last executing test programs: 8m50.197684704s ago: executing program 32 (id=16): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000008c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f000000d080)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x2, 0x2, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r5, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) syz_fuse_handle_req(r0, &(0x7f0000006c40)="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", 0x2000, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)={0x90, 0x0, 0xff, {0x5, 0x2, 0x740, 0x2, 0xb0, 0x4, {0x5, 0x3, 0x3, 0x4, 0x9, 0x8000000008, 0x8, 0x2c06, 0x5, 0x4000, 0x7f, r5, r3, 0x3, 0x9465}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m40.186516575s ago: executing program 5 (id=953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 6m39.936291103s ago: executing program 5 (id=958): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80442, 0x67) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)='$f', 0x2}], 0x1, 0x5, 0x178) close(0xffffffffffffffff) close(r2) lgetxattr(0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 6m39.679865382s ago: executing program 5 (id=962): epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000c001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6m39.475718279s ago: executing program 5 (id=964): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9, 0x200, 0xff, 0x6, 0x8000000000000001, 0x8000, 0xffffffffffffff81, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000009380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x1, 0x3, 0x0) 6m39.125394791s ago: executing program 5 (id=966): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) clock_gettime(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) syz_clone3(&(0x7f00000009c0)={0x200000, 0x0, 0x0, &(0x7f0000000800), {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) setpriority(0x1, 0x0, 0xb) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000780)={[{@journal_checksum}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@bsdgroups}]}, 0x0, 0x60b, &(0x7f0000000140)="$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") truncate(0x0, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) 6m38.445594143s ago: executing program 5 (id=972): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7b24, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6m38.349450147s ago: executing program 33 (id=972): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7b24, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3m41.474269108s ago: executing program 2 (id=2090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xa8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 3m40.334313637s ago: executing program 2 (id=2095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x0) listen(r1, 0x80000003) 3m40.140941633s ago: executing program 2 (id=2097): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 3m39.91987726s ago: executing program 2 (id=2098): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt(0xffffffffffffffff, 0x1000, 0xa7b, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bae000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m38.498843238s ago: executing program 2 (id=2109): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 3m36.682148398s ago: executing program 2 (id=2114): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x884) 3m20.187562794s ago: executing program 34 (id=2114): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x884) 3m3.016488442s ago: executing program 7 (id=2297): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$binfmt_aout(r1, 0x0, 0xffffffdb) 3m1.857670461s ago: executing program 7 (id=2304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5355, 0x1, 0x2001, 0x99}, &(0x7f0000000400), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) 3m0.691012599s ago: executing program 7 (id=2310): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) 2m58.761703463s ago: executing program 7 (id=2315): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x1000}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000c4}, 0x4) 2m58.620102948s ago: executing program 7 (id=2319): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 2m57.451894417s ago: executing program 7 (id=2322): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0xc0) sync() r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000400), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00), 0x0, r2) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x0, 0x1, [{r1, 0x0, 0x4000}]}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 2m41.157057396s ago: executing program 35 (id=2322): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0xc0) sync() r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000400), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00), 0x0, r2) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x0, 0x1, [{r1, 0x0, 0x4000}]}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 2m29.630008818s ago: executing program 6 (id=2360): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340), 0x0) add_key$keyring(&(0x7f0000002280), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb7e355d3232e6301ba6d90a058d7845", 0x11}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0xff00, 0x100}, 0x8) 2m28.005401391s ago: executing program 6 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$getregs(0xc, r3, 0xffffffffffffffff, &(0x7f0000000400)=""/190) 2m26.911630148s ago: executing program 6 (id=2371): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m26.673020895s ago: executing program 6 (id=2374): io_setup(0x4, &(0x7f00000014c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') io_setup(0x2278, &(0x7f0000000180)=0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) statfs(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x7, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8, 0x0, r3, 0x0, 0x0, 0xfffffffffffffffd}]) io_submit(r1, 0x3, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xe7b, r0, &(0x7f0000000040)="e184d94aefaf6ca993bf", 0xa, 0xb, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc79, 0xffffffffffffffff, &(0x7f0000000140)="a0aaad933b4091b4634a67e4ff65b5f2871d9fbcc9cbc1c90622b2fb654fe1b7fec022bd2aa5f50bd9bc5b0f491ed8b5e17f67746c3c4fcfe2af872c958c95be3d5f83ea12c0631d70b6e5288bcb751939430a813829df3bf54fe2548d005843b6f2041495a04a38dbe2ee", 0x6b, 0x1, 0x0, 0x2, r0}]) 2m25.876662812s ago: executing program 6 (id=2375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) 2m24.327177593s ago: executing program 6 (id=2380): shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) creat(0x0, 0xecf86c37d53049d0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x20001a, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa4401, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000200)="ddc62abd9035929cbc0903f43f5fea566671dc0a406ee3fcb7b8b08392882ae95aa72f0ef5f5e81c2de20f43fd144fbddc12e5", 0x5, r0}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 2m23.870366828s ago: executing program 36 (id=2380): shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) creat(0x0, 0xecf86c37d53049d0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x20001a, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa4401, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000200)="ddc62abd9035929cbc0903f43f5fea566671dc0a406ee3fcb7b8b08392882ae95aa72f0ef5f5e81c2de20f43fd144fbddc12e5", 0x5, r0}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 1m29.877897356s ago: executing program 8 (id=2585): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) 1m26.395807791s ago: executing program 8 (id=2599): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x4040010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 1m25.185537551s ago: executing program 8 (id=2606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xd, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) 1m23.920952613s ago: executing program 8 (id=2610): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000000100)='./bus\x00', 0x44) shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x4000) lstat(&(0x7f00000001c0)='.\x00', &(0x7f00000003c0)) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) mkdir(&(0x7f0000000e40)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 1m21.514118682s ago: executing program 8 (id=2621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2a, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1m17.695656659s ago: executing program 8 (id=2635): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd4f163e6ee09ede3, 0x4c033, 0xffffffffffffffff, 0x8000000) 1m17.36998827s ago: executing program 37 (id=2635): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd4f163e6ee09ede3, 0x4c033, 0xffffffffffffffff, 0x8000000) 10.827080532s ago: executing program 1 (id=2832): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010bd28550000000000000109022400010000c003402be1c2473bd909040000010300030009210a000400222900090556acc930eeed026e021643946809271e62ba43"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000000080)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1000000, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(camellia)\x00'}, 0xc0, "6e000b000000002000000000190000000000feffff7f0000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}}, 0x44050) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.407311719s ago: executing program 4 (id=2838): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 9.158846577s ago: executing program 4 (id=2840): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 8.139572571s ago: executing program 9 (id=2841): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 8.075444333s ago: executing program 4 (id=2843): capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.819761261s ago: executing program 9 (id=2844): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x8, 0x4e21, 0x0, 0xa, 0x80, 0xa0, 0x2c}, {0x8, 0xa, 0x10001, 0x3, 0x8000, 0x8, 0x100000001}, {0x8, 0x2, 0xd1, 0xe}, 0x4, 0x1, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d3, 0x33}, 0x8a50eb0400437059, @in6=@mcast2, 0x89d6, 0x2, 0x0, 0x72, 0x80, 0xfffffffb, 0x6}}, 0xe8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@phonet={0x23, 0x9, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=ANY=[], 0x9}, 0x4000009) 6.759838317s ago: executing program 9 (id=2846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 6.562596843s ago: executing program 4 (id=2847): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 6.522185564s ago: executing program 1 (id=2848): socket$inet6(0xa, 0x3, 0x8000000003c) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) close(r1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r3, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d", @ANYRESHEX=r2], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 6.005128341s ago: executing program 1 (id=2850): syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) 5.263461676s ago: executing program 9 (id=2851): r0 = epoll_create(0x3) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0x4a) waitid(0x0, r2, 0x0, 0x61000006, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$netlink(0x10, 0x3, 0x4) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2008}) 5.065051203s ago: executing program 0 (id=2852): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setitimer(0x2, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = gettid() fcntl$setown(r0, 0x8, r1) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000d1d) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') 5.046923373s ago: executing program 4 (id=2854): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 4.050834956s ago: executing program 1 (id=2855): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r6, 0xc}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1}, 0x857) 3.947901089s ago: executing program 0 (id=2856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.947634279s ago: executing program 4 (id=2857): r0 = syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001340)={0x40, 0xfffffffc}, 0x10) 3.848790743s ago: executing program 3 (id=2858): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open$dir(0x0, 0x200000, 0x1) symlinkat(0x0, r1, &(0x7f0000000700)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r3 = dup2(r2, r2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) read$char_usb(r3, &(0x7f00000000c0)=""/192, 0xc0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 3.738540666s ago: executing program 9 (id=2859): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@utf8}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2.786098798s ago: executing program 0 (id=2860): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) 2.7459504s ago: executing program 3 (id=2861): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="aefd", 0x2}], 0x1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.743880513s ago: executing program 9 (id=2862): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x3000c085) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x12cd) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0x0, 0x44084) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) 1.687884355s ago: executing program 0 (id=2863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x71548000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x2, 0x101000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xb0}, [@ldst={0x5, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 1.677721195s ago: executing program 1 (id=2864): write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001", 0x21) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xc506}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.386389434s ago: executing program 3 (id=2865): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 636.309229ms ago: executing program 1 (id=2866): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 634.825979ms ago: executing program 0 (id=2867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 491.875434ms ago: executing program 3 (id=2868): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r0, 0xffffffffffffffff, 0x0) 271.815691ms ago: executing program 0 (id=2869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000300)="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", 0xfc) 252.527782ms ago: executing program 3 (id=2870): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xf0}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb773}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054) 0s ago: executing program 3 (id=2871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x40880) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6) kernel console output (not intermixed with test programs): [ 274.506111][ T9289] netlink: 'syz.2.1494': attribute type 4 has an invalid length. [ 274.955105][ T9297] loop2: detected capacity change from 0 to 4096 [ 274.989362][ T9297] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 275.019270][ T9297] EXT4-fs (loop2): Test dummy encryption mode enabled [ 275.071256][ T9297] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 275.089163][ T9297] System zones: 0-5 [ 275.157654][ T9297] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 275.492196][ T9317] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 275.577853][ T9317] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 275.636788][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1492'. [ 275.700829][ T9297] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 275.705631][ T9319] device bridge_slave_1 left promiscuous mode [ 275.732008][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.755298][ T9297] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #15: comm syz.2.1485: mark_inode_dirty error [ 275.788346][ T9319] device bridge_slave_0 left promiscuous mode [ 275.795368][ T9297] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 49: comm