered allmulticast mode [ 1386.615213][T21581] bridge_slave_0: entered promiscuous mode [ 1386.636873][T13901] Bluetooth: hci2: command tx timeout [ 1386.690261][T21581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.698013][T21581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.706051][T21581] bridge_slave_1: entered allmulticast mode [ 1386.715578][T21581] bridge_slave_1: entered promiscuous mode [ 1387.075084][T21581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.151439][T21581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.442046][T21581] team0: Port device team_slave_0 added [ 1387.461661][T21581] team0: Port device team_slave_1 added [ 1387.564304][T21581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.572894][T21581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.599985][T21581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.803204][T21581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.810590][T21581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.836937][T21581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.916130][T16028] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1388.081716][T21581] hsr_slave_0: entered promiscuous mode [ 1388.092194][T21581] hsr_slave_1: entered promiscuous mode [ 1388.101023][T21581] debugfs: 'hsr0' already exists in 'hsr' [ 1388.107052][T21581] Cannot create hsr debugfs directory [ 1388.112909][T16028] usb 3-1: Using ep0 maxpacket: 8 [ 1388.164391][T16028] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1388.174024][T16028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.182908][T16028] usb 3-1: Product: syz [ 1388.187464][T16028] usb 3-1: Manufacturer: syz [ 1388.192242][T16028] usb 3-1: SerialNumber: syz [ 1388.232283][T16028] usb 3-1: config 0 descriptor?? [ 1388.457524][T16028] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1388.679706][T13901] Bluetooth: hci2: command tx timeout [ 1388.714692][T16028] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1388.743389][T16028] usb 3-1: USB disconnect, device number 38 [ 1389.485380][T21581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.598449][T21581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.664820][T14781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.672393][T14781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.743432][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.751053][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.723164][T21672] overlayfs: failed to resolve './cgroup': -2 [ 1390.757651][T13901] Bluetooth: hci2: command tx timeout [ 1391.087458][T21581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.753805][T21689] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5731'. [ 1391.854076][T21694] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1391.861769][T21694] overlayfs: failed to set xattr on upper [ 1391.862358][T21689] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5731'. [ 1391.867864][T21694] overlayfs: ...falling back to redirect_dir=nofollow. [ 1391.901589][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.901829][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1391.933447][T21694] overlayfs: ...falling back to uuid=null. [ 1392.607516][T21581] veth0_vlan: entered promiscuous mode [ 1392.687706][T21581] veth1_vlan: entered promiscuous mode [ 1392.837365][T13901] Bluetooth: hci2: command tx timeout [ 1392.978651][T21581] veth0_macvtap: entered promiscuous mode [ 1393.024935][T21581] veth1_macvtap: entered promiscuous mode [ 1393.100500][T21581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.159087][T21581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.529068][T21721] loop1: detected capacity change from 0 to 1024 [ 1393.568953][T21721] EXT4-fs: inline encryption not supported [ 1393.671839][T21721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.753903][ T30] audit: type=1800 audit(1393.739:671): pid=21721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5742" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1394.194836][T19602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.039657][T14781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.047842][T14781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.233397][T12478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.244749][T12478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.497768][T21798] loop2: detected capacity change from 0 to 4096 [ 1399.659553][T21833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1399.667111][T21833] IPv6: NLM_F_CREATE should be set when creating new route [ 1402.102413][T21864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5791'. [ 1402.121347][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1402.245092][T21864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1404.127135][T21901] pimreg: entered allmulticast mode [ 1404.183190][T21901] pimreg: left allmulticast mode [ 1404.986093][T16028] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1405.121782][T21919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5814'. [ 1405.162236][T16028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.174000][T16028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.184341][T16028] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1405.193861][T16028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.213308][T16028] usb 2-1: config 0 descriptor?? [ 1405.331688][T21921] input: syz1 as /devices/virtual/input/input51 [ 1405.650612][T16028] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 1405.696680][T16028] cp2112 0003:10C4:EA90.0037: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1405.867582][T16028] cp2112 0003:10C4:EA90.0037: Part Number: 0x82 Device Version: 0xFE [ 1406.284974][T21933] loop7: detected capacity change from 0 to 4096 [ 1406.707719][T16425] usb 2-1: USB disconnect, device number 26 [ 1407.728569][T21958] syz.1.5830: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1407.744198][T21958] CPU: 0 UID: 0 PID: 21958 Comm: syz.1.5830 Tainted: G W L syzkaller #0 PREEMPT(none) [ 1407.744384][T21958] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1407.744440][T21958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1407.744519][T21958] Call Trace: [ 1407.744568][T21958] [ 1407.744620][T21958] __dump_stack+0x26/0x30 [ 1407.744784][T21958] dump_stack_lvl+0x14c/0x1c0 [ 1407.744952][T21958] dump_stack+0x1e/0x25 [ 1407.745097][T21958] warn_alloc+0x470/0x6a0 [ 1407.745273][T21958] ? kmsan_get_metadata+0xfb/0x160 [ 1407.745453][T21958] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1407.745649][T21958] __vmalloc_node_range_noprof+0x142/0x2d90 [ 1407.745790][T21958] ? kmsan_get_metadata+0xfb/0x160 [ 1407.745971][T21958] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1407.746156][T21958] ? should_fail_ex+0x45/0x8a0 [ 1407.746301][T21958] ? kmsan_get_metadata+0xfb/0x160 [ 1407.746475][T21958] ? kmsan_get_metadata+0xfb/0x160 [ 1407.746645][T21958] ? kmsan_get_metadata+0xfb/0x160 [ 1407.746820][T21958] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1407.747018][T21958] ? __kmalloc_cache_noprof+0x984/0x1730 [ 1407.747212][T21958] ? kmsan_get_metadata+0xfb/0x160 [ 1407.747387][T21958] ? kmsan_get_metadata+0xfb/0x160 [ 1407.747578][T21958] vmalloc_user_noprof+0xce/0x140 [ 1407.747716][T21958] ? xskq_create+0x11d/0x290 [ 1407.747898][T21958] xskq_create+0x11d/0x290 [ 1407.748080][T21958] xsk_init_queue+0xfd/0x1d0 [ 1407.748248][T21958] xsk_setsockopt+0x7f6/0xfe0 [ 1407.748425][T21958] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1407.748587][T21958] __sys_setsockopt+0x43e/0x580 [ 1407.748766][T21958] __ia32_sys_setsockopt+0xf3/0x1a0 [ 1407.748953][T21958] ia32_sys_call+0x2c29/0x4340 [ 1407.749136][T21958] __do_fast_syscall_32+0x154/0x320 [ 1407.749328][T21958] do_fast_syscall_32+0x38/0x80 [ 1407.749503][T21958] do_SYSENTER_32+0x1f/0x30 [ 1407.749674][T21958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1407.749864][T21958] RIP: 0023:0xf7f77539 [ 1407.749965][T21958] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1407.750083][T21958] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1407.750209][T21958] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 1407.750297][T21958] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 1407.750381][T21958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1407.750458][T21958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1407.750536][T21958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1407.750650][T21958] [ 1408.015435][T21958] Mem-Info: [ 1408.020232][T21958] active_anon:5745 inactive_anon:2 isolated_anon:0 [ 1408.020232][T21958] active_file:17315 inactive_file:42322 isolated_file:0 [ 1408.020232][T21958] unevictable:768 dirty:270 writeback:0 [ 1408.020232][T21958] slab_reclaimable:3695 slab_unreclaimable:42245 [ 1408.020232][T21958] mapped:31181 shmem:3312 pagetables:1288 [ 1408.020232][T21958] sec_pagetables:0 bounce:0 [ 1408.020232][T21958] kernel_misc_reclaimable:0 [ 1408.020232][T21958] free:326052 free_pcp:13744 free_cma:0 [ 1408.066154][T21958] Node 0 active_anon:23184kB inactive_anon:8kB active_file:69252kB inactive_file:169080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124988kB dirty:1080kB writeback:0kB shmem:11984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5936kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1408.098554][T21958] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1408.130388][T21958] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1408.160994][T21958] lowmem_reserve[]: 0 928 1241 1241 1241 [ 1408.167383][T21958] Node 0 DMA32 free:396256kB boost:0kB min:36804kB low:46004kB high:55204kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7284kB inactive_anon:4kB active_file:62936kB inactive_file:79036kB unevictable:0kB writepending:720kB zspages:0kB present:3129332kB managed:950664kB mlocked:0kB bounce:0kB free_pcp:32820kB local_pcp:19852kB free_cma:0kB [ 1408.201405][T21958] lowmem_reserve[]: 0 0 312 312 312 [ 1408.207260][T21958] Node 0 Normal free:18172kB boost:2048kB min:15028kB low:18272kB high:21516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16252kB inactive_anon:4kB active_file:6316kB inactive_file:90044kB unevictable:1536kB writepending:360kB zspages:0kB present:1048580kB managed:320476kB mlocked:0kB bounce:0kB free_pcp:10544kB local_pcp:7052kB free_cma:0kB [ 1408.241902][T21958] lowmem_reserve[]: 0 0 0 0 0 [ 1408.247529][T21958] Node 1 Normal free:885684kB boost:0kB min:40156kB low:50192kB high:60228kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:991228kB mlocked:0kB bounce:0kB free_pcp:10988kB local_pcp:0kB free_cma:0kB [ 1408.280021][T21958] lowmem_reserve[]: 0 0 0 0 0 [ 1408.285194][T21958] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1408.298416][T21958] Node 0 DMA32: 856*4kB (UE) 1436*8kB (UME) 978*16kB (UME) 442*32kB (UME) 231*64kB (UME) 175*128kB (UME) 102*256kB (UME) 95*512kB (UME) 86*1024kB (UM) 34*2048kB (UM) 20*4096kB (UM) = 396256kB [ 1408.319996][T21958] Node 0 Normal: 100*4kB (U) 111*8kB (UME) 101*16kB (ME) 59*32kB (ME) 35*64kB (ME) 31*128kB (UME) 14*256kB (UME) 3*512kB (UME) 2*1024kB (UM) 0*2048kB 0*4096kB = 18168kB [ 1408.340328][T21958] Node 1 Normal: 5*4kB (UM) 18*8kB (UE) 12*16kB (UME) 10*32kB (UM) 17*64kB (UME) 12*128kB (UME) 9*256kB (UME) 5*512kB (UE) 3*1024kB (UM) 1*2048kB (U) 213*4096kB (UM) = 885732kB [ 1408.359851][T21958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.370468][T21958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.380138][T21958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.390080][T21958] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1408.399944][T21958] 63099 total pagecache pages [ 1408.404771][T21958] 0 pages in swap cache [ 1408.409224][T21958] Free swap = 124996kB [ 1408.413515][T21958] Total swap = 124996kB [ 1408.419140][T21958] 2097051 pages RAM [ 1408.423088][T21958] 0 pages HighMem/MovableOnly [ 1408.428162][T21958] 1530435 pages reserved [ 1408.432524][T21958] 0 pages cma reserved [ 1409.572308][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5837'. [ 1409.582001][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5837'. [ 1412.433956][T22028] loop1: detected capacity change from 0 to 128 [ 1412.551624][T22031] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5856'. [ 1412.624892][T22033] overlayfs: failed to resolve './cgroup': -2 [ 1414.579749][T22072] netlink: 'syz.1.5874': attribute type 3 has an invalid length. [ 1414.723551][T22074] loop2: detected capacity change from 0 to 164 [ 1416.354938][T22089] netlink: 'syz.2.5882': attribute type 1 has an invalid length. [ 1416.446454][T22089] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1416.766418][T22089] bond8: (slave bridge0): Enslaving as an active interface with a down link [ 1419.578989][T22128] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5899'. [ 1419.589968][T22128] tipc: Enabled bearer , priority 10 [ 1419.641752][T22128] ªªªªªª: renamed from vlan0 (while UP) [ 1419.671933][T22128] tipc: Disabling bearer [ 1420.781776][T22150] loop1: detected capacity change from 0 to 4096 [ 1422.474227][T22180] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5921'. [ 1424.293378][T22211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5935'. [ 1425.883776][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5949'. [ 1425.969872][T22252] gre1: entered promiscuous mode [ 1425.973454][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5951'. [ 1425.974991][T22252] gre1: entered allmulticast mode [ 1426.175475][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5952'. 