last executing test programs: 19m28.757940839s ago: executing program 1 (id=142): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0) recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 19m27.353578365s ago: executing program 1 (id=145): ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x8010aebb, &(0x7f0000000280)={[{0x5, 0x2000, 0x0, 0x7, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xc}, {0x0, 0x42, 0x0, 0x0, 0x0, 0x5, 0x3, 0x7, 0x1, 0x4, 0x3}, {0x0, 0x0, 0x52, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x6}], 0x7b2}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0xbea}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x1000000003, 0x0, 0x8, 0x0, 0x6, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m26.838759611s ago: executing program 1 (id=146): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1000000000000098, 0x1, 0xd) unshare(0x22020400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e31253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7}) 19m26.531493972s ago: executing program 1 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000021c0)='./file1/file0\x00', &(0x7f0000002200)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 19m26.384041526s ago: executing program 1 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c4217}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80, 0x3}, {0x5000, 0x4000, 0x0, 0x0, 0x6, 0x5, 0x5, 0x6, 0x5, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x0, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x5, 0xf7, 0x83}, {0x9000, 0x3909e40c33606d9c, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x41, 0x27}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x0, 0x70}, {0x5000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0x5000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2034, 0x0, 0x1500, 0xeeef0000, [0x6800000000000000, 0x204, 0xfffffffffffffffd, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m25.591959022s ago: executing program 1 (id=156): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0xffff1000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m24.971779892s ago: executing program 32 (id=156): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0xffff1000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m54.675166554s ago: executing program 2 (id=259): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80, 0x400000) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x3, 0x1, 0x12, 0x2000000000800}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000540)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x8040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}}, &(0x7f0000002200)=""/4110, 0x32, 0x100e, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYBLOB="0000000000000000000000000000000000000036c2dd686e59", @ANYRES16=r2, @ANYRES32, @ANYBLOB], 0x48) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x104, 0x4, 0x3e8, 0x0, 0x110, 0x0, 0x300, 0x300, 0x3e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @broadcast, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x2}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x101, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c) getsockopt$sock_buf(r7, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 18m53.175654133s ago: executing program 2 (id=265): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7ffe, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0x6, 0xfe, 0x5, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x22, 0x0) shutdown(r1, 0x1) 18m52.780415926s ago: executing program 2 (id=266): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80, 0x400000) fcntl$lock(r0, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000540)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x8040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}}, &(0x7f0000002200)=""/4110, 0x32, 0x100e, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYBLOB="0000000000000000000000000000000000000036c2dd686e59", @ANYRES16=r2, @ANYRES32, @ANYBLOB], 0x48) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x104, 0x4, 0x3e8, 0x0, 0x110, 0x0, 0x300, 0x300, 0x3e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @broadcast, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x2}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x101, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c) getsockopt$sock_buf(r7, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 18m51.546757846s ago: executing program 2 (id=267): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200), 0x1, 0x43f, &(0x7f0000002dc0)="$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") openat(0xffffffffffffff9c, 0x0, 0xb13aa4a8624d12ac, 0x153) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}], [], 0x6b}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) 18m51.065194671s ago: executing program 2 (id=270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'das16m1\x00', [0xa3fb, 0x5, 0x29, 0x4, 0xb4, 0xcc5, 0x8, 0x68d, 0x8, 0xe, 0x7ff, 0xffffffff, 0x1, 0x1, 0x8029, 0x80, 0x7, 0x1a449, 0x9, 0x40800003, 0x8b, 0xcaa9, 0x0, 0x20001e58, 0x4bd, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) close_range(r0, 0xffffffffffffffff, 0x0) 18m47.963700122s ago: executing program 2 (id=276): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x25, 0x3, 0x0, {0x1, 0x4, 0x0, '\x8f[#)'}}, 0x25) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x7, 0x7f, 0x1}, 0x1001) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x20, 0x0, 0x0) 18m47.39198481s ago: executing program 33 (id=276): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x25, 0x3, 0x0, {0x1, 0x4, 0x0, '\x8f[#)'}}, 0x25) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x7, 0x7f, 0x1}, 0x1001) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x20, 0x0, 0x0) 12m22.298802008s ago: executing program 5 (id=1241): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd0a, 0x10100}, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x840000000002, 0x3, 0xff) r4 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 12m20.911335704s ago: executing program 5 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') r4 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) vmsplice(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001280)}, {&(0x7f00000004c0)="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", 0xd9d}], 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4e90}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)) pidfd_getfd(0xffffffffffffffff, r4, 0x0) 12m19.031884891s ago: executing program 5 (id=1239): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 12m17.135713658s ago: executing program 5 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket(0x400000000010, 0x3, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) 12m10.346797354s ago: executing program 5 (id=1256): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'batadv_slave_0\x00', @random="691402fdafdb"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffed3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 12m8.859650625s ago: executing program 5 (id=1257): syz_emit_ethernet(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1a000, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) r3 = socket$isdn(0x22, 0x2, 0x10) r4 = socket$isdn(0x22, 0x2, 0x2) r5 = dup3(r4, r3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040084}, 0x20004011) 11m53.589363277s ago: executing program 34 (id=1257): syz_emit_ethernet(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1a000, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) r3 = socket$isdn(0x22, 0x2, 0x10) r4 = socket$isdn(0x22, 0x2, 0x2) r5 = dup3(r4, r3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040084}, 0x20004011) 3m32.397548338s ago: executing program 6 (id=2115): mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @local, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 'nicvf0\x00'}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0xb, 0x0, 0x1b, 0x0, 0x4f, 0x0, 0xe7}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) 3m29.208396717s ago: executing program 3 (id=2119): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 3m28.856162842s ago: executing program 6 (id=2120): socket(0x2, 0x80805, 0x0) 3m27.849045123s ago: executing program 6 (id=2122): r0 = io_uring_setup(0x4a86, &(0x7f0000000a00)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) inotify_init1(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044815}, 0x40850) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(generic-gcm-aesni)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 3m27.768891276s ago: executing program 3 (id=2123): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[@dstopts={0x0, 0x2, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x76cc5ae9}, @padn, @padn]}]}}}}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001780)={0x1, 0x0, [{0x4ab4b231533d69dd, 0xc4, &(0x7f00000014c0)=""/196}]}) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 3m26.250296808s ago: executing program 6 (id=2125): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket(0x22, 0x2, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x98) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f00000005c0)={0x2, [[0x9ef8, 0xf1, 0x0, 0x1, 0xfffffffc, 0x0, 0x3, 0x10], [0x0, 0x8, 0x0, 0x10000007, 0x20000000, 0x4, 0xffffffff, 0x4000], [0x0, 0x1000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0xfffffffd}, {0xe4}, {0x4, 0x5, 0x0, 0x1}, {0x3, 0xfffffffe}, {}, {0xffffffff, 0x400}, {}, {0x0, 0xffff}, {0x2, 0x10000000}, {0x9, 0xd78}, {0xfffffff8, 0x2}], '\x00', 0x0, 0x0, 0x0, 0xf8}) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) 3m26.121086373s ago: executing program 3 (id=2126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001280)}, {&(0x7f00000004c0)="05a73ddcc6243cee9c29deeb283716de7be0120b24de0d84664f2f157e55090e9912219839b3efae25feeff11c45ab4c3738da67941961356beaf3ddb72801e63024da730a24e59a13f847a85509f9c412b4b8f657b73d311e5e0a793379a3496310667f85197226fd26cb942204c33bb6d241580cc4d682db7f0f5a684b1ae422c968f6c64dbfccfd840b73d522c3a5f238fc512e68300afcdc8fafe8861fac8632aa10d7c2d7f869b712985bc578a1a2cc3a5c304583628e1bb13f161e57b42031d59487e5215caba072fa9966dc9aaac4299f0d74e8edf9357dfad16c58ab7ed94bf7a05905e15c92f800d71dbd289675ba05b736cc910e21da3c0b8d8a36f1edda2461f08bee1e47d10efaf1ac7e47e1d3eca5a529546cd8589e5c637a364485ffb35842bf449b95cd697cf5f4203c58e1ea9fa8022cce358f3dc5c97ce674e65e3e3c07fb451d4fcf7ccccf325994bab0d7c0b62f6a193b8622bbc708888c739be99f512f6b72677133fe4910186ab2ae652c3ee7e2d4cb13db6f4f020b9c36913492c09fbb663a50a8be8091ffaff231bfff5f7e215a564e2766a1764b28f4122ea3ea211ac0d0b307aaeeb7b26216a2d48ffe41ae41201cd08ce1a4f8696959b5e2bcf8c6cd636c0a06062d335c2b4e1baff68bb4fb5c7f588fca5c6a27a23b36b7f8cabcc08976c34fd46ff83f4e4b40cec84b2ed54c1962b191dea6390ac2e7aa1a8ba3c4cc89f85659d37a8e0a8407430e6303cfdf954e4af2fe87a82983c5e4070a9b71069be01838374d926fdfd6385b964526d1b05acab6808551b551a9bb7b530c95d8370f273bfbc119506d02160d817a3852e21e4f41ba3801d29676fcfca4cb93f726ae59d1a684699e7fc0c7acd595baa17cf0890757aa2a8b4be8181ced0ce1c4bd30211a9b3a44779e254df4f60aa5591808d0c066c2238a663be4e4fa9219a2fea4315f6588ffe1ea69e5e01c3f79ca49e7814d371ac3c99627ed02243ed40cb43ed54f1d5bcbaac2657ab83ed446dcbdd45621ea50fdc52214696fc3893907d0547b526f4fa223f4699ee703c69950385f4a6f80f62aea5e2302a6c0b4e5e8e47528293381737467f32c2d7c19be760ca017ae0ef3ac639f0bed656a0fa442d92fb4278ca84cd1c99039ccf504d0ee016d4d70e3b526de667f2f3e3df2d81fd1877888de16fa0bba08e0870d622e7015429db272edaff475cff3a1fba0c20960dd0ffcc00119d5be3c1b255110a4ec968212d407eb096852d70386f1702a880bf9e57d2794030b76ea901a49bc41700282fa9d011021a2b6db2d4939145975d6e4d7031afb7cd36126f2134f13cda0c4b96b39e8f1fc9bca8aba144b8ea7eafd48309265a1cd722ec366d4e5f909e8e8248ed85bba925cdf55261974a50e96847c55e7209a422f842173e8911edf882e37f5f19d9844b4519754bf02c3974c57e24d0122e30dcdbeee21445501d501b97057cd229cebcc2a49b025f4497d2a8112a644e16a1ffa7f4e017919666b239a69f91191b44b870881890389b68d46b25141bd692303711e35487b6d133ef2828318562e1820bdf364226b2ad12eb7696b9c702d00f833fbb8de56a5cb805858abcf0e83682b9d9aa34426c0c2173fccaebb49219a5ae83f8b3399cc1841dae2d5af6502794954b53266e327df94797f2abef55e1b608fa4cce8afc372663c932526923b1bce134a5d2396dfe30bf44e1e8b12be51907b5c923790aa063023db874f883c8f2d195a46e053e0c6bec718093f29129f3130822c491d2319fe269f553cbca94424a86a69066d7aabc0de2c60975b799d792f1e377770ff7b8de133d92f841ce5aca3f5abf14682290e8a408ec07428ed47ad32a402eff93a263bffd7339194df2f410ee9bec502536d3c7815bb696133d73ff1a6698cca2306c5a5fcc1c1b3930d629520dc093053fc2367aaac4cd8a28c88b120929f85e9483a58801aaa64d964973fe91d4865490d5a870dd25cb7cf3af52dd3703a2a91b119ad1a1f9eff4778c1686eca708ca43713615a5d8d7cfd84035d95b97346554fa9bc1cdc31e20d0fd55e976de350857bc719a322e69355f08c50668374a783cfa17761f292fec7bae2525f182900d48e3b1cc004761c3f9ba403ea60290f2237c04912a641393341e70cb07683317d8fd50b765956b7261885cf5c7c5681484b8598989a7f4c753844b9d94cc3ffa6668b29646b9526ea57da675b80d63f8c11f6afce661b2eba4a260259be769408d1abb755be532bd70eb46282d14fe3e1db9c736d065902a5e829d645666b4f616f5ea7f3fee3a5c061cb50b664310a0655b593be77cfe8c46eb6d1614686e90214c94cfec5fc1583d4e3e6416237aed16da7c3811e641003574276b7d6f9f0b7d7636aeed788c203b996f7b0ea3784cb96b9967ab18ca59dbb78688001e445740db815588c0a32db410b8e3cee13aed0ddd473e8b2a54ebff28b2f958d4337bec39c5032ab142c59aff96d85f9e54142ae7111cb2606ef669451d66ace8708a39bb6ea0808055c9ac2e6b3f46039f598b923fb31099572853962e3f3f35c398c3d9aa323aa58d0ddf095d6f169f6ca2fca411279eda7255403b22047af619dfd532affeef879bb60ebcd534c76e290922f7001f41168984f80791d69f04cfba3bf07fd0ac980f67bd407614eb666e6dd43a337d7771bc85164567742fce75b1991964454339fbd3071a15bd35040c10f3e14a0808f5adb44c4e2cca506648a1c0ee5bc7feb7f98e84248e9df43a11df67d7d602bb08b1bcf664fb6d4ba1b8b80eefe6443c78a2e32256c98fb1f86cd8daf65392f03f0e4967281f4ab85545dbc2a65e14645697589b4205ea0cfb7d5e8d870b76fd1ab5ca51b186837f68589795610cb6f58a204746af1e690de15dc584d57d3c73aeb136b70217e21d8b0bf7160d3c61d179cea631289c966689be0092eb5fc96b6a91f8bbf42f4ef1a6acb596be60217f00ae7c0f8079c8170be83d4bd9d3ca62f31adfd47f77dc9cfa85f1f683ae75a4bc98eb0d54fd69abf71954628579f978a15f52fc08ee0ae12b50d4d696d07a36c9e05202ccbb1f8183c746d0f4064ab70625a085774fa1a49e44892bbf5695ed3bb31eaf826659ef5ea4665b98153c3d8ed258011198d4f4b92038c5525705e0e554c7c9bb6061b05c421e03682bddb13b04e9de8f6cede820889e256fc63fe2b1874b87a59c257e33426ca63eee700aa556dcccb2ad73599bf6fac4b425e8ef793ae163b12c9526f7a502032ed8b7dfbfe3fbfedd271e8742389e91062b060d16dc65577fe5e6c3587809d45d3bc79c3665cddee421e56aa9f5aa3a67ee7a7aae302cf842dc8edd45cad7aca7cb1281de0707b11ce716b0879621f8ba8a645ac8ccc6fe3fbecdd03c5401942636cf0efbd4fc813b943caf6f9fed3e0cc7b4aef5af2e6c496804aa5dce5d78e7ce6f54b92f209d24d136059b639c8970f2e5d252bc245d5aac171fcda777803bcea7ac76b0bb163169055eaf08d066db68c1c43cf69fa87736844b5327046308dfce87ad7a7b0d313f8020361ddb3767ad6f07bd1e0c03f44ca1e1e4318c7f6f77cf359075d389a47fec9bc6d5134af206dd27f423daf14b50a1ad7b7b6ed2aac6e0f1913631465f2e6836efafa3f1e963152072a30652b85cd916e42b1394f4a92b351b50439d66baae3c09243ab03261901e338ef10fd4de2ee0e7f8732135dedb95306881de7ec65be735ed5048a96ec0acb2154da6cf85e4f80e5d1b0765e6fe130bff73c91621cc58ec336a0ec0981848dda216151dc1fab65d6032c88dc6231f30fe6b229b9869ab4703550bd9093d6ff3252ea106fce841fdc8af766d4b65e8ed228093c537490195cf9dfb3ea163543551ce1013ab04fc68036b65e0c4d163238ff298968217afac37fd9b3383069867ff7d37c840b113f77ceedf3db264653d5d937353a5e140367d6d3bd5f5650af8bf1565fffe5f3b302d30ab603e346bfa5c34fc9a20455adda440b129a0b7d656590fecb6b0eec4890db30c1dc72450356c7195cf9644f99f8250835b349bdccc56d7e9299c38d17e75ca799ea26c4575004bb3bd5837cad7e2cd37572ece54c011cc330b13fd539c37f07f11613e8080ae041addee1d3730acfe21227be404ef7156f3aefce514c0f617b74a88344eae9b70fa47032ca4abf7aa9ab70840c14f6de6adff1a65bf762ea00cd6fb9b0b670ad64b982dad6fd82fb169f0c1962ea5b410c05283077555a753c431fdb06f3921d2f9a4404a748c4531782d9", 0xbea}], 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4e90}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)) pidfd_getfd(0xffffffffffffffff, r4, 0x0) 3m21.620835117s ago: executing program 6 (id=2130): socket(0x2, 0x80805, 0x0) 3m21.620573797s ago: executing program 3 (id=2131): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 3m21.188012444s ago: executing program 3 (id=2132): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = io_uring_setup(0x669, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0xb8a0, 0x0, 0x1000085, 0xffffffff}) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80800) keyctl$chown(0x4, r4, 0xee01, 0xee01) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2803, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)={[{@map_acorn}, {@nocompress, 0x0}, {@overriderock}, {@overriderock}, {@map_normal}, {@uid, 0x41}, {@session={'session', 0x3d, 0x18}}, {@unhide}, {@unhide}, {@overriderock}, {@cruft}, {@map_normal}, {@cruft}]}, 0x42, 0x6b1, &(0x7f0000000840)="$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") r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000640)={0x2, 0x0, [{0x7, 0x9, 0x6, 0x1, 0x7, 0xf39, 0xfffffff9}, {0x1, 0x0, 0x6, 0x5, 0xe, 0xffffffff, 0x7}]}) keyctl$describe(0x6, r4, 0x0, 0x0) 3m21.187137384s ago: executing program 6 (id=2140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c002400000000ff88", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ec", 0x1a}], 0x2}, 0x4041) 3m19.278255132s ago: executing program 3 (id=2134): openat$null(0xffffffffffffff9c, 0x0, 0xa2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x1fa009, 0x0, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, 0x0) fchdir(r3) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000300)={0xffffffffffffff81, 0x8}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) pwritev(r4, &(0x7f00000029c0)=[{&(0x7f0000001680)="58f14c", 0x3}], 0x1, 0x9, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x38, 0xfffffffe}}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3m5.83787063s ago: executing program 35 (id=2140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c002400000000ff88", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ec", 0x1a}], 0x2}, 0x4041) 3m4.226423955s ago: executing program 36 (id=2134): openat$null(0xffffffffffffff9c, 0x0, 0xa2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x1fa009, 0x0, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, 0x0) fchdir(r3) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000300)={0xffffffffffffff81, 0x8}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) pwritev(r4, &(0x7f00000029c0)=[{&(0x7f0000001680)="58f14c", 0x3}], 0x1, 0x9, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x38, 0xfffffffe}}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 16.530621977s ago: executing program 4 (id=2383): openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80, 0x400000) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x3, 0x1, 0x12, 0x2000000000800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000540)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x8040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}}, &(0x7f0000002200)=""/4110, 0x32, 0x100e, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYBLOB="0000000000000000000000000000000000000036c2dd686e59", @ANYRES16=r2, @ANYRES32, @ANYBLOB], 0x48) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x104, 0x4, 0x3e8, 0x0, 0x110, 0x0, 0x300, 0x300, 0x3e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @broadcast, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x2}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x101, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, 0x0, 0x0) getsockopt$sock_buf(r7, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 14.711791551s ago: executing program 4 (id=2387): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='![\'[\'^-.