syz.2.1485: lblock 1 mapped to illegal pblock 49 (length 1) [ 275.821550][ T9297] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 275.825758][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.830437][ T9297] EXT4-fs error (device loop2): ext4_write_dquot:6821: comm syz.2.1485: Failed to commit dquot type 0 [ 275.853437][ T9297] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #4: block 65: comm syz.2.1485: lblock 1 mapped to illegal pblock 65 (length 1) [ 275.869345][ T9297] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 275.877596][ T9297] EXT4-fs error (device loop2): ext4_write_dquot:6821: comm syz.2.1485: Failed to commit dquot type 1 [ 275.898264][ T9297] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1485: Invalid inode table block 4 in block_group 0 [ 275.998154][ T9297] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 276.015058][ T9297] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #15: comm syz.2.1485: mark_inode_dirty error [ 276.035988][ T9319] bond0: (slave bridge0): Releasing backup interface [ 276.148701][ T9297] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1485: Invalid block bitmap block 2 in block_group 0 [ 276.235067][ T9327] loop6: detected capacity change from 0 to 512 [ 276.284679][ T9297] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 276.317893][ T9327] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 276.353017][ T9297] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 276.369748][ T9327] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.452631][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 276.506550][ T6513] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 276.631195][ T7469] EXT4-fs (loop6): unmounting filesystem. [ 278.343396][ T9363] binder_alloc: 9362: binder_alloc_buf size 16384 failed, no address space [ 278.395786][ T9363] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 278.652345][ T9371] netlink: 'syz.2.1513': attribute type 1 has an invalid length. [ 278.703721][ T9371] device bond4 entered promiscuous mode [ 278.714417][ T9371] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.170665][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 279.199973][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 279.440038][ T9396] sctp: [Deprecated]: syz.0.1523 (pid 9396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.440038][ T9396] Use struct sctp_sack_info instead [ 279.647543][ T9401] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 279.784018][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1527'. [ 279.826563][ T9405] bridge4: port 1(veth3) entered blocking state [ 279.834994][ T9405] bridge4: port 1(veth3) entered disabled state [ 279.866831][ T9405] device veth3 entered promiscuous mode [ 279.992847][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1531'. [ 280.663084][ T9437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1540'. [ 280.692295][ T9439] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1540'. [ 281.041860][ T26] audit: type=1326 audit(1780455907.559:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.3.1543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfdbf9ce59 code=0x0 [ 281.090231][ T9450] overlayfs: failed to clone upperpath [ 281.245019][ T9455] netlink: 'syz.6.1545': attribute type 10 has an invalid length. [ 281.269180][ T9455] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 281.309117][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 281.355851][ T9455] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1545'. [ 281.378948][ T9455] device bridge_slave_1 left promiscuous mode [ 281.406391][ T9455] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.424168][ T9455] device bridge_slave_0 left promiscuous mode [ 281.440644][ T9455] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.549414][ T9455] bond0: (slave bridge0): Releasing backup interface [ 281.680443][ T9464] netlink: 1320 bytes leftover after parsing attributes in process `syz.4.1549'. [ 282.720409][ T9477] loop2: detected capacity change from 0 to 512 [ 282.834650][ T9477] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1555: inode has both inline data and extents flags [ 282.882755][ T9481] bond6: (slave ip6gretap2): making interface the new active one [ 282.899481][ T9477] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1555: couldn't read orphan inode 15 (err -117) [ 282.945935][ T9481] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 282.963398][ T9477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 283.090617][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 284.290972][ T26] audit: type=1800 audit(1780455910.560:502): pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1566" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 285.165453][ T9552] binder: 9550:9552 ioctl c0306201 200000000080 returned -14 [ 285.182905][ T9552] binder: 9550:9552 ioctl c0306201 2000000003c0 returned -14 [ 286.290197][ T9586] netlink: 'syz.4.1597': attribute type 10 has an invalid length. [ 286.390248][ T9586] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 286.472331][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 286.625622][ T9591] bond0: (slave bridge0): Releasing backup interface [ 286.805904][ T4596] bond0: (slave bond_slave_0): interface is now down [ 286.825577][ T4596] bond0: (slave bond_slave_1): interface is now down [ 286.831362][ T9602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.909036][ T46] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 286.926734][ T46] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 286.957856][ T46] bond0: now running without any active interface! [ 288.927918][ T9651] netlink: 'syz.0.1615': attribute type 10 has an invalid length. [ 288.974909][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1615'. [ 292.738707][ T9715] netlink: 'syz.2.1634': attribute type 10 has an invalid length. [ 292.748457][ T9715] bridge0: port 3(syz_tun) entered disabled state [ 292.755240][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.762732][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.900382][ T9715] bridge0: port 3(syz_tun) entered blocking state [ 292.907067][ T9715] bridge0: port 3(syz_tun) entered forwarding state [ 292.913897][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.921096][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.928540][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.935822][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.957560][ T9715] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 292.997672][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1634'. [ 293.040295][ T9717] device syz_tun left promiscuous mode [ 293.074753][ T9717] bridge0: port 3(syz_tun) entered disabled state [ 293.100099][ T9717] device bridge_slave_1 left promiscuous mode [ 293.112203][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.131448][ T9717] device bridge_slave_0 left promiscuous mode [ 293.141165][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.204775][ T9717] bond0: (slave bridge0): Releasing backup interface [ 293.924977][ T129] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 294.141238][ T129] usb 7-1: Using ep0 maxpacket: 8 [ 294.151483][ T129] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 294.162134][ T129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.170964][ T129] usb 7-1: Product: syz [ 294.175758][ T129] usb 7-1: Manufacturer: syz [ 294.180545][ T129] usb 7-1: SerialNumber: syz [ 294.201177][ T129] usb 7-1: config 0 descriptor?? [ 294.220191][ T129] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 296.057851][ T9771] loop2: detected capacity change from 0 to 512 [ 296.103695][ T9771] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 296.134115][ T9771] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 296.432212][ T9777] netlink: 'syz.4.1660': attribute type 1 has an invalid length. [ 296.449378][ T9777] netlink: 'syz.4.1660': attribute type 2 has an invalid length. [ 296.607851][ T129] gspca_sonixj: reg_w1 err -71 [ 296.686774][ T129] sonixj: probe of 7-1:0.0 failed with error -71 [ 296.715413][ T129] usb 7-1: USB disconnect, device number 3 [ 297.586029][ T129] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 297.603071][ T9804] tipc: Failed to remove unknown binding: 66,0,0/0:4258054911/4258054912 [ 297.620936][ T9804] tipc: Failed to remove unknown binding: 66,0,0/0:4258054911/4258054912 [ 297.809808][ T129] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.831589][ T129] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 297.864435][ T129] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.902083][ T129] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.921538][ T129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.940662][ T129] usb 7-1: Product: syz [ 297.951507][ T129] usb 7-1: Manufacturer: syz [ 297.962425][ T129] usb 7-1: SerialNumber: syz [ 298.006987][ T129] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 298.023301][ T129] cdc_ncm 7-1:1.0: bind() failure [ 298.275132][ T9068] usb 7-1: USB disconnect, device number 4 [ 300.110528][ T9848] binder_alloc: 9847: binder_alloc_buf size 16384 failed, no address space [ 300.188781][ T9848] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 300.444787][ T9858] loop2: detected capacity change from 0 to 512 [ 300.476525][ T9858] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 300.688704][ T9858] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 300.912584][ T9858] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 301.097141][ T9858] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 301.105108][ T9858] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 301.114535][ T9858] EXT4-fs (loop2): failed to initialize system zone (-117) [ 301.124191][ T9858] EXT4-fs (loop2): mount failed [ 301.286472][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1689'. [ 301.469124][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1693'. [ 301.509982][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1693'. [ 302.383876][ T9876] loop6: detected capacity change from 0 to 40427 [ 302.420735][ T9876] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 302.437694][ T9876] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 302.461853][ T9876] F2FS-fs (loop6): invalid crc value [ 303.593959][ T9876] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 303.861543][ T9876] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 303.871822][ T9876] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 303.927046][ T9873] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 303.970736][ T9888] f2fs_ckpt-7:6: attempt to access beyond end of device [ 303.970736][ T9888] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 304.016004][ T9903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1700'. [ 305.403599][ T9916] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1703'. [ 305.681898][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1707'. [ 308.883358][ C0] sched: RT throttling activated [ 310.858669][ T4283] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 311.212379][ T9068] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 311.290275][ T4283] Bluetooth: hci1: Invalid handle: 0xff00 > 0x0eff [ 311.597903][ T9068] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 311.687996][ T9068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.928612][ T9068] usb 3-1: config 0 descriptor?? [ 311.941817][ T9068] cp210x 3-1:0.0: cp210x converter detected [ 312.245232][T10032] delete_channel: no stack [ 312.255282][T10032] delete_channel: no stack [ 312.398072][ T9068] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 312.793069][ T9068] usb 3-1: cp210x converter now attached to ttyUSB0 [ 312.877293][ T9068] usb 3-1: USB disconnect, device number 10 [ 312.945844][ T9068] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 312.996812][ T9068] cp210x 3-1:0.0: device disconnected [ 315.184619][T10062] gre0: MTU too low for tipc bearer [ 315.198618][T10062] tipc: Enabling of bearer rejected, failed to enable media [ 315.668109][T10072] netlink: 'syz.3.1750': attribute type 1 has an invalid length. [ 315.716343][T10072] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.872092][T10072] bond3: (slave ip6gretap1): making interface the new active one [ 315.889604][T10072] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 315.913384][T10076] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 316.029979][T10079] loop6: detected capacity change from 0 to 164 [ 316.084239][T10079] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 318.107383][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 319.534877][T10140] loop2: detected capacity change from 0 to 512 [ 319.550893][T10140] EXT4-fs: Ignoring removed i_version option [ 319.569071][T10140] EXT4-fs: Ignoring removed oldalloc option [ 319.587866][T10140] EXT4-fs (loop2): Test dummy encryption mode enabled [ 319.632559][T10140] EXT4-fs (loop2): 1 truncate cleaned up [ 319.642776][T10140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.841957][T10140] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #13: comm syz.2.1771: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 319.878891][T10140] EXT4-fs error (device loop2): ext4_free_branches:1043: inode #13: block 234881024: comm syz.2.1771: Read failure [ 320.048727][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 320.261472][T10152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1774'. [ 320.592778][ T9068] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 321.499671][ T9068] usb 3-1: Using ep0 maxpacket: 32 [ 321.506905][ T9068] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 321.515374][ T9068] usb 3-1: config 0 has no interface number 0 [ 321.521519][ T9068] usb 3-1: config 0 interface 12 has no altsetting 0 [ 321.530814][ T9068] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 321.540018][ T9068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.548130][ T9068] usb 3-1: Product: syz [ 321.552757][ T9068] usb 3-1: Manufacturer: syz [ 321.624247][ T9068] usb 3-1: SerialNumber: syz [ 321.630523][T10184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1786'. [ 321.644698][ T9068] usb 3-1: config 0 descriptor?? [ 323.025476][ T4283] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff [ 323.056596][T10216] loop6: detected capacity change from 0 to 256 [ 323.067896][T10219] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 323.075485][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 323.116644][T10216] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.157867][T10216] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 323.184855][T10216] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 325.563974][ T9068] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 325.583929][ T9068] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 325.602450][ T9068] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 325.627348][ T9068] f81534: probe of 3-1:0.12 failed with error -71 [ 325.637455][ T9068] usb 3-1: USB disconnect, device number 11 [ 325.760982][T10260] loop6: detected capacity change from 0 to 1024 [ 325.855238][T10260] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #3: block 1: comm syz.6.1814: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.983059][T10260] Quota error (device loop6): write_blk: dquota write failed [ 326.041461][T10260] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 326.058785][T10260] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.1814: Failed to acquire dquot type 0 [ 326.128722][T10260] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.1814: Freeing blocks not in datazone - block = 0, count = 4096 [ 326.275201][T10260] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.1814: Invalid inode bitmap blk 0 in block_group 0 [ 326.291601][ T9] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.959024][T10260] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 