6[ 1426.878647][T22270] overlayfs: failed to clone upperpath [ 1427.002779][T22272] syzkaller1: entered promiscuous mode [ 1427.008754][T22272] syzkaller1: entered allmulticast mode [ 1427.631451][T22285] netlink: 'syz.8.5964': attribute type 10 has an invalid length. [ 1427.640195][T22285] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5964'. [ 1427.649884][T22285] dummy0: entered promiscuous mode [ 1428.099851][T22295] loop2: detected capacity change from 0 to 128 [ 1428.184840][T22299] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5970'. [ 1428.252139][T22301] syz.2.5968: attempt to access beyond end of device [ 1428.252139][T22301] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1428.276453][T22301] syz.2.5968: attempt to access beyond end of device [ 1428.276453][T22301] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1428.332296][T22301] syz.2.5968: attempt to access beyond end of device [ 1428.332296][T22301] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1428.362606][T22301] syz.2.5968: attempt to access beyond end of device [ 1428.362606][T22301] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1428.416171][T22301] syz.2.5968: attempt to access beyond end of device [ 1428.416171][T22301] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1428.433099][T22301] syz.2.5968: attempt to access beyond end of device [ 1428.433099][T22301] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1428.450294][T22301] syz.2.5968: attempt to access beyond end of device [ 1428.450294][T22301] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1428.464697][T22301] syz.2.5968: attempt to access beyond end of device [ 1428.464697][T22301] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1428.479039][T22301] syz.2.5968: attempt to access beyond end of device [ 1428.479039][T22301] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1428.493598][T22301] syz.2.5968: attempt to access beyond end of device [ 1428.493598][T22301] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 1428.687041][T22305] overlayfs: failed to clone upperpath [ 1429.858580][T22327] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5981'. [ 1429.873134][T22327] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5981'. [ 1433.805014][T22401] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1433.815945][T22401] block device autoloading is deprecated and will be removed. [ 1434.002336][T22403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6011'. [ 1434.605397][T22410] netlink: 'syz.1.6014': attribute type 4 has an invalid length. [ 1434.706595][T22410] netlink: 'syz.1.6014': attribute type 4 has an invalid length. [ 1436.159304][T22423] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6018'. [ 1437.035194][T22434] loop1: detected capacity change from 0 to 4096 [ 1437.634200][ T30] audit: type=1800 audit(1437.619:672): pid=22434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6025" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 1437.845078][ T30] audit: type=1800 audit(1437.819:673): pid=22452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6025" name="file1" dev="loop1" ino=36 res=0 errno=0 [ 1438.621062][T22458] overlayfs: failed to clone upperpath [ 1438.708815][T22458] overlayfs: failed to clone upperpath [ 1439.060865][T22465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6036'. [ 1439.639324][ T30] audit: type=1326 audit(1439.619:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22474 comm="syz.8.6042" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x0 [ 1439.798607][T22484] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6042'. [ 1439.809115][T22484] bridge_slave_0: default FDB implementation only supports local addresses [ 1440.967117][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6048'. [ 1441.057095][T22497] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6048'. [ 1442.448236][T16425] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1442.669553][T16425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.681715][T16425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.692435][T16425] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1442.702174][T16425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.792804][T16425] usb 2-1: config 0 descriptor?? [ 1443.251067][T16425] pyra 0003:1E7D:2CF6.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 1443.970896][T22551] tipc: Started in network mode [ 1443.976907][T22551] tipc: Node identity 3242f2a32d4c, cluster identity 4711 [ 1443.985065][T22551] tipc: Enabled bearer , priority 0 [ 1444.012321][T22551] tipc: Disabling bearer [ 1444.449788][T16425] pyra 0003:1E7D:2CF6.0038: couldn't init struct pyra_device [ 1444.463389][T16425] pyra 0003:1E7D:2CF6.0038: couldn't install mouse [ 1444.497032][T16425] pyra 0003:1E7D:2CF6.0038: probe with driver pyra failed with error -71 [ 1444.511616][T16425] usb 2-1: USB disconnect, device number 27 [ 1446.972993][T22590] loop2: detected capacity change from 0 to 32768 [ 1447.610374][T22590] JBD2: Ignoring recovery information on journal [ 1447.830485][T22590] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1448.009816][T10852] ocfs2: Unmounting device (7,2) on (node local) [ 1448.107708][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6088'. [ 1448.118625][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6088'. [ 1448.128201][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6088'. [ 1448.215313][T14788] bridge_slave_1: left allmulticast mode [ 1448.221595][T14788] bridge_slave_1: left promiscuous mode [ 1448.228381][T14788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.304772][T14788] bridge_slave_0: left allmulticast mode [ 1448.311148][T14788] bridge_slave_0: left promiscuous mode [ 1448.317996][T14788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.893125][T22611] futex_wake_op: syz.8.6093 tries to shift op by 32; fix this program [ 1449.008251][T22612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6095'. [ 1449.604816][T14788] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1450.067084][T14788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.098761][T14788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.130691][T14788] bond0 (unregistering): Released all slaves [ 1450.157666][T14788] bond1 (unregistering): Released all slaves [ 1450.179297][T14788] bond2 (unregistering): Released all slaves [ 1450.221262][T22602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.229748][T22602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.251371][T22602] bridge0: entered allmulticast mode [ 1450.353415][T22605] bridge_slave_1: left allmulticast mode [ 1450.359937][T22605] bridge_slave_1: left promiscuous mode [ 1450.366530][T22605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.391547][T22605] bridge_slave_0: left allmulticast mode [ 1450.397530][T22605] bridge_slave_0: left promiscuous mode [ 1450.405269][T22605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.840305][T14788] hsr_slave_0: left promiscuous mode [ 1450.848596][T14788] hsr_slave_1: left promiscuous mode [ 1450.857741][T14788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.866829][T14788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.880465][T14788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.889865][T14788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.956406][T14788] veth1_vlan: left promiscuous mode [ 1450.961984][T14788] veth0_vlan: left promiscuous mode [ 1451.954196][T22642] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6107'. [ 1452.221458][T14788] team0 (unregistering): Port device team_slave_1 removed [ 1452.253952][T14788] team0 (unregistering): Port device team_slave_0 removed [ 1452.695224][T22655] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6109'. [ 1453.125352][T22655] hsr_slave_1 (unregistering): left promiscuous mode [ 1453.353293][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1453.360013][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1455.073124][T22678] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1455.913169][T22702] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6130'. [ 1455.941522][T22702] vxlan0: entered allmulticast mode [ 1455.965910][T22704] bond0: entered promiscuous mode [ 1455.971150][T22704] bond_slave_0: entered promiscuous mode [ 1455.978802][T22704] bond_slave_1: entered promiscuous mode [ 1455.994680][T22704] batadv0: entered promiscuous mode [ 1456.005154][T22704] debugfs: 'hsr1' already exists in 'hsr' [ 1456.011803][T22705] netlink: 'syz.1.6131': attribute type 10 has an invalid length. [ 1456.011838][T22704] Cannot create hsr debugfs directory [ 1456.014057][T22704] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1456.042802][T22705] syz_tun: entered promiscuous mode [ 1456.074013][T22705] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1456.872353][T22714] ip6tnl1: entered promiscuous mode [ 1457.208738][T22719] bond2: left allmulticast mode [ 1457.213811][T22719] bond2: left promiscuous mode [ 1457.219749][T22719] bridge0: port 3(bond2) entered disabled state [ 1457.287101][T22719] bond8: (slave bridge0): Releasing active interface [ 1458.162351][T22739] loop6: detected capacity change from 0 to 7 [ 1458.177984][T22739] Dev loop6: unable to read RDB block 7 [ 1458.185022][T22739] loop6: unable to read partition table [ 1458.194337][T22739] loop6: partition table beyond EOD, truncated [ 1458.201134][T22739] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1458.773408][T22745] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6146'. [ 1459.340224][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6153'. [ 1460.998652][T22780] bond1: (slave lo): Releasing backup interface [ 1461.019384][T22780] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1461.059643][T22785] cgroup: Unknown subsys name 'cpuset' [ 1461.132520][T22780] bridge_slave_0: left allmulticast mode [ 1461.138516][T22780] bridge_slave_0: left promiscuous mode [ 1461.145098][T22780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.214961][T22780] bridge_slave_1: left allmulticast mode [ 1461.221037][T22780] bridge_slave_1: left promiscuous mode [ 1461.227770][T22780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.288757][T22780] team0: Port device team_slave_0 removed [ 1461.342541][T22780] team0: Port device team_slave_1 removed [ 1461.353826][T22780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.362628][T22780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.402664][T22780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.410529][T22780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.442893][T22780] net_ratelimit: 11 callbacks suppressed [ 1461.442990][T22780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1462.137713][T22793] loop7: detected capacity change from 0 to 4096 [ 1462.336192][ T30] audit: type=1326 audit(1462.319:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22799 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1462.358622][ T30] audit: type=1326 audit(1462.319:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22799 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1462.381878][ T30] audit: type=1326 audit(1462.319:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22799 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1462.404019][ T30] audit: type=1326 audit(1462.319:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22799 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1462.673671][ T30] audit: type=1326 audit(1462.659:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22799 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f77558 code=0x7ffc0000 [ 1462.696871][ T30] audit: type=1326 audit(1462.669:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22799 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1462.719061][ T30] audit: type=1326 audit(1462.669:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22799 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1462.989410][T22811] overlayfs: failed to clone upperpath [ 1463.667375][T22823] syz.1.6180 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1465.698619][T22855] process 'newroot/191/bus/file0' started with executable stack [ 1466.507167][T22875] netlink: 'syz.6.6202': attribute type 2 has an invalid length. [ 1467.009713][T22889] loop7: detected capacity change from 0 to 16 [ 1467.027444][T22889] erofs (device loop7): negative i_size @ nid 36 [ 1467.736329][T22899] loop7: detected capacity change from 0 to 1024 [ 1467.748841][T22899] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1467.764695][T22899] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1467.774957][T22899] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1467.783093][T22899] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.6211: Freeing blocks not in datazone - block = 0, count = 4096 [ 1467.802723][T22899] EXT4-fs (loop7): 1 orphan inode deleted [ 1467.812044][T22899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1467.846688][T22900] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1467.883399][T22899] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1467.963445][T21581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.244617][T22907] overlayfs: failed to clone upperpath [ 1468.352678][ T30] audit: type=1804 audit(1468.329:682): pid=22908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.6214" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=99037 res=1 errno=0 [ 1468.395910][ T30] audit: type=1804 audit(1468.339:683): pid=22908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.6214" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=99037 res=1 errno=0 [ 1469.885082][T22938] xt_ecn: cannot match TCP bits for non-tcp packets [ 1469.897402][T22938] xt_TCPMSS: Only works on TCP SYN packets [ 1470.681143][T22951] bond0: (slave syz_tun): Releasing backup interface [ 1470.714696][T22951] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1472.809504][T10625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.899984][T10625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.917079][T10625] bond0 (unregistering): Released all slaves [ 1473.057568][T10625] tipc: Left network mode [ 1473.387039][T10625] hsr_slave_0: left promiscuous mode [ 1473.404544][T10625] hsr_slave_1: left promiscuous mode [ 1473.412901][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.420673][T10625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.436121][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.443685][T10625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.520054][T10625] veth1_macvtap: left promiscuous mode [ 1473.525994][T10625] veth0_macvtap: left promiscuous mode [ 1473.531847][T10625] veth1_vlan: left promiscuous mode [ 1473.539272][T10625] veth0_vlan: left promiscuous mode [ 