last executing test programs: 10m8.725485214s ago: executing program 3 (id=61): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 10m8.448388009s ago: executing program 3 (id=63): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 10m7.873422143s ago: executing program 3 (id=65): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x40, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 10m6.397330247s ago: executing program 3 (id=76): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 10m5.997355176s ago: executing program 3 (id=81): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/234, 0xea) lseek(r2, 0x3, 0x1) 10m5.579834656s ago: executing program 3 (id=85): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x5, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x866, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10m5.076551497s ago: executing program 32 (id=85): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x5, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x866, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9m52.494950736s ago: executing program 0 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) chdir(0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x1, 0x2000402) write(r0, &(0x7f0000000200)='2', 0x1) 9m51.688246254s ago: executing program 0 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) link(0x0, &(0x7f00000001c0)='./mnt\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0x160003, 0x0, {[0x7f, 0xf971, 0x0, 0x80000000, 0x17c1, 0xefc, 0x80000000, 0x20000]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m51.177537086s ago: executing program 0 (id=162): r0 = syz_open_dev$ndb(&(0x7f00000005c0), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9m50.834968654s ago: executing program 0 (id=163): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xf9, 0x5536, &(0x7f0000005a80)="$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") creat(&(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x68) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)={0x3, 0x1, 0x7, 0x2}) 9m48.741564642s ago: executing program 0 (id=168): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)={0x1, 0x0, [{0x0, 0x2a, &(0x7f0000000100)=""/42}]}) 9m46.324830607s ago: executing program 0 (id=181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0xfffffffffffffec1, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xffffff6f, 0x2, 0x7}]}]}]}}]}, 0xb3}, 0x1, 0x0, 0x0, 0x26044028}, 0x4000800) 9m45.815743259s ago: executing program 33 (id=181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0xfffffffffffffec1, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xffffff6f, 0x2, 0x7}]}]}]}}]}, 0xb3}, 0x1, 0x0, 0x0, 0x26044028}, 0x4000800) 9m16.12936971s ago: executing program 2 (id=324): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x104a, &(0x7f0000000000)="$eJzsz9GtAiEUBNB5Dza68We7sAFbsR6txypszGDA1ViB+nFOCAkzEHLDl81JyVTrfz8s8xqt/saasm+nmnEj21dZ5t7uks0zOfcnfcutPSTLaNqhlent15prSY6XDwwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/vHgAA///ADQ8e") io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 9m15.328343419s ago: executing program 2 (id=332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendto(r0, &(0x7f00000001c0)='\r', 0x1, 0x40000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="e5c625", 0x3}], 0x1}}], 0x1, 0x24004c41) 9m15.061909185s ago: executing program 2 (id=335): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xffffffffffff]}, 0x0, 0x8) r2 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x15, 0x4, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 9m14.689331573s ago: executing program 2 (id=338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@errors_remount}, {@barrier}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x8}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 9m14.140493116s ago: executing program 2 (id=342): unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) lseek(r0, 0x0, 0x1) 9m13.663817877s ago: executing program 2 (id=346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) close(r1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 9m13.237604207s ago: executing program 34 (id=346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) close(r1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 5m46.244959428s ago: executing program 1 (id=1776): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000680)='\xfc\xa5\x13\x9c\xa1\xfdcP\x9a\xf0\x12Eu[2E\x89\xe7\xa0W%\xd2\x8d\xc2\xab\xb9y\xe9\xc0\\\r\x18u\xd4C=\xe9\xee+\xd4J\xfd\x1ew\x99\xe8<\xcdjk(\xfe\xbf\xe9\x81j;\xe7n\bG\xb5<\xcdN.