last executing test programs: 12m22.69678195s ago: executing program 32 (id=90): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000640), &(0x7f00000004c0)=@tcp6=r0, 0x1}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 11m43.736975065s ago: executing program 33 (id=384): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) 11m25.735134455s ago: executing program 34 (id=514): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x3, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) 10m28.055463593s ago: executing program 35 (id=806): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) sendfile(r0, r0, 0x0, 0x201f01) 10m27.173895134s ago: executing program 36 (id=810): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 10m26.881976392s ago: executing program 37 (id=815): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000003c0), 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0) fallocate(r1, 0x20, 0x4000, 0x8000) timer_create(0x2, 0x0, &(0x7f0000044000)) 8m42.514510175s ago: executing program 38 (id=1520): socket(0xa, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff28, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) close(0x3) fcntl$dupfd(r0, 0x0, r0) 7m43.220033166s ago: executing program 0 (id=1990): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0xfffffffffffffd93, 0x800) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 7m42.99280207s ago: executing program 0 (id=1991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x3000, 0x8, 0xb, 0x3, 0xfd, 0x44, 0xd, 0x0, 0x2e, 0x17}, {0x40000, 0x2, 0x3, 0x6c, 0x40, 0x7, 0x7f, 0x15, 0x5, 0x6, 0x3}, {0x80a0000, 0x4000, 0xe, 0x3, 0x1, 0x9, 0x20, 0x60, 0x0, 0xa7, 0x8, 0x81}, {0x2000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xf8, 0x9e, 0x9, 0x6}, {0x4000, 0x3000, 0x10, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x70000, 0x4000, 0xc, 0xa0, 0xb1, 0x8, 0x0, 0xa4, 0x9, 0x13, 0x1, 0xf}, {0x8088000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x71}, {0x0, 0x5000, 0x9, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0x18002, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x5, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x60, 0x3]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) 7m42.556700485s ago: executing program 0 (id=1994): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000002010300000000000000000000000003140005800f0001006e657462696f732d6e73000008000c4000000004480001801400018008000100e0000001080002000a0101000600034000010000140001800800010000000000080002007f0000011400018008"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 7m42.3023924s ago: executing program 0 (id=1996): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') 7m41.720863374s ago: executing program 0 (id=2004): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000003e40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) 7m41.168718836s ago: executing program 0 (id=2009): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) clock_settime(0x1ed5d7403, &(0x7f0000000180)) 7m40.853242915s ago: executing program 39 (id=2009): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) clock_settime(0x1ed5d7403, &(0x7f0000000180)) 7m28.906247782s ago: executing program 5 (id=2126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 7m28.556625853s ago: executing program 5 (id=2130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x50}}, 0x4040000) 7m28.024819214s ago: executing program 5 (id=2137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) add_key(0x0, 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f", 0x54, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x7, 0x101, 0x8], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m27.692463543s ago: executing program 5 (id=2142): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0/file0\x00') 7m27.505173284s ago: executing program 5 (id=2146): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="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", @ANYRES16], 0xfe, 0x1518, &(0x7f00000022c0)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x147142, 0x0) truncate(&(0x7f0000000880)='./file1\x00', 0x111) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff) 7m26.72825979s ago: executing program 5 (id=2155): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5a476f3fc70229da}, 0xe845) shutdown(r1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r1) 7m26.406104188s ago: executing program 40 (id=2155): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5a476f3fc70229da}, 0xe845) shutdown(r1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r1) 6m43.194922961s ago: executing program 9 (id=2532): r0 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 6m41.695702539s ago: executing program 9 (id=2543): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}], 0x1}}], 0x1, 0x0) 6m41.516772749s ago: executing program 9 (id=2545): r0 = fanotify_init(0x4, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x1038, r1, 0x0) r2 = fanotify_init(0x10, 0x101000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x455, 0x8000008, r3, 0x0) fanotify_mark(r2, 0x7e, 0x800003a, r3, 0x0) 6m41.299227511s ago: executing program 9 (id=2547): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r0, &(0x7f0000000400)="05", 0x1, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x8, 0x6, @random="842c44acbc33"}, 0x14) 6m41.014457428s ago: executing program 9 (id=2551): timer_create(0x1, &(0x7f00000001c0)={0x0, 0x2, 0x2, @thr={&(0x7f0000000040)="5016795248b71ec4737906062eb9025925f0c641587704f8", 0x0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6m40.821542889s ago: executing program 9 (id=2553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6m25.660414705s ago: executing program 41 (id=2553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5m59.105963505s ago: executing program 4 (id=2840): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m58.67211178s ago: executing program 4 (id=2842): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) unshare(0x66020000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 5m58.036459487s ago: executing program 4 (id=2846): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5m57.691540677s ago: executing program 4 (id=2849): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 5m57.510963148s ago: executing program 4 (id=2851): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 5m55.947689339s ago: executing program 4 (id=2862): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000006c0)={0x3, 0xb}) open(0x0, 0x145142, 0x50) openat(0xffffffffffffff9c, 0x0, 0x42, 0xc2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 5m55.25160673s ago: executing program 42 (id=2862): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000006c0)={0x3, 0xb}) open(0x0, 0x145142, 0x50) openat(0xffffffffffffff9c, 0x0, 0x42, 0xc2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 5m36.470774997s ago: executing program 6 (id=2996): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)='\x00', 0x1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000240)=""/226, 0xe2) 5m36.172710034s ago: executing program 6 (id=2999): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 5m35.712338601s ago: executing program 6 (id=3002): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x8800, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32], 0x3, 0x376, &(0x7f0000000700)="$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") syz_emit_ethernet(0xa56, &(0x7f0000000800)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090e86dd600019580a203afffe800000000000000000"], 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 5m35.091554797s ago: executing program 6 (id=3005): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020) 5m34.284769784s ago: executing program 6 (id=3011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x20004) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 5m33.245648925s ago: executing program 6 (id=3019): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) read$FUSE(r0, &(0x7f0000001340)={0x2020}, 0x2020) 5m32.755920213s ago: executing program 43 (id=3019): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) read$FUSE(r0, &(0x7f0000001340)={0x2020}, 0x2020) 9.961119652s ago: executing program 1 (id=5252): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 8.462072479s ago: executing program 1 (id=5259): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r2, &(0x7f00000046c0)={0x2020}, 0x2020) 5.100840334s ago: executing program 1 (id=5288): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_complete(r1) 4.244678594s ago: executing program 8 (id=5298): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) 4.240496474s ago: executing program 7 (id=5299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003e40)=@gcm_256={{0x303}, '\x00\x00\x00\x005\v\x00', "0fea4b232dd8630d1c5a99a543add8c178d983f83b86cdbfe0fe08f2ccff35ed", "3fa32814", "9519b45c8e046b8b"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 4.176654118s ago: executing program 3 (id=5300): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x115) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0xfe6d, 0x5, 0x0, {0x0, 0x4, 0xd, 0x9}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3.877538405s ago: executing program 3 (id=5302): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") mount$overlay(0x0, 0x0, 0x0, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') read(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3a0700b, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000f00)='./file1\x00') 3.766702522s ago: executing program 2 (id=5303): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) 3.576825333s ago: executing program 1 (id=5304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="c9aaa552", 0x4}], 0x1}], 0x1, 0x40800) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000004, 0x0, 0x0) 3.486100578s ago: executing program 3 (id=5305): bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) socket$kcm(0x2, 0x2, 0x73) 3.416730102s ago: executing program 2 (id=5306): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x2, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) 3.409259482s ago: executing program 7 (id=5307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 3.143385298s ago: executing program 2 (id=5308): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r3}, 0x38) 1.966368976s ago: executing program 2 (id=5309): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/4096, 0x9005) 1.936316138s ago: executing program 8 (id=5310): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rpc\x00') getdents64(r0, &(0x7f0000000140)=""/117, 0x75) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) 1.841174153s ago: executing program 7 (id=5311): r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) fsmount(r0, 0x0, 0x19) 1.740755549s ago: executing program 1 (id=5312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) 1.684625752s ago: executing program 8 (id=5313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000009, 0x7fffffff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x3], 0xffff1000, 0x8340}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.663087384s ago: executing program 2 (id=5314): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x806) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x7fc4, 0x4) 1.456776165s ago: executing program 8 (id=5315): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x97) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="204405"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = open(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x40081271, 0x3) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0xf, @string={0xf, 0x3, "a52ff819f2949e3c42df73e759"}}, &(0x7f0000000300)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) 1.407432298s ago: executing program 1 (id=5316): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1.295489725s ago: executing program 7 (id=5317): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 1.225996269s ago: executing program 2 (id=5318): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 1.073977008s ago: executing program 3 (id=5319): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat$dir(0xffffff9c, &(0x7f0000000040)='./file1\x00', 0x4101, 0x1a1) 732.678087ms ago: executing program 8 (id=5320): sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 664.653001ms ago: executing program 3 (id=5321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) sendto$inet6(r1, 0x0, 0x0, 0x24040054, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 556.231108ms ago: executing program 7 (id=5322): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r2 = dup(r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x202, 0xc0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) statfs(&(0x7f0000000140)='./file0\x00', 0x0) 464.737333ms ago: executing program 8 (id=5323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 108.697413ms ago: executing program 7 (id=5324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvfrom(r0, 0x0, 0x0, 0x40000103, 0x0, 0x0) shutdown(r0, 0x0) 0s ago: executing program 3 (id=5325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getitimer(0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): ttributes in process `syz.1.2880'. [ 477.966180][T14945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.983276][T14981] overlayfs: failed to clone upperpath [ 478.044764][T14945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.173857][T14945] team0: Port device team_slave_0 added [ 478.204218][T14945] team0: Port device team_slave_1 added [ 478.262457][T14945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.286830][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.359645][T14945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.397744][T14945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.430516][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.543153][T14945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.577045][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 478.755232][T14945] device hsr_slave_0 entered promiscuous mode [ 478.785699][T14945] device hsr_slave_1 entered promiscuous mode [ 478.804669][T14945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.852011][T14945] Cannot create hsr debugfs directory [ 480.668071][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 480.784745][T15053] loop3: detected capacity change from 0 to 512 [ 480.868793][T15053] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 481.054971][T14284] EXT4-fs (loop3): unmounting filesystem. [ 481.974970][T15076] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2906'. [ 482.130411][T14945] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 482.204588][T14945] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 482.228166][T14945] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 482.263461][T14945] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 482.317108][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2908'. [ 482.626976][T14945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.685102][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.737199][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 