-]{$5#\x00', 0x0) userfaultfd(0x80000) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14.26093815s ago: executing program 7 (id=2390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13.00793645s ago: executing program 4 (id=2392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1fffffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1fffffff}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100}, @in6=@private2, {@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {0xffff}, {}, 0x0, 0x0, 0x2}, 0x9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d5, 0x32}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0xc}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x2, 0x1, 0x9, 0x101, 0x8}]}]}, 0x1ac}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 12.466733393s ago: executing program 7 (id=2395): openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80, 0x400000) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x3, 0x1, 0x12, 0x2000000000800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000540)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x8040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}, @struct]}}, &(0x7f0000002200)=""/4110, 0x32, 0x100e, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYBLOB="0000000000000000000000000000000000000036c2dd686e59", @ANYRES16=r2, @ANYRES32, @ANYBLOB], 0x48) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x104, 0x4, 0x3e8, 0x0, 0x110, 0x0, 0x300, 0x300, 0x3e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @broadcast, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x2}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x101, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, 0x0, 0x0) getsockopt$sock_buf(r7, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 12.222283923s ago: executing program 0 (id=2396): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(0xffffffffffffffff, 0x800) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000001fbdbdf252e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) ioctl$sock_rose_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 11.129259857s ago: executing program 7 (id=2397): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64000}, 0x4040) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') prctl$PR_SET_SECCOMP(0x16, 0xe7, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$SHM_UNLOCK(0x0, 0xc) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) 11.05862323s ago: executing program 8 (id=2398): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000001fffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x80) 10.117776128s ago: executing program 4 (id=2399): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) r3 = socket$inet(0x2, 0x3, 0x8d) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) socket(0xa, 0x1, 0x0) 9.34770868s ago: executing program 8 (id=2400): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x801, &(0x7f0000000300)) socket$inet(0x2, 0x3, 0x8d) 8.873569409s ago: executing program 0 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(0xffffffffffffffff, r4, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) 8.340945641s ago: executing program 4 (id=2402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000003ac0), 0x0, 0x2040, 0x0) io_uring_setup(0x4166, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x110}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x88, 0x40, 0x0, {0x5, 0x4, 0x3, 0x5, 0x2, 0x66, 0xc, 0x10, 0x29, 0x8001, @private=0xa010102, @multicast2}}}}}}, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406100005240000000d2402ca"], 0x0) 6.002117806s ago: executing program 8 (id=2403): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) r3 = socket$inet(0x2, 0x3, 0x8d) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) socket(0xa, 0x1, 0x0) 5.834007223s ago: executing program 0 (id=2404): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) socket$inet(0x2, 0x3, 0x8d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) socket(0xa, 0x1, 0x0) 5.634937061s ago: executing program 7 (id=2405): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64000}, 0x4040) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') prctl$PR_SET_SECCOMP(0x16, 0xe7, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) syz_io_uring_setup(0x1a1d, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x80000001, 0x5, 0x3ff, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffbc, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x2000005]}) 4.610988153s ago: executing program 8 (id=2406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1fffffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1fffffff}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.18620424s ago: executing program 4 (id=2407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sync() ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d82afc3612e325c1eb4a3ab2e156a97444800", "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioprio_set$pid(0x1, 0x0, 0x6000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 2.504200508s ago: executing program 0 (id=2408): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000001fffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x80) 2.414492362s ago: executing program 8 (id=2409): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(0xffffffffffffffff, 0x800) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000001fbdbdf252e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) ioctl$sock_rose_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 2.2277664s ago: executing program 7 (id=2410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(0xffffffffffffffff, r4, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) syz_pidfd_open(r3, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.369405085s ago: executing program 0 (id=2411): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) socket$inet(0x2, 0x3, 0x8d) 1.052904928s ago: executing program 8 (id=2412): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(0x0, &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 13.87445ms ago: executing program 0 (id=2413): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x26, 0x0, @void}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x2, 0x174, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x1000000c, 0x12, 0x10003, 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 7 (id=2414): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000002085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): 264] pwc: recv_control_msg error -32 req 02 val 2000 [ 225.556379][ T2264] pwc: recv_control_msg error -32 req 02 val 2100 [ 225.680677][ T8418] loop3: detected capacity change from 0 to 1024 [ 225.802867][ T2264] pwc: recv_control_msg error -71 req 02 val 2500 [ 225.943835][ T2264] pwc: recv_control_msg error -71 req 02 val 2400 [ 226.029061][ T2264] pwc: recv_control_msg error -71 req 02 val 2600 [ 226.039597][ T8418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.127974][ T2264] pwc: recv_control_msg error -71 req 02 val 2900 [ 226.291436][ T2264] pwc: recv_control_msg error -71 req 02 val 2800 [ 226.386137][ T2264] pwc: recv_control_msg error -71 req 04 val 1100 [ 226.487271][ T2264] pwc: recv_control_msg error -71 req 04 val 1200 [ 226.556967][ T2264] pwc: Registered as video103. [ 226.618965][ T2264] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 226.668459][ T8425] program syz.0.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.676926][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.699405][ T2264] usb 5-1: USB disconnect, device number 7 [ 227.358821][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 227.566781][ T8437] overlayfs: missing 'lowerdir' [ 227.795314][ T8440] syzkaller0: entered promiscuous mode [ 227.808872][ T8440] syzkaller0: entered allmulticast mode [ 228.268105][ T8448] overlayfs: missing 'lowerdir' [ 229.435851][ T8471] overlayfs: missing 'lowerdir' [ 231.205447][ T8487] netlink: 'syz.5.588': attribute type 10 has an invalid length. [ 231.238933][ T8487] netlink: 40 bytes leftover after parsing attributes in process `syz.5.588'. [ 231.424583][ T8487] bridge0: port 3(dummy0) entered blocking state [ 231.453412][ T8487] bridge0: port 3(dummy0) entered disabled state [ 231.460383][ T8487] dummy0: entered allmulticast mode [ 232.204852][ T8487] dummy0: entered promiscuous mode [ 232.222430][ T8487] bridge0: port 3(dummy0) entered blocking state [ 232.228979][ T8487] bridge0: port 3(dummy0) entered forwarding state [ 232.250641][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 232.709127][ T8503] overlayfs: missing 'lowerdir' [ 232.969325][ T8500] loop0: detected capacity change from 0 to 32768 [ 232.999432][ T8500] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.592 (8500) [ 233.024400][ T8500] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 233.034663][ T8500] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 233.043434][ T8500] BTRFS info (device loop0): using free space tree [ 233.114192][ T8500] BTRFS info (device loop0): enabling ssd optimizations [ 233.121431][ T8500] BTRFS info (device loop0): auto enabling async discard [ 234.179048][ T5767] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 234.887419][ T8543] syzkaller0: entered promiscuous mode [ 234.912454][ T8543] syzkaller0: entered allmulticast mode [ 235.113464][ T6706] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (6706) [ 235.455999][ T8560] overlayfs: missing 'lowerdir' [ 235.556754][ T8562] overlayfs: missing 'lowerdir' [ 235.780897][ T8561] loop4: detected capacity change from 0 to 4096 [ 235.908437][ T8568] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.815354][ T8592] syzkaller0: entered promiscuous mode [ 238.838033][ T8592] syzkaller0: entered allmulticast mode [ 239.879861][ T8602] syzkaller0: entered promiscuous mode [ 239.885406][ T8602] syzkaller0: entered allmulticast mode [ 239.965731][ T8608] loop0: detected capacity change from 0 to 512 [ 240.125267][ T8608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.212874][ T8608] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.268614][ T8619] overlayfs: missing 'lowerdir' [ 240.633850][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.694100][ T8624] syzkaller0: entered promiscuous mode [ 240.701164][ T8624] syzkaller0: entered allmulticast mode [ 240.874485][ T8626] loop0: detected capacity change from 0 to 4096 [ 240.956227][ T8628] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.907201][ T8643] overlayfs: missing 'lowerdir' [ 243.506321][ T8653] overlayfs: missing 'lowerdir' [ 244.892620][ T8665] overlayfs: missing 'lowerdir' [ 247.008816][ T5757] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 247.212036][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.251071][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.270610][ T5757] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.291438][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.370102][ T5757] usb 4-1: config 0 descriptor?? [ 247.390038][ T5757] hub 4-1:0.0: USB hub found [ 247.612717][ T5757] hub 4-1:0.0: 1 port detected [ 247.836046][ T5757] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 247.863845][ T5757] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 247.931379][ T5757] usbhid 4-1:0.0: can't add hid device: -71 [ 247.951686][ T5757] usbhid: probe of 4-1:0.0 failed with error -71 [ 248.017953][ T5757] usb 4-1: USB disconnect, device number 7 [ 249.260922][ T8707] overlayfs: missing 'lowerdir' [ 249.511667][ T8712] overlayfs: missing 'lowerdir' [ 250.977761][ T8732] netlink: 'syz.5.649': attribute type 1 has an invalid length. [ 251.087130][ T8732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.196446][ T8742] loop0: detected capacity change from 0 to 128 [ 251.273007][ T8738] Bluetooth: hci4: Frame reassembly failed (-84) [ 251.750480][ T8755] overlayfs: missing 'lowerdir' [ 252.319683][ T8759] overlayfs: missing 'lowerdir' [ 253.200782][ T5088] Bluetooth: hci4: command 0x1003 tx timeout [ 253.278895][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 253.522587][ T5774] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 253.534333][ T5774] Bluetooth: hci3: Injecting HCI hardware error event [ 253.545246][ T5088] Bluetooth: hci3: hardware error 0x00 [ 254.537530][ T8794] overlayfs: missing 'lowerdir' [ 254.829906][ T8797] overlayfs: missing 'lowerdir' [ 255.018931][ T5757] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 255.214793][ T5757] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 255.230070][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.238327][ T5757] usb 5-1: Product: syz [ 255.257886][ T5757] usb 5-1: Manufacturer: syz [ 255.268118][ T5757] usb 5-1: SerialNumber: syz [ 255.280652][ T5757] usb 5-1: config 0 descriptor?? [ 255.509225][ T5757] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.679162][ T5088] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 256.014029][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.021350][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.531622][ T8827] tipc: Enabling of bearer rejected, failed to enable media [ 256.648662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 257.288673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 257.464160][ T1662] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 257.791036][ T8833] overlayfs: missing 'lowerdir' [ 257.819024][ T1662] usb 4-1: Using ep0 maxpacket: 16 [ 257.825979][ T5757] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 257.840244][ T1662] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.848194][ T5757] usb 5-1: USB disconnect, device number 8 [ 257.859059][ T1662] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.869467][ T1662] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 257.889470][ T1662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.913048][ T1662] usb 4-1: config 0 descriptor?? [ 258.268877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 258.499398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 258.568689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 258.868696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 258.888683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 258.909018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 258.968684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 259.435796][ T1662] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 259.450161][ T8839] loop0: detected capacity change from 0 to 2048 [ 259.591115][ T8839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.853504][ T28] audit: type=1804 audit(1774882353.262:49): pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.682" name="/newroot/147/file0/file1" dev="loop0" ino=1367 res=1 errno=0 [ 259.861705][ T8822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.939205][ T8822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.976417][ T1662] usb 4-1: USB disconnect, device number 8 [ 260.025348][ T8846] loop4: detected capacity change from 0 to 128 [ 260.080593][ T8846] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.128417][ T8846] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.251077][ T8846] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.684: No space for directory leaf checksum. Please run e2fsck -D. [ 260.268538][ T8846] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.684: checksumming directory block 0 [ 260.314372][ T8852] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.684: No space for directory leaf checksum. Please run e2fsck -D. [ 260.378169][ T8852] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.684: checksumming directory block 0 [ 260.526372][ T8846] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.684: No space for directory leaf checksum. Please run e2fsck -D. [ 260.725197][ T8846] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.684: checksumming directory block 0 [ 261.068945][ T8846] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.684: No space for directory leaf checksum. Please run e2fsck -D. [ 261.106619][ T8846] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.684: checksumming directory block 0 [ 261.156753][ T8852] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.684: No space for directory leaf checksum. Please run e2fsck -D. [ 261.207775][ T8852] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.684: checksumming directory block 0 [ 261.247141][ T8846] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.684: No space for directory leaf checksum. Please run e2fsck -D. [ 261.264984][ T8846] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.684: checksumming directory block 0 [ 261.277969][ T8852] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.684: No space for directory leaf checksum. Please run e2fsck -D. [ 261.364380][ T8852] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.684: checksumming directory block 0 [ 261.409935][ T8846] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.684: No space for directory leaf checksum. Please run e2fsck -D. [ 261.478927][ T8846] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.684: checksumming directory block 0 [ 261.497218][ T8869] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.684: No space for directory leaf checksum. Please run e2fsck -D. [ 261.542084][ T8869] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.684: checksumming directory block 0 [ 261.587046][ T8846] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.684: No space for directory leaf checksum. Please run e2fsck -D. [ 261.616474][ T8852] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.684: Directory block failed checksum [ 261.752547][ T6407] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.210338][ T8884] overlayfs: missing 'lowerdir' [ 264.363549][ T8899] syzkaller0: entered promiscuous mode [ 264.384594][ T8899] syzkaller0: entered allmulticast mode [ 264.872941][ T8912] tipc: Enabling of bearer rejected, failed to enable media [ 265.694527][ T8929] overlayfs: missing 'lowerdir' [ 268.392213][ T8956] overlayfs: missing 'lowerdir' [ 268.878501][ T8950] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 269.038143][ T8968] loop3: detected capacity change from 0 to 128 [ 269.121379][ T8968] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.170813][ T8968] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 270.241161][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.848396][ T8985] syzkaller0: entered promiscuous mode [ 270.868021][ T8985] syzkaller0: entered allmulticast mode [ 271.918136][ T8996] overlayfs: missing 'lowerdir' [ 273.996840][ T9017] overlayfs: missing 'lowerdir' [ 275.660325][ T9024] syzkaller0: entered promiscuous mode [ 275.679894][ T9024] syzkaller0: entered allmulticast mode [ 278.101876][ T9054] loop6: detected capacity change from 0 to 7 [ 278.137739][ T9054] Dev loop6: unable to read RDB block 7 [ 278.143751][ T9054] loop6: unable to read partition table [ 278.505220][ T9061] overlayfs: missing 'lowerdir' [ 279.170675][ T9054] loop6: partition table beyond EOD, truncated [ 279.179483][ T9054] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 281.291641][ T9109] overlayfs: missing 'lowerdir' [ 281.307899][ T9106] netlink: 'syz.5.747': attribute type 4 has an invalid length. [ 282.118938][ T9118] fuse: Bad value for 'fd' [ 286.571370][ T9180] overlayfs: missing 'lowerdir' [ 287.312908][ T9191] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 290.557566][ T1662] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 290.800258][ T1662] usb 4-1: Using ep0 maxpacket: 8 [ 290.820972][ T1662] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 290.876253][ T9226] overlayfs: missing 'lowerdir' [ 291.314976][ T1662] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 291.338706][ T1662] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.428950][ T1662] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.442183][ T1662] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.451633][ T1662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.775673][ T1662] usb 4-1: usb_control_msg returned -32 [ 291.787112][ T1662] usbtmc 4-1:16.0: can't read capabilities [ 291.887696][ T9238] overlayfs: missing 'lowerdir' [ 292.179544][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 293.007666][ T9262] overlayfs: missing 'lowerdir' [ 293.716127][ T8] usb 4-1: USB disconnect, device number 9 [ 293.919328][ T9274] syzkaller0: entered promiscuous mode [ 293.950273][ T9274] syzkaller0: entered allmulticast mode [ 294.386494][ T9284] overlayfs: missing 'lowerdir' [ 296.600799][ T9314] overlayfs: missing 'lowerdir' [ 297.471913][ T9329] overlayfs: missing 'lowerdir' [ 298.608111][ T9351] overlayfs: missing 'lowerdir' [ 299.417144][ T9367] tmpfs: Bad value for 'nr_blocks' [ 299.594779][ T9372] loop3: detected capacity change from 0 to 512 [ 299.830620][ T9372] EXT4-fs (loop3): Test dummy encryption mode enabled [ 299.846462][ T9372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.885434][ T9372] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.797: bad orphan inode 131083 [ 299.909198][ T9372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.094597][ T9386] overlayfs: missing 'lowerdir' [ 302.111195][ T9396] overlayfs: missing 'lowerdir' [ 302.349514][ T9405] overlayfs: missing 'lowerdir' [ 302.689997][ T9394] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 305.483626][ T9437] hfs: can't find a HFS filesystem on dev nullb0 [ 306.774093][ T9449] overlayfs: missing 'lowerdir' [ 307.633575][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.830070][ T9463] overlayfs: missing 'lowerdir' [ 308.940732][ T9472] overlayfs: missing 'lowerdir' [ 309.244410][ T9475] syzkaller0: entered promiscuous mode [ 310.620416][ T9484] netlink: 72 bytes leftover after parsing attributes in process `syz.3.816'. [ 311.689296][ T9475] syzkaller0: entered allmulticast mode [ 312.530995][ T9509] overlayfs: missing 'lowerdir' [ 314.365282][ T9517] syzkaller0: entered promiscuous mode [ 314.375442][ T9517] syzkaller0: entered allmulticast mode [ 315.270960][ T9528] overlayfs: missing 'lowerdir' [ 315.286890][ T9526] overlayfs: missing 'lowerdir' [ 318.530636][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.540222][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.713415][ T9560] overlayfs: missing 'lowerdir' [ 320.668877][ T9592] overlayfs: missing 'lowerdir' [ 320.980980][ T9593] overlayfs: missing 'lowerdir' [ 321.502145][ T9599] syzkaller0: entered promiscuous mode [ 322.652867][ T9609] create_pit_timer: 10 callbacks suppressed [ 322.652883][ T9609] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 322.691285][ T9609] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 322.710554][ T9609] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 322.853686][ T9609] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 322.896741][ T9609] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 323.028724][ T9609] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 323.061670][ T9609] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 323.117567][ T9609] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 323.430431][ T9622] overlayfs: missing 'lowerdir' [ 323.837921][ T9609] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 324.542117][ T9632] overlayfs: missing 'lowerdir' [ 325.450810][ T9646] overlayfs: missing 'lowerdir' [ 328.000108][ T9686] overlayfs: missing 'lowerdir' [ 328.929419][ T9689] tipc: Enabled bearer , priority 0 [ 328.950102][ T9689] syzkaller0: entered promiscuous mode [ 328.968736][ T9689] syzkaller0: entered allmulticast mode [ 329.059421][ T9689] tipc: Resetting bearer [ 329.078574][ T9690] overlayfs: missing 'lowerdir' [ 329.089473][ T9688] tipc: Resetting bearer [ 329.160246][ T9688] tipc: Disabling bearer [ 329.527448][ T9701] loop4: detected capacity change from 0 to 512 [ 329.580066][ T9701] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 329.594949][ T9701] EXT4-fs (loop4): orphan cleanup on readonly fs [ 329.627598][ T9701] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 329.681465][ T9701] EXT4-fs warning (device loop4): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 329.753332][ T9701] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 329.809455][ T9701] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.857: bg 0: block 64: padding at end of block bitmap is not set [ 329.851848][ T9701] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 329.880730][ T9701] EXT4-fs (loop4): 1 truncate cleaned up [ 329.921966][ T9701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 330.243072][ T9715] overlayfs: missing 'lowerdir' [ 330.754571][ T9726] loop3: detected capacity change from 0 to 4096 [ 330.838498][ T9726] ntfs3: loop3: ino=3, Correct links count -> 2. [ 331.686321][ T9741] overlayfs: missing 'lowerdir' [ 334.816569][ T9774] overlayfs: missing 'lowerdir' [ 335.477360][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.577453][ T9790] overlayfs: missing 'lowerdir' [ 337.730207][ T9805] loop3: detected capacity change from 0 to 1024 [ 337.787468][ T9805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.001285][ T9822] overlayfs: missing 'lowerdir' [ 340.009602][ T9831] netlink: 72 bytes leftover after parsing attributes in process `syz.4.880'. [ 341.217609][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.068299][ T9852] overlayfs: missing 'lowerdir' [ 346.551666][ T9883] netlink: 'syz.3.893': attribute type 13 has an invalid length. [ 346.827816][ T9886] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 346.990315][ T9897] loop4: detected capacity change from 0 to 1024 [ 347.061589][ T9897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.343975][ T9897] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 347.483899][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.874878][ T9912] kvm: kvm [9911]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 348.164802][ T9922] Cannot find add_set index 0 as target [ 351.720612][ T9943] overlayfs: missing 'lowerdir' [ 353.967808][ T9959] overlayfs: missing 'lowerdir' [ 356.243659][ T9985] overlayfs: missing 'lowerdir' [ 356.939589][ T9995] overlayfs: missing 'lowerdir' [ 358.976905][T10014] overlayfs: missing 'lowerdir' [ 360.045720][ T23] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 360.620879][ T23] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 360.658681][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.677133][ T23] usb 5-1: Product: syz [ 360.693254][ T23] usb 5-1: Manufacturer: syz [ 360.716980][ T23] usb 5-1: SerialNumber: syz [ 360.739504][ T23] usb 5-1: config 0 descriptor?? [ 361.149447][ T23] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 361.512018][T10052] overlayfs: missing 'lowerdir' [ 361.971815][T10060] netlink: 16 bytes leftover after parsing attributes in process `syz.5.922'. [ 362.842673][T10078] overlayfs: missing 'lowerdir' [ 363.020389][ T23] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 363.035563][ T23] usb 5-1: USB disconnect, device number 9 [ 363.228446][T10086] tipc: Enabled bearer , priority 0 [ 363.242279][T10086] syzkaller0: entered promiscuous mode [ 363.259176][T10086] syzkaller0: entered allmulticast mode [ 363.333644][T10086] tipc: Resetting bearer [ 363.345537][T10085] tipc: Resetting bearer [ 363.721042][T10094] overlayfs: missing 'lowerdir' [ 364.039778][T10085] tipc: Disabling bearer [ 364.241048][T10099] tipc: Enabled bearer , priority 0 [ 364.280133][T10099] syzkaller0: entered promiscuous mode [ 364.298875][T10099] syzkaller0: entered allmulticast mode [ 364.388673][T10099] tipc: Resetting bearer [ 364.416321][T10098] tipc: Resetting bearer [ 364.543046][T10098] tipc: Disabling bearer [ 366.013842][T10112] overlayfs: missing 'lowerdir' [ 369.043915][T10148] overlayfs: missing 'lowerdir' [ 371.065046][T10162] overlayfs: missing 'lowerdir' [ 372.181906][T10175] overlayfs: missing 'lowerdir' [ 374.854813][T10216] overlayfs: missing 'lowerdir' [ 375.669834][T10227] loop4: detected capacity change from 0 to 4096 [ 375.677722][T10227] ntfs3: loop4: Primary boot: invalid bytes per sector 1792. [ 375.687021][T10227] ntfs3: loop4: try to read out of volume at offset 0x1ffe00 [ 377.149691][T10244] overlayfs: missing 'lowerdir' [ 378.548363][T10233] overlayfs: missing 'lowerdir' [ 378.899198][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.905545][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.426884][T10269] overlayfs: missing 'lowerdir' [ 382.316339][T10292] overlayfs: missing 'lowerdir' [ 383.314696][T10302] overlayfs: missing 'lowerdir' [ 383.970616][T10312] tipc: Enabled bearer , priority 0 [ 384.191893][T10320] overlayfs: missing 'lowerdir' [ 384.649195][T10314] syzkaller0: entered promiscuous mode [ 384.654769][T10314] syzkaller0: entered allmulticast mode [ 385.109874][T10329] loop3: detected capacity change from 0 to 64 [ 385.233771][T10312] tipc: Resetting bearer [ 386.395941][T10336] overlayfs: missing 'lowerdir' [ 386.923563][T10310] tipc: Resetting bearer [ 387.079699][T10310] tipc: Disabling bearer [ 387.411735][T10347] loop4: detected capacity change from 0 to 256 [ 388.268154][T10347] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0xd8e97c99, utbl_chksum : 0xe619d30d) [ 388.328049][ T28] audit: type=1800 audit(1774882481.733:50): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.981" name="file2" dev="loop4" ino=1048634 res=0 errno=0 [ 388.411292][ T28] audit: type=1800 audit(1774882481.733:51): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.981" name="file2" dev="loop4" ino=1048634 res=0 errno=0 [ 388.871133][T10356] overlayfs: missing 'lowerdir' [ 390.032985][T10369] overlayfs: missing 'lowerdir' [ 391.573938][T10389] overlayfs: missing 'lowerdir' [ 392.679725][T10398] overlayfs: missing 'lowerdir' [ 393.943570][T10417] loop3: detected capacity change from 0 to 1024 [ 395.857290][ T2961] hfsplus: b-tree write err: -5, ino 25 [ 395.889622][ T2961] hfsplus: b-tree write err: -5, ino 4 [ 395.895601][ T2961] hfsplus: b-tree write err: -5, ino 2 [ 396.451416][T10431] overlayfs: missing 'lowerdir' [ 397.978327][T10440] overlayfs: missing 'lowerdir' [ 399.949247][T10456] overlayfs: missing 'lowerdir' [ 400.238311][T10462] warning: `syz.5.996' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 403.402469][T10492] overlayfs: missing 'lowerdir' [ 405.488929][T10507] overlayfs: missing 'lowerdir' [ 406.063215][T10506] overlayfs: missing 'lowerdir' [ 406.600822][ T5088] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 408.106811][T10544] overlayfs: missing 'lowerdir' [ 410.689483][T10563] overlayfs: missing 'lowerdir' [ 410.774349][T10564] overlayfs: missing 'lowerdir' [ 412.045288][T10594] overlayfs: missing 'lowerdir' [ 412.802456][T10591] syzkaller0: entered promiscuous mode [ 412.892672][T10591] syzkaller0: entered allmulticast mode [ 414.195317][T10619] overlayfs: missing 'lowerdir' [ 415.531183][T10636] overlayfs: missing 'lowerdir' [ 420.871648][T10666] overlayfs: missing 'lowerdir' [ 422.769121][T10678] overlayfs: missing 'lowerdir' [ 422.856186][T10690] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1038'. [ 423.207655][T10695] overlayfs: missing 'lowerdir' [ 424.316697][T10704] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 425.280809][T10724] overlayfs: missing 'lowerdir' [ 426.472578][T10737] overlayfs: missing 'lowerdir' [ 429.148262][T10762] overlayfs: missing 'lowerdir' [ 430.461684][T10778] overlayfs: missing 'lowerdir' [ 431.254631][T10786] loop3: detected capacity change from 0 to 2048 [ 431.294578][T10786] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.482170][T10790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1055'. [ 431.509785][T10790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1055'. [ 431.552395][ T28] audit: type=1804 audit(1774882524.973:52): pid=10794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1054" name="/newroot/259/file0/file1" dev="loop3" ino=1367 res=1 errno=0 [ 431.585717][T10790] syzkaller0: entered promiscuous mode [ 431.599466][T10790] syzkaller0: entered allmulticast mode [ 432.030932][T10801] overlayfs: missing 'lowerdir' [ 433.299466][T10820] overlayfs: missing 'lowerdir' [ 435.169571][T10836] overlayfs: missing 'lowerdir' [ 435.398692][ T787] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 435.605965][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.618101][ T787] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 435.636804][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.915158][T10850] overlayfs: missing 'lowerdir' [ 436.339743][ T787] usb 5-1: config 0 descriptor?? [ 436.391104][ T787] pwc: Askey VC010 type 2 USB webcam detected. [ 436.557590][ T787] pwc: send_video_command error -71 [ 436.569572][ T787] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 436.596510][ T787] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 436.674133][ T787] usb 5-1: USB disconnect, device number 10 [ 