\xd9Y\xee\xbd\a\xa0\xcdv\x81\xaf\x17\xfc\xa3r\xc8m\xa8\xa0t\x02\xf1\f/@\x00\x00\x009\xca\xd1q\xa1`\x99\xad*\x10\xb1\x02\x05\xde:1/N8\x03\xcbe\xb7\x9c\xcf\x15\x90E\x9e\xe06\x85!\xbe\xf3\x9d\xcc`C\x15\x959\xa4\xd0j\xf9l\x82\xe1\xeaL\xc2\xab\xc7F;\x87]\xd7\xda\x98\xddI=;\x13j\xcf\x9cw\xf8\xf7\x17\xdah\x01\x9bL\x00\x969\x8b\x04\x85\xe5\xcc,\xe0\xd3\x02%\xf7\\7\xd7d\xdbX\x9b[\x8b\xb6\xc7\xf7\x00'/223, 0x0) 5m45.614123782s ago: executing program 1 (id=1783): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x59f9, 0x800, 0xfffffffd, 0x31c}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = dup2(r6, r6) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x162, 0x1, 0x3, 0xb2, 0x0, r7}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5044, 0x0, 0x6, 0x273, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e3c, 0xb155c4dedb2408a4, 0x9, 0x104, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf39, 0x1000, 0x3, 0x102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x4000, 0x10002, 0xdf, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x2, 0x48a, 0x0, 0x0}}, 0x0) 5m45.159374823s ago: executing program 1 (id=1787): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@delqdisc={0x2c, 0x25, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff0, 0x2}, {0x2, 0x2}, {0x8, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 5m44.865480659s ago: executing program 1 (id=1790): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 5m44.650552944s ago: executing program 1 (id=1792): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) 5m43.029539952s ago: executing program 1 (id=1801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 5m42.804447327s ago: executing program 35 (id=1801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 4m37.185524313s ago: executing program 5 (id=2322): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x20080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4m35.201290549s ago: executing program 5 (id=2324): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r3, &(0x7f0000000100)={0x2, 0x4e29, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) 4m34.937573405s ago: executing program 5 (id=2328): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 4m34.68948125s ago: executing program 5 (id=2331): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1\x00') 4m34.25231829s ago: executing program 5 (id=2333): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@nobh}, {@errors_remount}, {@block_validity}]}, 0x0, 0x480, &(0x7f0000000500)="$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") 4m33.673260044s ago: executing program 5 (id=2339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x6, 0x8, 0x81], 0x54000, 0x100204}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffe}, 0x1c, 0x0}, 0xa854) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m33.154422815s ago: executing program 36 (id=2339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x6, 0x8, 0x81], 0x54000, 0x100204}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffe}, 0x1c, 0x0}, 0xa854) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m44.674639208s ago: executing program 8 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3m44.372992445s ago: executing program 8 (id=2628): recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 3m42.645075175s ago: executing program 8 (id=2633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3m42.361537181s ago: executing program 8 (id=2636): syz_mount_image$exfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x7f, 