326.974666][T10260] EXT4-fs (loop6): 1 orphan inode deleted [ 326.982154][T10260] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 327.127001][ T9] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 327.164499][ T9] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 327.234775][ T7469] EXT4-fs (loop6): unmounting filesystem. [ 327.252028][ T9] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 327.273735][ T9] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 327.287631][ T9] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 327.325165][T10276] fuse: Bad value for 'fd' [ 327.356895][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.363856][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.627353][T10287] loop2: detected capacity change from 0 to 1024 [ 327.649407][T10287] ext4: Unknown parameter 'no' [ 328.653341][T10304] netlink: 'syz.0.1834': attribute type 1 has an invalid length. [ 328.727484][T10304] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.769366][T10304] bond6: (slave ip6gretap2): making interface the new active one [ 328.780049][T10304] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 328.795197][T10312] bond0: (slave team0): Releasing backup interface [ 328.821734][T10312] batman_adv: batadv0: Removing interface: dummy0 [ 328.847471][T10312] bond1: (slave veth0_to_bond): Releasing active interface [ 328.878635][T10312] bond0: (slave bond_slave_0): Releasing backup interface [ 328.910914][T10312] bond0: (slave bond_slave_1): Releasing backup interface [ 329.212136][T10312] team0: Port device team_slave_0 removed [ 329.628624][T10312] team0: Port device team_slave_1 removed [ 329.681418][T10312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.750407][T10312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.768575][T10312] bond3: (slave ip6gretap1): Releasing active interface [ 331.478490][T10344] device syzkaller0 entered promiscuous mode [ 332.571613][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1839'. [ 333.148240][T10382] device ip6gre1 entered promiscuous mode [ 333.167378][ T129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.182172][T10382] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.195347][ T129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.798718][ T7319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.042265][T10392] netlink: 'syz.6.1850': attribute type 1 has an invalid length. [ 334.157702][T10392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.197776][ T129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.300217][T10400] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 334.378785][T10392] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 334.583168][T10412] loop2: detected capacity change from 0 to 512 [ 334.682480][T10412] EXT4-fs (loop2): orphan cleanup on readonly fs [ 334.729654][ T7319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.771061][T10412] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.1857: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0) [ 334.815702][T10412] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1857: couldn't read orphan inode 13 (err -117) [ 334.941299][T10412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 335.153220][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 335.478615][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 335.682329][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 336.019128][T10429] team0: Port device team_slave_0 removed [ 337.069986][ T4283] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 337.079335][ T4283] Bluetooth: hci4: Injecting HCI hardware error event [ 337.095579][ T4281] Bluetooth: hci4: hardware error 0x00 [ 337.631250][ T7319] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 338.097413][ T7319] usb 3-1: Using ep0 maxpacket: 16 [ 338.110545][ T7319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 338.270415][ T7319] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 338.286602][ T7319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.306032][ T7319] usb 3-1: Product: syz [ 338.310339][ T7319] usb 3-1: Manufacturer: syz [ 338.357078][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 338.408579][ T7319] usb 3-1: SerialNumber: syz [ 338.416335][ T7319] usb 3-1: config 0 descriptor?? [ 338.427644][ T7319] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 338.437116][ T7319] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 339.397131][ T4281] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 339.555600][ T7319] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 340.081528][ T7319] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 340.094414][ T7319] em28xx 3-1:0.0: board has no eeprom [ 340.129585][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 340.300814][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 341.247193][T10535] netlink: 'syz.4.1896': attribute type 1 has an invalid length. [ 341.270046][T10535] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.321416][T10535] bond7: (slave ip6gretap3): making interface the new active one [ 341.331008][T10535] bond7: (slave ip6gretap3): Enslaving as an active interface with an up link [ 341.424536][T10539] loop6: detected capacity change from 0 to 1024 [ 341.446764][T10539] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.462893][T10539] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 341.480299][T10449] em28xx 3-1:0.0: reading from i2c device at 0x8 failed (error=-5) [ 341.552586][ T7319] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 341.566442][ T7319] em28xx 3-1:0.0: dvb set to bulk mode. [ 341.609143][ T7319] usb 3-1: USB disconnect, device number 12 [ 341.624144][ T7319] em28xx 3-1:0.0: Disconnecting em28xx [ 341.650860][ T7792] em28xx 3-1:0.0: Binding DVB extension [ 341.834867][ T7792] em28xx 3-1:0.0: Registering input extension [ 341.848411][ T7319] em28xx 3-1:0.0: Closing input extension [ 341.907661][ T7319] em28xx 3-1:0.0: Freeing device [ 341.998546][T10561] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1905'. [ 342.132497][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1906'. [ 342.702144][T10596] loop6: detected capacity change from 0 to 1024 [ 342.727412][T10596] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 343.959632][T10608] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1921'. [ 343.960877][T10610] overlayfs: failed to clone upperpath [ 344.023588][T10608] netlink: 'syz.6.1921': attribute type 4 has an invalid length. [ 344.052897][T10608] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1921'. [ 344.069733][T10608] .`: renamed from bond0 [ 344.379801][ T7319] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 344.589022][T10618] overlayfs: failed to clone upperpath [ 344.625343][ T7319] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.727609][ T7319] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 344.765336][ T7319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 344.780420][ T7319] usb 3-1: Product: syz [ 344.786956][ T7319] usb 3-1: Manufacturer: syz [ 344.792003][ T7319] usb 3-1: SerialNumber: syz [ 345.031285][ T7319] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 345.826480][ T4281] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 345.836646][ T9068] usb 3-1: USB disconnect, device number 13 [ 345.867489][ T9068] usblp0: removed [ 346.211272][T10653] tipc: Cannot configure node identity twice [ 348.149090][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.761406][T10681] device ip6gre2 entered promiscuous mode [ 349.199359][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 349.219140][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 349.263627][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 349.301685][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 349.328033][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 349.380875][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 349.424950][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 349.490823][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 349.565180][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.636305][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.689042][T10703] tipc: Failed to remove unknown binding: 66,0,0/0:3535266758/3535266760 [ 349.726589][T10703] tipc: Failed to remove unknown binding: 66,0,0/0:3535266758/3535266759 [ 349.743401][T10690] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 349.773299][T10703] tipc: Failed to remove unknown binding: 66,0,0/0:3535266758/3535266760 [ 349.794912][T10703] tipc: Failed to remove unknown binding: 66,0,0/0:3535266758/3535266759 [ 349.808291][T10690] bond3: (slave bond4): Releasing backup interface [ 349.814873][T10690] bond3: (slave bond4): the permanent HWaddr of slave - d2:0b:d7:7a:fc:de - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 349.851699][T10690] bond3: (slave gretap2): making interface the new active one [ 349.905922][T10690] bond3: (slave gretap2): Releasing backup interface [ 349.976567][T10690] bond6: (slave ip6gretap2): Releasing active interface [ 350.735867][T10690] syz.0.1948 (10690) used greatest stack depth: 16528 bytes left [ 351.107268][T10720] device ip6gre1 entered promiscuous mode [ 351.142899][ T7319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.164487][ T7319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.188851][T10725] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.205119][ T7792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.286947][T10729] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1958'. [ 351.339570][T10729] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1958'. [ 351.376949][T10729] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1958'. [ 351.821154][ T7792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.222030][ T7319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.259811][T10771] loop2: detected capacity change from 0 to 8192 [ 353.306040][T10771] loop2: p1 < > p3[EZD] [ 353.325075][T10771] loop2: p3 start 3238002688 is beyond EOD, truncated [ 353.514286][ T4290] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 353.758592][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 354.718652][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 355.727267][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.221872][T10819] device macvlan4 entered promiscuous mode [ 356.274829][T10819] device bond8 entered promiscuous mode [ 356.297682][T10819] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 356.312662][T10819] device bond8 left promiscuous mode [ 357.191702][T10830] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.200831][T10830] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.209721][T10830] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.218723][T10830] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.238261][T10830] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.247300][T10830] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.256710][T10830] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.265703][T10830] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.938324][T10834] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.947311][T10834] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.956093][T10834] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.964864][T10834] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.027231][T10834] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.036544][T10834] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.045655][T10834] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.054653][T10834] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.092137][T10850] loop2: detected capacity change from 0 to 128 [ 358.172369][ T26] audit: type=1804 audit(1780455978.775:503): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2003" name="/newroot/363/file0/bus" dev="loop2" ino=1048631 res=1 errno=0 [ 358.195666][T10847] tipc: Cannot configure node identity twice [ 358.198538][ T26] audit: type=1804 audit(1780455978.793:504): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2003" name="/newroot/363/file0/bus" dev="loop2" ino=1048631 res=1 errno=0 [ 358.226093][ T26] audit: type=1804 audit(1780455978.821:505): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2003" name="/newroot/363/file0/bus" dev="loop2" ino=1048631 res=1 errno=0 [ 359.991134][T10888] overlayfs: failed to clone upperpath [ 360.031772][ T7792] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 360.867968][ T7792] usb 7-1: Using ep0 maxpacket: 32 [ 360.900205][ T7792] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 360.912509][ T7792] usb 7-1: config 0 interface 0 has no altsetting 0 [ 360.919547][ T7792] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 360.929215][ T7792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.942328][ T7792] usb 7-1: config 0 descriptor?? [ 362.842522][ T7792] usbhid 7-1:0.0: can't add hid device: -71 [ 362.855783][ T7792] usbhid: probe of 7-1:0.0 failed with error -71 [ 362.896535][ T7792] usb 7-1: USB disconnect, device number 5 [ 363.988439][ T26] audit: type=1804 audit(1780455984.139:506): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2033" name="bus" dev="ramfs" ino=60694 res=1 errno=0 [ 364.031120][ T26] audit: type=1804 audit(1780455984.166:507): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2033" name="bus" dev="ramfs" ino=60694 res=1 errno=0 [ 364.267074][ T7792] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 364.483579][ T7792] usb 3-1: Using ep0 maxpacket: 8 [ 364.493084][ T7792] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.525897][ T7792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.534455][ T7792] usb 3-1: Product: syz [ 364.544768][ T7792] usb 3-1: Manufacturer: syz [ 364.575991][ T7792] usb 3-1: SerialNumber: syz [ 364.592834][ T7792] usb 3-1: config 0 descriptor?? [ 364.786845][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.825615][ T7792] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 366.977989][T11002] xt_hashlimit: size too large, truncated to 1048576 [ 367.013612][ T7792] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 367.059931][ T7792] usb 3-1: USB disconnect, device number 14 [ 367.559807][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.108821][ T7792] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 369.314658][ T7792] usb 3-1: Using ep0 maxpacket: 32 [ 369.322180][ T7792] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 369.352717][ T7792] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 369.385697][ T7792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 369.408116][ T7792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 369.420474][ T7792] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 369.430464][ T7792] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 369.446095][ T7792] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 369.455586][ T7792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.473940][ T7792] usb 3-1: config 0 descriptor?? [ 369.710162][ T7792] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 369.788391][T11043] loop6: detected capacity change from 0 to 128 [ 369.868614][ T26] audit: type=1804 audit(1780455989.539:508): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2063" name="/newroot/199/file0/bus" dev="loop6" ino=1048632 res=1 errno=0 [ 369.942514][ T26] audit: type=1804 audit(1780455989.539:509): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2063" name="/newroot/199/file0/bus" dev="loop6" ino=1048632 res=1 errno=0 [ 370.041027][ T26] audit: type=1804 audit(1780455989.558:510): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2063" name="/newroot/199/file0/bus" dev="loop6" ino=1048632 res=1 errno=0 [ 370.108725][ C0] usblp0: nonzero read bulk status received: -71 [ 370.123813][T11031] usblp0: error -71 reading from printer [ 