436.836759][T10864] overlayfs: missing 'lowerdir' [ 437.931956][ T1662] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 438.140158][ T1662] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.150732][ T1662] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 438.159988][ T1662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.171660][ T1662] usb 5-1: config 0 descriptor?? [ 438.181743][ T1662] pwc: Askey VC010 type 2 USB webcam detected. [ 438.669758][ T1662] pwc: recv_control_msg error -32 req 02 val 2b00 [ 438.846300][ T1662] pwc: recv_control_msg error -32 req 02 val 2700 [ 439.050943][ T1662] pwc: recv_control_msg error -32 req 02 val 2c00 [ 439.407487][T10886] overlayfs: missing 'lowerdir' [ 439.413736][T10887] overlayfs: missing 'lowerdir' [ 439.896058][ T1662] pwc: recv_control_msg error -71 req 04 val 1000 [ 440.445264][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.451952][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.459800][ T1662] pwc: recv_control_msg error -71 req 04 val 1300 [ 440.468904][ T1662] pwc: recv_control_msg error -71 req 04 val 1400 [ 440.488679][ T1662] pwc: recv_control_msg error -71 req 02 val 2000 [ 440.499310][ T1662] pwc: recv_control_msg error -71 req 02 val 2100 [ 440.519112][ T1662] pwc: recv_control_msg error -71 req 04 val 1500 [ 440.548771][ T1662] pwc: recv_control_msg error -71 req 02 val 2500 [ 440.598621][ T1662] pwc: recv_control_msg error -71 req 02 val 2400 [ 440.627161][ T1662] pwc: recv_control_msg error -71 req 02 val 2600 [ 440.798470][ T1662] pwc: recv_control_msg error -71 req 02 val 2900 [ 440.809429][ T1662] pwc: recv_control_msg error -71 req 02 val 2800 [ 440.819861][ T1662] pwc: recv_control_msg error -71 req 04 val 1100 [ 440.829235][ T1662] pwc: recv_control_msg error -71 req 04 val 1200 [ 440.849588][ T1662] pwc: Registered as video103. [ 440.978966][T10908] overlayfs: missing 'lowerdir' [ 441.056897][ T1662] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 441.518442][ T1662] usb 5-1: USB disconnect, device number 11 [ 441.858653][T10916] overlayfs: missing 'lowerdir' [ 442.688781][ T5804] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 442.957589][T10942] overlayfs: missing 'lowerdir' [ 443.752085][T10949] overlayfs: missing 'lowerdir' [ 444.166209][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.198660][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.208487][ T5804] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 444.308788][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.109664][ T5804] usb 5-1: config 0 descriptor?? [ 445.571027][T10968] overlayfs: missing 'lowerdir' [ 445.915071][ T5804] hub 5-1:0.0: USB hub found [ 445.922905][ T5804] hub 5-1:0.0: 1 port detected [ 446.201925][ T5804] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 446.208326][ T5804] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 446.479120][ T5804] usbhid 5-1:0.0: can't add hid device: -71 [ 447.241297][ T5804] usbhid: probe of 5-1:0.0 failed with error -71 [ 447.309823][ T5804] usb 5-1: USB disconnect, device number 12 [ 449.404079][T11000] overlayfs: missing 'lowerdir' [ 450.879161][T11013] overlayfs: missing 'lowerdir' [ 451.635221][T11028] overlayfs: missing 'lowerdir' [ 452.879490][T11037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1102'. [ 453.210821][T11051] overlayfs: missing 'lowerdir' [ 453.327003][ T5804] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 453.538634][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 453.547878][ T5804] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.568671][ T5804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 453.587759][ T5804] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 453.616571][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.666851][ T5804] usb 5-1: config 0 descriptor?? [ 453.991796][T11060] overlayfs: missing 'lowerdir' [ 454.653768][ T5804] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 454.665704][T11045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.666048][T11045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.841891][ T5804] usb 5-1: USB disconnect, device number 13 [ 454.942570][T11065] fido_id[11065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 457.679105][T11093] overlayfs: missing 'lowerdir' [ 458.441341][T11092] overlayfs: missing 'lowerdir' [ 461.893615][T11142] overlayfs: missing 'lowerdir' [ 462.401827][T11135] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 464.714554][T11167] overlayfs: missing 'lowerdir' [ 464.720333][T11158] overlayfs: missing 'lowerdir' [ 465.082751][T11183] loop4: detected capacity change from 0 to 128 [ 465.334219][T11183] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 465.363755][T11183] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 466.384822][ T6407] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.999753][T11220] overlayfs: missing 'lowerdir' [ 468.578201][T11228] loop4: detected capacity change from 0 to 8 [ 468.588116][T11228] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 468.662243][T11228] cramfs: Error -5 while decompressing! [ 468.668462][T11228] cramfs: ffffffff973f8382(26)->ffff888053d1e000(4096) [ 468.675614][T11228] cramfs: Error -3 while decompressing! [ 468.689791][T11228] cramfs: ffffffff973f839c(16)->ffff888054469000(4096) [ 468.700863][T11228] cramfs: Error -5 while decompressing! [ 468.706795][T11228] cramfs: ffffffff973f8382(26)->ffff888053d1e000(4096) [ 468.834990][ T28] audit: type=1800 audit(1774882562.133:53): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1130" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 468.857471][T10655] udevd[10655]: incorrect cramfs checksum on /dev/loop4 [ 468.880508][T10655] udevd[10655]: incorrect cramfs checksum on /dev/loop4 [ 469.438990][T11242] overlayfs: missing 'lowerdir' [ 470.537326][T11261] overlayfs: missing 'lowerdir' [ 476.932741][T11296] overlayfs: missing 'lowerdir' [ 477.083864][T11303] overlayfs: missing 'lowerdir' [ 477.473773][T11312] tipc: Enabling of bearer rejected, failed to enable media [ 478.321620][T11336] overlayfs: missing 'lowerdir' [ 480.656395][T11355] overlayfs: missing 'lowerdir' [ 483.288449][T11382] overlayfs: missing 'lowerdir' [ 486.462533][T11411] overlayfs: missing 'lowerdir' [ 490.504322][T11445] overlayfs: missing 'lowerdir' [ 494.960053][T11483] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1182'. [ 495.739884][T11485] tipc: Enabling of bearer rejected, failed to enable media [ 495.876393][T11494] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 495.904120][T11494] CIFS mount error: No usable UNC path provided in device string! [ 495.904120][T11494] [ 495.914350][T11494] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 496.657771][T11511] overlayfs: missing 'lowerdir' [ 498.748707][T11525] overlayfs: missing 'lowerdir' [ 499.932923][T11534] syzkaller0: entered promiscuous mode [ 499.938454][T11534] syzkaller0: entered allmulticast mode [ 502.193017][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.200294][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.287470][T11552] tipc: Enabled bearer , priority 0 [ 502.296659][T11552] syzkaller0: entered promiscuous mode [ 502.351301][T11552] syzkaller0: entered allmulticast mode [ 502.643110][T11556] tipc: Resetting bearer [ 502.966995][T11561] overlayfs: missing 'lowerdir' [ 503.448748][T11551] tipc: Resetting bearer [ 503.619564][T11551] tipc: Disabling bearer [ 504.082720][T11575] overlayfs: missing 'lowerdir' [ 506.148247][T11587] syzkaller0: entered promiscuous mode [ 506.182798][T11587] syzkaller0: entered allmulticast mode [ 507.898740][ T8] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 508.185663][T11613] overlayfs: missing 'lowerdir' [ 510.522592][T11632] overlayfs: missing 'lowerdir' [ 510.801817][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.912768][ T8] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 510.932759][ T8] usb 5-1: can't read configurations, error -71 [ 513.279067][T11663] overlayfs: missing 'lowerdir' [ 514.631524][T11687] overlayfs: missing 'lowerdir' [ 516.867130][T11712] overlayfs: missing 'lowerdir' [ 519.289084][T11735] overlayfs: missing 'lowerdir' [ 521.905190][T11750] overlayfs: missing 'lowerdir' [ 524.959456][T11778] overlayfs: missing 'lowerdir' [ 527.213671][T11790] overlayfs: failed to clone upperpath [ 530.305620][T11808] overlayfs: missing 'lowerdir' [ 532.431142][T11836] overlayfs: missing 'lowerdir' [ 532.479618][ T5088] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 533.564173][T11851] overlayfs: missing 'lowerdir' [ 537.658981][T11882] overlayfs: missing 'lowerdir' [ 540.408940][T11904] loop4: detected capacity change from 0 to 64 [ 541.233860][T11906] overlayfs: missing 'lowerdir' [ 541.580767][T11914] delete_channel: no stack [ 543.311101][T11920] overlayfs: failed to clone lowerpath [ 544.016861][T11928] overlayfs: missing 'lowerdir' [ 549.413164][T11961] overlayfs: missing 'lowerdir' [ 551.460085][T11977] overlayfs: missing 'lowerdir' [ 554.909208][T12024] overlayfs: missing 'lowerdir' [ 555.106456][T11810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 555.359696][T11810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 555.379325][T11810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 555.390587][T11810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 555.401405][T11810] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 555.409015][T11810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 555.562336][T12035] loop7: detected capacity change from 0 to 16384 [ 556.029933][T12038] loop7: detected capacity change from 16384 to 0 [ 556.375787][T12015] chnl_net:caif_netlink_parms(): no params data found [ 557.114519][T12061] overlayfs: missing 'lowerdir' [ 557.558747][T11810] Bluetooth: hci4: command tx timeout [ 557.597205][T12015] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.648144][T12015] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.665770][T12015] bridge_slave_0: entered allmulticast mode [ 557.701103][T12015] bridge_slave_0: entered promiscuous mode [ 557.830443][T12015] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.865374][T12015] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.884017][T12015] bridge_slave_1: entered allmulticast mode [ 557.895824][T12015] bridge_slave_1: entered promiscuous mode [ 557.953055][T12015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.966016][T12015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.087076][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.933055][T11810] Bluetooth: hci4: command tx timeout [ 560.086578][T12085] CIFS mount error: No usable UNC path provided in device string! [ 560.086578][T12085] [ 560.096882][T12085] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.523383][T12015] team0: Port device team_slave_0 added [ 560.581985][T12015] team0: Port device team_slave_1 added [ 560.690146][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.999206][T11810] Bluetooth: hci4: command tx timeout [ 562.027260][T12015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.236363][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.490293][T12015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.175514][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.202819][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.211203][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.394332][T12015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.431049][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.494606][T12015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.615150][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.877089][T12015] hsr_slave_0: entered promiscuous mode [ 563.895500][T12015] hsr_slave_1: entered promiscuous mode [ 563.907178][T12015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.924849][T12015] Cannot create hsr debugfs directory [ 564.078800][T11810] Bluetooth: hci4: command tx timeout [ 564.428413][ T8] IPVS: starting estimator thread 0... [ 564.781212][T12156] IPVS: using max 18 ests per chain, 43200 per kthread [ 565.730358][T12164] overlayfs: missing 'lowerdir' [ 567.518606][T12179] tipc: Enabling of bearer rejected, failed to enable media [ 567.987966][T12195] overlayfs: missing 'lowerdir' [ 568.763274][T12015] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 568.793251][T12015] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 571.209404][T12015] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 571.518951][T12015] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 572.023190][T12227] bridge0: port 3(syz_tun) entered blocking state [ 572.128655][T12227] bridge0: port 3(syz_tun) entered disabled state [ 572.170824][T12227] syz_tun: entered allmulticast mode [ 572.299468][T12227] syz_tun: entered promiscuous mode [ 572.424197][T12227] bridge0: port 3(syz_tun) entered blocking state [ 572.431406][T12227] bridge0: port 3(syz_tun) entered forwarding state [ 573.670932][T12015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.754931][T12015] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.774039][ T9563] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.781236][ T9563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.844547][ T9563] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.851782][ T9563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.200891][T12261] overlayfs: missing 'lowerdir' [ 576.860739][T12273] CIFS mount error: No usable UNC path provided in device string! [ 576.860739][T12273] [ 576.870922][T12273] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 577.131858][ T49] hsr_slave_0: left promiscuous mode [ 577.144896][ T49] hsr_slave_1: left promiscuous mode [ 577.156022][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.183162][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.203132][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.224717][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.243237][ T49] dummy0: left allmulticast mode [ 577.248321][ T49] dummy0: left promiscuous mode [ 577.285764][ T49] bridge0: port 3(dummy0) entered disabled state [ 577.303762][ T49] bridge_slave_1: left allmulticast mode [ 577.323574][ T49] bridge_slave_1: left promiscuous mode [ 577.339565][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.368287][ T49] bridge_slave_0: left allmulticast mode [ 577.375333][ T49] bridge_slave_0: left promiscuous mode [ 577.397697][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.495727][ T49] veth1_macvtap: left promiscuous mode [ 577.516287][ T49] veth0_macvtap: left promiscuous mode [ 577.559197][ T49] veth1_vlan: left promiscuous mode [ 577.564580][ T49] veth0_vlan: left promiscuous mode [ 577.853345][ T49] bond2 (unregistering): Released all slaves [ 578.252691][T12300] ceph: No mds server is up or the cluster is laggy [ 578.701455][ T49] bond1 (unregistering): Released all slaves [ 578.748205][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 578.755279][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 580.606813][T12317] overlayfs: missing 'lowerdir' [ 581.266762][ T49] team0 (unregistering): Port device team_slave_1 removed [ 581.336187][ T49] team0 (unregistering): Port device team_slave_0 removed [ 581.418286][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.512016][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.901088][ T49] bond0 (unregistering): Released all slaves [ 582.123534][T12015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.555210][T12341] overlayfs: missing 'lowerdir' [ 585.082685][T12015] veth0_vlan: entered promiscuous mode [ 585.161002][T12015] veth1_vlan: entered promiscuous mode [ 585.356764][T12015] veth0_macvtap: entered promiscuous mode [ 585.669341][T12361] overlayfs: missing 'lowerdir' [ 586.250660][T12015] veth1_macvtap: entered promiscuous mode [ 586.851818][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.905980][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.170592][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.285378][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1329'. [ 588.828888][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.840010][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.858118][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.870333][T12015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.882148][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.892666][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.949011][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.987539][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.998194][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.013629][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.025346][T12015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.100047][T12015] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.177793][T12015] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.215865][T12015] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.831538][T12015] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.095596][T12410] overlayfs: missing 'lowerdir' [ 592.566736][ T9563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.620610][ T9563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.719914][ T9563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.744094][ T9563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.532017][T12422] overlayfs: missing 'lowerdir' [ 598.679249][T12469] overlayfs: missing 'lowerdir' [ 598.695966][T12461] loop4: detected capacity change from 0 to 4096 [ 600.916464][T12489] overlayfs: missing 'lowerdir' [ 601.794160][T12494] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 602.665909][T12495] sctp: [Deprecated]: syz.3.1341 (pid 12495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.665909][T12495] Use struct sctp_sack_info instead [ 604.694257][T12506] overlayfs: missing 'lowerdir' [ 605.575566][T12519] loop4: detected capacity change from 0 to 512 [ 605.887655][T12523] overlayfs: missing 'lowerdir' [ 606.575090][T12519] FAT-fs (loop4): IO charset utfѾ¹Éh$Û‚‰œ#wî•w9Á‹C= Yæ’³t ¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found [ 608.378739][T12549] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 608.387670][T12549] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 608.396419][T12549] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 610.041867][T11810] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 611.997377][T12568] overlayfs: missing 'lowerdir' [ 612.063711][T12570] xt_TCPMSS: Only works on TCP SYN packets [ 613.128840][T12578] overlayfs: missing 'lowerdir' [ 614.792515][T12599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.147743][T12614] overlayfs: missing 'lowerdir' [ 618.589890][T12650] overlayfs: missing 'lowerdir' [ 620.761858][T12667] overlayfs: missing 'lowerdir' [ 622.978253][T12659] input: syz1 as /devices/virtual/input/input12 [ 623.187576][T12692] overlayfs: missing 'lowerdir' [ 624.732751][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.743124][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.351916][T12738] overlayfs: missing 'lowerdir' [ 627.931511][T12746] loop4: detected capacity change from 0 to 512 [ 628.746507][T12746] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 628.761160][T12746] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 628.790893][T12746] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 628.819002][T12746] System zones: 0-2, 18-18, 34-35 [ 628.845046][T12746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 629.128743][T12757] overlayfs: missing 'lowerdir' [ 629.904228][T12746] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 630.078682][T12746] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 630.848783][T12746] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 631.277337][T12773] fuse: Bad value for 'fd' [ 631.982719][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.353822][T12795] overlayfs: missing 'lowerdir' [ 635.503441][T12811] overlayfs: missing 'lowerdir' [ 636.456497][ T5829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 637.091178][T12829] loop4: detected capacity change from 0 to 4096 [ 637.181220][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.197409][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.208925][ T5829] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 637.218582][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.231488][ T5829] usb 7-1: config 0 descriptor?? [ 637.457512][T12820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.489179][T12820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.646822][ T5829] usbhid 7-1:0.0: can't add hid device: -71 [ 637.757559][ T5829] usbhid: probe of 7-1:0.0 failed with error -71 [ 637.978852][ T5829] usb 7-1: USB disconnect, device number 2 [ 641.229068][T12844] overlayfs: missing 'lowerdir' [ 643.943610][T12882] overlayfs: missing 'lowerdir' [ 644.930408][T12894] overlayfs: missing 'lowerdir' [ 647.580229][T12904] overlayfs: missing 'lowerdir' [ 648.627183][T12914] autofs4:pid:12914:autofs_fill_super: called with bogus options [ 648.798193][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1418'. [ 648.808741][ T5829] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 649.290586][T12937] overlayfs: missing 'lowerdir' [ 649.329685][ T5829] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 649.427244][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.728720][ T5829] usb 7-1: Product: syz [ 649.732942][ T5829] usb 7-1: Manufacturer: syz [ 649.738320][ T5829] usb 7-1: SerialNumber: syz [ 649.762066][ T5829] usb 7-1: config 0 descriptor?? [ 650.098057][ T5829] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 650.905321][T12960] No such timeout policy "syz1" [ 652.611227][T12980] overlayfs: missing 'lowerdir' [ 653.408293][ T5829] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 653.559159][ T5829] usb 7-1: USB disconnect, device number 3 [ 654.183878][T12989] overlayfs: missing 'lowerdir' [ 654.547180][T12995] lo: Caught tx_queue_len zero misconfig [ 655.384726][T13006] loop6: detected capacity change from 0 to 4096 [ 656.629383][T13006] EXT4-fs (loop6): Test dummy encryption mode enabled [ 656.678380][T13006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.258126][T13032] overlayfs: missing 'lowerdir' [ 658.818663][T13045] overlayfs: missing 'lowerdir' [ 660.077636][T11810] Bluetooth: hci0: link tx timeout [ 660.215016][T12015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.716652][T13069] overlayfs: missing 'lowerdir' [ 662.891517][T13090] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 665.259773][T13100] overlayfs: missing 'lowerdir' [ 665.901079][T13109] overlayfs: missing 'lowerdir' [ 667.958915][T13122] overlayfs: missing 'lowerdir' [ 669.217425][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 669.253332][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 669.285555][T13143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.431073][T13162] overlayfs: missing 'lowerdir' [ 672.054651][T13178] (syz.6.1455,13178,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 672.063546][T13178] (syz.6.1455,13178,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 675.084206][T13194] overlayfs: missing 'lowerdir' [ 678.163824][T13219] overlayfs: missing 'lowerdir' [ 678.419362][ T5088] Bluetooth: hci4: command 0x0406 tx timeout [ 678.851639][T13223] fuse: Unknown parameter '00000000000000000000' [ 679.549896][T13239] overlayfs: missing 'lowerdir' [ 680.252580][T13235] sctp: [Deprecated]: syz.0.1466 (pid 13235) Use of int in max_burst socket option. [ 680.252580][T13235] Use struct sctp_assoc_value instead [ 681.594560][T13255] overlayfs: missing 'lowerdir' [ 683.136988][T13276] overlayfs: missing 'lowerdir' [ 685.219714][T13287] loop4: detected capacity change from 0 to 512 [ 685.330453][T13287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.429805][T13287] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.136641][T13296] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 686.152342][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.897876][T13312] overlayfs: missing 'lowerdir' [ 686.997030][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.182918][T13306] Quota error (device loop4): write_blk: dquota write failed [ 687.191020][T13306] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 687.200978][T13306] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.1473: Failed to acquire dquot type 0 [ 687.527898][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.869036][T13342] overlayfs: missing 'lowerdir' [ 692.236544][T13368] overlayfs: missing 'lowerdir' [ 693.492545][T13381] overlayfs: missing 'lowerdir' [ 697.409835][T13421] overlayfs: missing 'lowerdir' [ 700.516334][T13445] overlayfs: missing 'lowerdir' [ 701.182240][T13459] overlayfs: missing 'lowerdir' [ 702.810400][T13469] loop6: detected capacity change from 0 to 512 [ 703.242028][T13469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.264955][T13469] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.155725][T13483] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 704.172956][T13483] Quota error (device loop6): write_blk: dquota write failed [ 704.180428][T13483] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 704.190283][T13483] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.1500: Failed to acquire dquot type 0 [ 704.489167][T12015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.496617][T13502] overlayfs: missing 'lowerdir' [ 707.581832][T13511] overlayfs: missing 'lowerdir' [ 708.088257][T13518] syzkaller0: entered promiscuous mode [ 708.140312][T13517] overlayfs: failed to clone upperpath [ 708.146111][T13518] syzkaller0: entered allmulticast mode [ 708.575266][T13525] loop6: detected capacity change from 0 to 32768 [ 708.603023][T13525] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.1511 (13525) [ 709.176075][T13525] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 709.186453][T13525] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 709.195396][T13525] BTRFS info (device loop6): enabling disk space caching [ 709.202761][T13525] BTRFS info (device loop6): force clearing of disk cache [ 709.210051][T13525] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 709.219962][T13525] BTRFS info (device loop6): use zstd compression, level 3 [ 709.228099][T13525] BTRFS info (device loop6): disk space caching is enabled [ 709.463955][T13525] BTRFS info (device loop6): enabling ssd optimizations [ 709.475158][T13525] BTRFS info (device loop6): auto enabling async discard [ 709.496585][T13525] BTRFS info (device loop6): rebuilding free space tree [ 709.551813][T13525] BTRFS info (device loop6): disabling free space tree [ 709.566865][T13525] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 709.577492][T13525] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 710.467288][ T28] audit: type=1804 audit(1774882803.373:54): pid=13554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1511" name="/newroot/30/file1/bus" dev="loop6" ino=263 res=1 errno=0 [ 710.525649][T12015] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 712.566643][T13574] overlayfs: missing 'lowerdir' [ 713.664588][T13585] overlayfs: missing 'lowerdir' [ 716.429253][T13602] overlayfs: missing 'lowerdir' [ 716.913339][T13606] overlayfs: missing 'lowerdir' [ 717.238940][T13609] overlayfs: missing 'lowerdir' [ 720.189277][T13633] syzkaller0: entered promiscuous mode [ 720.194774][T13633] syzkaller0: entered allmulticast mode [ 721.920482][T13654] overlayfs: missing 'lowerdir' [ 723.097017][T13666] overlayfs: missing 'lowerdir' [ 726.816141][T13680] overlayfs: missing 'lowerdir' [ 726.933605][T13685] overlayfs: missing 'lowerdir' [ 728.196701][T13701] overlayfs: missing 'lowerdir' [ 732.149161][T13735] overlayfs: missing 'lowerdir' [ 733.949211][T13751] overlayfs: missing 'lowerdir' [ 734.046932][T13748] overlayfs: missing 'lowerdir' [ 734.826497][T13763] overlayfs: missing 'lowerdir' [ 735.356475][T13772] overlayfs: missing 'lowerdir' [ 736.075410][T13782] syzkaller0: entered promiscuous mode [ 736.081201][T13782] syzkaller0: entered allmulticast mode [ 736.508042][T13794] overlayfs: missing 'lowerdir' [ 738.003748][T13816] overlayfs: missing 'lowerdir' [ 738.674396][T13807] overlayfs: missing 'lowerdir' [ 742.179612][T13847] overlayfs: missing 'lowerdir' [ 743.217098][T13857] overlayfs: missing 'lowerdir' [ 746.485170][T13869] overlayfs: missing 'lowerdir' [ 747.523381][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.530532][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.135490][T13883] overlayfs: missing 'lowerdir' [ 748.991105][T13890] overlayfs: missing 'lowerdir' [ 750.701240][T13910] overlayfs: missing 'lowerdir' [ 752.003669][T13921] overlayfs: missing 'lowerdir' [ 752.403898][T13930] overlayfs: missing 'lowerdir' [ 754.951519][T13963] overlayfs: missing 'lowerdir' [ 756.001070][T13973] overlayfs: missing 'lowerdir' [ 757.190607][T13994] overlayfs: missing 'lowerdir' [ 758.669545][T14000] overlayfs: missing 'lowerdir' [ 760.558914][T14025] overlayfs: missing 'lowerdir' [ 760.927373][T14040] overlayfs: missing 'lowerdir' [ 761.030758][T14020] syzkaller0: entered promiscuous mode [ 761.078576][T14020] syzkaller0: entered allmulticast mode [ 762.735320][T14068] --map-set only usable from mangle table [ 763.230834][T14074] overlayfs: missing 'lowerdir' [ 765.179134][T14093] overlayfs: missing 'lowerdir' [ 767.300379][T14110] overlayfs: missing 'lowerdir' [ 769.985725][T14125] overlayfs: missing 'lowerdir' [ 770.448550][T14130] overlayfs: missing 'lowerdir' [ 771.745279][T14153] loop4: detected capacity change from 0 to 1024 [ 771.791701][T14153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 771.951829][T14153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.300590][T14173] overlayfs: missing 'lowerdir' [ 773.517305][ T28] audit: type=1800 audit(1774882866.903:55): pid=14154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1604" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 773.950636][T14186] overlayfs: missing 'lowerdir' [ 775.342115][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.089007][T14204] overlayfs: missing 'lowerdir' [ 776.208477][T14209] overlayfs: missing 'lowerdir' [ 777.292860][T14231] overlayfs: missing 'lowerdir' [ 779.262271][T14249] overlayfs: missing 'lowerdir' [ 779.405116][T14248] overlayfs: missing 'lowerdir' [ 781.484026][T14277] overlayfs: missing 'lowerdir' [ 781.988350][T14285] overlayfs: missing 'lowerdir' [ 783.791975][T14316] overlayfs: missing 'lowerdir' [ 784.686034][T14331] overlayfs: missing 'lowerdir' [ 785.499767][T14311] overlayfs: missing 'lowerdir' [ 786.549641][T14344] overlayfs: missing 'lowerdir' [ 786.728978][T14338] vivid-008: kernel_thread() failed [ 787.235141][T14352] syzkaller0: entered promiscuous mode [ 787.246586][T14352] syzkaller0: entered allmulticast mode [ 788.433942][T14368] binder: 14367:14368 ioctl 40026f34 200000000280 returned -22 [ 788.799211][T14375] overlayfs: missing 'lowerdir' [ 789.894058][T14388] overlayfs: missing 'lowerdir' [ 790.920844][T14405] overlayfs: missing 'lowerdir' [ 793.406205][T14434] overlayfs: missing 'lowerdir' [ 794.260480][T14446] overlayfs: missing 'lowerdir' [ 795.727423][T14453] overlayfs: missing 'lowerdir' [ 795.966728][T14457] overlayfs: missing 'lowerdir' [ 796.755099][T14484] overlayfs: missing 'lowerdir' [ 800.536001][T14520] overlayfs: missing 'lowerdir' [ 801.532949][T14537] overlayfs: missing 'lowerdir' [ 801.837423][T14509] overlayfs: missing 'lowerdir' [ 802.229587][T14546] overlayfs: missing 'lowerdir' [ 802.832693][T14554] overlayfs: missing 'lowerdir' [ 805.642729][T14576] loop4: detected capacity change from 0 to 1024 [ 805.661106][T14576] hfsplus: unable to parse mount options [ 806.486232][T14587] overlayfs: missing 'lowerdir' [ 806.842668][T14591] overlayfs: missing 'lowerdir' [ 808.201287][T14613] overlayfs: missing 'lowerdir' [ 808.492328][T14617] overlayfs: missing 'lowerdir' [ 808.969510][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.976220][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.007320][T14630] overlayfs: missing 'lowerdir' [ 811.268306][T14635] xt_TPROXY: Can be used only with -p tcp or -p udp [ 812.235189][T14654] overlayfs: missing 'lowerdir' [ 813.003238][T14661] overlayfs: missing 'lowerdir' [ 814.120782][T14688] overlayfs: missing 'lowerdir' [ 815.221495][T14694] overlayfs: missing 'lowerdir' [ 817.394437][T14710] overlayfs: missing 'lowerdir' [ 818.561056][T14739] overlayfs: missing 'lowerdir' [ 819.374984][T14744] batman_adv: batadv0: Adding interface: macsec1 [ 819.381485][T14744] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.407133][T14744] batman_adv: batadv0: Interface activated: macsec1 [ 820.559214][T14750] overlayfs: missing 'lowerdir' [ 821.666474][T14766] overlayfs: missing 'lowerdir' [ 822.896144][T14787] overlayfs: missing 'lowerdir' [ 823.885957][T14805] overlayfs: missing 'lowerdir' [ 824.108664][T14814] overlayfs: missing 'lowerdir' [ 825.020682][T14806] loop6: detected capacity change from 0 to 4096 [ 826.905547][T14829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1709'. [ 827.390384][T14847] overlayfs: missing 'lowerdir' [ 828.410387][T14863] overlayfs: missing 'lowerdir' [ 828.763041][T14867] overlayfs: missing 'lowerdir' [ 830.657287][T14891] fuse: Bad value for 'fd' [ 831.159940][T14895] overlayfs: missing 'lowerdir' [ 832.018097][T14911] overlayfs: missing 'lowerdir' [ 833.222308][T14921] overlayfs: missing 'lowerdir' [ 834.049232][T14908] overlayfs: missing 'lowerdir' [ 835.162413][T14948] overlayfs: missing 'lowerdir' [ 837.083075][T14966] overlayfs: missing 'lowerdir' [ 838.194655][T14976] overlayfs: missing 'lowerdir' [ 838.391513][T14980] overlayfs: missing 'lowerdir' [ 839.869501][T15001] overlayfs: missing 'lowerdir' [ 840.917507][T15010] overlayfs: missing 'lowerdir' [ 841.934723][T15025] overlayfs: missing 'lowerdir' [ 843.220650][T15045] overlayfs: missing 'lowerdir' [ 843.730844][T15049] overlayfs: missing 'lowerdir' [ 844.486713][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 844.497040][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 844.510172][T15053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 844.689668][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1745'. [ 845.884541][T15072] overlayfs: missing 'lowerdir' [ 847.471932][T15089] overlayfs: missing 'lowerdir' [ 847.484084][T15079] overlayfs: missing 'lowerdir' [ 848.405592][T15105] overlayfs: missing 'lowerdir' [ 850.510038][T15129] loop6: detected capacity change from 0 to 2048 [ 850.854763][T15129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 852.175452][T15141] overlayfs: missing 'lowerdir' [ 852.960352][T15158] overlayfs: missing 'lowerdir' [ 854.482966][T15171] loop6: detected capacity change from 0 to 16 [ 854.593719][T15180] overlayfs: missing 'lowerdir' [ 854.954953][T15171] erofs: (device loop6): mounted with root inode @ nid 36. [ 854.998184][T15171] syz.6.1766: attempt to access beyond end of device [ 854.998184][T15171] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 855.222067][T15171] syz.6.1766: attempt to access beyond end of device [ 855.222067][T15171] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 855.236646][T15171] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 855.316577][ T28] audit: type=1800 audit(1774882948.663:56): pid=15171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1766" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 855.390094][T15171] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 855.402092][T15171] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 855.987544][ T787] IPVS: starting estimator thread 0... [ 856.822207][T15198] IPVS: using max 19 ests per chain, 45600 per kthread [ 858.274291][T15207] overlayfs: missing 'lowerdir' [ 859.246851][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1777'. [ 860.989111][T15253] overlayfs: missing 'lowerdir' [ 861.211547][T15248] (syz.4.1779,15248,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 861.220630][T15248] (syz.4.1779,15248,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 863.430449][T15274] bridge_slave_0: left allmulticast mode [ 863.436144][T15274] bridge_slave_0: left promiscuous mode [ 863.442295][T15274] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.463846][T15274] bridge_slave_1: left allmulticast mode [ 863.469688][T15274] bridge_slave_1: left promiscuous mode [ 863.475461][T15274] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.500703][T15274] bond0: (slave bond_slave_0): Releasing backup interface [ 863.531849][T15274] bond0: (slave bond_slave_1): Releasing backup interface [ 863.994267][T15274] team0: Port device team_slave_0 removed [ 864.035371][T15274] team0: Port device team_slave_1 removed [ 864.042209][T15274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.049721][T15274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.079996][T15274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.087478][T15274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.676719][T15307] loop6: detected capacity change from 0 to 2048 [ 866.695533][T15307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 869.268722][T11810] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 869.937770][T15330] loop6: detected capacity change from 0 to 164 [ 870.559323][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.578231][T15330] Unable to read rock-ridge attributes [ 870.615158][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.049498][T15337] 9pnet_fd: Insufficient options for proto=fd [ 875.932520][T15360] loop6: detected capacity change from 0 to 64 [ 878.616986][T15376] overlayfs: missing 'lowerdir' [ 880.555755][T15391] loop4: detected capacity change from 0 to 64 [ 881.862419][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'. [ 881.871371][T15387] netlink: 'syz.0.1813': attribute type 30 has an invalid length. [ 881.882999][T15387] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.892314][T15387] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.901096][T15387] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.910563][T15387] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.775094][T15407] input: syz0 as /devices/virtual/input/input13 [ 885.988609][T15412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.790036][T15424] xt_l2tp: unknown flags: 10 [ 888.800077][ T28] audit: type=1326 audit(1774882981.793:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb659c819 code=0x7ffc0000 [ 888.868197][ T28] audit: type=1326 audit(1774882981.793:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb659c819 code=0x7ffc0000 [ 888.901551][ T28] audit: type=1326 audit(1774882981.793:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fecb659c819 code=0x7ffc0000 [ 889.159127][ T28] audit: type=1326 audit(1774882981.793:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb659c819 code=0x7ffc0000 [ 890.179245][ T28] audit: type=1326 audit(1774882981.793:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15423 comm="syz.4.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb659c819 code=0x7ffc0000 [ 893.244130][T15474] loop6: detected capacity change from 0 to 1764 [ 893.524620][T15476] loop4: detected capacity change from 0 to 2048 [ 893.590075][T15476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 895.492445][T15190] blk_print_req_error: 48 callbacks suppressed [ 895.492462][T15190] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 895.525863][ T28] audit: type=1800 audit(1774882988.933:62): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1826" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 896.565477][T15496] loop6: detected capacity change from 0 to 256 [ 896.703126][T15496] FAT-fs (loop6): Directory bread(block 64) failed [ 896.728648][T15496] FAT-fs (loop6): Directory bread(block 65) failed [ 896.774029][T15496] FAT-fs (loop6): Directory bread(block 66) failed [ 896.789814][T15496] FAT-fs (loop6): Directory bread(block 67) failed [ 896.814764][T15496] FAT-fs (loop6): Directory bread(block 68) failed [ 896.823114][T15496] FAT-fs (loop6): Directory bread(block 69) failed [ 896.836638][T15496] FAT-fs (loop6): Directory bread(block 70) failed [ 896.853243][T15496] FAT-fs (loop6): Directory bread(block 71) failed [ 896.862233][T15496] FAT-fs (loop6): Directory bread(block 72) failed [ 896.872258][T15496] FAT-fs (loop6): Directory bread(block 73) failed [ 900.766811][T15525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1840'. [ 904.332268][T15524] No such timeout policy "syz1" [ 904.347170][ T27] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 904.986022][T15535] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 905.484180][T15533] Device name cannot be null; rc = [-22] [ 906.770670][T15544] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 910.918679][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 911.929444][T15581] overlayfs: missing 'lowerdir' [ 912.080729][T11810] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 912.089876][T11810] Bluetooth: hci2: Injecting HCI hardware error event [ 912.105119][T11810] Bluetooth: hci2: hardware error 0x00 [ 912.951185][T15596] No such timeout policy "syz1" [ 915.003503][T11810] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 915.578768][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 915.798213][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 915.865404][T15608] SET target dimension over the limit! [ 915.882365][T15617] netlink: zone id is out of range [ 916.102888][T15619] loop6: detected capacity change from 0 to 1024 [ 916.886733][T15619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.009401][T15628] mmap: syz.3.1863 (15628) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 919.357415][T12015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.431840][T15640] overlayfs: missing 'lowerdir' [ 921.358626][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1865'. [ 923.696108][T15656] overlayfs: missing 'lowerdir' [ 925.168941][T15672] overlayfs: missing 'lowerdir' [ 929.994760][T15713] overlayfs: missing 'lowerdir' [ 930.502601][T15720] overlayfs: missing 'lowerdir' [ 931.475690][T15728] fuse: Bad value for 'fd' [ 931.852323][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.926517][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.400701][T15733] lo speed is unknown, defaulting to 1000 [ 932.406815][T15733] lo speed is unknown, defaulting to 1000 [ 932.415116][T15733] lo speed is unknown, defaulting to 1000 [ 932.427376][T15733] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 932.440232][T15733] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 932.625108][T15733] lo speed is unknown, defaulting to 1000 [ 932.633499][T15733] lo speed is unknown, defaulting to 1000 [ 932.640036][T15733] lo speed is unknown, defaulting to 1000 [ 932.646563][T15733] lo speed is unknown, defaulting to 1000 [ 933.274920][T15734] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 937.934355][T15771] overlayfs: missing 'lowerdir' [ 942.335898][T15826] overlayfs: missing 'lowerdir' [ 944.669283][T15857] overlayfs: missing 'lowerdir' [ 946.239328][T15874] overlayfs: missing 'lowerdir' [ 948.511016][T15900] loop4: detected capacity change from 0 to 136 [ 949.029909][T15904] loop4: detected capacity change from 0 to 1024 [ 949.217630][T15904] hfsplus: invalid btree extent records (0 size) [ 949.224926][T15904] hfsplus: failed to load extents file [ 949.510420][T15910] comedi comedi0: Minor 3 could not be opened [ 954.832838][T15967] overlayfs: missing 'lowerdir' [ 960.017356][T16023] overlayfs: missing 'lowerdir' [ 962.351767][T16049] overlayfs: missing 'lowerdir' [ 963.038064][T16057] loop6: detected capacity change from 0 to 136 [ 963.543040][T16063] overlayfs: missing 'lowerdir' [ 964.062459][T15735] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 965.037365][T16075] loop6: detected capacity change from 0 to 1024 [ 965.049649][T16075] hfsplus: invalid btree extent records (0 size) [ 965.056088][T16075] hfsplus: failed to load extents file [ 966.198953][T16088] overlayfs: missing 'lowerdir' [ 966.926971][T16101] syzkaller0: entered promiscuous mode [ 966.936769][T16101] syzkaller0: entered allmulticast mode [ 968.389469][T16114] overlayfs: missing 'lowerdir' [ 969.410086][T16127] overlayfs: missing 'lowerdir' [ 972.929204][T16162] syzkaller0: entered promiscuous mode [ 972.946136][T16162] syzkaller0: entered allmulticast mode [ 974.433853][T16184] overlayfs: missing 'lowerdir' [ 977.938650][T12431] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 978.302602][T12431] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.333272][T12431] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 978.343487][T12431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.358467][T12431] usb 7-1: config 0 descriptor?? [ 978.368876][T12431] usb 7-1: bad CDC descriptors [ 978.381549][T12431] usb 7-1: bad CDC descriptors [ 980.452649][ T1662] usb 7-1: USB disconnect, device number 4 [ 981.000353][T16263] overlayfs: missing 'lowerdir' [ 984.165189][T16288] overlayfs: missing 'lowerdir' [ 984.180868][T16287] No such timeout policy "syz1" [ 986.239261][T16311] overlayfs: missing 'lowerdir' [ 988.541417][T16320] syzkaller0: entered promiscuous mode [ 988.617963][T16335] overlayfs: missing 'lowerdir' [ 988.644413][T16320] syzkaller0: entered allmulticast mode [ 989.793535][T12431] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 990.125718][T12431] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.136374][T12431] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 990.146083][T12431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.158199][T12431] usb 5-1: config 0 descriptor?? [ 990.182975][T12431] usb 5-1: bad CDC descriptors [ 990.203366][T12431] usb 5-1: bad CDC descriptors [ 992.140725][T12400] usb 5-1: USB disconnect, device number 17 [ 993.300243][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.306677][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.393930][T16369] overlayfs: missing 'lowerdir' [ 993.683942][T12400] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 993.900059][T12400] usb 5-1: Using ep0 maxpacket: 16 [ 993.931061][T12400] usb 5-1: config index 0 descriptor too short (expected 19735, got 52) [ 993.940442][T12400] usb 5-1: config 28 has too many interfaces: 87, using maximum allowed: 32 [ 993.964492][T12400] usb 5-1: config 28 has an invalid descriptor of length 216, skipping remainder of the config [ 993.975423][T12400] usb 5-1: config 28 has 0 interfaces, different from the descriptor's value: 87 [ 994.027248][T12400] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 994.048208][T12400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.057192][T12400] usb 5-1: Product: syz [ 994.061976][T12400] usb 5-1: Manufacturer: syz [ 994.066626][T12400] usb 5-1: SerialNumber: syz [ 995.450355][T12400] usb 5-1: USB disconnect, device number 18 [ 996.158947][T12400] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 996.613085][T12400] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.623483][T12400] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 996.632825][T12400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.652823][T12400] usb 5-1: config 0 descriptor?? [ 996.671782][T12400] usb 5-1: bad CDC descriptors [ 996.678672][T12400] usb 5-1: bad CDC descriptors [ 998.579947][T15681] usb 5-1: USB disconnect, device number 19 [ 998.998950][T12304] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 999.221015][T12304] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.273029][T12304] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 999.284162][T12304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.299822][T12304] usb 7-1: config 0 descriptor?? [ 999.333991][T12304] usb 7-1: bad CDC descriptors [ 999.355241][T12304] usb 7-1: bad CDC descriptors [ 1000.249836][T16435] overlayfs: missing 'lowerdir' [ 1000.255591][T12304] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1000.633625][T12304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.723201][T12304] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1000.733259][T12304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.749304][T12304] usb 5-1: config 0 descriptor?? [ 1000.770670][T12304] usb 5-1: bad CDC descriptors [ 1000.785807][T12304] usb 5-1: bad CDC descriptors [ 1001.437255][T12304] usb 7-1: USB disconnect, device number 5 [ 1002.179010][T15681] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1002.360531][T15681] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.372134][T15681] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1002.381748][T15681] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.406711][T15681] usb 7-1: config 0 descriptor?? [ 1002.422628][T15681] usb 7-1: bad CDC descriptors [ 1002.436905][T12304] usb 5-1: USB disconnect, device number 20 [ 1002.486463][T15681] usb 7-1: bad CDC descriptors [ 1002.826662][T16485] overlayfs: missing 'lowerdir' [ 1004.488566][T15681] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1004.547386][T16495] fuse: Unknown parameter '00000000000000000000' [ 1005.329728][ T23] usb 7-1: USB disconnect, device number 6 [ 1005.341923][T16498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1005.350426][T15681] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.380446][T15681] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1005.392739][T15681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.612817][T15681] usb 5-1: config 0 descriptor?? [ 1005.649047][T15681] usb 5-1: bad CDC descriptors [ 1005.753155][T15681] usb 5-1: bad CDC descriptors [ 1005.782022][T16511] overlayfs: missing 'lowerdir' [ 1006.304633][T16501] syzkaller0: entered promiscuous mode [ 1006.323275][T16501] syzkaller0: entered allmulticast mode [ 1007.338568][T12304] usb 5-1: USB disconnect, device number 21 [ 1012.328511][T16560] overlayfs: missing 'lowerdir' [ 1015.190737][T16574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.198137][T16574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.206175][T16574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.213402][T16574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.783891][T16588] overlayfs: missing 'lowerdir' [ 1016.793121][T16574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1016.878896][T12431] lo speed is unknown, defaulting to 1000 [ 1022.580057][T16630] overlayfs: missing 'lowerdir' [ 1023.155912][T12431] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1023.258202][T16636] syzkaller0: entered promiscuous mode [ 1023.263967][T16636] syzkaller0: entered allmulticast mode [ 1023.372106][T12431] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.476244][T12431] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1023.502613][T12431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.513589][T12431] usb 5-1: config 0 descriptor?? [ 1024.271827][T12431] usb 5-1: can't set config #0, error -71 [ 1024.306509][T12431] usb 5-1: USB disconnect, device number 22 [ 1026.220232][T16652] overlayfs: missing 'lowerdir' [ 1027.655477][T16664] autofs4:pid:16664:autofs_fill_super: called with bogus options [ 1031.595702][T16681] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1033.538661][T16701] overlayfs: missing 'lowerdir' [ 1040.771443][T16751] loop6: detected capacity change from 0 to 1024 [ 1040.917095][T16751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1040.985149][T16756] overlayfs: missing 'lowerdir' [ 1041.663146][T16751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.849028][ T28] audit: type=1800 audit(1774884671.263:63): pid=16771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2089" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1043.451347][T16777] overlayfs: failed to clone upperpath [ 1044.324832][T12015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.282023][T16812] overlayfs: missing 'lowerdir' [ 1047.216409][T16819] overlayfs: missing 'lowerdir' [ 1050.149217][T16849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1050.766158][T16848] loop6: detected capacity change from 0 to 32768 [ 1050.805648][T16848] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1052.756367][T16624] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1054.152771][T16881] overlayfs: missing 'lowerdir' [ 1054.726501][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.733194][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.275232][T16921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.538532][T16946] overlayfs: missing 'lowerdir' [ 1065.275348][T16968] syzkaller0: entered promiscuous mode [ 1065.283562][T16968] syzkaller0: entered allmulticast mode [ 1067.417024][T16985] No