0x1519, &(0x7f00000021c0)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJckmSSJIkSXJLSJrkSEJiyC1pSEJyGZJ7SC4Tk8b9fpeEJGmSJLfckvX/TPg5nTr/0/mdfsf5nHm+n8/+WM+797P22u/z7nevvc3Md50GV29Yo2p9IoJ/CV74JxkAYgGgPwBcAwABAJSNLxuftT6nxOR/bSfsz/Xw1Cs9AnYlcf2zN65/9sb1z964/tkb1z974/pnb1z/7I3rz1h2tmlagWt5yb4LP//Pzvj6/9/h4skHX60pdX1ngJg/msf1/++V4w9sw/X/rxX8kY24/tkb1z+7ir3SA2D/Afj8zw7+/kyQ65+9cf0Zy86u9PPnK71AJHu/B1f688cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLHs47S9TAHCpfaXHxRhjjDHGGGOMsT+Pz3GlR8AYY4wxxhhjjLH/ewgCJCgIIAZyQCzkhDgQAHA15IZrIALXQjxcB3ngesgL+SA/FIAEKAiFQIOBGCAIoTAUgSjcAEXhRigGxaEElAQHpSARboLScDOUgVugLNwK5eA2KA8VoCJUgtuhMtwBVeBOqAp3QTW4G6pDDbgHasK9UAvug9pwP9SBB6AuPAj14CGoDw9DA3gEGsKj0Ageg8bQBJpCM2j+v8p/EbrBS9AdekAy9IRe8DL0hj7QF/pBf3gFBsCrMBBegxQYBIPhdRgCb8BQeBOGwXAYAW/BSHgbRsFoGANjIRXGwXh4BybAuzARJsFkmAJTYRpMh/dgBsyEWfA+zIYPYA7MhXkwH9LgQ1gACyEdPoJF8DFkwGJYAkthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW2EbfALb4VPYAZ/BTtgFu+Fz2ANf/JP5p/4mvzMCAgoUqFBhDMZgLMZiHMZhLsyFuTE3RjCC8RiPeTAP5sW8mB/zYwImYCEshAYNEhIWxsIYxSgWxaJYDIthCSyBDh0mYiKWxpuxDJbBslgWy2E5LI8VsAJWwkpYGStjFayCVbEqVsNqWB2r4z14D/bEWlgLa2NtrIN1Lj2ewvpYHxtgA2yIDbERNsLG2BibYlNsjs2xBbbAltgSW2NrbINtsC22xSRMwnbYDttje+yAHbAjdsRO2Ak7YxfskvliDsCX8CXsgdVET+yFvbA3puToi/2wH76CA/BVfBVfwxQchIPxdXwd38CheBKH4XAcgSOwsngbR+FoJDEWUzEVx+N4nIATcCJOwkk4BafiNJyO03EGzsSZ+D7Oxg/wA5yLc3E+pmEaLsCFmI7puAhPYQYuxiW4FJfhclyGK3EVrsQ1uBbX4HpcjxtxI27GzbgVt+In+Al+igoAP8NduAtTcA/uwb24F/fhPtyP+zETM/EAHsCDeBAP4SE8jIfxCB7FY3gUT+AJPImn8DSexrN4Fs/h8wnfNPi0+OoUEFmUUCJGxIhYESviRJzIJXKJ3CK3iIiIiBfxIo/II/KKvCK/yC8SRIIoJAoJI4wgEcYAgIiKqCgqiopiopgoIUoIJ5xIFImitCgtyogyoqy4VZQTt4nyooJo5SqJSqKyaO2qiDtFVVFVVBN3i+qihqghaoqaopaoJWqL2qKOqCPqigdFPdET++LDIqsyDcUgbCQGY2PRRMiL32AtxFBsKVqJ1uJJMRyHYVvRwiWJZ0Q7MQrbi7+I0fic6CjGYifxgugsuoiu4kXRTbR03UUPMRF7il5iCvYWfURf0U/MwLvF+zg7Z3XxmkgRg8Rg8bqYj2+IoeJNMUwMFyPEW2KkeFuMEqPFGDFWpIpxYrx4R0wQ74qJYpKY7CWAmCami/fEDDFTzBLvi9niAzFHzBXzxHyRJj4UC8RCkS4+EovExyJDLBZLxFKxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU18IraLTyH2wiGL3eJzsUd8IfaKL8U+8ZXYL74WmeIbcUB8Kw6K78Qh8b04LH4QR8RRcUwcFyfEj+KkOCVOizPirPhJnBM/i/PCC5AohZRSyUDGyBwyVuaUcfIqmUsGF9/da2W8vE7mkdfLvDKfzC8LyARZUBaSWhppJclQFpZFZFTeIIvKG2UxWVyWkCWlk6VkorxJlpY3yzLyFllW3irLydtkeVlBVpSV5O2ysrxDQuTCPqrJu2V1WUPeI5PhXllL3idry/tlHfmArCsflPXkQ7K+fFg2kI/IhvJR2Ug+JhvLJrKpbCaby8dlC/mEbClbydbySdlGPiXbyqdlknxGtpP+4kfkOdlRPi87yRdkZ9lFdpU/y/PSy+6yh4SeIHvJl2Vv2Uf2lf1kf/mKHCBflQPlazJFDpKD5etyiHxDDpVvymFyuBwh35Ij5dtylBwtx8ixMlWOk+PlO3KCfFdOlJPkZDlFTpXTZN+LPc2S8h/mv/M7+QN/2ftGuUlullvwYinkp3KH3CF3yp1yt9wt98g9cq/cK/fJfXK/3C8zZaY8IA/Ig/KgPCQPycPysDwij8oz8rg8IX+UJ+UpeUqekWflWXnu4nsACpVQUikVqBiVQ8WqnCpOXaVyqatVbnWNiqhrVby6TuVR16u8Kp/KrwqoBFVQFVJaGWUVqVAVVkVUVN1waZSqhCqpnCqlEtVN/0y+KqpuVMVU8V/lXxpf8t8ZX3PVXLVQLVRL1VK1Vq1VG9VGtVVtVZJKUu1UO9VetVcdVAfVUXVUnVQn1Vl1Vl1VV9VNdVPdVXeVrJJVL/Wy6q36qL6qn+qvXlED1AA1UA1UKSpFDVaD1RA1RA1VQ9UwNUyNUCPUSDVSjVKj1Bg1RqWqVDVejVcT1AQ1UU1Uk9VkNVVNVdPVdDVDzVCz1Cw1W81Wc9QcNU/NU2kqTS1QC1S6SleL1CKVoRarxWqpWqqWq+VqpVqpVqvVaq1aq9ar9SpDbVKb1Ba1RW1T29R2tV3tUDvUTrVT7Va71R61R+1Ve9U+tU/tV/tVpspUB9QBdVAdVIfUIXVYHVZH1BF1TB1TJ9QJdVKdVKfVaXVWnVXn1Dl1Xp3PmvYFIhCBCrKutDFBbBAbxAVxQa4gV5A7yB1EgkgQH8QHeYLrg7xBviB/UCBICAoGhQIdmMAG4mLRo8ENQdHgxqBYUDwoEZQMXFAqSAxuCkoHNwdlgluCssGtQbngtqB8UCGoGFQKbg8qB3cEVYI7g6rBXUG14O6gelAjuCeoGdwb1AruC2oH9wd1ggeCusGDQb3goaB+8HDQIHgkaBg8GjQKHgsaB02CpkGzoPmf2r/3J/M94TbqHjpZ99S99Mu6t+6j++p+ur9+RQ/Qr+qB+jWdogfpwfp1PUS/oYfqN/UwPVyP0G/pkfptPUqP1mP0WJ2qx+nx+h09Qb+rJ+pJerKeoqfqaXq6fk/P0DP1LP2+nq0/0HP0XD1Pz9dp+kO9QC/U6fojvUh/rDP0Yr1EL9XL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Ga9RW/V2/Qnerv+VO/Qn+mdepferT/Xe/QXeq/+Uu/TX+n9+mudqb/RB/S3+qD+Th/S3+vD+gd9RB/Vx/RxfUL/qE/qU/q0PqPP6p/0Of2zPq991uQ+6/JulFEmxsSYWBNr4kycyWVymdwmt4mYiIk38SaPyWPymrwmv8lvEkyCKWQKmSxkyBQ2hU3URE1RU9QUM8VMCVPCOONMokk0pU1pU8aUMWVNWVPOlDPlTXlT0VQ0t5vbzR3mDnOnudPcZe4yd5u7TQ1Tw9Q0NU0tU8vUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTVPT1DQ3zU0L08K0NC1Na9PatDFtTFvT1iSZJNPOtDPtTXvTwXQwHU1H08l0Mp1NZ9PVdDXdTDfT3XQ3ySbZ9DK9TG/T2/Q1fU1/098MMAPMQDPQpJgUM9gMNkPMEDPUDDXDzHAzIuv0MW+bUWa0GWPGmlSTasab8WaCmWAmmolmsplsppqpZrqZbmaYGWaWmWVmm9lmjplj5pl5Js2kmQVmgUk36WaRWWQyTIZZYpaYZWaZWWFWmFVmlVlj1ph1sM5sMBvMJrPJbDFbzDazzWw3280Os8PsNDvNbrPb7DF7zF6z1+wz+8x+s99kmkxzwBwwB81Bc8gcMofNYXPEHDHHzDFzwpwwJ81Jc9qcNmdNvovXS29ibU4bZ6+yuezVNre9xv5tnN8WsAm2oC1ktc1r8/0qNtbaYra4LWFLWmdL2UR702/i8raCrWgr2dttZXuHrfKbuKa919ay99na9n5bw97zq7iOfcDWtY/aeogAtoltYJvZhvZR28g+ZhvbJrapbWbb2KdsW/u0TbLP2Hb22d/EC+xCu8qutmvsWrvT7rKn7Rl70H5nz9qfbHfbw/a3r9gB9lU70L5mU+yg38Qj7Ft2pH3bjrKj7Rg79jfxZDvFTrXT7HT7np1hZ/4mTrMf2tk23c6xc+08O/+XOGtM6fYju8h+bDNsAEvsUrvMLrcr7Mr/GetSu95usBvtDvuZ3WK32m32E7v90kTY7rK77ed2j/3CHrDf2n32K7vfHrKZ9ptf4qzjO2S/t4ftD/aIPWqP2eP2hP1RXcrOOvbj9md73noLhAQkSVFAMZSDYiknxdFVlIuuptx0DUXoWoqn6ygPXU95KR/lpwKUQAWpEGkyZIkopMJUhKJ0A10aXgkqSY5KUSLdRKXpZipDt1BZupXK0W1UnipQRapEt1NluoOq0J1Ule6iav+TW5PupVp0H9WG+6kOPUB16UGqRw9RfXqYGtAj1DBrqkePUWNqQk2pGTWnx6kFPUEtqRW1piepDT1FbelpSqJnqB09S+3pL9SBnqOO9Dx1oheoM3WhrvQidaOXqDv1oGTqSb3oZepNfagv9aP+9AoNoFdpIL1GKTSIBtPrNITeoKH0Jg2j4TSC3qKR9DaNotE0hsZSKo2j8fQOTaB3aSJNosk0habSNJpO79EMmkmz6H2aTR/QHJpL82g+pdGHtIAWUjp9RIvoY8qgxbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jb6hLbTp7SDPqOdtIt20+e0h76gvfQl7aOvaD99TZn0DR2gb+kgfUeH6Hvfg36gI3SUjtFxOkE/0kk6RafpDJ2ln+gc/UznyROEGIpQhioMwpgwRxgb5gzjwqvCXOHVYe7wmjASXhvGh9eFecLrw7xhvjB/WCBMCAuGhUIdmtCGFIZh4bBIGA1vCIuGN4bFwuJhibBk6MJSYWJ4U1g6vDksE94Slg1vDcuFt4Xlwwrho/dXCm8PK4d3hFXCO8Oq4V1htfDusHpYI7wnrBneG9YK7wtrh/eHZcIHwrrhg2G98KGwfvhw2CB8JGwYPho2Ch8LG4dNwqZhs7B5+HjYInwibBm2CluHT4ZtwqfCtuHTYVL4TNgufPaX9Q8s/Pvrk8OeYa/w5fDl0Pv75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3NXKAQyecdMoFLsblcLEup4tzV7lc7mqX213jIu5aF++uc3nc9S6vy+fyuwIuwRV0hZx2xllHLnSFXREXdTe4ou5GV8wVdyVcSedcKZfomrnmrrlr4Z5wLV0r19o96Z50T7mn3NPuafeMa+eede3dX1wH95zr6J53z7sXXGfXxXV1L7publzuC+dVsuvlernerrfr6/q6/q6/G+AGuIFuoEtxKW6wG+yGuCFuqBvqhrlhboQb4Ua6kW6UG+XGuDEu1aW68W68m+AmuIluopvsJrupbqqb7qa7GW6Gqzzzwl7muDlunpvn0lyaW+Cy5ozpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+62ux1uh9vpr7nQqdvj9rq9bp/b5/a7r12m+8YdcN+6g+47d8h97w67H9wRd9Qdc8fdCfejO+lOudPujDvrfnLn3M/uvPMuNTIuMj7yTmRC5N3IxMikyOTIlMjUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvuCX0hX0RH/U3+KL+Rl/MF/clfEnvfCmf6G/ypf3Nvoy/xZf1t/py/jZf3lfwFf1jvrFv4pv6Zr65f9y38E/4lr6Vb+2f9G38U76tf9on+Wd8O/+sb+//4jv453xH/7zv5F/wnX0X39W/6Lv5l3x338Mn+56+l3/Z9/Z9fF/fz/f3r/gB/lU/0L/mU/wgP9i/7of4N/xQ/6Yf5of7ETFv+ZGXbpFhrE/14/x4/46f4N+FO/0kP9lP8VP9ND/dv+dn+Jl+ln/fz/Yf+Dl+rp/n5/s0/6Ff4Bf6dP+RX+Q/9hl+8aWHyn6FX+lX+dV+jV/r1/n1foPf6Df5zX6L3+q3+U/8dv+p3+E/8zv9Lr/bf+73+C/8Xv+l3+e/8vv91z7Tf+MP+G/9Qf+dP+S/94f9D/6IP+qP+eP+hP/Rn/Sn/Gl/xp/1P/lz/md/nn9njTHGGGPsDxl3uSl+vebC4/yev5Mj/mrjXgBw9dYCmX+9PmtGuS7vhXYfkdAmAgDP9Oj08KWlWrXk5OSL22ZICIrMBbj0P0FZYuByvBhaw1OQBK2g9O+Ov4/ocpb+Qf/RWwHi/ionFi7Hl/v/EgCTf6f/x58csaBceDr+/9P/XIBiRS7n5ITL8WJo/cvzlVZQ5u+MP1+LfzD+nF+lArT8q5xccDm+PP5EeAKehaRfbckYY4wxxhhjjF3QR1TscOn+89JPfP7e/XmCupyTAy7H/+j+nDHGGGOMMcYYY1fec126Pv14UlKrDv98o8r/KusPNxrB/1XP3PjdhvcAl15RAPAvdgiQ1ZD/zqPY/G/ZV8rFU+dvVy074wP4zyjln9G4wl9MjDHGGGOMsT/d5Un/r19XV2pAjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYNvTv+HNiV/oYGWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsSvt/wUAAP//YyL3jA==") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock(&(0x7f000068d000/0x1000)=nil, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m41.193471778s ago: executing program 8 (id=2639): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0xffffffffffffffa0) 3m40.502352344s ago: executing program 8 (id=2642): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000000580)={0x40, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m40.018172065s ago: executing program 37 (id=2642): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000000580)={0x40, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.74089964s ago: executing program 7 (id=3803): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) close_range(r0, r1, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 5.557575965s ago: executing program 7 (id=3806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) 4.997205968s ago: executing program 7 (id=3808): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x4221030) keyctl$get_security(0x11, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_io_uring_setup(0x141c, &(0x7f0000000040)={0x0, 0x327a, 0x800, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001480)=@ublk_ctrl_cmd_sqes={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207511, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', @start_user_recovery_cmd}) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0xa75, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4d}}}, 0x0) io_uring_enter(r1, 0x317d, 0x5, 0x2, 0x0, 0x0) 4.335240354s ago: executing program 9 (id=3812): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x74, r2, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @loopback, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004840}, 0x4048040) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000400)='test\x00', 0x101242, 0x1d1) write(r4, 