482.739118][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.800514][T14945] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.827768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.869400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.917193][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.924335][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.973599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 483.021457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 483.053474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 483.101374][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.108566][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.141146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 483.205148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 483.304666][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 483.350380][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 483.376516][T15117] overlayfs: statfs failed on './file0' [ 483.395269][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 483.477280][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 483.489568][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 483.513102][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 483.562191][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.584509][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 483.657509][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 483.752466][T14945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 484.457931][T15143] device syzkaller1 entered promiscuous mode [ 484.817165][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 484.849784][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 484.900282][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 484.931453][T14945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.728748][T15181] team0: No ports can be present during mode change [ 486.660595][T15199] overlayfs: failed to clone upperpath [ 487.086821][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 487.118442][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 487.248606][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 487.257825][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 487.287895][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 487.324529][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 487.345778][T15213] loop3: detected capacity change from 0 to 512 [ 487.358378][T14945] device veth0_vlan entered promiscuous mode [ 487.409010][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2942'. [ 487.425763][T15213] EXT4-fs (loop3): Test dummy encryption mode enabled [ 487.447992][T15213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 487.494536][T15213] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2944: bad orphan inode 131083 [ 487.560140][T15213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 487.662883][T14945] device veth1_vlan entered promiscuous mode [ 487.726384][T14284] EXT4-fs (loop3): unmounting filesystem. [ 487.739963][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 487.755542][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 487.790944][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 487.838010][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 487.892742][T14945] device veth0_macvtap entered promiscuous mode [ 487.923963][T14945] device veth1_macvtap entered promiscuous mode [ 487.977279][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.010777][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.032101][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.053866][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.074962][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.116704][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.163656][T15223] loop3: detected capacity change from 0 to 16 [ 488.173950][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.188466][T15223] erofs: (device loop3): mounted with root inode @ nid 36. [ 488.216624][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.226514][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.286636][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.311010][ T4277] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 488.330966][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.373688][T15223] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 488.417329][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 488.417346][ T27] audit: type=1800 audit(1771265466.173:201): pid=15223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2946" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 488.436720][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.508548][T14945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.537880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 488.588827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 488.637343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.679857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.722408][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.758461][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.793613][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.843657][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.876449][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.919853][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.951395][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.989838][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.017028][T15226] could not allocate digest TFM handle cryptd(blake2b-160) [ 489.032833][T14945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.064122][T14945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.091300][T14945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.114771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.141042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.163499][T14945] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.196769][T14945] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.224856][T14945] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.254282][T14945] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.494038][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.533485][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.595637][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 489.667156][ T4905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.675041][ T4905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.727926][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 492.217160][T13909] kernel write not supported for file /sg0 (pid: 13909 comm: kworker/1:12) [ 492.467450][T15314] overlayfs: failed to clone upperpath [ 492.578122][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2976'. [ 492.658807][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2976'. [ 493.033287][T15334] overlayfs: failed to clone upperpath [ 493.470148][T15349] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 493.595966][T15354] overlayfs: failed to clone upperpath [ 494.902479][T15391] team0: No ports can be present during mode change [ 495.284678][T15398] loop6: detected capacity change from 0 to 128 [ 495.922564][T15412] loop6: detected capacity change from 0 to 512 [ 495.984555][T15412] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 496.130779][T15412] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 496.198929][T15412] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.3005: invalid indirect mapped block 2683928664 (level 1) [ 496.241541][T15412] EXT4-fs (loop6): Remounting filesystem read-only [ 496.252123][T15412] EXT4-fs (loop6): 1 truncate cleaned up [ 496.276795][T15412] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 496.486874][T14945] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 496.564806][T14945] EXT4-fs (loop6): Remounting filesystem read-only [ 496.603928][T14945] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 496.717127][T14945] EXT4-fs (loop6): Remounting filesystem read-only [ 496.723724][T14945] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 496.757161][T14945] EXT4-fs (loop6): Remounting filesystem read-only [ 496.775845][T14945] EXT4-fs error (device loop6): ext4_iget_extra_inode:4756: inode #15: comm syz-executor: corrupted in-inode xattr [ 496.830505][T14945] EXT4-fs (loop6): Remounting filesystem read-only [ 496.852200][T14945] EXT4-fs error (device loop6): ext4_iget_extra_inode:4756: inode #15: comm syz-executor: corrupted in-inode xattr [ 496.897917][T14945] EXT4-fs (loop6): Remounting filesystem read-only [ 497.447417][T14945] EXT4-fs (loop6): unmounting filesystem. [ 497.637879][ T41] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.808737][ T41] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.976718][ T41] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.179429][ T41] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.422862][T15470] device veth0 entered promiscuous mode [ 498.515551][T15470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 499.048853][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.064035][ T4273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.074601][ T4273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.090217][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 499.098037][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 499.106643][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.546762][T13901] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 499.726656][T13901] usb 4-1: Using ep0 maxpacket: 32 [ 499.733594][T13901] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 499.776654][T13901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.809902][T13901] usb 4-1: config 0 descriptor?? [ 499.852955][T13901] gspca_main: sunplus-2.14.0 probing 041e:400b [ 499.943697][T15484] chnl_net:caif_netlink_parms(): no params data found [ 500.655790][T15484] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.663262][T15484] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.674680][T15484] device bridge_slave_0 entered promiscuous mode [ 500.765833][T15484] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.775404][T15484] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.808386][T15484] device bridge_slave_1 entered promiscuous mode [ 500.840606][T15524] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.3039'. [ 500.886654][T15524] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3039'. [ 501.047508][T15484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.062003][T15484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.146300][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.152702][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.192577][T15484] team0: Port device team_slave_0 added [ 501.216873][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 501.340526][T15484] team0: Port device team_slave_1 added [ 501.397139][T15484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.404206][T15484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.432159][T15484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.476395][T13901] gspca_sunplus: reg_w_riv err -71 [ 501.495836][T13901] sunplus: probe of 4-1:0.0 failed with error -71 [ 501.515197][T13901] usb 4-1: USB disconnect, device number 12 [ 501.580979][T15484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.596634][T15484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.676896][T15484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.007791][T15549] overlayfs: failed to clone upperpath [ 502.190854][ T41] device hsr_slave_0 left promiscuous mode [ 502.215258][ T41] device hsr_slave_1 left promiscuous mode [ 502.262811][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.285229][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.315640][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.356710][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.366086][ T41] device bridge_slave_1 left promiscuous mode [ 502.384514][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.405293][ T41] device bridge_slave_0 left promiscuous mode [ 502.426951][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.557108][ T41] device veth1_macvtap left promiscuous mode [ 502.576820][ T41] device veth0_macvtap left promiscuous mode [ 502.590804][ T41] device veth1_vlan left promiscuous mode [ 502.603458][ T41] device veth0_vlan left promiscuous mode [ 503.296854][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 503.444805][T15577] overlayfs: failed to clone upperpath [ 504.208271][ T41] team0 (unregistering): Port device team_slave_1 removed [ 504.368088][ T41] team0 (unregistering): Port device team_slave_0 removed [ 504.571535][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.675915][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.354518][ T41] bond0 (unregistering): Released all slaves [ 505.376766][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 505.728649][T15484] device hsr_slave_0 entered promiscuous mode [ 505.754137][T15484] device hsr_slave_1 entered promiscuous mode [ 505.780848][T15484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.796710][T15484] Cannot create hsr debugfs directory [ 505.979435][T15607] EXT4-fs: Conflicting test_dummy_encryption options [ 506.299815][T15614] overlayfs: failed to clone upperpath [ 506.361025][T15618] overlayfs: failed to clone upperpath [ 506.723118][T15611] netlink: 'syz.1.3067': attribute type 10 has an invalid length. [ 506.767120][T15611] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.774456][T15611] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.849940][T15611] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.857202][T15611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.864647][T15611] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.872043][T15611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.892679][T15611] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 506.918041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 507.242534][T15634] loop3: detected capacity change from 0 to 736 [ 507.456846][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 508.053604][T15484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 508.079250][T15484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 508.110700][T15484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 508.148195][T15484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 508.336776][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 508.369866][T15484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.434768][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 508.447516][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.481061][T15484] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.519822][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 508.557545][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 508.587181][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.594360][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.668202][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 508.682633][T15659] overlayfs: failed to clone upperpath [ 