such timeout policy "syz1" [ 1070.186573][T17001] loop4: detected capacity change from 0 to 32768 [ 1074.009591][T17017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.127621][T15593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1079.170422][T15593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1079.180691][T15593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1079.188943][T15593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1079.212940][T15593] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1079.233939][T15593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1079.650246][T17042] No such timeout policy "syz1" [ 1080.958823][T11810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1080.985903][T11810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1080.995287][T11810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1081.011171][T11810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1081.021627][T11810] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1081.029551][T11810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1081.293866][T15593] Bluetooth: hci3: command tx timeout [ 1082.093670][T17018] bridge0: port 3(syz_tun) entered disabled state [ 1082.127813][T17018] syz_tun (unregistering): left allmulticast mode [ 1082.134345][T17018] syz_tun (unregistering): left promiscuous mode [ 1082.140761][T17018] bridge0: port 3(syz_tun) entered disabled state [ 1082.322174][T17035] lo speed is unknown, defaulting to 1000 [ 1082.458936][T17057] loop4: detected capacity change from 0 to 32768 [ 1082.505372][T17057] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1083.122713][T15593] Bluetooth: hci5: command tx timeout [ 1083.396556][T11810] Bluetooth: hci3: command tx timeout [ 1083.456233][T17049] lo speed is unknown, defaulting to 1000 [ 1083.683816][T17036] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1084.292288][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.128388][T17082] overlayfs: missing 'lowerdir' [ 1085.622559][T15593] Bluetooth: hci5: command tx timeout [ 1085.628034][T15593] Bluetooth: hci3: command tx timeout [ 1085.643151][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.949187][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.426839][T17091] overlayfs: missing 'lowerdir' [ 1086.534849][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.678453][T15593] Bluetooth: hci5: command tx timeout [ 1087.708462][T11810] Bluetooth: hci3: command tx timeout [ 1087.719593][T17035] chnl_net:caif_netlink_parms(): no params data found [ 1088.219350][T17111] overlayfs: missing 'lowerdir' [ 1088.793219][T17098] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1088.874335][T17049] chnl_net:caif_netlink_parms(): no params data found [ 1089.086918][T17035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.108533][T17035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.129078][T17035] bridge_slave_0: entered allmulticast mode [ 1089.139850][T17035] bridge_slave_0: entered promiscuous mode [ 1089.165951][T17035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.194688][T17035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.221670][T17035] bridge_slave_1: entered allmulticast mode [ 1089.275485][T17035] bridge_slave_1: entered promiscuous mode [ 1089.768868][T11810] Bluetooth: hci5: command tx timeout [ 1090.875241][T17035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.040804][T17035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.185205][ T11] tipc: Left network mode [ 1091.192222][T17049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.255040][T17049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.352104][T17049] bridge_slave_0: entered allmulticast mode [ 1091.359110][T17049] bridge_slave_0: entered promiscuous mode [ 1091.641843][T17035] team0: Port device team_slave_0 added [ 1091.802175][T17035] team0: Port device team_slave_1 added [ 1092.249371][T17049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.256586][T17049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.284448][T17049] bridge_slave_1: entered allmulticast mode [ 1092.299744][T17049] bridge_slave_1: entered promiscuous mode [ 1092.791192][T17049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.846851][T17035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.856940][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.988924][T17035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.125174][T17049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.149280][T17035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.178869][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.228972][T17035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.589458][T17049] team0: Port device team_slave_0 added [ 1093.631470][T17049] team0: Port device team_slave_1 added [ 1094.012056][T17035] hsr_slave_0: entered promiscuous mode [ 1094.059045][T17035] hsr_slave_1: entered promiscuous mode [ 1094.068686][T17035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.098866][T17035] Cannot create hsr debugfs directory [ 1094.224400][T17049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.239365][T17049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.328369][T17049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.403966][T17049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.411103][T17049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.437577][T17049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.541745][T17049] hsr_slave_0: entered promiscuous mode [ 1094.548858][T17049] hsr_slave_1: entered promiscuous mode [ 1094.555261][T17049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.563638][T17049] Cannot create hsr debugfs directory [ 1094.888727][ T11] hsr_slave_0: left promiscuous mode [ 1094.910770][ T11] hsr_slave_1: left promiscuous mode [ 1094.916958][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.925261][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.933975][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.942506][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.954309][ T11] batman_adv: batadv0: Interface deactivated: macsec1 [ 1094.961830][ T11] batman_adv: batadv0: Removing interface: macsec1 [ 1094.970012][ T11] bridge_slave_1: left allmulticast mode [ 1094.975724][ T11] bridge_slave_1: left promiscuous mode [ 1094.982190][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.991983][ T11] bridge_slave_0: left allmulticast mode [ 1094.997651][ T11] bridge_slave_0: left promiscuous mode [ 1095.005462][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.029566][ T11] veth1_macvtap: left promiscuous mode [ 1095.035147][ T11] veth0_macvtap: left promiscuous mode [ 1095.043309][ T11] veth1_vlan: left promiscuous mode [ 1095.049135][ T11] veth0_vlan: left promiscuous mode [ 1095.965620][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1096.027287][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1096.095017][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.161088][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.641493][ T11] bond0 (unregistering): Released all slaves [ 1096.896006][T17035] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1096.952828][T17035] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1097.015889][T17035] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1097.053123][T17035] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1097.260778][T17049] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1097.279176][T17049] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1097.295735][T17049] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1097.317442][T17049] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1097.439948][T17035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.492019][T17035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.504581][T17049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.520151][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.527286][T12125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.544846][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.552141][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.586354][T17049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.616952][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.624089][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.670346][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.677510][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.092513][T17035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.155681][T17049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.658071][ T11] IPVS: stop unused estimator thread 0... [ 1098.670281][T17035] veth0_vlan: entered promiscuous mode [ 1098.684367][T17035] veth1_vlan: entered promiscuous mode [ 1098.764057][T17049] veth0_vlan: entered promiscuous mode [ 1098.787924][T17035] veth0_macvtap: entered promiscuous mode [ 1098.845806][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.875922][T17049] veth1_vlan: entered promiscuous mode [ 1098.887598][T17035] veth1_macvtap: entered promiscuous mode [ 1098.954878][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.982939][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.994944][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.005137][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.016172][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.034620][T17035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.091602][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.126364][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.152929][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.167573][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.185646][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.200642][T17035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.222009][T17049] veth0_macvtap: entered promiscuous mode [ 1099.246711][T17035] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.268536][T17035] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.277281][T17035] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.301079][T17035] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.342257][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.362296][T17049] veth1_macvtap: entered promiscuous mode [ 1099.460403][T17049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.492026][T17049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.502364][T17049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.513468][T17049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.525708][T17049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.536383][T17049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.547346][T17049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.589467][T17049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.604891][T17049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.616925][T17049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.638492][T17049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.658427][T17049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.670068][T17049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.682080][T17049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.726023][T17049] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.736023][T17049] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.744999][T17049] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.753982][T17049] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.947894][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.961894][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.018781][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.026819][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.151744][T12125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.185616][T12125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.188959][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.206077][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.432488][T17236] loop4: detected capacity change from 0 to 256 [ 1100.630638][T17239] fuse: Bad value for 'fd' [ 1100.763245][T17244] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1102.207775][T17236] FAT-fs (loop4): Directory bread(block 64) failed [ 1103.212431][T17250] loop8: detected capacity change from 0 to 32768 [ 1104.498559][T17236] FAT-fs (loop4): Directory bread(block 65) failed [ 1104.505349][T17236] FAT-fs (loop4): Directory bread(block 66) failed [ 1104.590603][T17236] FAT-fs (loop4): Directory bread(block 67) failed [ 1104.616391][T17236] FAT-fs (loop4): Directory bread(block 68) failed [ 1104.674050][T17236] FAT-fs (loop4): Directory bread(block 69) failed [ 1104.682820][T17236] FAT-fs (loop4): Directory bread(block 70) failed [ 1104.700860][T17236] FAT-fs (loop4): Directory bread(block 71) failed [ 1104.729717][T17236] FAT-fs (loop4): Directory bread(block 72) failed [ 1105.956218][T17250] read_mapping_page failed! [ 1105.995865][T17236] FAT-fs (loop4): Directory bread(block 73) failed [ 1106.014861][T17261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1106.168185][T17250] jfs_mount: Failed to read FILESYSTEM_I [ 1106.214770][T17250] Mount JFS Failure: -5 [ 1106.257277][T17250] jfs_mount failed w/return code = -5 [ 1106.698738][T17274] overlayfs: missing 'lowerdir' [ 1108.012621][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2171'. [ 1108.506069][T17292] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1114.334946][T17324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1114.352553][T17326] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2177'. [ 1116.543655][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.560851][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.491571][T17363] overlayfs: missing 'lowerdir' [ 1118.414486][T17366] loop2: detected capacity change from 0 to 7 [ 1119.166178][T17366] Dev loop2: unable to read RDB block 7 [ 1119.173022][T17366] loop2: unable to read partition table [ 1119.178973][T17366] loop2: partition table beyond EOD, truncated [ 1119.185133][T17366] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1119.708604][ T11] hsr_slave_0: left promiscuous mode [ 1119.858603][ T11] hsr_slave_1: left promiscuous mode [ 1119.887573][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.898538][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.102989][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.418387][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.488805][ T11] bridge_slave_1: left allmulticast mode [ 1120.498382][ T11] bridge_slave_1: left promiscuous mode [ 1120.516568][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.603140][ T11] bridge_slave_0: left allmulticast mode [ 1120.632655][ T11] bridge_slave_0: left promiscuous mode [ 1120.653259][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.062500][ T11] veth1_macvtap: left promiscuous mode [ 1121.068090][ T11] veth0_macvtap: left promiscuous mode [ 1121.092678][ T11] veth1_vlan: left promiscuous mode [ 1121.178507][ T11] veth0_vlan: left promiscuous mode [ 1122.175048][T17393] overlayfs: missing 'lowerdir' [ 1124.173247][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1124.236456][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1124.296839][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.370728][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.965471][ T11] bond0 (unregistering): Released all slaves [ 1125.219013][T17399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1125.785265][T17414] overlayfs: missing 'lowerdir' [ 1130.100526][T17441] overlayfs: missing 'lowerdir' [ 1131.851730][T17456] overlayfs: missing 'lowerdir' [ 1132.718218][T17460] loop2: detected capacity change from 0 to 7 [ 1133.054255][T17460] Dev loop2: unable to read RDB block 7 [ 1133.059914][T17460] loop2: unable to read partition table [ 1133.065678][T17460] loop2: partition table beyond EOD, truncated [ 1133.071997][T17460] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1135.636718][T17476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1136.006552][T17485] overlayfs: missing 'lowerdir' [ 1139.298599][T17519] overlayfs: missing 'lowerdir' [ 1145.937331][T17574] overlayfs: missing 'lowerdir' [ 1147.880924][T17589] overlayfs: missing 'lowerdir' [ 1149.133471][T17605] loop8: detected capacity change from 0 to 32768 [ 1149.144134][T17605] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.2225 (17605) [ 1149.180807][T17605] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1149.191031][T17605] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1149.199778][T17605] BTRFS info (device loop8): enabling disk space caching [ 1149.206979][T17605] BTRFS info (device loop8): force clearing of disk cache [ 1149.214164][T17605] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1149.223608][T17605] BTRFS info (device loop8): use zstd compression, level 3 [ 1149.230877][T17605] BTRFS info (device loop8): disk space caching is enabled [ 1149.390076][T17605] BTRFS info (device loop8): enabling ssd optimizations [ 1149.397167][T17605] BTRFS info (device loop8): auto enabling async discard [ 1149.422475][T17605] BTRFS info (device loop8): rebuilding free space tree [ 1149.457026][T17605] BTRFS info (device loop8): disabling free space tree [ 1149.464051][T17605] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1149.473858][T17605] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1149.902873][ T28] audit: type=1804 