1474.033499][T16028] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1474.207643][T16028] usb 3-1: Using ep0 maxpacket: 8 [ 1474.237525][T16028] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1474.280405][T16028] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1474.290094][T16028] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1474.298714][T16028] usb 3-1: Product: syz [ 1474.303058][T16028] usb 3-1: Manufacturer: syz [ 1474.307978][T16028] usb 3-1: SerialNumber: syz [ 1474.374511][T16028] usb 3-1: config 0 descriptor?? [ 1474.406974][T16028] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1474.478609][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1474.547041][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1474.558017][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1474.572535][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1474.586303][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1474.673339][T10625] team0 (unregistering): Port device team_slave_1 removed [ 1474.711160][T10625] team0 (unregistering): Port device team_slave_0 removed [ 1475.044486][T22992] vlan3: entered allmulticast mode [ 1475.051278][T22992] bridge0: port 3(vlan3) entered blocking state [ 1475.058121][T22992] bridge0: port 3(vlan3) entered disabled state [ 1475.068678][T22992] vlan3: entered promiscuous mode [ 1475.794271][T22988] chnl_net:caif_netlink_parms(): no params data found [ 1475.922255][T16028] gspca_zc3xx: reg_w_i err -71 [ 1475.940208][ T30] audit: type=1326 audit(1475.909:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22998 comm="syz.1.6252" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x0 [ 1476.545915][T16028] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1476.552887][T16028] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1476.584377][T16028] usb 3-1: USB disconnect, device number 39 [ 1476.676538][ T5815] Bluetooth: hci2: command tx timeout [ 1476.703725][T22988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.711438][T22988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.720926][T22988] bridge_slave_0: entered allmulticast mode [ 1476.730386][T22988] bridge_slave_0: entered promiscuous mode [ 1476.848418][T22988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.856143][T22988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.863943][T22988] bridge_slave_1: entered allmulticast mode [ 1476.873800][T22988] bridge_slave_1: entered promiscuous mode [ 1477.125087][T22988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.157592][T22988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.301383][T22988] team0: Port device team_slave_0 added [ 1477.323369][T22988] team0: Port device team_slave_1 added [ 1477.479571][T22988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.487154][T22988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.513527][T22988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.531161][T22988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.539631][T22988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.571982][T22988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1477.717110][T22988] hsr_slave_0: entered promiscuous mode [ 1477.727431][T22988] hsr_slave_1: entered promiscuous mode [ 1477.745354][T22988] debugfs: 'hsr0' already exists in 'hsr' [ 1477.751368][T22988] Cannot create hsr debugfs directory [ 1478.756767][ T5815] Bluetooth: hci2: command tx timeout [ 1478.886448][T23042] team_slave_0: entered promiscuous mode [ 1478.892565][T23042] team_slave_1: entered promiscuous mode [ 1478.943544][T23043] netlink: 'syz.8.6269': attribute type 10 has an invalid length. [ 1478.970422][T23043] team_slave_0: left promiscuous mode [ 1478.976984][T23043] team_slave_1: left promiscuous mode [ 1479.017487][T23043] team_slave_0: entered promiscuous mode [ 1479.023502][T23043] team_slave_1: entered promiscuous mode [ 1479.033063][T23043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.048629][T23043] bond0: (slave team0): Enslaving as an active interface with an up link [ 1479.069907][T23041] team_slave_0: left promiscuous mode [ 1479.075519][T23041] team_slave_1: left promiscuous mode [ 1479.079336][T23045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6270'. [ 1479.266185][T22988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.351986][T22988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.391313][T18379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.398871][T18379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.441362][T11999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.449115][T11999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1480.150481][T23059] loop2: detected capacity change from 0 to 256 [ 1480.257520][T23059] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 1480.552741][T22988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1480.801619][T23069] loop1: detected capacity change from 0 to 512 [ 1480.836318][ T5815] Bluetooth: hci2: command tx timeout [ 1480.892037][T23069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1481.352766][T19602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.483621][T20673] bond0: (slave syz_tun): Releasing backup interface [ 1481.788916][T23087] netlink: 'syz.6.6284': attribute type 4 has an invalid length. [ 1481.856533][T23087] netlink: 'syz.6.6284': attribute type 4 has an invalid length. [ 1482.291126][T22988] veth0_vlan: entered promiscuous mode [ 1482.327862][T22988] veth1_vlan: entered promiscuous mode [ 1482.451533][T22988] veth0_macvtap: entered promiscuous mode [ 1482.475772][T22988] veth1_macvtap: entered promiscuous mode [ 1482.540898][T22988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1482.569555][T22988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1482.916381][ T5815] Bluetooth: hci2: command tx timeout [ 1483.482362][T23100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.492004][T23100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.565946][T13901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1483.576577][T13901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1483.586183][T13901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1483.622208][T13901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1483.647024][T13901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1483.906111][T23100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1483.934376][T23100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.044181][T23120] overlayfs: failed to clone upperpath [ 1485.317856][T23107] chnl_net:caif_netlink_parms(): no params data found [ 1485.717592][T13901] Bluetooth: hci0: command tx timeout [ 1486.256473][T23142] overlayfs: failed to clone upperpath [ 1486.319352][T23107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.330785][T23107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.338785][T23107] bridge_slave_0: entered allmulticast mode [ 1486.348361][T23107] bridge_slave_0: entered promiscuous mode [ 1486.398218][T23107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.405993][T23107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.413869][T23107] bridge_slave_1: entered allmulticast mode [ 1486.423687][T23107] bridge_slave_1: entered promiscuous mode [ 1486.672537][T23107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1486.718378][T23107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.033284][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.041765][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.335249][T23152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.368988][T23152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.797034][T13901] Bluetooth: hci0: command tx timeout [ 1488.184852][T23107] team0: Port device team_slave_0 added [ 1488.229797][T23107] team0: Port device team_slave_1 added [ 1488.462749][T23107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.470148][T23107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.496599][T23107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.610243][T23107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.618576][T23107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.644961][T23107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.686518][T14781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.694523][T14781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.810812][T14781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.819134][T14781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.078819][T23107] hsr_slave_0: entered promiscuous mode [ 1489.089197][T23107] hsr_slave_1: entered promiscuous mode [ 1489.107211][T23107] debugfs: 'hsr0' already exists in 'hsr' [ 1489.113110][T23107] Cannot create hsr debugfs directory [ 1489.414920][T23174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1489.517747][T23174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1489.876244][T13901] Bluetooth: hci0: command tx timeout [ 1489.928231][T23184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6312'. [ 1490.262723][T23107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.358807][T23107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.434750][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.442381][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1490.514110][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.521675][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1490.587376][T23189] bridge0: port 3(syz_tun) entered blocking state [ 1490.594339][T23189] bridge0: port 3(syz_tun) entered disabled state [ 1490.602038][T23189] syz_tun: entered allmulticast mode [ 1490.610871][T23189] syz_tun: entered promiscuous mode [ 1491.331371][T23197] loop5: detected capacity change from 0 to 4096 [ 1491.416515][T23197] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1491.424745][T23197] NILFS (loop5): trying rollback from an earlier position [ 1491.524392][T23197] NILFS (loop5): recovery complete [ 1491.534000][T23207] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1491.601117][T23197] overlayfs: upper fs does not support tmpfile. [ 1491.623363][T23197] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1491.631164][T23197] overlayfs: failed to set xattr on upper [ 1491.638778][T23197] overlayfs: ...falling back to redirect_dir=nofollow. [ 1491.646696][T23197] overlayfs: ...falling back to index=off. [ 1491.654348][T23197] overlayfs: ...falling back to uuid=null. [ 1491.966618][T13901] Bluetooth: hci0: command tx timeout [ 1492.003298][T23107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.938006][T23231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1492.952438][T23231] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1492.969421][T23234] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6328'. [ 1493.168398][T23234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.228576][T23234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.293486][T23234] bond0 (unregistering): (slave team0): Releasing backup interface [ 1493.346146][T23234] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1493.400995][T23234] bond0 (unregistering): Released all slaves [ 1493.656816][T13901] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 1493.753559][T23107] veth0_vlan: entered promiscuous mode [ 1493.833283][T23107] veth1_vlan: entered promiscuous mode [ 1494.070189][T23107] veth0_macvtap: entered promiscuous mode [ 1494.130097][T23107] veth1_macvtap: entered promiscuous mode [ 1494.244256][T23107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1494.342569][T23107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.054930][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1496.065254][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1496.074276][T23267] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6340'. [ 1496.096172][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1496.109968][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6339'. [ 1496.110488][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1496.179344][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1497.093064][T23286] ceph: No mds server is up or the cluster is laggy [ 1497.105077][T16425] libceph: connect (1)[c::]:6789 error -101 [ 1497.111761][T16425] libceph: mon0 (1)[c::]:6789 connect error [ 1497.266539][T23270] chnl_net:caif_netlink_parms(): no params data found [ 1497.618908][T11661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.627318][T11661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.836947][T14778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.844961][T14778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.276342][ T5815] Bluetooth: hci4: command tx timeout [ 1498.452890][T23270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.460675][T23270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.468846][T23270] bridge_slave_0: entered allmulticast mode [ 1498.478813][T23270] bridge_slave_0: entered promiscuous mode [ 1498.561467][T23270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.569730][T23270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.578022][T23270] bridge_slave_1: entered allmulticast mode [ 1498.588019][T23270] bridge_slave_1: entered promiscuous mode [ 1498.896181][T23270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.055184][T23308] bridge0: port 3(syz_tun) entered blocking state [ 1499.062212][T23308] bridge0: port 3(syz_tun) entered forwarding state [ 1499.081738][T23308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.097024][T23308] dummy0: left promiscuous mode [ 1499.159588][T23308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1499.186774][T23270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.503638][T23270] team0: Port device team_slave_0 added [ 1499.597141][T23270] team0: Port device team_slave_1 added [ 1500.059816][T23312] loop3: detected capacity change from 0 to 32768 [ 1500.075743][T23312] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6350 (23312) [ 1500.094468][T23312] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1500.105702][T23312] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1500.358496][ T5815] Bluetooth: hci4: command tx timeout [ 1500.371162][T23312] BTRFS info (device loop3): rebuilding free space tree [ 1500.399156][T23312] BTRFS info (device loop3): disabling free space tree [ 1500.407897][T23312] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1500.417899][T23312] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1500.440926][T23270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.448555][T23270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.477294][T23270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.500387][T23312] BTRFS info (device loop3): setting nodatasum [ 1500.506859][T23312] BTRFS info (device loop3): setting nodatacow [ 1500.512167][T23270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.513189][T23312] BTRFS info (device loop3): turning off barriers [ 1500.520447][T23270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.526953][T23312] BTRFS info (device loop3): force clearing of disk cache [ 1500.561309][T23270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.629596][T23332] netlink: 'syz.5.6353': attribute type 6 has an invalid length. [ 1500.840628][T23107] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1500.850425][T23270] hsr_slave_0: entered promiscuous mode [ 1500.861222][T23270] hsr_slave_1: entered promiscuous mode [ 1500.870341][T23270] debugfs: 'hsr0' already exists in 'hsr' [ 1500.876355][T23270] Cannot create hsr debugfs directory [ 1501.856903][T23342] pimreg: entered allmulticast mode [ 1501.897416][T23342] pimreg: left allmulticast mode [ 1502.436916][ T5815] Bluetooth: hci4: command tx timeout [ 1502.451725][T23346] loop5: detected capacity change from 0 to 4096 [ 1502.502640][T23346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1502.516760][T23270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.582711][T23270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.619566][T14797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.627268][T14797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.656562][T23346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6359'. [ 1502.719206][T23346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6359'. [ 1502.750996][T14797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.758530][T14797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.760306][T23346] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6359'. [ 1503.078432][T22988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.752975][T23365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6365'. [ 1504.144962][T23270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1504.538256][ T5815] Bluetooth: hci4: command tx timeout [ 1505.003774][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6370'. [ 1505.737034][T23396] netlink: 'syz.5.6374': attribute type 4 has an invalid length. [ 1505.799867][T23401] netlink: 'syz.5.6374': attribute type 4 has an invalid length. [ 1506.106500][T23270] veth0_vlan: entered promiscuous mode [ 1506.194104][T23270] veth1_vlan: entered promiscuous mode [ 1506.377367][T23270] veth0_macvtap: entered promiscuous mode [ 1506.422602][T23270] veth1_macvtap: entered promiscuous mode [ 1506.532289][T23270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1506.614812][T23270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.862616][T23456] IPVS: Scheduler module ip_vs_ not found [ 1509.869488][T23459] IPVS: length: 8 != 243000036768 [ 1509.928507][T11661] team0: Port device netdevsim3 removed [ 1509.947828][T11661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1509.958791][T11661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.162404][T11661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.173658][T11661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.368106][T11661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.379047][T11661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.466048][T23472] pimreg: entered allmulticast mode [ 1510.603150][T11661] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.616687][T11661] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.172746][T11661] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1511.181425][T11661] batadv0: mtu less than device minimum [ 1511.189998][T11661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1511.203826][T11661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1511.217086][T11661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1511.229927][T11661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1511.242770][T11661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1511.255440][T11661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1511.268817][T11661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1511.282937][T11661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1511.297768][T11661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1512.940963][T23532] overlayfs: failed to clone upperpath [ 1514.242890][T11661] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1514.581868][T11661] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1514.638412][T11661] dvmrp0 (unregistering): left allmulticast mode [ 1514.720587][T11661] bond3 (unregistering): (slave geneve3): Releasing active interface [ 1514.753082][T11661] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1514.813327][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.821121][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1514.849860][T11661] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 1514.858787][T11661] bridge1 (unregistering): left promiscuous mode [ 1515.028825][T11661] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1515.074115][T11661] team0: left promiscuous mode [ 1515.080041][T11661] bond6 (unregistering): left promiscuous mode [ 1515.110568][T11661] bond0 (unregistering): Released all slaves [ 1515.138887][T11661] bond1 (unregistering): Released all slaves [ 1515.168652][T11661] bond2 (unregistering): Released all slaves [ 1515.213450][T11661] bond3 (unregistering): Released all slaves [ 1515.245499][T11661] bond4 (unregistering): Released all slaves [ 1515.328912][T11661] bond5 (unregistering): Released all slaves [ 1515.369303][T11661] team0: Port device bond6 removed [ 1515.406969][T11661] bond6 (unregistering): Released all slaves [ 1515.431699][T11661] bond7 (unregistering): Released all slaves [ 1515.453474][T11661] bond8 (unregistering): Released all slaves [ 1515.958644][T11661] tipc: Disabling bearer [ 1515.964651][T11661] tipc: Left network mode [ 1516.351477][T11661] hsr_slave_0: left promiscuous mode [ 1516.436241][T11661] hsr_slave_1: left promiscuous mode [ 1516.444091][T11661] batman_adv: batadv0: Interface deactivated: dummy0 [ 1516.453718][T11661] batman_adv: batadv0: Removing interface: dummy0 [ 1516.590804][T11661] veth1_vlan: left promiscuous mode [ 1516.598435][T11661] veth0_vlan: left promiscuous mode [ 1516.840354][T23563] overlayfs: failed to clone upperpath [ 1517.306426][T11661] pim6reg (unregistering): left allmulticast mode [ 1518.146990][T11609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.155195][T11609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.371071][T14781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.380219][T14781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.480583][T11661] IPVS: stop unused estimator thread 0... [ 1519.146250][T23587] hsr0: entered promiscuous mode [ 1519.178569][T23587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6420'. [ 1519.206528][T23587] hsr_slave_0: left promiscuous mode [ 1519.254184][T23587] hsr_slave_1: left promiscuous mode [ 1519.670096][T23598] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6423'. [ 1520.058016][T23606] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6425'. [ 1520.060118][T23605] netlink: 188 bytes leftover after parsing attributes in process `syz.6.6426'. [ 1520.068031][T23606] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6425'. [ 1520.090430][T23605] netlink: 188 bytes leftover after parsing attributes in process `syz.6.6426'. [ 1522.507799][ T30] audit: type=1326 audit(1522.489:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.6.6445" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0 [ 1522.763111][T23660] loop9: detected capacity change from 0 to 512 [ 1522.773723][T23660] EXT4-fs: Ignoring removed i_version option [ 1522.791712][T23660] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1522.807375][T23660] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.6447: EA inode hash validation failed [ 1522.822157][T23660] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1522.836586][T23660] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.9.6447: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1522.855215][T23660] EXT4-fs (loop9): Remounting filesystem read-only [ 1522.863222][T23660] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.9.6447: ea_inode dec ref err=-117 [ 1522.877724][T23660] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 1522.892118][T23660] EXT4-fs (loop9): 1 orphan inode deleted [ 1522.902735][T23660] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1523.268353][T23270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.401103][T23669] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.6450'. [ 1523.412914][T23669] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6450'. [ 1523.801834][T23671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.811589][T23671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.464680][T23671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1524.547369][T23671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1525.795302][T23696] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6461'. [ 1526.074668][ T30] audit: type=1326 audit(1526.059:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.5.6463" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 1526.366385][T23708] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1526.386817][T19132] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1526.737823][T19132] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1528.196422][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1529.223018][T23757] loop3: detected capacity change from 0 to 2048 [ 1529.365881][T23757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1529.656637][T23757] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1529.716585][T23757] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 128 with error 28 [ 1529.729850][T23757] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1529.729850][T23757] [ 1529.740118][T23757] EXT4-fs (loop3): Total free blocks count 0 [ 1529.746729][T23757] EXT4-fs (loop3): Free/Dirty block details [ 1529.752795][T23757] EXT4-fs (loop3): free_blocks=2415919104 [ 1529.759641][T23757] EXT4-fs (loop3): dirty_blocks=160 [ 1529.765728][T23757] EXT4-fs (loop3): Block reservation details [ 1529.771937][T23757] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 1530.031625][ T3890] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 1534.033634][T23819] netlink: 204 bytes leftover after parsing attributes in process `syz.8.6508'. [ 1534.768993][T23833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6516'. [ 1534.781426][T23833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6516'. [ 1535.645525][T23824] loop5: detected capacity change from 0 to 8192 [ 1536.149457][T23844] overlayfs: failed to clone upperpath [ 1536.161966][T23844] overlayfs: failed to clone lowerpath [ 1536.623402][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6524'. [ 1536.720399][ T30] audit: type=1804 audit(1536.699:687): pid=23854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.6523" name="file1" dev="ramfs" ino=104623 res=1 errno=0 [ 1536.970992][T23856] loop9: detected capacity change from 0 to 256 [ 1536.980971][T23856] exfat: Bad value for 'uid' [ 1536.986026][T23856] exfat: Bad value for 'uid' [ 1537.184368][T23865] loop3: detected capacity change from 0 to 64 [ 1537.619416][T23869] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6532'. [ 1537.629340][T23869] netlink: 'syz.6.6532': attribute type 7 has an invalid length. [ 1537.639169][T23869] netlink: 'syz.6.6532': attribute type 8 has an invalid length. [ 1537.648464][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6532'. [ 1537.728370][T23873] loop5: detected capacity change from 0 to 512 [ 1537.766481][T23873] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1537.828164][T23873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1537.929219][T23879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6534'. [ 1537.958615][T23856] loop9: detected capacity change from 0 to 4096 [ 1537.969916][T23856] ntfs3: Unexpected value for 'discard' [ 1538.023667][ T30] audit: type=1800 audit(1538.009:688): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6531" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 1538.256272][T22988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1538.508683][T23880] 9pnet_fd: p9_fd_create_unix (23880): problem connecting socket: ./file0: -103 [ 1538.678114][T23890] binder: BINDER_SET_CONTEXT_MGR already set [ 1538.684803][T23890] binder: 23888:23890 ioctl 4018620d 80000480 returned -16 [ 1540.338685][T23918] loop9: detected capacity change from 0 to 64 [ 1541.352246][T23934] netlink: 'syz.9.6555': attribute type 4 has an invalid length. [ 1541.405911][T23934] netlink: 'syz.9.6555': attribute type 4 has an invalid length. [ 1542.470024][ T3856] bridge_slave_1: left allmulticast mode [ 1542.477148][ T3856] bridge_slave_1: left promiscuous mode [ 1542.483857][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.550907][ T3856] bridge_slave_0: left allmulticast mode [ 1542.556899][ T3856] bridge_slave_0: left promiscuous mode [ 1542.566173][ T3856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.621615][T23944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6561'. [ 1542.747518][T23947] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6561'. [ 1543.375922][ T3856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.422945][ T3856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.449962][ T3856] bond0 (unregistering): Released all slaves [ 1543.839455][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.847236][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.865934][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.874056][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.913904][ T3856] veth1_macvtap: left promiscuous mode [ 1543.920979][ T3856] veth0_macvtap: left promiscuous mode [ 1543.928091][ T3856] veth1_vlan: left promiscuous mode [ 1543.933731][ T3856] veth0_vlan: left promiscuous mode [ 1545.037540][T13901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1545.073330][T13901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1545.073459][ T3856] team0 (unregistering): Port device team_slave_1 removed [ 1545.098334][T13901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1545.111976][T13901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1545.124386][T13901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1545.172163][ T3856] team0 (unregistering): Port device team_slave_0 removed [ 1546.577322][T23967] chnl_net:caif_netlink_parms(): no params data found [ 1547.257008][T13901] Bluetooth: hci2: command tx timeout [ 1547.478458][T23967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.488875][T23967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.497035][T23967] bridge_slave_0: entered allmulticast mode [ 1547.507133][T23967] bridge_slave_0: entered promiscuous mode [ 1547.588704][T23967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.601237][T23967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.609410][T23967] bridge_slave_1: entered allmulticast mode [ 1547.619399][T23967] bridge_slave_1: entered promiscuous mode [ 1547.946243][T23967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.017673][T23967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.272410][T23967] team0: Port device team_slave_0 added [ 1548.313069][T23967] team0: Port device team_slave_1 added [ 1548.517209][T23967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.525193][T23967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.553341][T23967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.721182][T23967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.728636][T23967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.760939][T23967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.920294][T23967] hsr_slave_0: entered promiscuous mode [ 1548.930797][T23967] hsr_slave_1: entered promiscuous mode [ 1548.939750][T23967] debugfs: 'hsr0' already exists in 'hsr' [ 1548.945946][T23967] Cannot create hsr debugfs directory [ 1548.985044][T24005] overlayfs: failed to clone upperpath [ 1549.319164][T13901] Bluetooth: hci2: command tx timeout [ 1550.012654][T24020] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6589'. [ 1550.728667][T23967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.083124][T23967] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.136727][T11609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.144497][T11609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.225950][T11609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.234381][T11609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.469390][T13901] Bluetooth: hci2: command tx timeout [ 1552.723080][T23967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.836010][ T30] audit: type=1326 audit(1552.809:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.6.6599" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1552.931628][ T30] audit: type=1326 audit(1552.869:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.6.6599" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1552.954909][ T30] audit: type=1326 audit(1552.899:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.6.6599" exe="/root/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1552.978690][ T30] audit: type=1326 audit(1552.899:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.6.6599" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1553.001006][ T30] audit: type=1326 audit(1552.899:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.6.6599" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1553.025652][ T30] audit: type=1326 audit(1552.899:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.6.6599" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1553.048578][ T30] audit: type=1326 audit(1552.909:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.6.6599" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1553.072785][ T30] audit: type=1326 audit(1552.919:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.6.6599" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1553.095194][ T30] audit: type=1326 audit(1552.919:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.6.6599" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1553.118219][ T30] audit: type=1326 audit(1552.919:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24051 comm="syz.6.6599" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1553.286185][T24057] loop9: detected capacity change from 0 to 512 [ 1553.563277][T13901] Bluetooth: hci2: command tx timeout [ 1554.722708][T23967] veth0_vlan: entered promiscuous mode [ 1554.829671][T23967] veth1_vlan: entered promiscuous mode [ 1555.000648][T24086] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6610'. [ 1555.046726][T19132] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1555.083286][T23967] veth0_macvtap: entered promiscuous mode [ 1555.134061][T23967] veth1_macvtap: entered promiscuous mode [ 1555.240882][T23967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.271677][T19132] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1555.283804][T19132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.295889][T19132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.307467][T19132] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1555.348517][T23967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.504421][T19132] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1555.514164][T19132] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1555.525010][T19132] usb 4-1: Manufacturer: syz [ 1555.561812][T19132] usb 4-1: config 0 descriptor?? [ 1555.992947][T19132] appleir 0003:05AC:8243.0039: unknown main item tag 0x0 [ 1556.048293][T19132] appleir 0003:05AC:8243.0039: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1556.541727][T19132] usb 4-1: USB disconnect, device number 16 [ 1557.352453][T24125] overlayfs: failed to clone upperpath [ 1557.679353][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6623'. [ 1558.276335][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1558.409864][T24145] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1558.426403][T24145] overlayfs: overlapping lowerdir path [ 1559.263158][ T3856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.272330][ T3856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.379688][ T3890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.388063][ T3890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.675217][T24188] team0: Port device team_slave_0 removed [ 1560.968052][T24195] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6646'. [ 1561.096173][T24198] netlink: 'syz.4.6647': attribute type 1 has an invalid length. [ 1561.104412][T24198] netlink: 'syz.4.6647': attribute type 4 has an invalid length. [ 1561.112431][T24198] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1561.192289][T24198] netlink: 'syz.4.6647': attribute type 1 has an invalid length. [ 1561.202282][T24198] netlink: 'syz.4.6647': attribute type 4 has an invalid length. [ 1561.211431][T24198] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1561.350345][T24204] overlayfs: failed to clone lowerpath [ 1561.877996][T24216] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1561.960532][T24216] bond1 (unregistering): Released all slaves [ 1564.404054][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6670'. [ 1564.671557][T24261] loop9: detected capacity change from 0 to 1024 [ 1564.736668][T24261] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1564.866068][T23270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1565.028182][T24269] netlink: 'syz.3.6675': attribute type 13 has an invalid length. [ 1565.064433][T24269] gretap0: refused to change device tx_queue_len [ 1565.074968][T24269] net_ratelimit: 10 callbacks suppressed [ 1565.075043][T24269] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1565.303743][T24272] netlink: 'syz.9.6676': attribute type 1 has an invalid length. [ 1565.312301][T24272] netlink: 'syz.9.6676': attribute type 4 has an invalid length. [ 1565.323714][T24272] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.6676'. [ 1565.348212][T24272] netlink: 'syz.9.6676': attribute type 1 has an invalid length. [ 1565.356457][T24272] netlink: 'syz.9.6676': attribute type 4 has an invalid length. [ 1565.364359][T24272] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.6676'. [ 1569.576457][T24307] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1569.583794][T24307] overlayfs: failed to set xattr on upper [ 1569.589927][T24307] overlayfs: ...falling back to redirect_dir=nofollow. [ 1569.598715][T24307] overlayfs: ...falling back to index=off. [ 1569.604661][T24307] overlayfs: ...falling back to uuid=null. [ 1571.362536][T24277] Set syz1 is full, maxelem 65536 reached [ 1571.895090][T24334] hsr0: entered promiscuous mode [ 1571.904522][T24334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1571.915692][T24334] hsr_slave_0: left promiscuous mode [ 1571.974507][T24334] hsr_slave_1: left promiscuous mode [ 1572.306254][T24338] overlayfs: failed to clone upperpath [ 1573.426203][T24357] loop9: detected capacity change from 0 to 256 [ 1573.617728][T24357] FAT-fs (loop9): Directory bread(block 64) failed [ 1573.624670][T24357] FAT-fs (loop9): Directory bread(block 65) failed [ 1573.631862][T24357] FAT-fs (loop9): Directory bread(block 66) failed [ 1573.638985][T24357] FAT-fs (loop9): Directory bread(block 67) failed [ 1573.646056][T24357] FAT-fs (loop9): Directory bread(block 68) failed [ 1573.653657][T24357] FAT-fs (loop9): Directory bread(block 69) failed [ 1573.660777][T24357] FAT-fs (loop9): Directory bread(block 70) failed [ 1573.667614][T24357] FAT-fs (loop9): Directory bread(block 71) failed [ 1573.674484][T24357] FAT-fs (loop9): Directory bread(block 72) failed [ 1573.681390][T24357] FAT-fs (loop9): Directory bread(block 73) failed [ 1573.736930][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1573.737012][ T30] audit: type=1800 audit(1573.729:707): pid=24357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6712" name="file1" dev="loop9" ino=1048907 res=0 errno=0 [ 1573.860084][T24364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6714'. [ 1576.251634][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.259022][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.346663][T24389] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6722'. [ 1577.912845][T24408] netlink: 'syz.9.6728': attribute type 7 has an invalid length. [ 1578.672208][T24413] overlayfs: failed to clone upperpath [ 1581.401554][T13901] Bluetooth: hci4: command tx timeout [ 1582.752918][T24470] loop4: detected capacity change from 0 to 1024 [ 1582.817626][T24470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1582.878725][ T30] audit: type=1800 audit(1582.869:708): pid=24470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6753" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1582.966395][T24470] support for the xor transformation has been removed. [ 1583.257075][T23967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.293074][T24485] binder: 24483:24485 ioctl c0306201 800000c0 returned -14 [ 1587.840069][T24549] overlayfs: failed to clone upperpath [ 1588.439411][T19132] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1588.622470][T19132] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1588.632052][T19132] usb 4-1: config 0 has no interface number 0 [ 1588.640077][T19132] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1588.708634][T19132] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1588.718599][T19132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.728172][T19132] usb 4-1: Product: syz [ 1588.732618][T19132] usb 4-1: Manufacturer: syz [ 1588.737876][T19132] usb 4-1: SerialNumber: syz [ 1588.765278][T19132] usb 4-1: config 0 descriptor?? [ 1589.631611][T19132] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1590.667013][T19132] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1590.678491][T19132] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 1590.691008][T19132] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1590.768417][T19132] usb 4-1: USB disconnect, device number 17 [ 1591.254873][T24605] loop3: detected capacity change from 0 to 64 [ 1594.667692][T24633] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1594.675022][T24633] overlayfs: failed to set xattr on upper [ 1594.682495][T24633] overlayfs: ...falling back to redirect_dir=nofollow. [ 1594.690096][T24633] overlayfs: ...falling back to index=off. [ 1594.696373][T24633] overlayfs: ...falling back to uuid=null. [ 1594.702333][T24633] overlayfs: ...falling back to xino=off. [ 1594.708673][T24633] overlayfs: conflicting lowerdir path [ 1595.148289][T24643] loop4: detected capacity change from 0 to 64 [ 1596.042684][T24663] overlayfs: failed to clone upperpath [ 1596.906928][T16028] IPVS: starting estimator thread 0... [ 1597.006465][T24687] IPVS: using max 240 ests per chain, 12000 per kthread [ 1597.560999][T13901] Bluetooth: hci4: ACL packet for unknown connection handle 457 [ 1599.607630][T24741] overlayfs: failed to clone lowerpath [ 1600.481425][T24762] batman_adv: batadv0: Adding interface: dummy0 [ 1600.488094][T24762] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.516299][T24762] batman_adv: batadv0: Interface activated: dummy0 [ 1600.644655][T24759] batadv0: mtu less than device minimum [ 1600.653012][T24759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1600.666157][T24759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1600.679183][T24759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1600.692187][T24759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1600.705116][T24759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1600.718067][T24759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1600.731082][T24759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1600.744002][T24759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1600.757285][T24759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1601.253680][T24775] loop9: detected capacity change from 0 to 2048 [ 1601.316587][T24777] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1601.390627][ T30] audit: type=1800 audit(1601.379:709): pid=24775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6873" name="bus" dev="loop9" ino=2097152 res=0 errno=0 [ 1601.842737][ T3856] vlan3: left promiscuous mode [ 1601.850420][ T3856] bridge0: port 3(vlan3) entered disabled state [ 1601.899797][ T3856] bridge_slave_1: left allmulticast mode [ 1601.906415][ T3856] bridge_slave_1: left promiscuous mode [ 1601.913223][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.987200][ T3856] bridge_slave_0: left promiscuous mode [ 1601.993746][ T3856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.075901][T24793] netlink: 'syz.4.6878': attribute type 13 has an invalid length. [ 1602.347825][ T3856] bond0 (unregistering): left promiscuous mode [ 1602.354417][ T3856] bond_slave_0: left promiscuous mode [ 1602.362601][ T3856] bond_slave_1: left promiscuous mode [ 1602.374555][ T3856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1602.399463][ T3856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.412493][ T3856] bond0 (unregistering): Released all slaves [ 1603.109303][ T3856] batadv0: left promiscuous mode [ 1603.264762][ T3856] hsr_slave_0: left promiscuous mode [ 1603.285235][ T3856] hsr_slave_1: left promiscuous mode [ 1603.297192][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1603.313334][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1603.750221][ T3856] team0 (unregistering): Port device team_slave_1 removed [ 1603.779021][ T3856] team0 (unregistering): Port device team_slave_0 removed [ 1604.239804][T24808] team0: Caught tx_queue_len zero misconfig [ 1605.012378][ T32] libceph: connect (1)[c::]:6789 error -101 [ 1605.019176][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 1605.077555][T24818] ceph: No mds server is up or the cluster is laggy [ 1605.559706][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6892'. [ 1605.623718][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6892'. [ 1606.316453][T24850] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6900'. [ 1606.382573][T24848] overlayfs: failed to clone upperpath [ 1606.740252][T24853] overlayfs: failed to clone upperpath [ 1607.247993][T24862] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6904'. [ 1608.945831][T24887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6915'. [ 1609.001058][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 1609.182384][T24890] fuse: Bad value for 'fd' [ 1609.233535][T14781] bridge_slave_1: left allmulticast mode [ 1609.240232][T14781] bridge_slave_1: left promiscuous mode [ 1609.247203][T14781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.336463][T14781] bridge_slave_0: left allmulticast mode [ 1609.342764][T14781] bridge_slave_0: left promiscuous mode [ 1609.350278][T14781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.077764][T14781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1610.131224][T14781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1610.162372][T14781] bond0 (unregistering): Released all slaves [ 1610.460119][T14781] hsr_slave_0: left promiscuous mode [ 1610.480718][T14781] hsr_slave_1: left promiscuous mode [ 1610.488926][T14781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1610.496679][T14781] net_ratelimit: 10 callbacks suppressed [ 1610.496751][T14781] batadv0: mtu less than device minimum [ 1610.510904][T14781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1610.524263][T14781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1610.537420][T14781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1610.550423][T14781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1610.563324][T14781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1610.576357][T14781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1610.589563][T14781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1610.602710][T14781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1610.615718][T14781] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1610.654503][T14781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.734656][T14781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1610.787365][T14781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.859892][T24901] netlink: 'syz.4.6921': attribute type 11 has an invalid length. [ 1610.898774][T14781] batman_adv: batadv0: Interface deactivated: dummy0 [ 1610.906289][T14781] batman_adv: batadv0: Removing interface: dummy0 [ 1610.976516][T14781] veth1_macvtap: left promiscuous mode [ 1610.982292][T14781] veth0_macvtap: left promiscuous mode [ 1610.989053][T14781] veth1_vlan: left promiscuous mode [ 1610.994572][T14781] veth0_vlan: left promiscuous mode [ 1611.306705][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1611.325894][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1611.343973][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1611.368200][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1611.394884][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1611.884470][T14781] team0 (unregistering): Port device team_slave_1 removed [ 1611.909785][T14781] team0 (unregistering): Port device team_slave_0 removed [ 1612.665394][T14781] IPVS: stop unused estimator thread 0... [ 1613.146239][T24906] chnl_net:caif_netlink_parms(): no params data found [ 1613.479268][ T5815] Bluetooth: hci0: command tx timeout [ 1613.890989][T24906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.900537][T24906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.908987][T24906] bridge_slave_0: entered allmulticast mode [ 1613.918939][T24906] bridge_slave_0: entered promiscuous mode [ 1613.968396][T24906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.978815][T24906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.986856][T24906] bridge_slave_1: entered allmulticast mode [ 1613.996727][T24906] bridge_slave_1: entered promiscuous mode [ 1614.163401][T24946] overlayfs: failed to clone upperpath [ 1614.288698][T24906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.366513][T24906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.453517][T14781] bridge_slave_1: left allmulticast mode [ 1614.462937][T14781] bridge_slave_1: left promiscuous mode [ 1614.470694][T14781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.562955][T14781] bridge_slave_0: left allmulticast mode [ 1614.569317][T14781] bridge_slave_0: left promiscuous mode [ 1614.575976][T14781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.671373][ T5815] Bluetooth: hci4: unexpected cc 0x042d length: 63 > 7 [ 1615.606960][ T5815] Bluetooth: hci0: command tx timeout [ 1615.798851][T14781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.845211][T14781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.870977][T14781] bond0 (unregistering): Released all slaves [ 1615.953425][T24906] team0: Port device team_slave_0 added [ 1615.970337][T24906] team0: Port device team_slave_1 added [ 1616.073398][T24906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.080770][T24906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.109868][T24906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.175690][T24906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1616.183093][T24906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.211046][T24906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.512603][T24906] hsr_slave_0: entered promiscuous mode [ 1616.530081][T24906] hsr_slave_1: entered promiscuous mode [ 1616.539348][T24906] debugfs: 'hsr0' already exists in 'hsr' [ 1616.545452][T24906] Cannot create hsr debugfs directory [ 1616.582260][T14781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1616.590992][T14781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1616.601696][T14781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.609728][T14781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1616.646073][T14781] veth1_macvtap: left promiscuous mode [ 1616.652081][T14781] veth0_macvtap: left promiscuous mode [ 1616.658581][T14781] veth1_vlan: left promiscuous mode [ 1616.664312][T14781] veth0_vlan: left promiscuous mode [ 1617.057908][T13901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1617.072817][T13901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1617.084192][T13901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1617.106419][T13901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1617.123640][T13901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1617.596641][T14781] team0 (unregistering): Port device team_slave_1 removed [ 1617.647547][T24973] Bluetooth: hci0: command tx timeout [ 1617.656445][T14781] team0 (unregistering): Port device team_slave_0 removed [ 1618.758114][T24973] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1618.767105][T24973] Bluetooth: hci4: Injecting HCI hardware error event [ 1619.052623][T24996] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6956'. [ 1619.238003][T24973] Bluetooth: hci2: command tx timeout [ 1619.240795][T19606] Bluetooth: hci4: command 0x0406 tx timeout [ 1619.262467][ T5815] Bluetooth: hci4: hardware error 0x00 [ 1619.408571][T24970] chnl_net:caif_netlink_parms(): no params data found [ 1619.736833][T19606] Bluetooth: hci0: command tx timeout [ 1619.832956][T24906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1619.896491][T24906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1619.962064][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.969633][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.042119][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.049681][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1620.509692][T24970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.520130][T24970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.528724][T24970] bridge_slave_0: entered allmulticast mode [ 1620.538293][T24970] bridge_slave_0: entered promiscuous mode [ 1620.605852][T24970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.613346][T24970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.621375][T24970] bridge_slave_1: entered allmulticast mode [ 1620.634150][T24970] bridge_slave_1: entered promiscuous mode [ 1620.848941][T24970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.876014][T24970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.990571][T24970] team0: Port device team_slave_0 added [ 1621.012056][T24970] team0: Port device team_slave_1 added [ 1621.106837][T24970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.114111][T24970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.142434][T24970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1621.161608][T24970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1621.168964][T24970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.197241][T24970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1621.316103][T19606] Bluetooth: hci2: command tx timeout [ 1621.321081][ T5815] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1621.551140][T24970] hsr_slave_0: entered promiscuous mode [ 1621.561887][T24970] hsr_slave_1: entered promiscuous mode [ 1621.571021][T24970] debugfs: 'hsr0' already exists in 'hsr' [ 1621.577102][T24970] Cannot create hsr debugfs directory [ 1621.631002][T24906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1622.276423][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1623.308224][T24970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.397910][ T5815] Bluetooth: hci2: command tx timeout [ 1623.444138][T24970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1623.472994][T17499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.480722][T17499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1623.580708][T17499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.588436][T17499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1624.189901][T24906] veth0_vlan: entered promiscuous mode [ 1624.259848][T24906] veth1_vlan: entered promiscuous mode [ 1624.674772][T24906] veth0_macvtap: entered promiscuous mode [ 1624.718070][T24906] veth1_macvtap: entered promiscuous mode [ 1624.887093][T24906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1624.931289][T24906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1625.224581][T24970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1625.470331][ T30] audit: type=1326 audit(1625.459:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.9.6977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1625.496514][ T30] audit: type=1326 audit(1625.459:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.9.6977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1625.497702][ T5815] Bluetooth: hci2: command tx timeout [ 1625.518525][ T30] audit: type=1326 audit(1625.459:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.9.6977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1625.546304][ T30] audit: type=1326 audit(1625.459:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.9.6977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1625.568287][ T30] audit: type=1326 audit(1625.459:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.9.6977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1625.590565][ T30] audit: type=1326 audit(1625.509:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.9.6977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1625.612783][ T30] audit: type=1326 audit(1625.509:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.9.6977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1625.635482][ T30] audit: type=1326 audit(1625.509:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.9.6977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1625.659796][ T30] audit: type=1326 audit(1625.509:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.9.6977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1625.682393][ T30] audit: type=1326 