508.709053][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 508.734901][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 508.760130][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.767370][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.810457][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 508.830718][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 508.850159][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 508.873147][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 508.903566][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 508.937405][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 508.973414][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 509.004750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 509.032758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 509.074345][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 509.094588][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 509.127660][T15484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 510.135731][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 510.151843][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 510.189836][T15484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.608764][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 511.661226][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 511.729773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 511.752734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 511.807430][T15484] device veth0_vlan entered promiscuous mode [ 511.818493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 511.858303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 511.952214][T15484] device veth1_vlan entered promiscuous mode [ 512.093168][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 512.124846][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 512.279716][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 512.381511][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 512.456061][T15484] device veth0_macvtap entered promiscuous mode [ 512.510610][T15484] device veth1_macvtap entered promiscuous mode [ 512.627116][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 512.647571][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 512.697692][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.748314][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.792972][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.892990][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.948544][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.059141][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.112750][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.120736][T15779] overlayfs: failed to resolve './file2': -2 [ 513.189761][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.244565][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.288408][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.340618][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.412294][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.462891][T15484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.556659][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 513.565506][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 513.621884][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.676704][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.734327][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.806066][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.859089][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.912402][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.949051][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.996098][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.029703][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.079530][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.145458][T15484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.176298][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 514.189971][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 514.218947][T15484] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.235534][T15484] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.254651][T15484] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.293598][T15484] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.614739][ T4893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.641312][ T4893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.671277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 514.769624][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.803116][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.830690][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 515.526723][T13909] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 515.728470][T13909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.759327][T13909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 515.787225][T13909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.839080][T13909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10496, setting to 8 [ 515.876655][T13909] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 515.916392][T13909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.957124][T15827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 515.969097][T13909] hub 4-1:1.0: bad descriptor, ignoring hub [ 515.999720][T13909] hub: probe of 4-1:1.0 failed with error -5 [ 516.016458][T13909] cdc_wdm 4-1:1.0: skipping garbage [ 516.040684][T13909] cdc_wdm 4-1:1.0: skipping garbage [ 516.082923][T13909] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 516.111685][T13909] cdc_wdm 4-1:1.0: Unknown control protocol [ 516.229550][T15855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.254619][T15855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.312088][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 516.318754][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 516.361741][T13905] usb 4-1: USB disconnect, device number 13 [ 516.670266][T15865] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 518.154606][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3150'. [ 518.237745][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3150'. [ 518.446914][T15912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3161'. [ 519.243858][T15930] loop7: detected capacity change from 0 to 4096 [ 519.327895][T15930] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 520.475656][T15950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.791428][T15987] overlayfs: failed to clone upperpath [ 524.718695][T16058] loop3: detected capacity change from 0 to 128 [ 524.888350][T13905] Process accounting resumed [ 524.903048][T13905] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 524.931452][T13905] FAT-fs (loop3): Filesystem has been set read-only [ 525.556119][T16084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.766882][T16113] block device autoloading is deprecated and will be removed. [ 527.610671][T16137] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 530.131612][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3237'. [ 531.112167][T16231] ptrace attach of "./syz-executor exec"[16235] was attempted by "./syz-executor exec"[16231] [ 531.822415][ T3599] libceph: connect (1)[c::]:6789 error -101 [ 531.837413][ T3599] libceph: mon0 (1)[c::]:6789 connect error [ 531.863448][T16233] ceph: No mds server is up or the cluster is laggy [ 531.907820][T16240] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 531.915617][T16240] netlink: 'syz.3.3251': attribute type 4 has an invalid length. [ 531.978452][T16240] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3251'. [ 532.014756][T16245] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 532.084323][T16245] netlink: 'syz.3.3251': attribute type 4 has an invalid length. [ 532.103570][T16245] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3251'. [ 532.117071][ T4408] libceph: connect (1)[c::]:6789 error -101 [ 532.123171][ T4408] libceph: mon0 (1)[c::]:6789 connect error [ 532.534133][T16254] device bond1 entered promiscuous mode [ 533.501361][T16282] bond2: (slave netdevsim0): Enslaving as an active interface with an up link [ 533.839784][T16296] overlayfs: failed to clone upperpath [ 533.892359][T16296] overlayfs: failed to clone upperpath [ 534.130352][T16302] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3266'. [ 534.207446][T16304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3267'. [ 534.249596][T16304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3267'. [ 535.764189][T16349] tipc: Failed to remove unknown binding: 66,1,1/0:4232199617/4232199619 [ 536.868262][T16382] fuse: Bad value for 'fd' [ 538.066774][T16376] loop7: detected capacity change from 0 to 32768 [ 538.091408][T16394] netlink: 'syz.2.3292': attribute type 12 has an invalid length. [ 538.162367][T16376] XFS (loop7): Mounting V5 Filesystem [ 538.338349][T16376] XFS (loop7): Ending clean mount [ 538.385615][T16376] XFS (loop7): Quotacheck needed: Please wait. [ 538.525770][T16376] XFS (loop7): Quotacheck: Done. [ 538.767411][T16374] netlink: 'syz.7.3286': attribute type 15 has an invalid length. [ 538.775311][T16374] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3286'. [ 538.860552][T16439] tipc: Enabling of bearer rejected, failed to enable media [ 539.045412][T15484] XFS (loop7): Unmounting Filesystem [ 539.693689][T16460] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 540.376765][ T3599] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 540.453435][T16493] tipc: Started in network mode [ 540.471525][T16493] tipc: Node identity ac1414aa, cluster identity 4711 [ 540.509923][T16493] tipc: Enabled bearer , priority 10 [ 540.566904][ T3599] usb 8-1: Using ep0 maxpacket: 8 [ 540.578613][ T3599] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 540.616427][ T3599] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.647187][ T3599] usb 8-1: Product: syz [ 540.652630][ T3599] usb 8-1: Manufacturer: syz [ 540.684067][ T3599] usb 8-1: SerialNumber: syz [ 540.727735][ T3599] usb 8-1: config 0 descriptor?? [ 540.951704][ T3599] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 541.401759][ T3599] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 541.433032][ T3599] usb 8-1: USB disconnect, device number 10 [ 541.526657][ T4408] tipc: Node number set to 2886997162 [ 541.706262][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3327'. [ 541.989219][T16529] overlayfs: failed to clone upperpath [ 543.916678][T13905] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 544.112857][ T27] audit: type=1326 audit(1771265521.863:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16573 comm="syz.3.3343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x0 [ 544.136437][T13905] usb 8-1: config 0 has no interfaces? [ 544.144029][T13905] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.184797][T13905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.225271][T13905] usb 8-1: Product: syz [ 544.240670][T13905] usb 8-1: Manufacturer: syz [ 544.254243][T13905] usb 8-1: SerialNumber: syz [ 544.281845][T13905] usb 8-1: config 0 descriptor?? [ 544.514900][T13905] usb 8-1: USB disconnect, device number 11 [ 545.178154][ T27] audit: type=1326 audit(1771265522.933:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.3.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 545.265023][ T27] audit: type=1326 audit(1771265522.933:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.3.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 545.464296][ T27] audit: type=1326 audit(1771265522.963:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.3.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 545.528768][T16597] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3349'. [ 545.556712][ T27] audit: type=1326 audit(1771265522.963:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.3.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 545.580570][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 545.652895][ T27] audit: type=1326 audit(1771265522.963:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.3.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 545.653139][T16597] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3349'. [ 545.781325][ T27] audit: type=1326 audit(1771265522.973:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.3.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 545.811862][T16603] bond0: (slave bridge0): Error: Slave device does not support XDP [ 545.891411][ T27] audit: type=1326 audit(1771265522.973:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.3.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 546.007212][ T27] audit: type=1326 audit(1771265522.973:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.3.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 546.106699][ T27] audit: type=1326 audit(1771265522.973:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16589 comm="syz.3.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 546.149482][T16616] netlink: 'syz.7.3357': attribute type 1 has an invalid length. [ 546.203282][T16616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.273131][T16622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.281475][T16622] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 546.293748][T16622] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 546.393838][T16616] device wlan0 entered promiscuous mode [ 546.455304][T16616] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 547.081116][T16641] futex_wake_op: syz.8.3365 tries to shift op by 32; fix this program [ 547.460892][T16653] overlayfs: failed to clone upperpath [ 548.013263][T16670] netlink: 'syz.2.3373': attribute type 1 has an invalid length. [ 548.093711][T16670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.273090][T16683] overlayfs: failed to clone upperpath [ 548.299807][T16675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.335030][T16675] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 548.387491][T16675] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 549.335325][T16710] 9pnet_fd: Insufficient options for proto=fd [ 552.330962][T16770] overlayfs: failed to clone upperpath [ 552.559592][ T3599] kernel write not supported for file bpf-prog (pid: 3599 comm: kworker/0:3) [ 552.649781][T16780] loop7: detected capacity change from 0 to 512 [ 552.748266][T16780] EXT4-fs: Ignoring removed i_version option [ 552.834578][T16780] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 553.008191][T16780] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 553.055170][T16780] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 553.333438][T15484] EXT4-fs (loop7): unmounting filesystem. [ 553.527338][T16803] sctp: [Deprecated]: syz.7.3408 (pid 16803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 553.527338][T16803] Use struct sctp_sack_info instead [ 554.094879][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803e88d800: rx timeout, send abort [ 554.603252][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803e88d800: abort rx timeout. Force session deactivation [ 555.804900][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 555.804915][ T27] audit: type=1326 audit(1771265533.553:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.3.