audit(1774885035.292:64): pid=17634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2225" name="/newroot/15/file1/bus" dev="loop8" ino=263 res=1 errno=0 [ 1150.256796][T17049] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1154.119598][T17674] overlayfs: missing 'lowerdir' [ 1155.213033][T17689] No such timeout policy "syz1" [ 1156.728585][T17695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1158.597111][T17720] syzkaller0: entered promiscuous mode [ 1158.610093][T17720] syzkaller0: entered allmulticast mode [ 1160.088228][T17734] overlayfs: missing 'lowerdir' [ 1161.924330][T17754] overlayfs: missing 'lowerdir' [ 1164.315208][T17768] loop7: detected capacity change from 0 to 32768 [ 1164.344367][T17768] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.2258 (17768) [ 1164.404896][T17768] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1164.417660][T17768] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1164.432950][T17768] BTRFS info (device loop7): enabling disk space caching [ 1164.442323][T17768] BTRFS info (device loop7): force clearing of disk cache [ 1164.450717][T17768] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1164.464830][T17768] BTRFS info (device loop7): use zstd compression, level 3 [ 1164.473918][T17768] BTRFS info (device loop7): disk space caching is enabled [ 1165.828687][T17768] BTRFS info (device loop7): enabling ssd optimizations [ 1165.835694][T17768] BTRFS info (device loop7): auto enabling async discard [ 1165.845194][T17768] BTRFS info (device loop7): rebuilding free space tree [ 1165.880785][T17768] BTRFS info (device loop7): disabling free space tree [ 1165.887751][T17768] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1165.897519][T17768] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1166.738216][ T28] audit: type=1804 audit(1774885052.132:65): pid=17803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2258" name="/newroot/20/file1/bus" dev="loop7" ino=263 res=1 errno=0 [ 1167.178763][T17035] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1171.191419][T17837] overlayfs: missing 'lowerdir' [ 1175.784776][T17861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2261'. [ 1175.992708][T17879] loop4: detected capacity change from 0 to 512 [ 1176.139437][T17879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1176.569053][T17879] EXT4-fs (loop4): 1 truncate cleaned up [ 1176.662887][T17879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.001532][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.013885][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.853109][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.882874][T17889] loop7: detected capacity change from 0 to 32768 [ 1181.209302][T17907] overlayfs: missing 'lowerdir' [ 1185.628801][T17945] 9pnet_fd: Insufficient options for proto=fd [ 1187.752640][T17956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1189.843580][T17982] loop8: detected capacity change from 0 to 512 [ 1191.049529][T17982] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1192.111391][T17982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.655955][T17049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.648599][T18004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1194.702880][T18012] loop4: detected capacity change from 0 to 512 [ 1194.728220][T18013] overlayfs: missing 'lowerdir' [ 1194.752004][T18012] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1194.787253][T18012] EXT4-fs (loop4): 1 truncate cleaned up [ 1195.520135][T18012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1196.404264][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.448588][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2292'. [ 1197.887012][T18031] overlayfs: missing 'lowerdir' [ 1197.994515][T18028] loop8: detected capacity change from 0 to 512 [ 1198.409925][T18028] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1199.404586][T18028] EXT4-fs: error -4 creating inode table initialization thread [ 1199.461527][T18028] EXT4-fs (loop8): mount failed [ 1201.095566][T18067] overlayfs: missing 'lowerdir' [ 1203.713036][T18086] overlayfs: missing 'lowerdir' [ 1204.220205][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 1205.702495][T18080] Bluetooth: hci3: command 0x0406 tx timeout [ 1205.717959][T18080] Bluetooth: hci5: command 0x0406 tx timeout [ 1206.094876][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 1207.470190][T18130] overlayfs: missing 'lowerdir' [ 1207.890587][T18133] overlayfs: missing 'lowerdir' [ 1210.647891][T18159] loop7: detected capacity change from 0 to 512 [ 1210.725296][T18165] 9pnet_fd: Insufficient options for proto=fd [ 1211.798759][T18159] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1211.868568][T18159] EXT4-fs (loop7): 1 truncate cleaned up [ 1211.874948][T18159] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.426071][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 1213.485237][T17035] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.000343][T18190] overlayfs: missing 'lowerdir' [ 1215.941403][T18202] overlayfs: missing 'lowerdir' [ 1216.635729][T18212] loop4: detected capacity change from 0 to 512 [ 1217.080670][T18212] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1218.491038][T18210] loop8: detected capacity change from 0 to 512 [ 1218.649093][T18212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.739200][T18210] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1218.877632][T18210] EXT4-fs (loop8): 1 truncate cleaned up [ 1218.896302][T18210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1219.007487][T18230] loop7: detected capacity change from 0 to 512 [ 1219.054937][T18230] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1220.229155][T18230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1220.701450][ T28] audit: type=1800 audit(1774885106.122:66): pid=18230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2334" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1220.901709][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.919376][T17035] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.920673][T17049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.076874][T18263] loop7: detected capacity change from 0 to 512 [ 1223.586527][T18263] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1223.733598][T18272] loop8: detected capacity change from 0 to 512 [ 1223.811689][T18272] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1223.824638][T18263] EXT4-fs (loop7): 1 truncate cleaned up [ 1223.832096][T18263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.430185][T17035] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.468954][T18272] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.939697][T17049] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.908344][T12304] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1227.916041][ T23] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1228.390460][T12304] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.408364][ T23] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.438475][T12304] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1228.449638][ T23] usb 9-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1228.462098][T12304] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.474303][ T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.625855][T12304] usb 8-1: config 0 descriptor?? [ 1228.644154][ T23] usb 9-1: config 0 descriptor?? [ 1229.028986][ T23] usb 9-1: bad CDC descriptors [ 1229.034049][T12304] usb 8-1: bad CDC descriptors [ 1229.077836][ T23] usb 9-1: bad CDC descriptors [ 1229.085796][T12304] usb 8-1: bad CDC descriptors [ 1230.419820][T12304] usb 9-1: USB disconnect, device number 2 [ 1231.938744][T16522] usb 8-1: USB disconnect, device number 2 [ 1233.443047][T18354] loop4: detected capacity change from 0 to 512 [ 1233.536550][T18362] loop7: detected capacity change from 0 to 512 [ 1234.528392][T18362] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1234.715227][T18354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1234.851635][T18362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1235.387013][ T28] audit: type=1800 audit(1774885120.802:67): pid=18362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2361" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1235.561379][T18354] EXT4-fs (loop4): 1 truncate cleaned up [ 1235.580519][T18354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.002136][T17035] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.817604][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.699989][T18386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1237.857413][T18392] loop7: detected capacity change from 0 to 512 [ 1237.866519][T18392] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1238.739676][T18392] EXT4-fs (loop7): 1 truncate cleaned up [ 1238.746755][T18392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1239.089749][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.096103][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.997144][T17035] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.945067][T18421] loop7: detected capacity change from 0 to 512 [ 1242.147286][T18421] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1242.491633][T15681] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1242.658082][T18424] loop4: detected capacity change from 0 to 512 [ 1242.829180][T15681] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.847742][T15681] usb 9-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1242.885879][T18421] EXT4-fs (loop7): 1 truncate cleaned up [ 1242.926774][T18424] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1242.938988][T15681] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.957304][T18421] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.009566][T15681] usb 9-1: config 0 descriptor?? [ 1243.045578][T18424] EXT4-fs (loop4): 1 truncate cleaned up [ 1243.051501][T15681] usb 9-1: bad CDC descriptors [ 1243.063685][T18424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.076932][T15681] usb 9-1: bad CDC descriptors [ 1243.900443][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.368482][T15681] usb 9-1: USB disconnect, device number 3 [ 1245.551700][T18453] loop4: detected capacity change from 0 to 512 [ 1245.579807][T18453] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1246.399844][T18453] EXT4-fs (loop4): 1 truncate cleaned up [ 1246.440845][T18453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.524864][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.868450][T18490] loop4: detected capacity change from 0 to 512 [ 1249.884311][T18490] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1249.979856][T18490] EXT4-fs (loop4): 1 truncate cleaned up [ 1249.999069][T18490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1250.309658][T17035] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.899722][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.859907][T16522] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1264.506210][T18610] ------------[ cut here ]------------ [ 1264.512998][T18610] WARNING: CPU: 0 PID: 18610 at security/landlock/fs.c:748 collect_domain_accesses+0x7b6/0x820 [ 1264.523679][T18610] Modules linked in: [ 1264.527631][T18610] CPU: 0 PID: 18610 Comm: syz.8.2412 Not tainted syzkaller #0 [ 1264.535219][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1264.545413][T18610] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 1264.551758][T18610] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 02 98 fd 31 ed eb dd e8 46 02 98 fd 0f 0b 40 b5 01 eb da e8 3a 02 98 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 1264.571610][T18610] RSP: 0018:ffffc9000be4fab0 EFLAGS: 00010287 [ 1264.577992][T18610] RAX: ffffffff83ef1de6 RBX: ffff8880748baeb0 RCX: 0000000000080000 [ 1264.586619][T18610] RDX: ffffc9001d80f000 RSI: 0000000000000511 RDI: 0000000000000512 [ 1264.594914][T18610] RBP: 1ffff1100508cdb5 R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 1264.603174][T18610] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: 0000000000000001 [ 1264.611409][T18610] R13: 0000000000000000 R14: ffff8880748baeb0 R15: 0000000000002004 [ 1264.619611][T18610] FS: 00007ff3dc59b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1264.628620][T18610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1264.635236][T18610] CR2: 0000001b2e514ff8 CR3: 000000004ad36000 CR4: 00000000003506f0 [ 1264.643640][T18610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1264.651992][T18610] DR3: 000000000e50000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1264.660150][T18610] Call Trace: [ 1264.663553][T18610] [ 1264.666530][T18610] current_check_refer_path+0x566/0xc50 [ 1264.672210][T18610] ? hook_file_truncate+0xc0/0xc0 [ 1264.677288][T18610] ? _raw_spin_unlock+0x28/0x40 [ 1264.682769][T18610] ? d_set_d_op+0x25f/0x370 [ 1264.687430][T18610] security_path_rename+0x16c/0x200 [ 1264.692878][T18610] do_renameat2+0x6be/0xce0 [ 1264.697402][T18610] ? __lock_acquire+0x7d40/0x7d40 [ 1264.702519][T18610] ? fsnotify_move+0x4e0/0x4e0 [ 1264.707299][T18610] ? __check_object_size+0x506/0xa20 [ 1264.712741][T18610] ? getname_flags+0x20a/0x500 [ 1264.717506][T18610] __x64_sys_renameat2+0xd2/0xe0 [ 1264.722527][T18610] do_syscall_64+0x55/0xa0 [ 1264.726986][T18610] ? clear_bhb_loop+0x40/0x90 [ 1264.731837][T18610] ? clear_bhb_loop+0x40/0x90 [ 1264.736527][T18610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1264.742620][T18610] RIP: 0033:0x7ff3db79c819 [ 1264.747124][T18610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.766923][T18610] RSP: 002b:00007ff3dc59b028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1264.775423][T18610] RAX: ffffffffffffffda RBX: 00007ff3dba15fa0 RCX: 00007ff3db79c819 [ 1264.783633][T18610] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 1264.791761][T18610] RBP: 00007ff3db832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1264.799830][T18610] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 1264.807904][T18610] R13: 00007ff3dba16038 R14: 00007ff3dba15fa0 R15: 00007fff6c43d328 [ 1264.815957][T18610] [ 1264.819124][T18610] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1264.826838][T18610] CPU: 0 PID: 18610 Comm: syz.8.2412 Not tainted syzkaller #0 [ 1264.834440][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1264.844661][T18610] Call Trace: [ 1264.848048][T18610] [ 1264.851001][T18610] dump_stack_lvl+0x18c/0x250 [ 1264.855676][T18610] ? show_regs_print_info+0x20/0x20 [ 1264.860865][T18610] ? load_image+0x400/0x400 [ 1264.865398][T18610] panic+0x2dc/0x730 [ 1264.869301][T18610] ? bpf_jit_dump+0xd0/0xd0 [ 1264.873949][T18610] __warn+0x2e0/0x470 [ 1264.878080][T18610] ? collect_domain_accesses+0x7b6/0x820 [ 1264.883815][T18610] ? collect_domain_accesses+0x7b6/0x820 [ 1264.889714][T18610] report_bug+0x2be/0x4f0 [ 1264.894064][T18610] ? collect_domain_accesses+0x7b6/0x820 [ 1264.899705][T18610] ? collect_domain_accesses+0x7b6/0x820 [ 1264.905535][T18610] ? collect_domain_accesses+0x7b8/0x820 [ 1264.911171][T18610] handle_bug+0xcf/0x120 [ 1264.915456][T18610] exc_invalid_op+0x1a/0x50 [ 1264.920081][T18610] asm_exc_invalid_op+0x1a/0x20 [ 1264.924954][T18610] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 1264.931223][T18610] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 02 98 fd 31 ed eb dd e8 46 02 98 fd 0f 0b 40 b5 01 eb da e8 3a 02 98 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 1264.950867][T18610] RSP: 0018:ffffc9000be4fab0 EFLAGS: 00010287 [ 1264.956934][T18610] RAX: ffffffff83ef1de6 RBX: ffff8880748baeb0 RCX: 0000000000080000 [ 1264.965002][T18610] RDX: ffffc9001d80f000 RSI: 0000000000000511 RDI: 0000000000000512 [ 1264.973594][T18610] RBP: 1ffff1100508cdb5 R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 1264.981657][T18610] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: 0000000000000001 [ 1264.990182][T18610] R13: 0000000000000000 R14: ffff8880748baeb0 R15: 0000000000002004 [ 1264.998270][T18610] ? collect_domain_accesses+0x7b6/0x820 [ 1265.004011][T18610] current_check_refer_path+0x566/0xc50 [ 1265.009863][T18610] ? hook_file_truncate+0xc0/0xc0 [ 1265.016131][T18610] ? _raw_spin_unlock+0x28/0x40 [ 1265.021373][T18610] ? d_set_d_op+0x25f/0x370 [ 1265.025906][T18610] security_path_rename+0x16c/0x200 [ 1265.031193][T18610] do_renameat2+0x6be/0xce0 [ 1265.035688][T18610] ? __lock_acquire+0x7d40/0x7d40 [ 1265.040716][T18610] ? fsnotify_move+0x4e0/0x4e0 [ 1265.045488][T18610] ? __check_object_size+0x506/0xa20 [ 1265.050786][T18610] ? getname_flags+0x20a/0x500 [ 1265.055631][T18610] __x64_sys_renameat2+0xd2/0xe0 [ 1265.060559][T18610] do_syscall_64+0x55/0xa0 [ 1265.064968][T18610] ? clear_bhb_loop+0x40/0x90 [ 1265.070212][T18610] ? clear_bhb_loop+0x40/0x90 [ 1265.075538][T18610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1265.081461][T18610] RIP: 0033:0x7ff3db79c819 [ 1265.085953][T18610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.105838][T18610] RSP: 002b:00007ff3dc59b028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1265.115182][T18610] RAX: ffffffffffffffda RBX: 00007ff3dba15fa0 RCX: 00007ff3db79c819 [ 1265.123171][T18610] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 1265.131248][T18610] RBP: 00007ff3db832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1265.139496][T18610] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 1265.148350][T18610] R13: 00007ff3dba16038 R14: 00007ff3dba15fa0 R15: 00007fff6c43d328 [ 1265.156350][T18610] [ 1265.159820][T18610] Kernel Offset: disabled [ 1265.164465][T18610] Rebooting in 86400 seconds..