audit(1625.509:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.9.6977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf71d8b00 code=0x7ffc0000 [ 1626.056985][T25077] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6978'. [ 1626.081636][ T32] libceph: connect (1)[c::]:6789 error -101 [ 1626.088652][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 1626.386713][ T32] libceph: connect (1)[c::]:6789 error -101 [ 1626.393502][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 1626.788290][T25079] ceph: No mds server is up or the cluster is laggy [ 1626.977022][T24970] veth0_vlan: entered promiscuous mode [ 1627.041220][T24970] veth1_vlan: entered promiscuous mode [ 1627.299405][T24970] veth0_macvtap: entered promiscuous mode [ 1627.347172][T24970] veth1_macvtap: entered promiscuous mode [ 1627.452870][T24970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1627.519588][T24970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1627.676998][T25108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6985'. [ 1629.432662][T14781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.444021][T14781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.576411][T14799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.584435][T14799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.895769][T25165] netlink: 'syz.6.7000': attribute type 83 has an invalid length. [ 1631.743935][ T3856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.752393][ T3856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.931098][T14781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.939382][T14781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.989487][T25185] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7006'. [ 1632.047523][T25185] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7006'. [ 1633.042065][T25200] overlayfs: failed to clone upperpath [ 1633.437643][T25213] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.7016'. [ 1634.259903][T25227] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7022'. [ 1634.310101][T25227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7022'. [ 1637.661488][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1637.668605][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1639.854553][T25344] loop7: detected capacity change from 0 to 1024 [ 1639.937680][T25345] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7051'. [ 1639.957455][T25344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1640.148061][T25349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7053'. [ 1640.252637][ T795] kernel write not supported for file bpf-prog (pid: 795 comm: kworker/0:2) [ 1640.297906][T24970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1640.567936][T25359] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7054'. [ 1641.662231][T25376] loop7: detected capacity change from 0 to 128 [ 1641.716386][T25376] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1642.487661][T25376] fscrypt (loop7): Error allocating 'xts(aes)' transform: -4 [ 1642.683051][T24970] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1642.707070][T25394] overlayfs: failed to clone upperpath [ 1644.496271][T25419] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7079'. [ 1645.210650][T25430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7084'. [ 1645.283440][T25430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7084'. [ 1646.013978][T25438] loop0: detected capacity change from 0 to 47 [ 1646.510054][T25451] overlayfs: failed to clone upperpath [ 1647.248925][T25464] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.7095'. [ 1648.052684][T25481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7103'. [ 1648.551669][T25487] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1648.559617][T25487] overlayfs: failed to set xattr on upper [ 1648.565583][T25487] overlayfs: ...falling back to redirect_dir=nofollow. [ 1648.572549][T25487] overlayfs: ...falling back to index=off. [ 1648.579302][T25487] overlayfs: ...falling back to uuid=null. [ 1649.082132][T25497] loop7: detected capacity change from 0 to 256 [ 1649.191195][T25497] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 1649.446917][T25502] dvmrp0: entered allmulticast mode [ 1650.273603][T25520] loop7: detected capacity change from 0 to 512 [ 1650.350138][T25520] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1650.459538][T25520] EXT4-fs (loop7): 1 truncate cleaned up [ 1650.469067][T25520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1650.647289][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1650.647364][ T30] audit: type=1800 audit(1650.639:742): pid=25520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7121" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1650.747820][T25520] loop7: detected capacity change from 512 to 0 [ 1650.792753][T25527] EXT4-fs error (device loop7): ext4_get_inode_loc:4968: inode #15: block 8: comm syz.7.7121: unable to read itable block [ 1650.810640][T25527] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 1650.825676][T25527] EXT4-fs (loop7): I/O error while writing superblock [ 1650.844835][ C1] I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1650.916802][T25527] EXT4-fs error (device loop7): ext4_get_inode_loc:4968: inode #15: block 8: comm syz.7.7121: unable to read itable block [ 1650.931211][T25527] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 1650.939888][T25527] EXT4-fs (loop7): I/O error while writing superblock [ 1650.947837][ T30] audit: type=1800 audit(1650.939:743): pid=25527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7121" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1651.209138][T25535] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7127'. [ 1651.373540][T24970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.412916][T24970] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 1651.421927][T24970] EXT4-fs (loop7): I/O error while writing superblock [ 1651.606570][ T68] bridge_slave_1: left allmulticast mode [ 1651.612429][ T68] bridge_slave_1: left promiscuous mode [ 1651.621388][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.650230][ T68] bridge_slave_0: left allmulticast mode [ 1651.657104][ T68] bridge_slave_0: left promiscuous mode [ 1651.664622][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.298027][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.341215][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.388956][ T68] bond0 (unregistering): Released all slaves [ 1652.781870][ T68] hsr_slave_0: left promiscuous mode [ 1652.805761][ T68] hsr_slave_1: left promiscuous mode [ 1652.814622][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1652.822481][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1652.858382][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1652.866259][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1652.929049][ T68] veth1_macvtap: left promiscuous mode [ 1652.934790][ T68] veth0_macvtap: left promiscuous mode [ 1652.940835][ T68] veth1_vlan: left promiscuous mode [ 1652.947380][ T68] veth0_vlan: left promiscuous mode [ 1654.323409][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1654.376645][T19606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1654.402776][T19606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1654.414451][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1654.428781][T19606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1654.445939][T19606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1654.460799][T19606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1656.152823][T25554] chnl_net:caif_netlink_parms(): no params data found [ 1656.515982][T19606] Bluetooth: hci2: command tx timeout [ 1658.773410][T25554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.781103][T25554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.789066][T25554] bridge_slave_0: entered allmulticast mode [ 1658.799119][T25554] bridge_slave_0: entered promiscuous mode [ 1658.812967][T19606] Bluetooth: hci2: command tx timeout [ 1658.868398][T25554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.876017][T25554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.883766][T25554] bridge_slave_1: entered allmulticast mode [ 1658.893800][T25554] bridge_slave_1: entered promiscuous mode [ 1660.242236][T25554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.735417][T25554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1660.895742][T19606] Bluetooth: hci2: command tx timeout [ 1661.141701][T25554] team0: Port device team_slave_0 added [ 1661.161842][T25554] team0: Port device team_slave_1 added [ 1661.719025][T25571] net_ratelimit: 30 callbacks suppressed [ 1661.719111][T25571] Set syz1 is full, maxelem 65536 reached [ 1661.782676][T25554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.791610][T25554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.830965][T25554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.906386][T25554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.913630][T25554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.940758][T25554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.596623][ T30] audit: type=1800 audit(1662.519:744): pid=25616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7155" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1662.832278][T25554] hsr_slave_0: entered promiscuous mode [ 1662.843044][T25554] hsr_slave_1: entered promiscuous mode [ 1662.852178][T25554] debugfs: 'hsr0' already exists in 'hsr' [ 1662.858490][T25554] Cannot create hsr debugfs directory [ 1662.915897][T19606] Bluetooth: hci2: command tx timeout [ 1663.230373][ T32] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1663.545315][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.556034][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1663.567859][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1663.579304][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1663.589463][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1663.693140][ T32] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1663.705987][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1663.714297][ T32] usb 1-1: Product: syz [ 1663.718885][ T32] usb 1-1: Manufacturer: syz [ 1663.723678][ T32] usb 1-1: SerialNumber: syz [ 1663.767695][ T32] usb 1-1: config 0 descriptor?? [ 1664.083663][ T32] radio-si470x 1-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 1664.166016][T25554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.288624][T25554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.298182][ T32] radio-si470x 1-1:0.0: software version 100, hardware version 101 [ 1664.350687][T14802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.358501][T14802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1664.440867][T14802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.449613][T14802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.498994][ T32] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 1665.400394][T25554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1665.732813][ T32] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1665.764348][ T32] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1665.807270][ T32] usb 1-1: USB disconnect, device number 30 [ 1665.884842][T25658] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1666.739247][T25554] veth0_vlan: entered promiscuous mode [ 1666.789615][T25554] veth1_vlan: entered promiscuous mode [ 1666.961323][T25554] veth0_macvtap: entered promiscuous mode [ 1666.988995][T25554] veth1_macvtap: entered promiscuous mode [ 1667.170722][T25554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1667.226607][T25554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1667.783637][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7175'. [ 1667.794634][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7175'. [ 1671.712324][T20819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.721207][T20819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.934607][T20819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.943794][T20819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.088883][T25757] netlink: 'syz.6.7196': attribute type 1 has an invalid length. [ 1672.148396][T25757] bond0: entered promiscuous mode [ 1672.153837][T25757] bond0: entered allmulticast mode [ 1672.160944][T25757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.292323][T25757] macvlan2: entered promiscuous mode [ 1672.302809][T25757] macvlan2: entered allmulticast mode [ 1672.316985][T25757] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1673.096475][T16425] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1673.266366][T16425] usb 1-1: Using ep0 maxpacket: 16 [ 1673.291605][T16425] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1673.304403][T16425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1673.334806][T16425] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1673.345306][T16425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.354551][T16425] usb 1-1: Product: syz [ 1673.359234][T16425] usb 1-1: Manufacturer: syz [ 1673.364894][T16425] usb 1-1: SerialNumber: syz [ 1673.375369][T16425] usb 1-1: config 0 descriptor?? [ 1673.401750][T16425] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1673.413242][T16425] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1674.243566][T16425] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1674.264095][T16425] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1674.906358][T16425] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 1674.920670][T16425] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1675.102112][T16425] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1675.124729][T16425] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1675.143158][T16425] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1675.165382][T16425] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1675.180626][T16425] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1675.196830][T16425] usb 1-1: USB disconnect, device number 31 [ 1675.387568][T25788] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7208'. [ 