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7fc00000 [ 556.509617][ T4277] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 556.519981][ T4277] CPU: 1 PID: 4277 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 556.527569][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.537670][ T4277] Workqueue: hci4 hci_rx_work [ 556.542434][ T4277] Call Trace: [ 556.545778][ T4277] [ 556.548735][ T4277] dump_stack_lvl+0x188/0x24e [ 556.553480][ T4277] ? show_regs_print_info+0x12/0x12 [ 556.558733][ T4277] ? load_image+0x400/0x400 [ 556.563285][ T4277] sysfs_create_dir_ns+0x26a/0x290 [ 556.568461][ T4277] ? sysfs_warn_dup+0xa0/0xa0 [ 556.573186][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 556.578437][ T4277] kobject_add_internal+0x61c/0xcc0 [ 556.583675][ T4277] kobject_add+0x160/0x230 [ 556.586750][ T27] audit: type=1326 audit(1771265534.273:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.3.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4814f9bf79 code=0x7fc00000 [ 556.588109][ T4277] ? kobject_init+0x1d0/0x1d0 [ 556.615156][ T4277] ? klist_children_get+0x50/0x50 [ 556.620215][ T4277] ? get_device_parent+0x121/0x3f0 [ 556.625371][ T4277] device_add+0x483/0xfb0 [ 556.629737][ T4277] ? kmem_cache_free+0xf7/0x290 [ 556.634633][ T4277] hci_conn_add_sysfs+0xd1/0x1e0 [ 556.639628][ T4277] le_conn_complete_evt+0x105f/0x1670 [ 556.645054][ T4277] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 556.651346][ T4277] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 556.657031][ T4277] ? skb_pull_data+0xf7/0x200 [ 556.661767][ T4277] hci_le_enh_conn_complete_evt+0x185/0x460 [ 556.667702][ T4277] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 556.674161][ T4277] ? hci_remote_host_features_evt+0x270/0x270 [ 556.680255][ T4277] hci_event_packet+0x7b6/0x1280 [ 556.685239][ T4277] ? bis_list+0x280/0x280 [ 556.689608][ T4277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 556.695530][ T4277] ? kcov_remote_start+0x4c7/0x7e0 [ 556.700661][ T4277] ? bt_warn+0x30/0x180 [ 556.704862][ T4277] ? hci_send_to_monitor+0x9c/0x4a0 [ 556.710096][ T4277] hci_rx_work+0x3eb/0xd40 [ 556.714536][ T4277] ? _raw_spin_unlock+0x40/0x40 [ 556.719415][ T4277] ? process_one_work+0x7b0/0x1160 [ 556.724580][ T4277] process_one_work+0x8a2/0x1160 [ 556.729557][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 556.735215][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 556.740256][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 556.745817][ T4277] ? kthread_data+0x4b/0xc0 [ 556.750382][ T4277] worker_thread+0xaa2/0x1270 [ 556.755087][ T4277] ? __kthread_parkme+0x162/0x1c0 [ 556.760143][ T4277] kthread+0x29d/0x330 [ 556.764228][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 556.769281][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 556.773901][ T4277] ret_from_fork+0x1f/0x30 [ 556.778343][ T4277] [ 556.807804][ T4277] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 556.826617][ T4277] Bluetooth: hci4: failed to register connection device [ 556.837652][ T27] audit: type=1326 audit(1771265534.273:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.3.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7fc00000 [ 556.860331][ T27] audit: type=1326 audit(1771265534.273:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.3.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7fc00000 [ 556.883117][ T27] audit: type=1326 audit(1771265534.273:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.3.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7fc00000 [ 556.906128][ T27] audit: type=1326 audit(1771265534.273:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.3.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7fc00000 [ 556.929603][ T27] audit: type=1326 audit(1771265534.273:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.3.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7fc00000 [ 556.952274][ T27] audit: type=1326 audit(1771265534.273:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.3.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7fc00000 [ 556.974928][ T27] audit: type=1326 audit(1771265534.273:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.3.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7fc00000 [ 556.997651][ T27] audit: type=1326 audit(1771265534.273:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16848 comm="syz.3.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7fc00000 [ 558.217484][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3439'. [ 559.309091][T16932] loop7: detected capacity change from 0 to 512 [ 559.366609][T16932] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 559.426680][T16932] EXT4-fs (loop7): 1 truncate cleaned up [ 559.437784][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3450'. [ 559.452327][T16932] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 559.782043][T16932] EXT4-fs error (device loop7): xattr_find_entry:297: inode #15: comm syz.7.3448: corrupted xattr entries [ 559.839410][T16932] EXT4-fs (loop7): Remounting filesystem read-only [ 560.062132][T15484] EXT4-fs (loop7): unmounting filesystem. [ 560.629193][T16962] loop7: detected capacity change from 0 to 128 [ 560.730297][T16962] Invalid ELF header len 1 [ 562.580843][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.587258][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.706000][T17032] : renamed from veth0_vlan [ 562.948358][ T4408] libceph: connect (1)[c::]:6789 error -101 [ 562.981981][ T4408] libceph: mon0 (1)[c::]:6789 connect error [ 563.016754][T17043] ceph: No mds server is up or the cluster is laggy [ 563.345322][T17061] loop7: detected capacity change from 0 to 128 [ 563.456074][T17061] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 563.530074][T17061] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 563.544949][T17061] ext2 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.768470][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3492'. [ 563.798377][T15484] EXT4-fs (loop7): unmounting filesystem. [ 564.307311][T17091] overlayfs: failed to clone upperpath [ 565.127619][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3517'. [ 565.189048][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3517'. [ 566.219807][T17161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3519'. [ 566.311094][T17164] overlayfs: failed to clone upperpath [ 566.927528][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 566.927544][ T27] audit: type=1326 audit(1771265544.683:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.2.3529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d6f79bf79 code=0x0 [ 567.913602][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3537'. [ 568.780942][T17225] netlink: 'syz.8.3541': attribute type 10 has an invalid length. [ 568.814517][T17225] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3541'. [ 569.021316][T17225] team0: Port device geneve0 added [ 569.493299][T17249] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3548'. [ 569.776843][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 569.891930][T17265] netlink: 'syz.1.3552': attribute type 1 has an invalid length. [ 570.505789][T17283] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3556'. [ 570.868272][T17283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.984931][T17283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.067902][T17283] bond0 (unregistering): Released all slaves [ 572.693506][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3583'. [ 572.809561][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3583'. [ 572.820465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.320393][T17387] 9pnet_fd: Insufficient options for proto=fd [ 574.141770][T17411] loop7: detected capacity change from 0 to 128 [ 577.137960][T17491] netlink: 'syz.1.3626': attribute type 13 has an invalid length. [ 577.244288][T17491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 577.341434][T17491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 577.416818][T17491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 577.808252][T17511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3631'. [ 579.810896][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3648'. [ 580.743102][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 580.756230][ T4273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 580.764533][ T4273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.776449][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 580.784648][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 580.792067][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 581.446274][T17590] chnl_net:caif_netlink_parms(): no params data found [ 581.548581][T17590] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.555931][T17590] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.567448][T17590] device bridge_slave_0 entered promiscuous mode [ 581.576368][T17590] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.583680][T17590] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.595328][T17590] device bridge_slave_1 entered promiscuous mode [ 581.627110][T17590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.640862][T17590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.695710][T17590] team0: Port device team_slave_0 added [ 581.750727][T17590] team0: Port device team_slave_1 added [ 581.878685][T17590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.909107][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.038976][T17590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.094626][T17590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.125779][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.280839][T17590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.481680][T17590] device hsr_slave_0 entered promiscuous mode [ 582.537960][T17590] device hsr_slave_1 entered promiscuous mode [ 582.566961][T17590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.598839][T17590] Cannot create hsr debugfs directory [ 582.623648][T17629] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3663'. [ 582.824647][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 583.444313][T17590] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.094724][T17590] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.381263][T17590] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.611149][T17590] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.896811][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 585.348396][T17590] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 585.372745][T17590] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 585.437237][T17590] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 585.592609][T17590] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 585.937058][T17590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.014476][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 586.032936][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 586.070523][T17590] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.153146][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 586.194501][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.225992][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.233174][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.287076][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 586.327758][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.357420][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.364612][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.393580][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 586.462800][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 586.498701][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 586.537332][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 586.585229][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 586.626359][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 586.656396][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 586.711650][T17590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 586.760421][T17590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 586.817464][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 586.833187][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 586.864025][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 586.883740][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 586.933466][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.976798][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 587.002632][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.178953][T17727] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3687'. [ 587.210640][T17727] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 587.487481][T17727] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3687'. [ 587.508112][T17727] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 588.143568][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 588.195513][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 588.228175][T17590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.278254][T17758] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.3693'. [ 588.315579][T17758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3693'. [ 589.056617][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 589.688129][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 589.729769][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 589.804612][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 589.837394][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 589.891632][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 589.927148][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 589.965507][T17590] device veth0_vlan entered promiscuous mode [ 590.054175][T17590] device veth1_vlan entered promiscuous mode [ 590.227739][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 590.247376][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 590.285716][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 590.330987][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 590.372076][T17590] device veth0_macvtap entered promiscuous mode [ 590.480585][T17590] device veth1_macvtap entered promiscuous mode [ 590.554761][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.625300][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.696615][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.759093][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.807474][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.840558][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.864510][T13909] libceph: connect (1)[c::]:6789 error -101 [ 590.879449][T13909] libceph: mon0 (1)[c::]:6789 connect error [ 590.885584][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.902231][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.924393][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.971400][T17822] ceph: No mds server is up or the cluster is laggy [ 