370.140249][ C0] usblp0: nonzero read bulk status received: -71 [ 370.232252][ T4316] usb 3-1: USB disconnect, device number 15 [ 370.522733][ T4316] usblp0: removed [ 371.279150][T11072] binder: 11071:11072 ioctl c0306201 200000000680 returned -14 [ 372.184154][T11088] device wlan1 entered promiscuous mode [ 372.762287][T11099] netlink: 'syz.6.2081': attribute type 10 has an invalid length. [ 372.851268][T11099] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 372.883577][T11099] team0: Failed to send options change via netlink (err -105) [ 372.904746][T11099] team0: Port device netdevsim0 added [ 373.335707][T11111] loop6: detected capacity change from 0 to 512 [ 373.392572][T11111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 373.486510][T11111] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 373.506669][T11111] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.626428][T11111] xt_hashlimit: size too large, truncated to 1048576 [ 375.210664][T11127] Error parsing options; rc = [-22] [ 377.285648][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2096'. [ 378.972102][ T7469] EXT4-fs (loop6): unmounting filesystem. [ 380.623754][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2112'. [ 382.117869][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.226834][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 383.314390][T11248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2131'. [ 383.331188][T11248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2131'. [ 383.367673][T11248] device syz_tun entered promiscuous mode [ 383.383614][T11248] device syz_tun left promiscuous mode [ 384.885416][T11274] loop6: detected capacity change from 0 to 2048 [ 385.075846][T11274] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 385.250445][ T7469] EXT4-fs (loop6): unmounting filesystem. [ 385.540403][ T26] audit: type=1326 audit(1780456004.034:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz.3.2143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfdbf9ce59 code=0x0 [ 385.563918][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.642120][T11288] tmpfs: Bad value for 'nr_inodes' [ 386.390445][T11291] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 386.544231][T11298] syz.6.2145 sent an empty control message without MSG_MORE. [ 386.722416][T11297] bond7: (slave bridge3): Enslaving as a backup interface with an up link [ 387.425406][T11291] bond7: (slave bridge4): Enslaving as a backup interface with a down link [ 390.151090][T11340] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.159998][T11340] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.169300][T11340] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.178127][T11340] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.736342][T11340] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.745709][T11340] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.754844][T11340] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.763996][T11340] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.919617][T11341] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.928869][T11341] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.937936][T11341] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.946733][T11341] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.992285][T11341] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.001345][T11341] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.010309][T11341] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.019582][T11341] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.603199][ T7792] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 392.808894][ T7792] usb 7-1: Using ep0 maxpacket: 8 [ 392.815562][ T7792] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 392.824634][ T7792] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.835122][ T7792] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.845202][ T7792] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.856041][ T7792] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.869310][ T7792] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 392.878714][ T7792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.965754][T11391] device wlan1 entered promiscuous mode [ 393.029890][T11393] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.038771][T11393] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.047610][T11393] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.056339][T11393] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.068257][T11393] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.077420][T11393] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.086409][T11393] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.095435][T11393] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.108593][ T7792] usb 7-1: usb_control_msg returned -32 [ 393.115785][ T7792] usbtmc 7-1:16.0: can't read capabilities [ 393.144872][T11394] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.153716][T11394] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.162502][T11394] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.171268][T11394] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.182398][T11394] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.191369][T11394] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.200673][T11394] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.209685][T11394] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.385770][ T4316] usb 7-1: USB disconnect, device number 6 [ 393.905240][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.911741][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.605412][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2194'. [ 397.954069][ T26] audit: type=1800 audit(1780456015.490:512): pid=11478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2205" name="bus" dev="ramfs" ino=62460 res=0 errno=0 [ 398.214072][ T7792] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 398.259602][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.270942][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.281128][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.289186][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.299636][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 398.307194][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.348255][ T26] audit: type=1800 audit(1780456015.860:513): pid=11482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2206" name="bus" dev="ramfs" ino=63183 res=0 errno=0 [ 398.438136][ T7792] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.459857][ T7792] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.486029][ T7792] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 398.532633][ T7792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 398.595500][ T7792] usb 7-1: SerialNumber: syz [ 398.813459][T11485] chnl_net:caif_netlink_parms(): no params data found [ 398.894771][ T7792] usb 7-1: 0:2 : does not exist [ 398.973830][ T7792] usb 7-1: USB disconnect, device number 7 [ 399.055123][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.087973][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.121793][T11485] device bridge_slave_0 entered promiscuous mode [ 399.146365][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.178444][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.187368][T11485] device bridge_slave_1 entered promiscuous mode [ 399.241090][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.254516][ T4290] udevd[4290]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.281629][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.328547][T11485] team0: Port device team_slave_0 added [ 399.346214][T11485] team0: Port device team_slave_1 added [ 399.407134][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.425441][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.508202][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.553954][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.595599][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.698337][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.796505][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'. [ 399.929126][T11514] loop6: detected capacity change from 0 to 512 [ 399.973145][T11511] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2217'. [ 399.990862][T11514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.991348][T11511] HTB: quantum of class 800F000C is small. Consider r2q change. [ 400.052884][T11514] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 400.089539][T11485] device hsr_slave_0 entered promiscuous mode [ 400.118265][T11514] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.150252][T11485] device hsr_slave_1 entered promiscuous mode [ 400.358129][T11514] EXT4-fs error (device loop6): __ext4_new_inode:1081: comm syz.6.2218: reserved inode found cleared - inode=1 [ 400.513161][T11522] overlayfs: './file0' not a directory [ 401.280268][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 401.311025][ T7469] EXT4-fs (loop6): unmounting filesystem. [ 401.669104][T11485] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 401.697014][T11485] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 401.729327][T11485] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 401.766497][T11485] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 401.843575][T11539] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2226'. [ 401.983568][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.014913][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.028462][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.052109][T11485] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.072427][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.088585][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.114381][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.121550][ T8442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.159887][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.180382][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.214571][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.235622][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.242787][ T8442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.280602][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 402.310364][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.332823][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.360771][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.391452][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.415692][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.455360][T11485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.489441][T11485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.524147][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.532847][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.550717][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.577799][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.598789][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.618391][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.886061][T11565] netlink: 'syz.4.2235': attribute type 1 has an invalid length. [ 403.030060][T11565] bond9: (slave bridge6): Enslaving as a backup interface with an up link [ 403.070070][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.083619][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.101780][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.122106][T11565] bond9: (slave bridge7): Enslaving as a backup interface with a down link [ 403.523859][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 404.634019][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.649483][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 404.699808][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 404.726489][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 404.749754][T11485] device veth0_vlan entered promiscuous mode [ 404.766812][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 404.787881][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 404.809539][T11485] device veth1_vlan entered promiscuous mode [ 404.858702][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 404.873002][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 404.888310][T11485] device veth0_macvtap entered promiscuous mode [ 404.916968][T11485] device veth1_macvtap entered promiscuous mode [ 404.953843][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.972810][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.989184][T11485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.995107][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.999297][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 405.021748][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 405.055354][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 405.078705][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 405.104848][T11485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.135242][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 405.173004][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 405.184531][T11485] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.226956][T11485] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.251352][T11485] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.268754][T11485] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.430719][ T8445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.450164][ T8445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.465100][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 405.501518][T10301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.523079][T10301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.526801][T11621] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 405.575771][T11621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.612311][ T8445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 405.674872][T11629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2252'. [ 405.775196][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 407.189592][T11663] loop7: detected capacity change from 0 to 512 [ 407.235734][T11663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 407.327317][T11663] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 407.337068][T11663] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 407.383473][T11663] EXT4-fs error (device loop7): __ext4_new_inode:1081: comm syz.7.2261: reserved inode found cleared - inode=1 [ 407.476050][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2265'. [ 407.557768][T11485] EXT4-fs (loop7): unmounting filesystem. [ 408.038661][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 408.422419][T11695] loop6: detected capacity change from 0 to 1024 [ 410.991980][T11723] x_tables: duplicate underflow at hook 2 [ 411.868275][T11736] loop6: detected capacity change from 0 to 256 [ 411.945631][T11736] FAT-fs (loop6): Directory bread(block 64) failed [ 411.962760][T11736] FAT-fs (loop6): Directory bread(block 65) failed [ 411.969436][T11736] FAT-fs (loop6): Directory bread(block 66) failed [ 411.988680][T11736] FAT-fs (loop6): Directory bread(block 67) failed [ 412.003304][T11736] FAT-fs (loop6): Directory bread(block 68) failed [ 412.009917][T11736] FAT-fs (loop6): Directory bread(block 69) failed [ 412.020320][T11736] FAT-fs (loop6): Directory bread(block 70) failed [ 412.027163][T11736] FAT-fs (loop6): Directory bread(block 71) failed [ 412.034022][T11736] FAT-fs (loop6): Directory bread(block 72) failed [ 412.044258][T11736] FAT-fs (loop6): Directory bread(block 73) failed [ 413.363541][T11761] overlayfs: './file0' not a directory [ 415.483654][T11787] device bond0 entered promiscuous mode [ 415.489390][T11789] netlink: 'syz.0.2302': attribute type 1 has an invalid length. [ 415.567545][T11789] 8021q: adding