1675.400172][T25788] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7208'. [ 1676.455308][T25784] overlayfs: failed to resolve './file0': -2 [ 1677.453462][T25822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7221'. [ 1677.569496][T25822] netlink: 'syz.0.7221': attribute type 2 has an invalid length. [ 1678.070563][T14802] Bluetooth: hci5: Frame reassembly failed (-84) [ 1679.011841][T25840] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7230'. [ 1680.118488][ T5815] Bluetooth: hci5: command 0x1003 tx timeout [ 1680.147752][T19606] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1680.726165][ T30] audit: type=1326 audit(1680.689:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25854 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1680.748570][ T30] audit: type=1326 audit(1680.699:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25854 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1680.771276][ T30] audit: type=1326 audit(1680.709:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25854 comm="syz.6.7236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1682.286235][T16425] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1682.461104][T16425] usb 3-1: Using ep0 maxpacket: 32 [ 1682.486792][T16425] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1682.496822][T16425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.552858][T16425] usb 3-1: config 0 descriptor?? [ 1682.789889][T16425] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1682.848296][T16425] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1682.908918][T16425] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1682.918307][T16425] usb 3-1: media controller created [ 1683.040294][T16425] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1683.228470][T25829] Set syz1 is full, maxelem 65536 reached [ 1683.992789][T16425] stb0899_attach: Driver disabled by Kconfig [ 1683.999836][T16425] az6027: no front-end attached [ 1683.999836][T16425] [ 1684.044635][T16425] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1684.054798][T16425] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 1684.103291][T16425] dvb-usb: schedule remote query interval to 400 msecs. [ 1684.111208][T16425] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1684.234480][T16425] usb 3-1: USB disconnect, device number 40 [ 1684.480994][T16425] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1685.881533][T25894] infiniband !yz!: set active [ 1685.886820][T25894] infiniband !yz!: added team_slave_0 [ 1686.124533][T25894] RDS/IB: !yz!: added [ 1686.129202][T25894] smc: adding ib device !yz! with port count 1 [ 1686.136157][T25894] smc: ib device !yz! port 1 has no pnetid [ 1687.066833][T25903] ===================================================== [ 1687.074098][T25903] BUG: KMSAN: uninit-value in ip_route_output_key_hash_rcu+0x709/0x3b10 [ 1687.082788][T25903] ip_route_output_key_hash_rcu+0x709/0x3b10 [ 1687.089110][T25903] ip_route_output_flow+0x8f/0x270 [ 1687.094568][T25903] ip_tunnel_xmit+0x13e9/0x3be0 [ 1687.099826][T25903] sit_tunnel_xmit+0x9be/0x3510 [ 1687.104846][T25903] dev_hard_start_xmit+0x22f/0xa30 [ 1687.110297][T25903] __dev_queue_xmit+0x3561/0x58e0 [ 1687.115646][T25903] neigh_connected_output+0x5d3/0x6c0 [ 1687.121239][T25903] ip_finish_output2+0x1abf/0x1d50 [ 1687.126680][T25903] ip_finish_output+0x292/0x8e0 [ 1687.131706][T25903] ip_output+0x14f/0x3e0 [ 1687.136446][T25903] ip_local_out+0x1d2/0x250 [ 1687.141142][T25903] iptunnel_xmit+0x786/0xd70 [ 1687.146042][T25903] ip_tunnel_xmit+0x3975/0x3be0 [ 1687.151107][T25903] ipgre_xmit+0x1098/0x1250 [ 1687.155936][T25903] dev_hard_start_xmit+0x22f/0xa30 [ 1687.161242][T25903] __dev_queue_xmit+0x3561/0x58e0 [ 1687.166617][T25903] packet_xmit+0x8f/0x710 [ 1687.171093][T25903] packet_sendmsg+0x9173/0xa2a0 [ 1687.176376][T25903] __sock_sendmsg+0x333/0x3d0 [ 1687.181200][T25903] __sys_sendto+0x593/0x720 [ 1687.186106][T25903] __ia32_sys_sendto+0x12f/0x200 [ 1687.191212][T25903] ia32_sys_call+0x1a3d/0x4340 [ 1687.196312][T25903] __do_fast_syscall_32+0x154/0x320 [ 1687.201724][T25903] do_fast_syscall_32+0x38/0x80 [ 1687.206921][T25903] do_SYSENTER_32+0x1f/0x30 [ 1687.211624][T25903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1687.218314][T25903] [ 1687.220710][T25903] Uninit was stored to memory at: [ 1687.226109][T25903] ip_tunnel_xmit+0x10b2/0x3be0 [ 1687.231151][T25903] sit_tunnel_xmit+0x9be/0x3510 [ 1687.236420][T25903] dev_hard_start_xmit+0x22f/0xa30 [ 1687.241766][T25903] __dev_queue_xmit+0x3561/0x58e0 [ 1687.247119][T25903] neigh_connected_output+0x5d3/0x6c0 [ 1687.252784][T25903] ip_finish_output2+0x1abf/0x1d50 [ 1687.258246][T25903] ip_finish_output+0x292/0x8e0 [ 1687.263288][T25903] ip_output+0x14f/0x3e0 [ 1687.267922][T25903] ip_local_out+0x1d2/0x250 [ 1687.273115][T25903] iptunnel_xmit+0x786/0xd70 [ 1687.278119][T25903] ip_tunnel_xmit+0x3975/0x3be0 [ 1687.283173][T25903] ipgre_xmit+0x1098/0x1250 [ 1687.288009][T25903] dev_hard_start_xmit+0x22f/0xa30 [ 1687.293299][T25903] __dev_queue_xmit+0x3561/0x58e0 [ 1687.298828][T25903] packet_xmit+0x8f/0x710 [ 1687.303488][T25903] packet_sendmsg+0x9173/0xa2a0 [ 1687.308694][T25903] __sock_sendmsg+0x333/0x3d0 [ 1687.313588][T25903] __sys_sendto+0x593/0x720 [ 1687.318450][T25903] __ia32_sys_sendto+0x12f/0x200 [ 1687.323653][T25903] ia32_sys_call+0x1a3d/0x4340 [ 1687.328899][T25903] __do_fast_syscall_32+0x154/0x320 [ 1687.334853][T25903] do_fast_syscall_32+0x38/0x80 [ 1687.340331][T25903] do_SYSENTER_32+0x1f/0x30 [ 1687.345124][T25903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1687.351774][T25903] [ 1687.354179][T25903] Uninit was created at: [ 1687.358843][T25903] __kmalloc_node_track_caller_noprof+0xb77/0x1c90 [ 1687.365703][T25903] kmalloc_reserve+0x22f/0x4b0 [ 1687.370641][T25903] pskb_expand_head+0x1fc/0x15d0 [ 1687.376135][T25903] ip_tunnel_xmit+0x359e/0x3be0 [ 1687.381192][T25903] ipgre_xmit+0x1098/0x1250 [ 1687.386062][T25903] dev_hard_start_xmit+0x22f/0xa30 [ 1687.391453][T25903] __dev_queue_xmit+0x3561/0x58e0 [ 1687.397440][T25903] packet_xmit+0x8f/0x710 [ 1687.401960][T25903] packet_sendmsg+0x9173/0xa2a0 [ 1687.407247][T25903] __sock_sendmsg+0x333/0x3d0 [ 1687.412252][T25903] __sys_sendto+0x593/0x720 [ 1687.417091][T25903] __ia32_sys_sendto+0x12f/0x200 [ 1687.422391][T25903] ia32_sys_call+0x1a3d/0x4340 [ 1687.427611][T25903] __do_fast_syscall_32+0x154/0x320 [ 1687.433122][T25903] do_fast_syscall_32+0x38/0x80 [ 1687.438316][T25903] do_SYSENTER_32+0x1f/0x30 [ 1687.443295][T25903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1687.450919][T25903] [ 1687.453455][T25903] CPU: 0 UID: 0 PID: 25903 Comm: syz.6.7251 Tainted: G W L syzkaller #0 PREEMPT(none) [ 1687.465879][T25903] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1687.471366][T25903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1687.481826][T25903] ===================================================== [ 1687.488992][T25903] Disabling lock debugging due to kernel taint [ 1687.495248][T25903] Kernel panic - not syncing: kmsan.panic set ... [ 1687.501797][T25903] CPU: 0 UID: 0 PID: 25903 Comm: syz.6.7251 Tainted: G B W L syzkaller #0 PREEMPT(none) [ 1687.512956][T25903] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1687.519474][T25903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1687.529655][T25903] Call Trace: [ 1687.533031][T25903] [ 1687.536044][T25903] __dump_stack+0x26/0x30 [ 1687.540554][T25903] dump_stack_lvl+0x50/0x1c0 [ 1687.545311][T25903] ? dump_stack+0x12/0x25 [ 1687.549813][T25903] dump_stack+0x1e/0x25 [ 1687.554145][T25903] vpanic+0x435/0xd30 [ 1687.558331][T25903] panic+0x15d/0x160 [ 1687.562438][T25903] kmsan_report+0x31c/0x320 [ 1687.567127][T25903] ? __msan_warning+0x1b/0x30 [ 1687.571965][T25903] ? ip_route_output_key_hash_rcu+0x709/0x3b10 [ 1687.578290][T25903] ? ip_route_output_flow+0x8f/0x270 [ 1687.583814][T25903] ? ip_tunnel_xmit+0x13e9/0x3be0 [ 1687.589015][T25903] ? sit_tunnel_xmit+0x9be/0x3510 [ 1687.594175][T25903] ? dev_hard_start_xmit+0x22f/0xa30 [ 1687.599620][T25903] ? __dev_queue_xmit+0x3561/0x58e0 [ 1687.605248][T25903] ? neigh_connected_output+0x5d3/0x6c0 [ 1687.610996][T25903] ? ip_finish_output2+0x1abf/0x1d50 [ 1687.616612][T25903] ? ip_finish_output+0x292/0x8e0 [ 1687.621812][T25903] ? ip_output+0x14f/0x3e0 [ 1687.626386][T25903] ? ip_local_out+0x1d2/0x250 [ 1687.631213][T25903] ? iptunnel_xmit+0x786/0xd70 [ 1687.636300][T25903] ? ip_tunnel_xmit+0x3975/0x3be0 [ 1687.641695][T25903] ? ipgre_xmit+0x1098/0x1250 [ 1687.646541][T25903] ? dev_hard_start_xmit+0x22f/0xa30 [ 1687.651993][T25903] ? __dev_queue_xmit+0x3561/0x58e0 [ 1687.657444][T25903] ? packet_xmit+0x8f/0x710 [ 1687.662082][T25903] ? packet_sendmsg+0x9173/0xa2a0 [ 1687.667293][T25903] ? __sock_sendmsg+0x333/0x3d0 [ 1687.672361][T25903] ? __sys_sendto+0x593/0x720 [ 1687.677276][T25903] ? __ia32_sys_sendto+0x12f/0x200 [ 1687.682541][T25903] ? ia32_sys_call+0x1a3d/0x4340 [ 1687.687667][T25903] ? __do_fast_syscall_32+0x154/0x320 [ 1687.693231][T25903] ? do_fast_syscall_32+0x38/0x80 [ 1687.698513][T25903] ? do_SYSENTER_32+0x1f/0x30 [ 1687.703370][T25903] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1687.710057][T25903] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1687.716028][T25903] ? stack_depot_save_flags+0x610/0x790 [ 1687.721958][T25903] ? stack_depot_save+0x12/0x20 [ 1687.726982][T25903] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 1687.732983][T25903] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 1687.738997][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1687.744760][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1687.750096][T25903] __msan_warning+0x1b/0x30 [ 1687.754884][T25903] ip_route_output_key_hash_rcu+0x709/0x3b10 [ 1687.761174][T25903] ? stack_depot_save_flags+0x35/0x790 [ 1687.766997][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1687.772332][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1687.777834][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1687.783261][T25903] ip_route_output_flow+0x8f/0x270 [ 1687.789070][T25903] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1687.795086][T25903] ip_tunnel_xmit+0x13e9/0x3be0 [ 1687.800248][T25903] ? ip_tunnel_xmit+0x40/0x3be0 [ 1687.805509][T25903] ? ip_tunnel_xmit+0x40/0x3be0 [ 1687.811044][T25903] sit_tunnel_xmit+0x9be/0x3510 [ 1687.816172][T25903] ? __rcu_read_unlock+0x47/0xd0 [ 1687.821418][T25903] ? dev_queue_xmit_nit+0xecf/0x1160 [ 1687.826979][T25903] ? dev_queue_xmit_nit+0xeb3/0x1160 [ 1687.832462][T25903] ? skb_csum_hwoffload_help+0x8a5/0xcb0 [ 1687.838382][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1687.843912][T25903] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 1687.849470][T25903] dev_hard_start_xmit+0x22f/0xa30 [ 1687.854807][T25903] __dev_queue_xmit+0x3561/0x58e0 [ 1687.860028][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1687.865352][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1687.870681][T25903] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1687.876803][T25903] ? ip_finish_output2+0x1d31/0x1d50 [ 1687.882442][T25903] ? __dev_queue_xmit+0x27a/0x58e0 [ 1687.887872][T25903] neigh_connected_output+0x5d3/0x6c0 [ 1687.893678][T25903] ? __pfx_neigh_connected_output+0x10/0x10 [ 1687.899938][T25903] ip_finish_output2+0x1abf/0x1d50 [ 1687.905734][T25903] ip_finish_output+0x292/0x8e0 [ 1687.911186][T25903] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1687.917782][T25903] ip_output+0x14f/0x3e0 [ 1687.922209][T25903] ? __pfx_ip_finish_output+0x10/0x10 [ 1687.927953][T25903] ? __pfx_ip_output+0x10/0x10 [ 1687.933157][T25903] ip_local_out+0x1d2/0x250 [ 1687.938138][T25903] iptunnel_xmit+0x786/0xd70 [ 1687.943125][T25903] ip_tunnel_xmit+0x3975/0x3be0 [ 1687.948291][T25903] ? ip_tunnel_xmit+0x40/0x3be0 [ 1687.953474][T25903] ipgre_xmit+0x1098/0x1250 [ 1687.958179][T25903] ? __pfx_ipgre_xmit+0x10/0x10 [ 1687.963724][T25903] dev_hard_start_xmit+0x22f/0xa30 [ 1687.969054][T25903] __dev_queue_xmit+0x3561/0x58e0 [ 1687.974348][T25903] ? __msan_warning+0x1b/0x30 [ 1687.979297][T25903] ? filter_irq_stacks+0x13f/0x190 [ 1687.984700][T25903] ? __dev_queue_xmit+0x27a/0x58e0 [ 1687.991318][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1687.997035][T25903] packet_xmit+0x8f/0x710 [ 1688.001955][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1688.007362][T25903] packet_sendmsg+0x9173/0xa2a0 [ 1688.012501][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1688.017994][T25903] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1688.024098][T25903] ? aa_label_sk_perm+0x764/0x820 [ 1688.029437][T25903] ? tomoyo_socket_bind_permission+0x341/0x370 [ 1688.035799][T25903] ? stack_depot_save_flags+0x35/0x790 [ 1688.041687][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1688.047261][T25903] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1688.053946][T25903] ? __pfx_packet_sendmsg+0x10/0x10 [ 1688.059436][T25903] ? __pfx_packet_sendmsg+0x10/0x10 [ 1688.064922][T25903] __sock_sendmsg+0x333/0x3d0 [ 1688.069750][T25903] __sys_sendto+0x593/0x720 [ 1688.074599][T25903] ? kmsan_get_metadata+0xfb/0x160 [ 1688.079957][T25903] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1688.086328][T25903] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1688.092864][T25903] __ia32_sys_sendto+0x12f/0x200 [ 1688.098080][T25903] ia32_sys_call+0x1a3d/0x4340 [ 1688.103137][T25903] __do_fast_syscall_32+0x154/0x320 [ 1688.108560][T25903] do_fast_syscall_32+0x38/0x80 [ 1688.113607][T25903] do_SYSENTER_32+0x1f/0x30 [ 1688.118303][T25903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1688.124920][T25903] RIP: 0023:0xf708d539 [ 1688.129195][T25903] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1688.149063][T25903] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1688.157745][T25903] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1688.166020][T25903] RDX: 000000000000000f RSI: 0000000004000040 RDI: 0000000080000240 [ 1688.174286][T25903] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1688.182468][T25903] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1688.190760][T25903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1688.199134][T25903] [ 1688.202798][T25903] Kernel Offset: disabled [ 1688.207279][T25903] Rebooting in 86400 seconds..