590.977000][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.991618][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.002970][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.013792][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.024623][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.038880][T17590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.046454][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 591.098812][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 591.130839][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 591.157198][T13909] libceph: connect (1)[c::]:6789 error -101 [ 591.163269][T13909] libceph: mon0 (1)[c::]:6789 connect error [ 591.180397][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 591.263352][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.297695][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.332203][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.366631][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.436608][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.478236][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.514974][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.551333][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.588180][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.632120][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.657219][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.729257][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.783121][T17590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.815207][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 591.864742][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 591.912062][T17590] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.938195][T17590] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.980405][T17590] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.005620][T17590] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.317432][ T4903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.348317][ T4903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.437494][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 592.493783][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.526745][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.555063][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 593.076065][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3721'. [ 593.194032][T17876] loop7: detected capacity change from 0 to 256 [ 593.208994][T17876] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 593.265164][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3721'. [ 593.532175][T17881] overlayfs: failed to clone upperpath [ 593.954080][T17896] netlink: 'syz.8.3729': attribute type 1 has an invalid length. [ 594.026894][T17896] netlink: 'syz.8.3729': attribute type 4 has an invalid length. [ 594.034773][T17896] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.3729'. [ 594.109510][T17898] netlink: 'syz.8.3729': attribute type 1 has an invalid length. [ 594.148602][T17898] netlink: 'syz.8.3729': attribute type 4 has an invalid length. [ 594.166753][T17898] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.3729'. [ 594.870105][ T4317] kernel write not supported for file bpf-prog (pid: 4317 comm: kworker/1:5) [ 595.273018][T17954] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3747'. [ 595.299391][T17956] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 595.343836][T17953] loop7: detected capacity change from 0 to 2048 [ 595.399179][T17953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 596.134365][T17976] fuse: Bad value for 'fd' [ 596.321952][T17982] overlayfs: failed to clone upperpath [ 596.465026][T17983] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 596.620317][T17983] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 598.908103][T18037] overlayfs: failed to clone upperpath [ 604.157551][T17983] siw: device registration error -19 [ 604.572692][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'. [ 606.106083][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3794'. [ 606.150472][T18109] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.159615][T18109] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.168877][T18109] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.178162][T18109] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.307412][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3794'. [ 608.326016][T18167] overlayfs: failed to clone upperpath [ 608.900737][T18183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3817'. [ 609.011799][T18183] device bond3 entered promiscuous mode [ 609.059038][T18183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.120435][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3817'. [ 609.146894][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3817'. [ 609.233883][T18191] bond3: (slave vti0): refused to change device type [ 610.855713][T18235] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 610.889253][T18235] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 610.907381][T18235] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 610.915717][T18235] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 610.989816][T18235] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 611.022726][T18235] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 611.121210][T18235] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 611.153285][T18235] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 611.365110][T18235] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 612.360289][T18269] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3841'. [ 613.303292][T18285] overlayfs: failed to clone upperpath [ 615.963980][T18359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3865'. [ 616.175129][T18363] netlink: 'syz.1.3866': attribute type 1 has an invalid length. [ 616.321640][T18363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.362631][T18364] bond2: (slave veth1): Enslaving as an active interface with a down link [ 616.388134][T18369] overlayfs: failed to clone upperpath [ 616.450470][T18366] bond2: (slave dummy0): making interface the new active one [ 616.538425][T18366] device dummy0 entered promiscuous mode [ 616.607240][T18366] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 616.630703][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 619.173579][T18440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 620.742966][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3896'. [ 620.880630][T18478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.939732][T18478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.989520][T18478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 621.027941][T18478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 621.217231][ T4273] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 621.226665][ T4273] Bluetooth: hci2: Injecting HCI hardware error event [ 621.240206][ T4277] Bluetooth: hci2: hardware error 0x00 [ 623.297959][ T4277] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 624.296654][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.303055][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.333762][ T27] audit: type=1804 audit(1771265604.083:254): pid=18613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3935" name="file1" dev="ramfs" ino=81608 res=1 errno=0 [ 628.046818][ T4905] device dummy0 left promiscuous mode [ 632.146499][ C1] sched: RT throttling activated [ 635.449646][T18794] overlayfs: failed to clone upperpath [ 635.507974][T18794] overlayfs: failed to clone upperpath [ 637.509717][T18840] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 638.477609][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 639.045550][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4014'. [ 639.446243][T18882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4014'. [ 639.492852][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4014'. [ 639.910706][T18894] loop7: detected capacity change from 0 to 1024 [ 639.916211][T18898] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4021'. [ 640.107768][T18894] hfsplus: invalid length 32517 has been corrected to 255 [ 640.130610][T18903] device bond3 entered promiscuous mode [ 640.563249][ T27] audit: type=1804 audit(1771265618.313:255): pid=18912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4019" name="/newroot/49/file1/ext4" dev="loop7" ino=25 res=1 errno=0 [ 640.820801][ T4407] hfsplus: b-tree write err: -5, ino 4 [ 640.880295][T18923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4028'. [ 640.960299][T18928] overlayfs: failed to clone upperpath [ 641.106782][T18929] loop7: detected capacity change from 0 to 256 [ 641.158827][T18929] FAT-fs (loop7): Directory bread(block 64) failed [ 641.165566][T18929] FAT-fs (loop7): Directory bread(block 65) failed [ 641.172586][T18929] FAT-fs (loop7): Directory bread(block 66) failed [ 641.179452][T18929] FAT-fs (loop7): Directory bread(block 67) failed [ 641.186920][T18929] FAT-fs (loop7): Directory bread(block 68) failed [ 641.193570][T18929] FAT-fs (loop7): Directory bread(block 69) failed [ 641.200415][T18929] FAT-fs (loop7): Directory bread(block 70) failed [ 641.207071][T18929] FAT-fs (loop7): Directory bread(block 71) failed [ 641.213886][T18929] FAT-fs (loop7): Directory bread(block 72) failed [ 641.220480][T18929] FAT-fs (loop7): Directory bread(block 73) failed [ 642.143640][ T4277] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 642.157741][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4032'. [ 644.328801][T18999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4049'. [ 646.566727][T19059] overlayfs: failed to clone upperpath [ 648.869685][T19140] overlayfs: failed to clone lowerpath [ 649.216937][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4094'. [ 650.031812][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4100'. [ 651.012058][T19209] netlink: 'syz.7.4113': attribute type 13 has an invalid length. [ 651.194619][T19209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 651.228801][T19209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 653.131773][T19272] team0 (unregistering): Port device team_slave_0 removed [ 653.227707][T19272] team0 (unregistering): Failed to send options change via netlink (err -105) [ 653.281302][T19272] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 653.347199][T19272] team0 (unregistering): Port device team_slave_1 removed [ 655.932491][T19291] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.939910][T19291] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.294189][T19291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.420674][T19291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.619499][T19291] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.628585][T19291] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.637923][T19291] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.653563][T19291] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.679040][T19353] overlayfs: failed to clone upperpath [ 658.959790][T19291] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.969008][T19291] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.978055][T19291] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.987026][T19291] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.036709][T19310] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.4139'. [ 659.045870][T19310] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4139'. [ 659.072653][T19327] netlink: 'syz.7.4144': attribute type 1 has an invalid length. [ 659.253514][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4147'. [ 659.280643][T19364] overlayfs: failed to clone upperpath [ 659.656445][T19375] loop7: detected capacity change from 0 to 16 [ 659.719922][T19375] erofs: (device loop7): mounted with root inode @ nid 36. [ 659.748275][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4160'. [ 659.862110][T19385] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4162'. [ 660.603152][T19409] 0xfffffffffffffffd-0x00000001fff8 : "" [ 660.697126][T19409] mtd: partition "" is out of reach -- disabled [ 660.769810][T19409] ftl_cs: FTL header not found. [ 660.819721][T19420] 9pnet_fd: Insufficient options for proto=fd [ 664.989873][T19491] loop7: detected capacity change from 0 to 262144 [ 665.013552][T19491] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop7 scanned by syz.7.4197 (19491) [ 665.053868][T19491] BTRFS info (device loop7): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 665.064254][T19491] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 665.073581][T19491] BTRFS info (device loop7): enabling ssd optimizations [ 665.080598][T19491] BTRFS info (device loop7): using spread ssd allocation scheme [ 665.088325][T19491] BTRFS info (device loop7): using free space tree [ 666.247968][T17590] BTRFS info (device loop7): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 668.615943][T19625] Invalid ELF header magic: != ELF [ 668.860139][T19629] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 670.819906][T19649] netlink: 'syz.1.4235': attribute type 5 has an invalid length. [ 671.571176][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4243'. [ 672.777728][T19739] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4258'. [ 672.946829][T19739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.979791][T19739] bond0 (unregistering): Released all slaves [ 673.987096][T19771] overlayfs: failed to clone upperpath [ 676.685508][T19826] loop7: detected capacity change from 0 to 4096 [ 676.801392][T19833] overlayfs: failed to clone upperpath [ 676.840408][T19836] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.003124][T19839] overlayfs: failed to clone upperpath [ 677.957617][ T3599] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 678.016226][ T3599] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 678.034465][T19873] loop7: detected capacity change from 0 to 2048 [ 678.161219][T19873] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 678.393692][T17590] EXT4-fs (loop7): unmounting filesystem. [ 678.402203][T19877] fido_id[19877]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 683.732182][T20039] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4344'. [ 683.960833][T20045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4346'. [ 684.041692][T20047] loop7: detected capacity change from 0 to 1024 [ 684.142707][T20047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 684.265239][T20047] cgroup: fork rejected by pids controller in /syz7 [ 685.461612][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.468023][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.662719][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4370'. [ 688.016070][T20229] overlayfs: failed to clone upperpath [ 688.793329][T20241] netlink: 'syz.3.4391': attribute type 1 has an invalid length. [ 688.871044][T20245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 688.986438][T20245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.045521][T20245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.095173][T20245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.115176][T20250] overlayfs: failed to clone upperpath [ 689.130322][T20245] bond0: (slave geneve2): making interface the new active one [ 689.155801][T20245] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 689.170397][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4391'. [ 689.233948][T20241] bond0 (unregistering): (slave geneve2): Releasing active interface [ 689.272350][T20241] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 689.306527][T20241] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 689.342911][T20241] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 689.365484][T20241] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 689.425406][T20241] bond0 (unregistering): Released all slaves [ 689.685779][T20265] overlayfs: failed to clone lowerpath [ 689.702583][T20265] overlayfs: failed to clone lowerpath [ 690.824995][T20309] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4414'. [ 690.857259][T20309] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4414'. [ 691.332912][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4421'. [ 691.439950][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4421'. [ 691.561881][T20336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4424'. [ 692.324999][T20360] overlayfs: failed to clone upperpath [ 693.668898][T20396] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4441'. [ 693.773375][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4444'. [ 693.925481][T20404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4444'. [ 694.007646][T20404] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 694.072306][T20408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 694.095943][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4446'. [ 694.145177][T20414] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 694.595533][T20427] device syzkaller0 entered promiscuous mode [ 703.322143][T20463] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.329605][T20463] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.352078][ T27] audit: type=1326 audit(1771265682.103:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6f79bf79 code=0x7ffc0000 [ 704.409761][ T27] audit: type=1326 audit(1771265682.103:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6f79bf79 code=0x7ffc0000 [ 704.483941][ T27] audit: type=1326 audit(1771265682.123:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9d6f79bf79 code=0x7ffc0000 [ 704.513139][ T27] audit: type=1326 audit(1771265682.123:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6f79bf79 code=0x7ffc0000 [ 704.535968][ T27] audit: type=1326 audit(1771265682.123:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6f79bf79 code=0x7ffc0000 [ 704.569096][ T27] audit: type=1326 audit(1771265682.163:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9d6f79bf79 code=0x7ffc0000 [ 704.634819][ T27] audit: type=1326 audit(1771265682.163:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6f79bf79 code=0x7ffc0000 [ 704.710143][ T27] audit: type=1326 audit(1771265682.163:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6f79bf79 code=0x7ffc0000 [ 704.762421][ T27] audit: type=1326 audit(1771265682.163:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9d6f79bf79 code=0x7ffc0000 [ 704.833555][ T27] audit: type=1326 audit(1771265682.163:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20539 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6f79bf79 code=0x7ffc0000 [ 704.859986][T20463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.965058][T20463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.840218][T20463] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.849492][T20463] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.858788][T20463] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.867743][T20463] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.838382][T20496] netlink: 'syz.1.4474': attribute type 1 has an invalid length. [ 706.910647][T20498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4474'. [ 706.935535][T20521] netlink: 'syz.7.4483': attribute type 1 has an invalid length. [ 706.985891][T20525] device ip6erspan0 entered promiscuous mode [ 707.893646][T20601] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 707.913590][T20601] overlayfs: failed to clone lowerpath [ 708.391369][T20614] netlink: 'syz.2.4509': attribute type 1 has an invalid length. [ 708.479431][T20614] 8021q: adding VLAN 0 to HW filter on device bond5 [ 709.009983][T20633] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.4514'. [ 709.034487][T20633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4514'. [ 709.694334][T20642] netlink: 'syz.1.4516': attribute type 10 has an invalid length. [ 709.731723][T20642] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.739175][T20642] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.997406][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4518'. [ 710.244567][T20650] device syz_tun left promiscuous mode [ 710.280634][T20650] bridge0: port 3(syz_tun) entered disabled state [ 710.366764][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4517'. [ 712.055422][T20678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4525'. [ 712.097079][T20678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.411815][T20678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.284933][T20705] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4531'. [ 714.028009][T20720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4537'. [ 714.179616][T20720] device bond0 entered promiscuous mode [ 714.302135][T20720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.349204][T20729] IPv6: sit3: Disabled Multicast RS [ 714.412724][T20729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.430986][T20729] bond0: (slave sit3): The slave device specified does not support setting the MAC address [ 714.472509][T20729] bond0: (slave sit3): Error -95 calling set_mac_address [ 714.534788][T20730] lo: Caught tx_queue_len zero misconfig [ 715.781675][T20778] netlink: 'syz.2.4553': attribute type 27 has an invalid length. [ 715.866952][T20778] netlink: 'syz.2.4553': attribute type 1 has an invalid length. [ 716.096812][T20786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4554'. [ 717.261240][T20812] device bridge_slave_0 left promiscuous mode [ 717.302895][T20812] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.355303][T20812] device bridge_slave_1 left promiscuous mode [ 717.402003][T20812] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.461652][T20812] team0: Port device team_slave_0 removed [ 717.498767][T20812] team0: Port device team_slave_1 removed [ 717.523848][T20812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.570806][T20812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.610869][T20812] bond2: (slave netdevsim0): Releasing backup interface [ 717.836681][T20814] team0: Port device ip6gre1 added [ 718.489758][T20849] netlink: 'syz.2.4576': attribute type 4 has an invalid length. [ 718.536268][T20849] netlink: 'syz.2.4576': attribute type 4 has an invalid length. [ 719.139692][T20871] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4584'. [ 719.178299][T20871] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4584'. [ 719.420556][T20886] ip: renamed from gretap0 [ 719.822454][T20891] loop7: detected capacity change from 0 to 2048 [ 720.009949][T20906] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 720.234628][T20910] overlayfs: failed to clone upperpath [ 721.552509][T20930] overlayfs: failed to clone upperpath [ 721.804495][ T27] kauditd_printk_skb: 160 callbacks suppressed [ 721.804509][ T27] audit: type=1326 audit(1771265699.553:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.8.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 721.914299][ T27] audit: type=1326 audit(1771265699.613:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.8.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 722.035455][ T27] audit: type=1326 audit(1771265699.613:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.8.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 722.136502][ T27] audit: type=1326 audit(1771265699.613:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.8.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 722.247712][ T27] audit: type=1326 audit(1771265699.613:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.8.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 722.356284][ T27] audit: type=1326 audit(1771265699.613:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.8.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 722.429236][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'. [ 722.488814][T20952] device netdevsim0 left promiscuous mode [ 722.501290][ T27] audit: type=1326 audit(1771265699.613:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.8.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 722.557978][T20952] bridge0: port 2(netdevsim0) entered disabled state [ 722.615312][ T27] audit: type=1326 audit(1771265699.613:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.8.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 722.643059][T20952] device bridge_slave_0 left promiscuous mode [ 722.688419][T20952] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.728395][ T27] audit: type=1326 audit(1771265699.613:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.8.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 722.842710][ T27] audit: type=1326 audit(1771265699.613:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.8.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 723.107867][T20967] loop7: detected capacity change from 0 to 64 [ 725.325267][T20979] overlayfs: failed to clone upperpath [ 726.682099][T21029] loop7: detected capacity change from 0 to 40427 [ 726.754944][T21029] F2FS-fs (loop7): invalid crc value [ 726.776542][T21029] F2FS-fs (loop7): Found nat_bits in checkpoint [ 726.937014][T21029] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 726.943672][T21029] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 726.951206][T21069] netlink: 'syz.1.4643': attribute type 25 has an invalid length. [ 726.985326][T21069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4643'. [ 727.006245][T21029] F2FS-fs (loop7): Start checkpoint disabled! [ 727.021977][T21069] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4643'. [ 727.047351][T21029] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 727.075367][T21069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4643'. [ 727.222096][T21079] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4644'. [ 727.242685][T21029] syz.7.4630: attempt to access beyond end of device [ 727.242685][T21029] loop7: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 727.251950][T21079] device bridge_slave_1 left promiscuous mode [ 727.321627][T21079] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.390372][T21079] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.674998][T18931] kworker/u4:3: attempt to access beyond end of device [ 727.674998][T18931] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 728.544870][T21116] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4655'. [ 728.573057][T21116] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4655'. [ 729.075301][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4660'. [ 729.109932][T21136] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 729.932682][T21161] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4668'. [ 730.457921][T21176] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4670'. [ 732.027524][T21162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.404355][T21162] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.413718][T21162] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.422649][T21162] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.431564][T21162] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.489012][T21202] tipc: Failed to remove unknown binding: 66,1,1/0:4180824923/4180824925 [ 733.534093][T21202] tipc: Failed to remove unknown binding: 66,1,1/0:4180824923/4180824925 [ 733.552938][T21202] tipc: Failed to remove unknown binding: 66,1,1/0:4180824923/4180824925 [ 733.834921][T21162] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.847093][T21162] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.866183][T21162] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.886410][T21162] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.526294][T21161] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4668'. [ 734.808267][T21214] overlayfs: failed to clone lowerpath [ 734.840757][T21214] overlayfs: failed to clone upperpath [ 736.680931][T21279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 736.967605][T21286] netlink: 'syz.8.4703': attribute type 4 has an invalid length. [ 738.454811][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4710'. [ 739.737285][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4721'. [ 739.814880][T21347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4721'. [ 740.466187][T21364] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1220382859/1220382861 [ 740.495025][T21364] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1220382859/1220382861 [ 740.515933][T21364] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1220382859/1220382861 [ 740.748831][T21369] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4728'. [ 740.798791][T21371] 9pnet_fd: Insufficient options for proto=fd [ 742.513489][T21417] tipc: Failed to remove unknown binding: 66,1,1/0:694031644/694031646 [ 742.605759][T21417] tipc: Failed to remove unknown binding: 66,1,1/0:694031644/694031646 [ 742.654968][T19496] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.694066][T21417] tipc: Failed to remove unknown binding: 66,1,1/0:694031644/694031646 [ 743.138940][T19496] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.359939][T19496] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.432950][T21440] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4747'. [ 743.679268][T19496] bond1: (slave netdevsim0): Releasing backup interface [ 743.792151][T19496] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.900448][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.907422][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.993878][T21538] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.001350][T21538] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.429873][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 749.429886][ T27] audit: type=1326 audit(1771265727.183:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.3.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 749.529448][ T27] audit: type=1326 audit(1771265727.213:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.3.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 749.596627][ T27] audit: type=1326 audit(1771265727.213:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.3.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 749.686368][ T27] audit: type=1326 audit(1771265727.213:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.3.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 749.757016][ T27] audit: type=1326 audit(1771265727.213:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.3.