VLAN 0 to HW filter on device bond8 [ 416.087521][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.600256][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 418.889250][ T26] audit: type=1326 audit(1780456034.822:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.0.2318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 418.960835][ T26] audit: type=1326 audit(1780456034.822:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.0.2318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 419.058006][ T26] audit: type=1326 audit(1780456034.979:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.0.2318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 419.099246][ T26] audit: type=1326 audit(1780456034.979:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.0.2318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 419.936596][ T26] audit: type=1326 audit(1780456034.979:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.0.2318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 420.049991][T11850] loop7: detected capacity change from 0 to 1024 [ 420.057579][T11850] EXT4-fs: Ignoring removed orlov option [ 420.094859][T11851] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2320'. [ 420.132085][T11850] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 420.717993][T11863] tipc: Enabling of bearer rejected, failed to enable media [ 436.335734][T11878] netlink: 'syz.0.2336': attribute type 4 has an invalid length. [ 436.628751][T11888] block device autoloading is deprecated and will be removed. [ 436.650653][T11882] block device autoloading is deprecated and will be removed. [ 436.918696][T11878] netlink: 'syz.0.2336': attribute type 4 has an invalid length. [ 437.307633][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 437.396997][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 437.409091][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 437.428010][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 437.435688][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 437.443398][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 438.036829][T11894] chnl_net:caif_netlink_parms(): no params data found [ 438.774335][T11894] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.781614][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.789975][T11894] device bridge_slave_0 entered promiscuous mode [ 438.798869][T11894] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.806179][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.814602][T11894] device bridge_slave_1 entered promiscuous mode [ 439.040154][T11894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.063491][T11933] netlink: 'syz.4.2339': attribute type 11 has an invalid length. [ 439.074785][T11894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.185238][T11894] team0: Port device team_slave_0 added [ 439.210968][T11894] team0: Port device team_slave_1 added [ 439.846074][ T4281] Bluetooth: hci6: command 0x0409 tx timeout [ 440.163445][T11935] device syzkaller0 entered promiscuous mode [ 440.561783][T11894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.608506][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.735474][T11894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.748283][T11894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.760694][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.805089][T11894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.646966][T11956] device bond0 left promiscuous mode [ 441.926262][T11956] device bond2 left promiscuous mode [ 441.960202][T11956] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.036825][T11956] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.083225][ T48] Bluetooth: hci6: command 0x041b tx timeout [ 442.091425][T11956] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.118733][T11956] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.141066][T11956] device geneve3 left promiscuous mode [ 443.116503][T11894] device hsr_slave_0 entered promiscuous mode [ 443.172107][T11894] device hsr_slave_1 entered promiscuous mode [ 443.185106][T11894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.200012][T11894] Cannot create hsr debugfs directory [ 443.220175][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2357'. [ 444.299767][T11985] netlink: 'syz.3.2353': attribute type 15 has an invalid length. [ 444.357873][ T48] Bluetooth: hci6: command 0x040f tx timeout [ 444.989205][T11894] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 445.056330][T11894] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 445.069575][T11894] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 445.104347][T11894] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 446.795750][ T4281] Bluetooth: hci6: command 0x0419 tx timeout [ 447.138396][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2359'. [ 448.204662][T11894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.233934][ T8445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 448.260127][ T8445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.296640][T11894] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.386982][T12022] device wlan1 left promiscuous mode [ 448.419443][T12022] device syzkaller0 left promiscuous mode [ 448.484611][T12022] device bridge1 left promiscuous mode [ 448.511558][T12022] device ip6gre1 left promiscuous mode [ 449.282699][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 449.306734][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.331169][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.338382][ T5451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.384793][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.404860][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.462314][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.469478][ T5451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.530520][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.552598][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.562696][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 449.571898][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.580818][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 449.589014][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 449.707886][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 449.725754][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.737065][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.746592][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.367379][T11894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.386664][T11894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 450.397606][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.475075][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.652869][T12054] netlink: 'syz.6.2371': attribute type 4 has an invalid length. [ 450.963550][T12061] loop6: detected capacity change from 0 to 2048 [ 451.003258][T12061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.579829][ T7469] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh [ 451.596324][ T7469] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh [ 452.771820][T12055] device team1 left promiscuous mode [ 452.795204][T12055] device team2 left promiscuous mode [ 452.811628][T12055] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.821109][T12055] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.830340][T12055] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.839500][T12055] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.848588][T12055] device geneve2 left promiscuous mode [ 452.895429][T12055] device ip6gre1 left promiscuous mode [ 452.919647][T12055] device syz_tun left promiscuous mode [ 452.997294][T12055] device ip6gre2 left promiscuous mode [ 453.472416][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 453.489915][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 453.525395][T11894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.763181][T12085] fuse: Bad value for 'fd' [ 454.786045][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2386'. [ 454.813980][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2386'. [ 454.901761][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.915334][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.926538][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.934597][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.000044][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 455.008015][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.205627][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 455.222935][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.272844][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 455.284070][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.295496][T11894] device veth0_vlan entered promiscuous mode [ 455.313544][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.322704][ T6513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.336500][T11894] device veth1_vlan entered promiscuous mode [ 455.390011][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 455.400820][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 455.418079][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 455.448218][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 455.462001][T11894] device veth0_macvtap entered promiscuous mode [ 455.475277][T12097] chnl_net:caif_netlink_parms(): no params data found [ 455.497487][T11894] device veth1_macvtap entered promiscuous mode [ 455.557731][T12097] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.565223][T12097] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.573359][T12097] device bridge_slave_0 entered promiscuous mode [ 455.582453][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.593975][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.601998][T12116] Process accounting resumed [ 455.604544][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.634412][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.651704][T11894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.659394][T12097] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.666799][T12097] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.675147][T12097] device bridge_slave_1 entered promiscuous mode [ 455.683428][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 455.692703][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 455.701683][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 455.711234][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 455.723279][T11894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.741164][T11894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.784707][T11894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.875494][T11894] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.896353][T11894] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.146899][T11894] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.420303][T11894] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.948763][T12097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.043019][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 457.058208][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.336220][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 457.536613][ T7975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.612522][ T7975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.630502][ T6513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.653048][ T6513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.672763][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 457.693388][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 457.794931][T12097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.799181][ T26] audit: type=1326 audit(1780456070.744:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12134 comm="syz.3.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdbf9ce59 code=0x7fc00000 [ 457.895129][ T26] audit: type=1326 audit(1780456070.781:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12134 comm="syz.3.2396" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbfdbf9ce59 code=0x7fc00000 [ 457.938937][T12097] team0: Port device team_slave_0 added [ 457.954776][T12143] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 458.006902][T12097] team0: Port device team_slave_1 added [ 458.033451][T12097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.043367][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.098698][T12097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.136398][T12097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.152109][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.184609][T12097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.291081][T12149] tipc: Enabling of bearer rejected, failed to enable media [ 459.010499][T12097] device hsr_slave_0 entered promiscuous mode [ 459.044023][T12097] device hsr_slave_1 entered promiscuous mode [ 459.071882][T12097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.099252][T12097] Cannot create hsr debugfs directory [ 459.324403][T12161] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2401'. [ 459.674247][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 462.348265][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 462.374288][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.380691][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.114160][T12097] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 464.133258][T12097] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 464.144805][T12097] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 464.164027][T12097] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 464.689585][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 465.659048][T12206] loop8: detected capacity change from 0 to 512 [ 466.631478][T12206] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 466.812441][T12206] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 466.918534][T12206] EXT4-fs (loop8): 1 truncate cleaned up [ 466.958616][T12206] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 466.978520][T12097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.706737][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.725244][ T6512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.932606][T12097] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.970697][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.995525][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.033393][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.040673][ T8440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.157980][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.243193][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.498058][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.649340][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.656566][ T8440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.896076][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.948015][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.124484][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 469.185880][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.214510][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 469.246499][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.276006][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 469.278778][T11894] EXT4-fs (loop8): unmounting filesystem. [ 469.302440][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.313465][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.358550][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.381479][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.411399][T12097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.583425][T12256] Invalid option length (62363) for dns_resolver key [ 471.154578][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2432'. [ 