0x0, 0x0) 3.953478073s ago: executing program 9 (id=3816): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 3.71701109s ago: executing program 9 (id=3819): r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0xfffffffffffffd31) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7e}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) 3.325374529s ago: executing program 6 (id=3823): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x400c4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.110272544s ago: executing program 7 (id=3824): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xe3900, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) getsockopt$sock_int(r3, 0x1, 0x5, 0x0, &(0x7f0000000040)) poll(&(0x7f0000000140)=[{r3, 0x2cfc08c20dafc34e}, {r1, 0xf102}], 0x2, 0x8000007) fcntl$lock(r3, 0x6, 0x0) 2.731553103s ago: executing program 9 (id=3825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.473126729s ago: executing program 4 (id=3827): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8840) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.983032761s ago: executing program 4 (id=3828): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3537, 0xc000, 0xb, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0x1d424b443751bfe5}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.828545975s ago: executing program 6 (id=3829): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x2, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x35, 0x0, 0x0, 0x2c}, 0x2c855) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.557246162s ago: executing program 6 (id=3830): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x803, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x4d}, 0x94) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 1.556876192s ago: executing program 9 (id=3831): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lstat(&(0x7f0000000040)='./my_sys\x00', 0x0) 1.534659863s ago: executing program 4 (id=3832): r0 = fanotify_init(0x40, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.399117906s ago: executing program 4 (id=3833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.277446759s ago: executing program 6 (id=3834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4}, 0x8) 576.432836ms ago: executing program 9 (id=3835): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x884) 341.482492ms ago: executing program 4 (id=3836): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = fanotify_init(0x8, 0x101000) fanotify_mark(r1, 0x1, 0x48001019, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x10001011, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 281.280603ms ago: executing program 7 (id=3837): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8840) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 216.762425ms ago: executing program 6 (id=3838): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x803, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d", @ANYRESHEX=r0], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 151.227676ms ago: executing program 4 (id=3839): socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3add, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 1.20724ms ago: executing program 6 (id=3840): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x1206, &(0x7f0000003680)="$eJzs3E+LW1UYB+B3xtqpU+ePWqstiAfd6ObSmYUb3QwyBWlAaTtCKwi3zo2GXJOQGwYiYnXl1s8hggjuBHGnm9n4DQR3s3FZQbwySW0bzSwitinD82zywnt+yTkJCZxwzz147YsP280qa+aDWFxYiMVeRLqVIsVi/O3TePnVH3967sq165e2Go3tyyld3Lq68UpKafX579/5+KsXfhicfvvb1e+WYn/93YPfNn/dP7t/7uDPqx+0qtSqUqc7SHm60e0O8htlkXZbVTtL6a2yyKsitTpV0Z/oN8turzdMeWd3ZbnXL6oq5Z1hahfDNOimQX+Y8vfzVidlWZZWloPZnbhT7Xx5q67riLp+NE5GXdf1Y7Ecp+PxWInVWIv1eCKejKfiTDwdZ+OZeDa++eXr4WECAAAAAAAAAAAAAAAAAAAA+P/Mev7/3GjUvGcNAAAAAAAAAAAAAAAAAAAAx8uVa9cvbTUa25dTOhVRfr63s7czfhz3t5rRijKKuBBr8UeMTv+PjeuLbzS2L6SR9fisvHk7f3Nv55HJ/MbodgJT8xvjfJrML8XyvfnNWIsz0/ObU/On4qUX78lnsRY/vxfdKGM3DrN3859spPT6m41/5M+PxgEAAMBxkKU7pu7fs+yo/jg/w/8DE/vrw+z5E3NdOhFRDT9q52VZ9BUPfXHy6Fbcv1dfj9vF73Vdz/9NmFNx9DdlKSL+8zMvRMTDscB/FfP+ZeJBuPuhz3smAAAAAAAAAAAAzOJBXE447zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCrAAAA///rrNHw") bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0000001000000950000000000000034062987d8016a0ab9442c12e3787e8bf3f398bf98673cd727e77df8e9f8b7cd31b3bb5ad077118529f69d5a527d5b0f4f432e23c1302d0d9130fe652f98138e8acd9afb54b6bb279ddce10d8cb5a638c5e4e77db3cd1abfba3a14d9fe15560a70276c0114b03b884f6aef75e05c37ea2232caacbb81add21384469c68f6b842af6b1d1f51ded9bd55fdd132be72fa7df1dbb32b464f9077fe4ac2c555fd4c6a5b9b0ef55c038562"], &(0x7f0000000040)='GPL\x00', 