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 749.812812][ T27] audit: type=1326 audit(1771265727.213:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.3.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 749.866149][ T27] audit: type=1326 audit(1771265727.213:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.3.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 749.918793][ T27] audit: type=1326 audit(1771265727.213:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.3.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 749.989215][ T27] audit: type=1326 audit(1771265727.213:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.3.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 750.035977][ T27] audit: type=1326 audit(1771265727.213:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.3.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4814f9bf79 code=0x7ffc0000 [ 750.318383][T21538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.419738][T21538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.103522][T21538] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.112701][T21538] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.121932][T21538] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.131713][T21538] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.443567][T21547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4775'. [ 751.527332][T21590] netlink: 'syz.3.4787': attribute type 16 has an invalid length. [ 751.555878][T21590] netlink: 'syz.3.4787': attribute type 17 has an invalid length. [ 751.583555][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 751.612472][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 751.626068][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 751.635872][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): ip: link becomes ready [ 751.659015][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 751.674644][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 751.692200][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 751.702704][T21596] overlayfs: failed to clone upperpath [ 751.709837][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 751.725377][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 751.734465][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 751.743760][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 751.753579][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 751.765139][T21590] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.789258][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 751.805575][T21590] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 751.843521][T21590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 752.051443][T21593] netlink: 'syz.7.4788': attribute type 1 has an invalid length. [ 752.088663][T21593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 752.355222][T21603] netlink: 'syz.3.4791': attribute type 4 has an invalid length. [ 752.416534][T21606] netlink: 'syz.3.4791': attribute type 4 has an invalid length. [ 752.816339][ T125] libceph: connect (1)[c::]:6789 error -22 [ 752.827343][ T125] libceph: mon0 (1)[c::]:6789 connect error [ 752.952517][T21621] ceph: No mds server is up or the cluster is laggy [ 752.980391][T19496] device hsr_slave_0 left promiscuous mode [ 753.079331][T19496] device hsr_slave_1 left promiscuous mode [ 753.109597][ T125] libceph: connect (1)[c::]:6789 error -22 [ 753.115715][ T125] libceph: mon0 (1)[c::]:6789 connect error [ 753.122787][T19496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.131172][T19496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.192385][T19496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.202355][T19496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.280627][T19496] device vlan2 left promiscuous mode [ 753.296347][T21643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4800'. [ 753.328443][T19496] bridge0: port 3(vlan2) entered disabled state [ 753.396293][T19496] device bridge_slave_1 left promiscuous mode [ 753.426268][T19496] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.504747][T19496] device bridge_slave_0 left promiscuous mode [ 753.543927][T19496] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.863208][T19496] device veth1_macvtap left promiscuous mode [ 753.900698][T19496] device veth0_macvtap left promiscuous mode [ 753.935287][T19496] device veth1_vlan left promiscuous mode [ 753.959584][T19496] device veth0_vlan left promiscuous mode [ 754.485670][T19496] bond1 (unregistering): Released all slaves [ 755.876677][T19496] team0 (unregistering): Port device team_slave_1 removed [ 755.945244][T19496] team0 (unregistering): Port device team_slave_0 removed [ 756.036158][T19496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.127601][T19496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.675205][T19496] bond0 (unregistering): (slave team0): Releasing backup interface [ 756.751318][T19496] bond0 (unregistering): Released all slaves [ 756.972616][T21684] netlink: 'syz.8.4807': attribute type 13 has an invalid length. [ 757.359538][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 757.359553][ T27] audit: type=1326 audit(1771265735.113:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 757.499117][ T27] audit: type=1326 audit(1771265735.133:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 757.586694][T20522] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 757.623630][ T27] audit: type=1326 audit(1771265735.143:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 757.673293][T21706] netlink: 'syz.8.4814': attribute type 3 has an invalid length. [ 757.727556][T21706] netlink: 'syz.8.4814': attribute type 3 has an invalid length. [ 757.771219][ T27] audit: type=1326 audit(1771265735.143:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 757.794980][T20522] usb 8-1: Using ep0 maxpacket: 32 [ 757.802232][T20522] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 757.836930][T20522] usb 8-1: config 0 has no interface number 0 [ 757.863499][T20522] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 757.880520][T21713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4816'. [ 757.904460][ T27] audit: type=1326 audit(1771265735.143:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 757.936292][T20522] usb 8-1: config 0 interface 1 has no altsetting 0 [ 757.965833][T20522] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 758.035967][T20522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.066303][ T27] audit: type=1326 audit(1771265735.143:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 758.098369][T20522] usb 8-1: Product: syz [ 758.106165][T20522] usb 8-1: Manufacturer: syz [ 758.173524][T20522] usb 8-1: SerialNumber: syz [ 758.235668][T20522] usb 8-1: config 0 descriptor?? [ 758.248096][ T27] audit: type=1326 audit(1771265735.143:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 758.343959][ T27] audit: type=1326 audit(1771265735.143:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 758.381558][ T27] audit: type=1326 audit(1771265735.143:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 758.414330][T21722] netlink: 'syz.8.4818': attribute type 1 has an invalid length. [ 758.519644][T20522] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 758.619537][T20522] cx231xx 8-1:0.1: Failed to read PCB config [ 758.627232][T21724] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 758.649088][ T27] audit: type=1326 audit(1771265735.143:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21699 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7f99bf79 code=0x7ffc0000 [ 758.655637][T20522] cx231xx: probe of 8-1:0.1 failed with error -71 [ 758.695074][T21724] bond5: (slave batadv1): making interface the new active one [ 758.777816][T21724] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 758.794039][T20522] usb 8-1: USB disconnect, device number 12 [ 758.821768][T21726] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4818'. [ 758.862278][T21726] 8021q: adding VLAN 0 to HW filter on device bond5 [ 758.916833][T21735] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 759.236671][T20522] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 759.437801][T20522] usb 8-1: Using ep0 maxpacket: 32 [ 759.444798][T20522] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 759.490627][T20522] usb 8-1: config 0 has no interface number 0 [ 759.530535][T20522] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 759.613380][T20522] usb 8-1: config 0 interface 1 has no altsetting 0 [ 759.665689][T20522] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 759.721888][T20522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.774307][T20522] usb 8-1: Product: syz [ 759.794810][T20522] usb 8-1: Manufacturer: syz [ 759.816325][T20522] usb 8-1: SerialNumber: syz [ 760.325452][T20522] usb 8-1: config 0 descriptor?? [ 760.366808][T20522] usb 8-1: can't set config #0, error -71 [ 760.403134][T20522] usb 8-1: USB disconnect, device number 13 [ 761.388348][T21805] lo: Caught tx_queue_len zero misconfig [ 761.511332][T21808] Invalid ELF header magic: != ELF [ 761.710390][T21814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4842'. [ 761.783062][T21817] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 762.053493][T21825] netlink: 'syz.2.4845': attribute type 1 has an invalid length. [ 762.161440][T21828] device bond6 entered promiscuous mode [ 762.248576][T21828] 8021q: adding VLAN 0 to HW filter on device bond6 [ 762.384131][T21825] 8021q: adding VLAN 0 to HW filter on device bond7 [ 762.398100][T21825] device bond7 entered promiscuous mode [ 762.404556][T21825] bond6: (slave bond7): Enslaving as a backup interface with a down link [ 763.971499][T21881] loop7: detected capacity change from 0 to 1024 [ 764.019338][T21881] EXT4-fs: Ignoring removed orlov option [ 764.064034][T21881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 764.161458][T21881] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 767.835390][T21959] netlink: 'syz.2.4877': attribute type 1 has an invalid length. [ 767.963869][T21959] 8021q: adding VLAN 0 to HW filter on device bond8 [ 768.519969][T21982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4883'. [ 769.197464][T17590] EXT4-fs (loop7): unmounting filesystem. [ 769.214015][T22007] netlink: 'syz.8.4891': attribute type 1 has an invalid length. [ 769.355669][T22007] 8021q: adding VLAN 0 to HW filter on device bond6 [ 769.411547][T22011] bond6: (slave vlan2): Opening slave failed [ 769.611126][T22021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4895'. [ 769.620612][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 769.688033][T22024] netlink: 'syz.7.4896': attribute type 10 has an invalid length. [ 769.745473][T22024] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 770.107391][T22032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.435032][T20155] bond0: (slave bond_slave_0): interface is now down [ 770.454022][T20155] bond0: (slave bond_slave_1): interface is now down [ 770.476891][T20155] bond0: (slave wlan1): interface is now down [ 770.486255][T22049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.533090][T22003] Set syz1 is full, maxelem 0 reached [ 770.579415][T18931] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 770.679884][T18931] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 770.812597][T18931] bond0: (slave wlan1): link status definitely down, disabling slave [ 770.867137][T18931] bond0: now running without any active interface! [ 771.152984][T22071] overlayfs: failed to clone upperpath [ 771.241530][T22076] netlink: 'syz.8.4913': attribute type 1 has an invalid length. [ 771.488301][T22076] 8021q: adding VLAN 0 to HW filter on device bond7 [ 771.545723][T22079] bond7: (slave dummy0): making interface the new active one [ 771.594327][T22079] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 771.616944][ T4273] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 771.625781][ T4273] Bluetooth: hci0: Injecting HCI hardware error event [ 771.636874][ T4273] Bluetooth: hci0: hardware error 0x00 [ 771.668342][T22083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4914'. [ 771.698239][T22096] overlayfs: failed to clone upperpath [ 771.721247][T22083] 8021q: adding VLAN 0 to HW filter on device bond9 [ 771.803665][T22098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.930354][T22105] overlayfs: failed to clone upperpath [ 772.764334][T22084] bond7 (unregistering): (slave dummy0): Releasing active interface [ 772.817419][T22084] bond7 (unregistering): Released all slaves [ 772.895557][T22089] device macvlan2 entered promiscuous mode [ 772.927446][T22089] device team0 entered promiscuous mode [ 772.976974][T22089] device team_slave_0 entered promiscuous mode [ 773.015017][T22089] device team_slave_1 entered promiscuous mode [ 773.072332][T22089] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 773.122039][T22089] bond9: (slave macvlan2): Enslaving as an active interface with an up link [ 773.562293][T18931] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 773.580432][T22101] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4918'. [ 773.638566][T22101] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.648288][T22101] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.657052][T22101] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.665765][T22101] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.776638][ T4273] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 773.915735][T22135] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 774.048517][T22139] loop7: detected capacity change from 0 to 1024 [ 774.141696][T22139] EXT4-fs: Ignoring removed nobh option [ 774.209907][T22146] device ip6gretap2 entered promiscuous mode [ 774.226162][T22146] bond7: (slave ip6gretap2): no link monitoring support [ 774.238230][T22146] bond7: (slave ip6gretap2): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 774.263935][T22139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 774.347436][T22139] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 774.384429][T22146] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 774.655071][T17590] EXT4-fs (loop7): unmounting filesystem. [ 775.357463][T22183] loop7: detected capacity change from 0 to 4096 [ 775.393646][T22183] EXT4-fs (loop7): Test dummy encryption mode enabled [ 775.444460][T22183] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 775.878687][T22183] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1954183539 [ 776.078839][T17590] EXT4-fs (loop7): unmounting filesystem. [ 776.093938][T17590] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 776.197834][T17590] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 776.228599][T17590] EXT4-fs error (device loop7): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 776.277454][T17590] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 776.308736][T17590] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 776.372140][T17590] EXT4-fs error (device loop7): ext4_quota_off:7141: inode #4: comm syz-executor: mark_inode_dirty error [ 776.934574][T22223] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4955'. [ 