473.414856][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.467275][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.490786][T12097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.579603][T12285] xt_hashlimit: max too large, truncated to 1048576 [ 473.593387][T12285] xt_limit: Overflow, try lower: 0/0 [ 474.526394][ T26] audit: type=1326 audit(1780456086.189:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.4.2441" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 474.600586][ T26] audit: type=1326 audit(1780456086.208:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.4.2441" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 474.676251][ T26] audit: type=1326 audit(1780456086.208:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.4.2441" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 474.752606][ T26] audit: type=1326 audit(1780456086.208:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.4.2441" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 474.848596][ T26] audit: type=1326 audit(1780456086.208:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.4.2441" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 475.478349][ T26] audit: type=1326 audit(1780456086.208:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.4.2441" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 475.503627][ T26] audit: type=1326 audit(1780456086.208:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.4.2441" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 475.542612][ T26] audit: type=1326 audit(1780456086.208:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.4.2441" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 475.643054][ T26] audit: type=1326 audit(1780456086.208:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.4.2441" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 475.874194][ T26] audit: type=1326 audit(1780456086.208:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.4.2441" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 476.233855][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 476.260206][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.604457][T12329] xt_hashlimit: max too large, truncated to 1048576 [ 476.611565][T12329] xt_limit: Overflow, try lower: 0/0 [ 477.462732][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 477.482802][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.528477][T12097] device veth0_vlan entered promiscuous mode [ 477.596390][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.629640][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.674084][T12097] device veth1_vlan entered promiscuous mode [ 477.798109][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 477.818245][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.879458][T12097] device veth0_macvtap entered promiscuous mode [ 477.919297][T12097] device veth1_macvtap entered promiscuous mode [ 477.942108][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.954883][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.968244][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.498496][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.729102][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.760654][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.786920][T12097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.804945][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 478.827597][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 478.858240][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 478.972077][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 478.990691][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.025449][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.255654][T12097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.657144][T12362] autofs4:pid:12362:autofs_fill_super: called with bogus options [ 479.659842][T12361] loop8: detected capacity change from 0 to 2048 [ 479.716168][T12361] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 479.738799][T12361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.104815][T12097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.179487][T12097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.211639][ T4283] Bluetooth: hci6: command 0x2016 tx timeout [ 480.401936][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.491498][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.607760][T12369] netlink: 'syz.8.2462': attribute type 4 has an invalid length. [ 480.940812][T12097] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.047662][T12097] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.245669][T12097] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.281737][T12097] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.324154][T12375] netlink: 'syz.8.2462': attribute type 4 has an invalid length. [ 481.647673][ T5451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.675464][ T5451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.704976][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 481.753771][T12386] netlink: 'syz.8.2467': attribute type 1 has an invalid length. [ 481.783157][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.806691][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.843493][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 488.183733][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 492.168664][T12528] netlink: 'syz.8.2519': attribute type 1 has an invalid length. [ 492.214171][T12528] device bond1 entered promiscuous mode [ 492.244504][T12528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.320039][T12532] bond1: (slave bridge1): making interface the new active one [ 493.365440][T12532] device bridge1 entered promiscuous mode [ 493.564654][T12532] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 493.595838][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 494.053513][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2512'. [ 495.508019][T12563] device bridge0 entered promiscuous mode [ 495.582529][T12563] device vlan4 entered promiscuous mode [ 497.758670][T12594] loop8: detected capacity change from 0 to 512 [ 497.995006][T12594] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.2532: inode has both inline data and extents flags [ 498.153465][T12594] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.2532: couldn't read orphan inode 15 (err -117) [ 498.166921][T12594] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 500.298510][T11894] EXT4-fs (loop8): unmounting filesystem. [ 500.454975][T12634] loop8: detected capacity change from 0 to 256 [ 500.481924][T12634] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 500.498936][T12634] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 500.519388][T12634] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 504.939807][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2564'. [ 504.981044][T12704] loop9: detected capacity change from 0 to 128 [ 505.138911][T12702] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 505.430332][T12706] bridge8: port 1(veth7) entered blocking state [ 505.480454][T12706] bridge8: port 1(veth7) entered disabled state [ 505.545228][T12706] device veth7 entered promiscuous mode [ 505.592742][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 505.592837][ T26] audit: type=1326 audit(1780456114.873:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12723 comm="syz.9.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e599ce59 code=0x7ffc0000 [ 505.625688][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2566'. [ 505.689995][T12709] bridge8: port 2(veth0_to_bond) entered blocking state [ 505.697368][T12709] bridge8: port 2(veth0_to_bond) entered disabled state [ 505.707188][T12709] device veth0_to_bond entered promiscuous mode [ 505.717853][T12711] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 505.737326][T12711] bond2: (slave ip_vti0): Error -95 calling set_mac_address [ 505.829366][ T26] audit: type=1326 audit(1780456114.910:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12723 comm="syz.9.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e599ce59 code=0x7ffc0000 [ 505.861801][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2572'. [ 505.981250][ T26] audit: type=1326 audit(1780456114.910:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12723 comm="syz.9.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e599ce59 code=0x7ffc0000 [ 506.079904][ T26] audit: type=1326 audit(1780456114.910:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12723 comm="syz.9.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f37e599ce59 code=0x7ffc0000 [ 506.157286][T12747] loop8: detected capacity change from 0 to 256 [ 506.204927][ T26] audit: type=1326 audit(1780456114.910:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12723 comm="syz.9.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e599ce59 code=0x7ffc0000 [ 506.276695][T12747] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 506.332490][ T26] audit: type=1326 audit(1780456114.910:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12723 comm="syz.9.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e599ce59 code=0x7ffc0000 [ 506.468234][ T26] audit: type=1326 audit(1780456114.910:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12723 comm="syz.9.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e599ce59 code=0x7ffc0000 [ 506.654780][ T26] audit: type=1326 audit(1780456114.910:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12723 comm="syz.9.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e599ce59 code=0x7ffc0000 [ 506.702782][ T26] audit: type=1326 audit(1780456114.910:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12723 comm="syz.9.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f37e599ce59 code=0x7ffc0000 [ 507.715452][ T26] audit: type=1326 audit(1780456114.910:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12723 comm="syz.9.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e599ce59 code=0x7ffc0000 [ 508.799277][T12786] device team0 entered promiscuous mode [ 508.805517][T12786] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 508.874910][T12786] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 509.720910][T12786] bridge0: port 1(vlan4) entered blocking state [ 509.760817][T12786] bridge0: port 1(vlan4) entered disabled state [ 509.769671][T12786] device vlan4 entered promiscuous mode [ 509.775527][T12786] device bond0 entered promiscuous mode [ 509.781365][T12786] device macvlan3 entered promiscuous mode [ 509.941357][T12795] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.2590'. [ 510.035320][ T4283] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 510.042716][T12799] netlink: 'syz.4.2591': attribute type 4 has an invalid length. [ 510.188712][T12803] netlink: 'syz.4.2591': attribute type 4 has an invalid length. [ 510.258649][T12799] netlink: 'syz.4.2591': attribute type 4 has an invalid length. [ 511.255555][T12825] loop8: detected capacity change from 0 to 8192 [ 511.417737][T12825] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 511.461441][T12825] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 511.535645][T12825] REISERFS (device loop8): using ordered data mode [ 511.544691][T12825] reiserfs: using flush barriers [ 511.590995][T12825] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 511.625118][T12825] REISERFS (device loop8): checking transaction log (loop8) [ 511.897192][T12825] REISERFS (device loop8): Using tea hash to sort names [ 511.942570][T12825] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 514.422392][T12863] loop8: detected capacity change from 0 to 2048 [ 514.493584][T12863] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.765259][ T129] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 514.833683][T12873] SET target dimension over the limit! [ 515.658307][ T129] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 515.674955][ T129] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.696346][ T129] usb 10-1: Product: syz [ 515.710374][ T129] usb 10-1: Manufacturer: syz [ 515.724722][ T129] usb 10-1: SerialNumber: syz [ 515.914336][T11894] UDF-fs: error (device loop8): udf_read_inode: (ino 1) failed !bh [ 515.947481][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2619'. [ 515.981299][ T129] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 516.014989][ T129] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 516.032672][T11894] UDF-fs: error (device loop8): udf_read_inode: (ino 1) failed !bh [ 518.319885][ T46] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.457787][T12919] Invalid option length (1040762) for dns_resolver key [ 519.064361][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 519.064375][ T26] audit: type=1326 audit(1780456127.299:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2627" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f183879ce59 code=0x0 [ 519.145062][ T129] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 519.213770][ T46] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.227507][ T129] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 519.256027][T12925] overlayfs: failed to clone upperpath [ 519.256080][ T129] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 519.323793][ T129] lan78xx: probe of 10-1:1.0 failed with error -71 [ 519.357576][ T129] usb 10-1: USB disconnect, device number 2 [ 519.446421][ T46] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.482277][T12932] bond7: (slave bridge3): Releasing backup interface [ 519.489568][T12932] bond7: (slave bridge3): the permanent HWaddr of slave - fe:2d:be:40:29:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 519.510118][T12932] bond7: (slave bridge4): Releasing backup interface [ 519.520671][T12932] bond0: (slave macvlan3): Releasing backup interface [ 519.529317][T12932] device macvlan3 left promiscuous mode [ 519.536153][T12932] device team0 left promiscuous mode [ 519.546923][T12932] device vlan4 left promiscuous mode [ 519.552547][T12932] device bond0 left promiscuous mode [ 519.558447][T12932] bridge0: port 1(vlan4) entered disabled state [ 519.636113][ T46] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.666777][T12932] team0: Mode changed to "loadbalance" [ 521.258866][T12962] device bridge0 entered promiscuous mode [ 521.296907][T12962] device vlan2 entered promiscuous mode [ 521.952560][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 521.971922][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 521.999372][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 522.022626][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 522.056744][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 522.076733][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 522.464773][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 524.318837][ T4283] Bluetooth: hci6: command 0x0409 tx timeout [ 526.112623][T12977] chnl_net:caif_netlink_parms(): no params data found [ 526.693703][ T4283] Bluetooth: hci6: command 0x041b tx timeout [ 527.008706][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.017403][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.432179][T13056] netlink: 'syz.9.2660': attribute type 3 has an invalid length. [ 527.458741][T13056] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2660'. [ 527.790227][ T46] device hsr_slave_0 left promiscuous mode [ 527.984559][ T46] device hsr_slave_1 left promiscuous mode [ 528.141693][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.306236][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.352647][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.478308][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.511510][ T46] device bridge_slave_1 left promiscuous mode [ 528.517825][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.541789][ T26] audit: type=1326 