0x6, 0xae, &(0x7f0000000140)=""/133}, 0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) gettid() timer_create(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 7 (id=3841): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3fd}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1) kernel console output (not intermixed with test programs): ): Released all slaves [ 361.106239][T11719] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 361.128440][T11742] loop5: detected capacity change from 0 to 32768 [ 361.141566][T11742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1821 (11742) [ 361.207287][T11742] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 361.218522][T11742] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 361.227854][T11742] BTRFS info (device loop5): force clearing of disk cache [ 361.235465][T11742] BTRFS info (device loop5): metadata ratio 0 [ 361.241611][T11742] BTRFS info (device loop5): enabling disk space caching [ 361.249508][T11742] BTRFS info (device loop5): disk space caching is enabled [ 361.392130][T11742] BTRFS info (device loop5): enabling ssd optimizations [ 361.399900][T11742] BTRFS info (device loop5): auto enabling async discard [ 361.435950][T11742] BTRFS info (device loop5): rebuilding free space tree [ 361.480412][T11742] BTRFS info (device loop5): disabling free space tree [ 361.487817][T11742] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 361.498414][T11742] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 361.742214][T11700] chnl_net:caif_netlink_parms(): no params data found [ 362.411228][ T6579] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 362.425237][T11700] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.448227][T11700] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.478143][ T5785] Bluetooth: hci0: command tx timeout [ 362.520044][T11700] bridge_slave_0: entered allmulticast mode [ 362.556859][T11700] bridge_slave_0: entered promiscuous mode [ 362.729415][T11700] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.753415][T11700] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.760783][T11700] bridge_slave_1: entered allmulticast mode [ 362.811421][T11700] bridge_slave_1: entered promiscuous mode [ 363.229884][T11448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 363.281569][T11448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 363.312065][T11448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.418627][T11786] batadv_slave_1: entered promiscuous mode [ 363.468120][T11700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.519612][T11700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.551930][T11798] fuse: Bad value for 'fd' [ 363.621089][T11448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 363.661875][T11448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 363.684678][T11448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.898497][T11448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 363.913750][T11448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 363.928223][T11448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.000820][T11700] team0: Port device team_slave_0 added [ 364.016116][T11812] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1839'. [ 364.030575][T11700] team0: Port device team_slave_1 added [ 364.037763][T11812] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 364.107036][T11448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 364.133312][T11448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 364.157225][T11448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.196656][T11815] MTDSB: Device #1 doesn't appear to exist [ 364.196656][T11815] [ 364.298640][T11700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.331851][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.428506][T11700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.534265][T11700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.552084][ T5785] Bluetooth: hci0: command tx timeout [ 364.572088][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.646360][T11700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.945914][T11700] hsr_slave_0: entered promiscuous mode [ 364.977404][T11700] hsr_slave_1: entered promiscuous mode [ 364.996816][T11700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.031420][T11700] Cannot create hsr debugfs directory [ 366.340941][T11700] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 366.369873][T11700] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 366.453950][T11700] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 366.485721][T11700] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 367.456773][T11700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.560302][T11448] hsr_slave_0: left promiscuous mode [ 367.582862][T11448] bridge_slave_1: left allmulticast mode [ 367.597759][T11448] bridge_slave_1: left promiscuous mode [ 367.613975][T11448] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.658397][T11448] bridge_slave_0: left allmulticast mode [ 367.664503][ T5780] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 367.682151][T11448] bridge_slave_0: left promiscuous mode [ 367.697800][T11448] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.864678][ T5780] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 367.885124][ T5780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.909771][ T5780] usb 6-1: config 0 descriptor?? [ 367.920083][ T5780] cp210x 6-1:0.0: cp210x converter detected [ 367.947611][T11448] veth1_macvtap: left promiscuous mode [ 367.961895][T11448] veth0_macvtap: left promiscuous mode [ 367.978072][T11448] veth1_vlan: left promiscuous mode [ 367.991153][T11448] veth0_vlan: left promiscuous mode [ 368.319994][T11448] infiniband syz1: set down [ 368.329161][ T5780] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 368.341515][T11880] loop5: detected capacity change from 0 to 512 [ 368.375948][T11880] journal_path: Lookup failure for './file1' [ 368.392762][T11880] EXT4-fs: error: could not find journal device path [ 368.448971][ T5780] usb 6-1: cp210x converter now attached to ttyUSB0 [ 368.690719][ T5780] usb 6-1: USB disconnect, device number 7 [ 368.759338][ T5780] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 368.863764][ T5780] cp210x 6-1:0.0: device disconnected [ 370.351971][T11448] team0 (unregistering): Port device team_slave_1 removed [ 370.496226][T11448] team0 (unregistering): Port device team_slave_0 removed [ 370.624043][T11448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.757661][T11448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.947336][ T6360] smc: removing ib device syz1 [ 371.847140][T11448] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 371.857485][T11448] bond0 (unregistering): Released all slaves [ 372.112844][T11700] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.165159][ T5815] infiniband syz1: ib_query_port failed (-19) [ 372.242743][T11437] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.250136][T11437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.318901][T11437] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.327185][T11437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.196959][T11700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.411993][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1882'. [ 374.234371][ T5785] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 374.466697][T11700] veth0_vlan: entered promiscuous mode [ 374.475025][T11994] nvme_fabrics: missing parameter 'transport=%s' [ 374.484307][T11994] nvme_fabrics: missing parameter 'nqn=%s' [ 374.527438][T11700] veth1_vlan: entered promiscuous mode [ 374.674996][T11700] veth0_macvtap: entered promiscuous mode [ 374.701284][T11700] veth1_macvtap: entered promiscuous mode [ 374.764010][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.778917][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.793134][T11700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.827306][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.865284][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.909953][T11700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.966406][T11700] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.038198][T11700] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.066228][T11700] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.092270][T11700] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.326239][T12025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1894'. [ 