778.745935][T22257] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.755029][T22257] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.763962][T22257] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.772893][T22257] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.888480][T22273] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 779.565455][T22293] loop5: detected capacity change from 0 to 7 [ 779.597952][T21742] Dev loop5: unable to read RDB block 7 [ 779.603735][T21742] loop5: unable to read partition table [ 779.637810][T21742] loop5: partition table beyond EOD, truncated [ 779.674945][T22293] Dev loop5: unable to read RDB block 7 [ 779.692213][T22293] loop5: unable to read partition table [ 779.724029][T22293] loop5: partition table beyond EOD, truncated [ 779.764239][T22293] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 780.648653][T22328] netlink: 'syz.8.4988': attribute type 10 has an invalid length. [ 781.377065][T22355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4998'. [ 781.590693][T22320] loop7: detected capacity change from 0 to 40427 [ 781.634799][T22320] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 781.684163][T22320] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 781.771514][T22320] F2FS-fs (loop7): Found nat_bits in checkpoint [ 781.960434][T22320] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 781.996476][T22320] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 782.160026][T22379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4985'. [ 782.372945][T22388] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5004'. [ 783.258442][T22393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5005'. [ 783.593582][T17590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 783.593609][T17590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 783.626770][T17590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 783.636211][T17590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 783.662496][T17590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 783.710984][T17590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 783.781795][T17590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 786.919436][ T4905] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.128969][ T4905] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.237663][T22493] overlayfs: failed to clone upperpath [ 787.310781][ T4905] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.465438][ T4905] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.386295][ T4905] bond1: (slave ip6gretap1): Releasing backup interface [ 788.396276][ T4905] device ip6gretap1 left promiscuous mode [ 788.849048][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5052'. [ 789.089026][T22553] overlayfs: failed to clone upperpath [ 790.427750][T22580] binder: 22579:22580 ioctl c0306201 2000000003c0 returned -14 [ 790.762637][ T4905] device hsr_slave_0 left promiscuous mode [ 790.798601][ T4905] device hsr_slave_1 left promiscuous mode [ 790.856828][ T4905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.906078][ T4905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.075647][ T4905] device veth1_macvtap left promiscuous mode [ 791.107145][ T4905] device veth0_macvtap left promiscuous mode [ 791.136684][ T4905] device veth1_vlan left promiscuous mode [ 791.166852][ T4905] device veth0_vlan left promiscuous mode [ 792.822883][ T4905] bond1 (unregistering): Released all slaves [ 793.232407][T22621] overlayfs: failed to clone upperpath [ 795.623482][ T4905] team0 (unregistering): Port device team_slave_1 removed [ 795.892968][ T4905] team0 (unregistering): Port device team_slave_0 removed [ 796.123821][ T4905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.333774][ T4905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.168324][ T4905] bond0 (unregistering): Released all slaves [ 797.268532][T22623] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5075'. [ 797.405883][T22628] bridge2: port 1(veth3) entered blocking state [ 797.435462][T22628] bridge2: port 1(veth3) entered disabled state [ 797.459321][T22628] device veth3 entered promiscuous mode [ 797.478833][T22633] bond2: (slave ip6gretap1): making interface the new active one [ 797.505022][T22633] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 797.531160][T22656] netlink: 'syz.8.5089': attribute type 10 has an invalid length. [ 798.421995][T22720] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 798.981491][T22691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.068902][T22691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.013145][T22691] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.032801][T22691] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.052235][T22691] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.445669][T22691] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.454861][T22691] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.463812][T22691] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.706541][ T8456] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 802.906514][ T8456] usb 8-1: Using ep0 maxpacket: 32 [ 802.913468][ T8456] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 802.950504][ T8456] usb 8-1: config 0 has no interface number 0 [ 802.976738][ T8456] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 803.024108][ T8456] usb 8-1: config 0 interface 1 has no altsetting 0 [ 803.052929][ T8456] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 803.093413][ T8456] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.128411][ T8456] usb 8-1: Product: syz [ 803.153221][ T8456] usb 8-1: Manufacturer: syz [ 803.171662][ T8456] usb 8-1: SerialNumber: syz [ 803.198291][ T8456] usb 8-1: config 0 descriptor?? [ 803.432172][ T8456] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 803.474890][ T8456] cx231xx 8-1:0.1: Failed to read PCB config [ 803.496645][ T8456] cx231xx: probe of 8-1:0.1 failed with error -71 [ 803.532405][ T8456] usb 8-1: USB disconnect, device number 14 [ 804.726650][ T8456] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 804.916563][ T8456] usb 8-1: Using ep0 maxpacket: 32 [ 804.923466][ T8456] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 804.976941][ T8456] usb 8-1: config 0 has no interface number 0 [ 804.983084][ T8456] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 805.034194][ T8456] usb 8-1: config 0 interface 1 has no altsetting 0 [ 805.087650][ T8456] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 805.122487][ T8456] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.279646][ T8456] usb 8-1: Product: syz [ 805.284189][ T8456] usb 8-1: Manufacturer: syz [ 805.289114][ T8456] usb 8-1: SerialNumber: syz [ 805.307806][ T8456] usb 8-1: config 0 descriptor?? [ 806.225138][ T8456] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 806.292190][ T8456] cx231xx 8-1:0.1: Failed to read PCB config [ 806.346620][ T8456] cx231xx: probe of 8-1:0.1 failed with error -71 [ 806.391153][ T8456] usb 8-1: USB disconnect, device number 15 [ 806.527328][T22859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5151'. [ 807.578021][T22909] netlink: 'syz.8.5168': attribute type 6 has an invalid length. [ 807.645530][T22909] netlink: 'syz.8.5168': attribute type 6 has an invalid length. [ 808.345153][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.351574][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.524585][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5176'. [ 809.973570][T22985] loop7: detected capacity change from 0 to 512 [ 810.024950][T22985] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 810.136060][T22985] EXT4-fs (loop7): warning: maximal mount count reached, running e2fsck is recommended [ 810.177221][T22985] EXT4-fs error (device loop7): ext4_orphan_get:1399: comm syz.7.5187: inode #15: comm syz.7.5187: iget: illegal inode # [ 810.260076][T22985] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.5187: couldn't read orphan inode 15 (err -117) [ 810.317405][T22985] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 810.455748][T17590] EXT4-fs (loop7): unmounting filesystem. [ 814.517594][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5211'. [ 816.820330][T23133] overlayfs: failed to clone upperpath [ 816.931542][T23137] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 819.403327][T23187] loop7: detected capacity change from 0 to 512 [ 819.570574][T23187] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 819.616619][T23187] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 820.119506][T17590] EXT4-fs (loop7): unmounting filesystem. [ 820.979629][T23236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5252'. [ 823.394513][T23295] netlink: 'syz.3.5269': attribute type 1 has an invalid length. [ 823.481829][T23297] device bond4 entered promiscuous mode [ 823.598615][T23297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 823.642503][T23295] device bridge3 entered promiscuous mode [ 823.690676][T23295] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 823.699366][ T41] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 823.762856][T19496] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 823.865465][T22390] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 823.962827][T23307] overlayfs: failed to clone lowerpath [ 824.023813][T23312] overlayfs: failed to clone lowerpath [ 824.339275][T23320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5277'. [ 824.666773][T23328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5279'. [ 824.721181][T23328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5279'. [ 825.351476][T23353] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 825.546117][T23350] loop7: detected capacity change from 0 to 8192 [ 825.798132][T23361] overlayfs: failed to clone upperpath [ 825.845785][T23361] overlayfs: failed to clone lowerpath [ 826.604910][T23387] netlink: 'syz.7.5299': attribute type 39 has an invalid length. [ 827.642541][T23415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 827.747066][T23415] bond2: (slave bond3): Enslaving as an active interface with a down link [ 829.187802][T23438] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 830.202821][T23469] xt_hashlimit: max too large, truncated to 1048576 [ 831.821650][ T11] ------------[ cut here ]------------ [ 831.828219][ T11] WARNING: CPU: 1 PID: 11 at io_uring/io_uring.c:2890 io_ring_exit_work+0x336/0x763 [ 831.837795][ T11] Modules linked in: [ 831.841740][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 831.849189][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 831.859309][ T11] Workqueue: events_unbound io_ring_exit_work [ 831.865411][ T11] RIP: 0010:io_ring_exit_work+0x336/0x763 [ 831.871236][ T11] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 1b 2d 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 1c 46 5e f7 e9 16 fe ff ff e8 12 46 5e f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1 [ 831.890907][ T11] RSP: 0018:ffffc90000107ac0 EFLAGS: 00010293 [ 831.897018][ T11] RAX: ffffffff8a242d9e RBX: ffff88802d5b4018 RCX: ffff88813fe83b80 [ 831.905034][ T11] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 831.913044][ T11] RBP: ffffc90000107c30 R08: ffffc90000107a47 R09: 1ffff92000020f48 [ 831.921071][ T11] R10: dffffc0000000000 R11: fffff52000020f49 R12: dffffc0000000000 [ 831.929065][ T11] R13: ffff88802d5b4000 R14: 000000010000cf29 R15: 000000010000cf2c [ 831.937144][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 831.946076][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.952674][ T11] CR2: 00007f4814fe96c0 CR3: 000000005bf63000 CR4: 00000000003506e0 [ 831.960662][ T11] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 831.968695][ T11] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 831.976704][ T11] Call Trace: [ 831.979995][ T11] [ 831.982927][ T11] ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6 [ 831.988756][ T11] ? preempt_schedule_thunk+0x16/0x18 [ 831.994139][ T11] ? process_one_work+0x7b0/0x1160 [ 831.999270][ T11] process_one_work+0x8a2/0x1160 [ 832.004214][ T11] ? worker_detach_from_pool+0x240/0x240 [ 832.009868][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 832.014888][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 832.020448][ T11] ? kthread_data+0x4b/0xc0 [ 832.024961][ T11] worker_thread+0xaa2/0x1270 [ 832.029671][ T11] kthread+0x29d/0x330 [ 832.033734][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 832.038785][ T11] ? kthread_blkcg+0xd0/0xd0 [ 832.043382][ T11] ret_from_fork+0x1f/0x30 [ 832.047837][ T11] [ 832.050866][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 832.058141][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 832.065519][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 832.075569][ T11] Workqueue: events_unbound io_ring_exit_work [ 832.081648][ T11] Call Trace: [ 832.084935][ T11] [ 832.087870][ T11] dump_stack_lvl+0x188/0x24e [ 832.092556][ T11] ? memcpy+0x3c/0x60 [ 832.096544][ T11] ? show_regs_print_info+0x12/0x12 [ 832.101782][ T11] ? load_image+0x400/0x400 [ 832.106291][ T11] panic+0x2e5/0x730 [ 832.110186][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 832.114691][ T11] ? ret_from_fork+0x1f/0x30 [ 832.119281][ T11] __warn+0x2f8/0x4f0 [ 832.123254][ T11] ? io_ring_exit_work+0x336/0x763 [ 832.128376][ T11] ? io_ring_exit_work+0x336/0x763 [ 832.133483][ T11] report_bug+0x2ba/0x4f0 [ 832.137816][ T11] ? io_ring_exit_work+0x336/0x763 [ 832.142936][ T11] handle_bug+0x3a/0x70 [ 832.147107][ T11] exc_invalid_op+0x16/0x40 [ 832.151614][ T11] asm_exc_invalid_op+0x16/0x20 [ 832.156485][ T11] RIP: 0010:io_ring_exit_work+0x336/0x763 [ 832.162220][ T11] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 1b 2d 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 1c 46 5e f7 e9 16 fe ff ff e8 12 46 5e f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1 [ 832.181823][ T11] RSP: 0018:ffffc90000107ac0 EFLAGS: 00010293 [ 832.187886][ T11] RAX: ffffffff8a242d9e RBX: ffff88802d5b4018 RCX: ffff88813fe83b80 [ 832.195882][ T11] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 832.203862][ T11] RBP: ffffc90000107c30 R08: ffffc90000107a47 R09: 1ffff92000020f48 [ 832.211829][ T11] R10: dffffc0000000000 R11: fffff52000020f49 R12: dffffc0000000000 [ 832.219795][ T11] R13: ffff88802d5b4000 R14: 000000010000cf29 R15: 000000010000cf2c [ 832.227772][ T11] ? io_ring_exit_work+0x336/0x763 [ 832.232900][ T11] ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6 [ 832.238708][ T11] ? preempt_schedule_thunk+0x16/0x18 [ 832.244086][ T11] ? process_one_work+0x7b0/0x1160 [ 832.249193][ T11] process_one_work+0x8a2/0x1160 [ 832.254141][ T11] ? worker_detach_from_pool+0x240/0x240 [ 832.259779][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 832.264813][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 832.270358][ T11] ? kthread_data+0x4b/0xc0 [ 832.274868][ T11] worker_thread+0xaa2/0x1270 [ 832.279560][ T11] kthread+0x29d/0x330 [ 832.283632][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 832.288655][ T11] ? kthread_blkcg+0xd0/0xd0 [ 832.293239][ T11] ret_from_fork+0x1f/0x30 [ 832.297667][ T11] [ 832.301257][ T11] Kernel Offset: disabled [ 832.305706][ T11] Rebooting in 86400 seconds..