audit(1780456136.051:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.2664" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdbf9ce59 code=0x7ffc0000 [ 528.546387][T13073] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[13074] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[13073] [ 528.586428][ T46] device bridge_slave_0 left promiscuous mode [ 528.616474][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.628770][ T26] audit: type=1326 audit(1780456136.051:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.2664" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfdbf9ce59 code=0x7ffc0000 [ 528.722191][ T26] audit: type=1326 audit(1780456136.051:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.2664" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdbf9ce59 code=0x7ffc0000 [ 528.793931][ T46] device veth1_macvtap left promiscuous mode [ 528.800055][ T46] device veth0_macvtap left promiscuous mode [ 528.810170][ T26] audit: type=1326 audit(1780456136.051:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.2664" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfdbf9ce59 code=0x7ffc0000 [ 528.852208][ T46] device veth1_vlan left promiscuous mode [ 528.874374][ T46] device veth0_vlan left promiscuous mode [ 528.911613][ T48] Bluetooth: hci6: command 0x040f tx timeout [ 528.912078][ T26] audit: type=1326 audit(1780456136.060:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.2664" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdbf9ce59 code=0x7ffc0000 [ 529.024163][ T26] audit: type=1326 audit(1780456136.060:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.2664" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fbfdbf9ce59 code=0x7ffc0000 [ 530.428977][ T26] audit: type=1326 audit(1780456136.180:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.2664" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdbf9ce59 code=0x7ffc0000 [ 530.494498][ T46] bond2 (unregistering): Released all slaves [ 530.567031][ T46] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 530.579259][ T46] device bridge1 left promiscuous mode [ 530.680954][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2672'. [ 531.208589][ T48] Bluetooth: hci6: command 0x0419 tx timeout [ 531.682946][ T46] bond1 (unregistering): Released all slaves [ 533.230740][ T46] team0 (unregistering): Port device team_slave_1 removed [ 533.306478][ T46] team0 (unregistering): Port device team_slave_0 removed [ 533.373437][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.440652][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.138306][ T46] bond0 (unregistering): Released all slaves [ 534.836563][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 534.860463][T12977] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.868570][T12977] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.879238][T12977] device bridge_slave_0 entered promiscuous mode [ 534.914972][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 534.933982][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2668'. [ 534.943350][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2672'. [ 534.968710][T13097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2672'. [ 534.978207][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2672'. [ 534.987222][T13097] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2672'. [ 534.996558][T13097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2672'. [ 535.009879][T12977] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.017021][T12977] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.043597][T12977] device bridge_slave_1 entered promiscuous mode [ 535.086077][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 535.094987][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2668'. [ 535.207460][T12977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.258252][T12977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.302122][T13137] xt_recent: hitcount (33554435) is larger than allowed maximum (255) [ 535.387144][T12977] team0: Port device team_slave_0 added [ 535.430187][T12977] team0: Port device team_slave_1 added [ 535.493911][T12977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.502458][T12977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.549632][T12977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.568219][T12977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.595131][T12977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.640997][T12977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.657572][T13149] device team0 entered promiscuous mode [ 535.671661][T13149] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 535.710041][T13149] bond0: (slave macvlan4): Enslaving as an active interface with an up link [ 535.740971][T13152] bridge0: port 1(vlan5) entered blocking state [ 535.747759][T13152] bridge0: port 1(vlan5) entered disabled state [ 535.769985][T13152] device vlan5 entered promiscuous mode [ 535.776253][T13152] device bond0 entered promiscuous mode [ 535.787343][ T7320] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 535.796228][T13152] device macvlan4 entered promiscuous mode [ 535.856711][T12977] device hsr_slave_0 entered promiscuous mode [ 535.874952][T12977] device hsr_slave_1 entered promiscuous mode [ 535.895357][T12977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.914441][T12977] Cannot create hsr debugfs directory [ 535.998847][ T7320] usb 10-1: Using ep0 maxpacket: 16 [ 536.010178][ T7320] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.051368][ T7320] usb 10-1: config 0 interface 0 has no altsetting 0 [ 536.074370][ T7320] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 536.087590][ T7320] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.121630][ T7320] usb 10-1: config 0 descriptor?? [ 536.634811][ T7320] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 537.159270][ T4316] usb 10-1: USB disconnect, device number 3 [ 537.480493][T13202] __nla_validate_parse: 1 callbacks suppressed [ 537.480544][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 539.531247][T12977] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.576150][T12977] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 539.625570][T12977] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 540.678189][T12977] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 540.953046][T12977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.973955][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.987026][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.007336][T12977] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.034005][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.059184][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.092298][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.099490][ T4598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.180739][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.190253][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.484800][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.670475][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.677727][ T4598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.817324][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.014470][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2713'. [ 542.039862][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.054799][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.202659][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.226388][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.235722][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.244481][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.292274][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.494755][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.800678][T10300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.821720][T10300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.834417][T12977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 543.672813][T13275] device team0 entered promiscuous mode [ 543.704991][T13275] device team_slave_0 entered promiscuous mode [ 543.727268][T13275] device team_slave_1 entered promiscuous mode [ 543.764123][T13275] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 543.788378][T13275] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 543.889072][T13278] bridge0: port 3(vlan2) entered blocking state [ 543.915506][T13278] bridge0: port 3(vlan2) entered disabled state [ 543.937559][T13278] device vlan2 entered promiscuous mode [ 543.948009][T13278] device bond0 entered promiscuous mode [ 543.962042][T13278] device bond_slave_0 entered promiscuous mode [ 543.975495][T13278] device bond_slave_1 entered promiscuous mode [ 543.991498][T13278] device macvlan2 entered promiscuous mode [ 544.463020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.834803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.922486][T12977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.904071][T10300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 546.929707][T10300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.152492][T12977] device veth0_vlan entered promiscuous mode [ 547.170639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.185169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.238219][T12977] device veth1_vlan entered promiscuous mode [ 547.909333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.918220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.948207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 548.056414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 548.064993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 548.085613][T13332] loop9: detected capacity change from 0 to 512 [ 548.093136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 548.143176][T12977] device veth0_macvtap entered promiscuous mode [ 548.176643][T12977] device veth1_macvtap entered promiscuous mode [ 548.176818][T13332] EXT4-fs (loop9): orphan cleanup on readonly fs [ 548.306268][T13332] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 548.327000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 548.360040][T13332] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 548.375565][T13332] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.2730: Failed to acquire dquot type 1 [ 548.389884][T13332] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 548.390379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 548.411908][T13332] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 548.558226][T13332] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.2730: Failed to acquire dquot type 1 [ 548.868487][T13332] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2730: bg 0: block 248: padding at end of block bitmap is not set [ 549.047989][T13332] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 549.072197][T13342] team0: Mode changed to "loadbalance" [ 549.083208][T13332] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 549.114727][T13332] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 549.226206][T13332] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.2730: Failed to acquire dquot type 1 [ 549.238588][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.273773][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.283993][T13332] EXT4-fs (loop9): 1 orphan inode deleted [ 549.322166][T13332] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 549.325784][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.387494][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.412713][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.462507][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.564868][T13332] raw_sendmsg: syz.9.2730 forgot to set AF_INET. Fix it! [ 549.605507][T12977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.274277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 550.366635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.148641][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.164681][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.174796][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.191242][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.205059][T12977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.228023][T12977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.252161][T12977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.277211][T12977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.301669][T12977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.343806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 551.365943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.811799][T12097] EXT4-fs (loop9): unmounting filesystem. [ 552.973434][T10300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.001061][T10300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.033543][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 553.083681][ T8442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.113953][ T8442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.154959][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 553.957250][T13402] device team0 entered promiscuous mode [ 554.268754][T13402] device team_slave_0 entered promiscuous mode [ 554.578034][T13402] device team_slave_1 entered promiscuous mode [ 554.697947][T13402] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 554.751533][T13402] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 555.078548][T13413] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4285] was attempted by ""[13413] [ 558.599621][T13440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2765'. [ 559.785389][T13452] binder_alloc: 13451: pid 13451 spamming oneway? 2 buffers allocated for a total size of 5120 [ 559.824324][T13452] binder_alloc: 13451: binder_alloc_buf size -944 failed, no address space [ 559.855225][T13452] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168) [ 560.303769][T13474] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by ""[13474] [ 563.923484][T13500] overlayfs: failed to clone lowerpath [ 564.306767][T13514] fuse: Bad value for 'fd' [ 566.283682][T13537] netlink: 'syz.9.2781': attribute type 2 has an invalid length. [ 566.530735][T13551] device syzkaller0 entered promiscuous mode [ 566.619501][T13554] TC_ACT_REPEAT abuse ? [ 568.085938][T13573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 568.114080][ T26] audit: type=1326 audit(1780456428.571:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.2790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 568.345942][ T26] audit: type=1326 audit(1780456428.571:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.2790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 568.371078][ T26] audit: type=1326 audit(1780456428.599:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.2790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 568.783165][T13587] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12977] was attempted by ""[13587] [ 568.907338][ T26] audit: type=1326 audit(1780456428.599:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.2790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 568.932075][ T26] audit: type=1326 audit(1780456428.783:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.2790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 568.976145][ T26] audit: type=1326 audit(1780456428.783:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.2790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 569.319997][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2793'. [ 569.327737][ T26] audit: type=1326 audit(1780456428.783:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.2790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 570.445918][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 570.462806][ T26] audit: type=1326 audit(1780456428.783:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.2790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 570.559268][T13616] xt_NFQUEUE: number of total queues is 0 [ 570.727823][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 571.114828][ T26] audit: type=1326 audit(1780456428.783:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.2790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 571.154809][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 571.171388][ T26] audit: type=1326 audit(1780456429.226:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.4.2790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f183879ce59 code=0x7ffc0000 [ 571.313249][ T14] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 571.334888][ T14] usb 2-1: can't read configurations, error -71 [ 572.630645][T13641] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 572.630645][T13641] The task syz.9.2803 (13641) triggered the difference, watch for misbehavior. [ 573.326348][T13644] binder: 13634:13644 ioctl 4018620d 0 returned -22 [ 574.166305][T13663] netlink: 'syz.0.2814': attribute type 1 has an invalid length. [ 574.844855][T13666] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12097] was attempted by ""[13666] [ 583.084784][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2808'. [ 583.225445][T13740] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 583.368334][T13736] device macvlan5 entered promiscuous mode [ 583.375038][T13736] device bond10 entered promiscuous mode [ 583.415947][T13736] device bridge9 entered promiscuous mode [ 583.459036][T13736] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 583.493073][T13736] device bond10 left promiscuous mode [ 583.512733][T13736] device bridge9 left promiscuous mode [ 583.796899][T13754] loop1: detected capacity change from 0 to 2048 [ 584.763511][T13748] overlayfs: failed to resolve './file0': -2 [ 587.673447][ T5673] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 587.931836][ T5673] usb 2-1: Using ep0 maxpacket: 16 [ 587.939831][ T5673] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 587.984582][ T5673] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 588.003444][ T5673] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 588.014661][ T5673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.047528][ T5673] usb 2-1: config 0 descriptor?? [ 588.809703][T13822] tipc: Failed to remove unknown binding: 66,0,0/0:2406786748/2406786750 [ 588.818229][T13822] tipc: Failed to remove unknown binding: 66,0,0/0:2406786748/2406786749 [ 588.852755][T13822] tipc: Failed to remove unknown binding: 66,0,0/0:2406786748/2406786750 [ 588.861274][T13822] tipc: Failed to remove unknown binding: 66,0,0/0:2406786748/2406786749 [ 590.290567][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 590.855051][ T14] usb 2-1: USB disconnect, device number 4 [ 590.924475][T13857] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2846'. [ 590.934904][T13854] sctp: [Deprecated]: syz.3.2845 (pid 13854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.934904][T13854] Use struct sctp_sack_info instead [ 591.230774][T13862] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 592.451794][ T26] kauditd_printk_skb: 110 callbacks suppressed [ 592.451808][ T26] audit: type=1326 audit(1780456451.030:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.2852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 592.498151][T13883] syz.0.2852 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 592.586590][ T26] audit: type=1326 audit(1780456451.067:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.2852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 592.818599][ T26] audit: type=1326 audit(1780456451.177:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.2852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 593.168863][ T26] audit: type=1326 audit(1780456451.177:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.2852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 593.587324][ T26] audit: type=1326 audit(1780456451.233:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.2852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 593.587684][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.593944][T13902] device syzkaller0 entered promiscuous mode [ 593.612586][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.748897][ T26] audit: type=1326 audit(1780456451.233:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.2852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 594.302586][ T26] audit: type=1326 audit(1780456451.233:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.2852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 594.326894][ T26] audit: type=1326 audit(1780456451.233:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.2852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 594.391851][ T26] audit: type=1326 audit(1780456451.233:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.2852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 594.431263][T13915] loop9: detected capacity change from 0 to 256 [ 594.595395][ T26] audit: type=1326 audit(1780456451.233:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.2852" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930659ce59 code=0x7ffc0000 [ 595.832965][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 595.848747][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 595.860038][T13930] device bridge_slave_0 left promiscuous mode [ 595.877326][T13930] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.903220][T13930] device bridge_slave_1 left promiscuous mode [ 595.967463][T13930] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.016294][T13930] bond0: (slave bond_slave_0): Releasing backup interface [ 596.058746][T13930] device bond_slave_0 left promiscuous mode [ 596.387370][T13930] bond0: (slave bond_slave_1): Releasing backup interface [ 596.589433][T13930] device bond_slave_1 left promiscuous mode [ 596.677728][T13930] device team_slave_0 left promiscuous mode [ 596.948269][T13930] team0: Port device team_slave_0 removed [ 596.967298][T13930] device team_slave_1 left promiscuous mode [ 597.030656][T13930] team0: Port device team_slave_1 removed [ 597.068352][T13930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.085613][T13930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.131241][T13930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.139017][T13930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.213398][T13930] bond0: (slave macvlan2): Releasing backup interface [ 597.259904][T13930] device macvlan2 left promiscuous mode [ 597.290973][T13930] device team0 left promiscuous mode [ 597.325369][T13930] device vlan2 left promiscuous mode [ 597.341250][T13930] device bond0 left promiscuous mode [ 597.348068][T13930] bridge0: port 3(vlan2) entered disabled state [ 597.418857][T13945] netlink: 'syz.1.2866': attribute type 1 has an invalid length. [ 597.495183][T13963] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2869'. [ 597.747511][ T27] INFO: task syz.7.2322:11850 blocked for more than 144 seconds. [ 598.022813][T13950] device gretap1 entered promiscuous mode [ 598.043646][ T27] Not tainted syzkaller #0 [ 598.048736][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.071831][ T27] task:syz.7.2322 state:D stack:24728 pid:11850 ppid:11485 flags:0x00004004 [ 598.155836][ T27] Call Trace: [ 598.168173][ T27] [ 598.177962][ T27] __schedule+0x11d1/0x40e0 [ 598.205323][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 598.219547][ T27] ? __sched_text_start+0x8/0x8 [ 598.224950][ T27] ? lock_chain_count+0x20/0x20 [ 598.230150][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 598.235918][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 598.241720][ T27] ? rwsem_down_read_slowpath+0x52c/0x870 [ 598.248009][ T27] schedule+0xb9/0x180 [ 598.252314][ T27] schedule_preempt_disabled+0xf/0x20 [ 598.259348][ T27] rwsem_down_read_slowpath+0x516/0x870 [ 598.265154][ T27] ? down_write_killable_nested+0x90/0x90 [ 598.271633][ T27] ? read_lock_is_recursive+0x10/0x10 [ 598.277246][ T27] ? __rwlock_init+0x140/0x140 [ 598.282637][ T27] ? ksys_sync+0x170/0x170 [ 598.287403][ T27] down_read+0x94/0x2d0 [ 598.292114][ T27] ? ksys_sync+0x170/0x170 [ 598.296784][ T27] iterate_supers+0xa4/0x1d0 [ 598.301975][ T27] ksys_sync+0x9d/0x170 [ 598.306388][ T27] ? sync_filesystem+0x220/0x220 [ 598.312104][ T27] ? syscall_enter_from_user_mode+0x21/0x80 [ 598.318272][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 598.324124][ T27] __ia32_sys_sync+0xa/0x10 [ 598.328824][ T27] do_syscall_64+0x4c/0xa0 [ 598.333725][ T27] ? clear_bhb_loop+0x60/0xb0 [ 598.338576][ T27] ? clear_bhb_loop+0x60/0xb0 [ 598.343650][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.349664][ T27] RIP: 0033:0x7f8acdb9ce59 [ 598.355376][ T27] RSP: 002b:00007f8aceb3c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 598.364060][ T27] RAX: ffffffffffffffda RBX: 00007f8acde15fa0 RCX: 00007f8acdb9ce59 [ 598.373123][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.381333][ T27] RBP: 00007f8acde15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 598.389501][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.397616][ T27] R13: 00007f8acde16038 R14: 00007f8acde15fa0 R15: 00007ffcf4983388 [ 598.405622][ T27] [ 598.419653][ T27] [ 598.419653][ T27] Showing all locks held in the system: [ 598.427683][ T27] 1 lock held by rcu_tasks_kthre/12: [ 598.455327][ T27] #0: ffffffff8cb2e7f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 598.466617][ T27] 1 lock held by rcu_tasks_trace/13: [ 598.471937][ T27] #0: ffffffff8cb2f010 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 598.484730][ T27] 1 lock held by khungtaskd/27: [ 598.489797][ T27] #0: ffffffff8cb2de60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 598.500013][ T27] 2 locks held by getty/4030: [ 598.504752][ T27] #0: ffff88814d1df098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 598.515053][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 598.525320][ T27] 1 lock held by syz-executor/4284: [ 598.530851][ T27] #0: ffff8880286640e0 (&type->s_umount_key#69){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 598.541285][ T27] 2 locks held by kworker/0:16/5673: [ 598.548553][ T27] #0: ffff88814d35dd38 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 598.559812][ T27] #1: ffffc9000d0afd00 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 598.580992][ T27] 1 lock held by syz.7.2322/11850: [ 598.586145][ T27] #0: ffff8880286640e0 (&type->s_umount_key#69){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 598.603997][ T27] 1 lock held by syz.1.2866/13946: [ 598.609354][ T27] #0: ffffffff8cb33a00 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x600 [ 598.627071][ T27] 1 lock held by syz.1.2866/13950: [ 598.632385][ T27] #0: ffffffff8cb33a00 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x600 [ 598.649857][ T27] 3 locks held by dhcpcd-run-hook/13973: [ 598.655813][ T27] #0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 598.667576][ T27] #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 598.685329][ T27] #2: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0xdc/0x240 [ 598.707345][ T27] [ 598.709879][ T27] ============================================= [ 598.709879][ T27] [ 598.727771][ T27] NMI backtrace for cpu 0 [ 598.732157][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 598.739371][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 598.749441][ T27] Call Trace: [ 598.752740][ T27] [ 598.755757][ T27] dump_stack_lvl+0x188/0x24e [ 598.760435][ T27] ? irq_work_queue+0xb8/0x140 [ 598.765302][ T27] ? show_regs_print_info+0x12/0x12 [ 598.770530][ T27] ? load_image+0x400/0x400 [ 598.775105][ T27] ? vprintk_emit+0x59f/0x6a0 [ 598.779822][ T27] ? printk_sprint+0x460/0x460 [ 598.784769][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 598.789730][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 598.795990][ T27] ? _printk+0xda/0x130 [ 598.800147][ T27] ? load_image+0x400/0x400 [ 598.804651][ T27] ? load_image+0x400/0x400 [ 598.809155][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 598.815221][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 598.821378][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 598.827363][ T27] watchdog+0xeee/0xf30 [ 598.831565][ T27] ? watchdog+0x1ed/0xf30 [ 598.835896][ T27] kthread+0x29d/0x330 [ 598.840005][ T27] ? hungtask_pm_notify+0x40/0x40 [ 598.845029][ T27] ? kthread_blkcg+0xd0/0xd0 [ 598.849649][ T27] ret_from_fork+0x1f/0x30 [ 598.854124][ T27] [ 598.857744][ T27] Sending NMI from CPU 0 to CPUs 1: [ 598.863089][ C1] NMI backtrace for cpu 1 [ 598.863099][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 598.863114][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 598.863123][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 598.863240][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x32/0x80 [ 598.863261][ C1] Code: 34 f0 7f 7e 65 8b 0d 35 f0 7f 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 8a f8 15 00 00 <83> f9 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc 15 00 00 49 c1 e1 [ 598.863303][ C1] RSP: 0018:ffffc90000107838 EFLAGS: 00000046 [ 598.863315][ C1] RAX: ffffffff8485c64e RBX: 0000000000000001 RCX: 0000000000000000 [ 598.863325][ C1] RDX: ffff88813fec3c00 RSI: 0000000000000001 RDI: 0000000000000008 [ 598.863334][ C1] RBP: ffffc900001079f0 R08: ffffc900001078df R09: ffffc900001078a0 [ 598.863345][ C1] R10: dffffc0000000000 R11: fffff52000020f1c R12: 1ffff92000020f10 [ 598.863356][ C1] R13: ffff8880b8f379d0 R14: 0000000000000001 R15: dffffc0000000000 [ 598.863366][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 598.863378][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.863388][ C1] CR2: 000000110c44b0b6 CR3: 000000007404b000 CR4: 00000000003506e0 [ 598.863409][ C1] Call Trace: [ 598.863413][ C1] [ 598.863418][ C1] crng_make_state+0x40e/0xb00 [ 598.863489][ C1] ? crng_make_state+0x1d1/0xb00 [ 598.863506][ C1] ? urandom_read_iter+0x140/0x140 [ 598.863537][ C1] _get_random_bytes+0xfc/0x250 [ 598.863555][ C1] ? get_random_bytes+0x20/0x20 [ 598.863574][ C1] ? nsim_dev_trap_report_work+0x28f/0xb00 [ 598.863599][ C1] ? in_aton+0x39e/0x430 [ 598.863646][ C1] nsim_dev_trap_report_work+0x651/0xb00 [ 598.863675][ C1] ? process_one_work+0x7b0/0x1160 [ 598.863691][ C1] process_one_work+0x8a2/0x1160 [ 598.863713][ C1] ? worker_detach_from_pool+0x240/0x240 [ 598.863731][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 598.863754][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 598.863771][ C1] ? kthread_data+0x4b/0xc0 [ 598.863793][ C1] worker_thread+0xaa2/0x1270 [ 598.863821][ C1] kthread+0x29d/0x330 [ 598.863832][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 598.863847][ C1] ? kthread_blkcg+0xd0/0xd0 [ 598.863864][ C1] ret_from_fork+0x1f/0x30 [ 598.863889][ C1] [ 598.873005][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 598.873019][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 598.873036][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 598.873045][ T27] Call Trace: [ 598.873051][ T27] [ 598.873059][ T27] dump_stack_lvl+0x188/0x24e [ 598.873081][ T27] ? memcpy+0x3c/0x60 [ 598.873163][ T27] ? show_regs_print_info+0x12/0x12 [ 598.873179][ T27] ? load_image+0x400/0x400 [ 598.873208][ T27] panic+0x2e5/0x730 [ 598.873226][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 598.873245][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 598.873268][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 598.873286][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 598.873305][ T27] watchdog+0xf2d/0xf30 [ 598.873326][ T27] ? watchdog+0x1ed/0xf30 [ 598.873348][ T27] kthread+0x29d/0x330 [ 598.873361][ T27] ? hungtask_pm_notify+0x40/0x40 [ 598.873378][ T27] ? kthread_blkcg+0xd0/0xd0 [ 598.873393][ T27] ret_from_fork+0x1f/0x30 [ 598.873423][ T27] [ 598.877826][ T27] Kernel Offset: disabled [ 599.201911][ T27] Rebooting in 86400 seconds..