375.427801][ T6360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.466470][ T6360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.575118][T11448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.623766][T11448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.798391][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 376.057145][ T5785] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 376.278436][T12037] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.405907][T12049] macvlan3: entered promiscuous mode [ 376.425465][T12049] macvlan3: entered allmulticast mode [ 376.480833][T12049] bond6: entered promiscuous mode [ 376.553065][T12049] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 376.635379][T12049] bond6: left promiscuous mode [ 376.837389][T12052] netlink: 'syz.7.1898': attribute type 12 has an invalid length. [ 376.863425][T12052] netlink: 'syz.7.1898': attribute type 29 has an invalid length. [ 376.891913][T12052] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1898'. [ 376.916046][T12052] netlink: 'syz.7.1898': attribute type 1 has an invalid length. [ 376.937302][T12052] netlink: 'syz.7.1898': attribute type 2 has an invalid length. [ 376.954907][T12052] netlink: 11 bytes leftover after parsing attributes in process `syz.7.1898'. [ 377.218646][ T27] audit: type=1326 audit(1786717731.808:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 377.268540][ T27] audit: type=1326 audit(1786717731.808:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 377.393766][ T27] audit: type=1326 audit(1786717731.828:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 377.451766][ T27] audit: type=1326 audit(1786717731.828:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 377.502155][ T27] audit: type=1326 audit(1786717731.828:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 377.539060][ T27] audit: type=1326 audit(1786717731.828:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 377.575013][ T27] audit: type=1326 audit(1786717731.828:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 377.664130][ T27] audit: type=1326 audit(1786717731.828:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 377.755269][ T27] audit: type=1326 audit(1786717731.828:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 377.800880][ T27] audit: type=1326 audit(1786717731.838:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 378.698116][T12111] sctp: [Deprecated]: syz.7.1912 (pid 12111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.698116][T12111] Use struct sctp_sack_info instead [ 378.702181][T12110] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 379.177975][T12101] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 379.472378][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.478866][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.165619][T12130] loop5: detected capacity change from 0 to 40427 [ 380.193960][T12130] F2FS-fs (loop5): invalid crc value [ 380.208983][T12130] F2FS-fs (loop5): Found nat_bits in checkpoint [ 380.321360][T12130] F2FS-fs (loop5): Start checkpoint disabled! [ 380.388580][T12130] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 380.668373][T12161] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SIT and SSA [ 380.693068][T12161] F2FS-fs (loop5): Stopped filesystem due to reason: 4 [ 381.895388][T12194] macsec0: entered promiscuous mode [ 381.965469][T12194] pimreg: entered allmulticast mode [ 382.004090][T12194] pimreg: left allmulticast mode [ 382.726094][T12193] macsec0: left promiscuous mode [ 383.130063][ T790] kernel write not supported for file bpf-prog (pid: 790 comm: kworker/1:2) [ 383.869906][T12244] tipc: Failed to remove unknown binding: 66,0,0/0:88895428/88895430 [ 383.879735][T12244] tipc: Failed to remove unknown binding: 66,0,0/0:88895428/88895429 [ 385.173003][T12284] netlink: 'syz.5.1960': attribute type 2 has an invalid length. [ 385.196546][T12284] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.1960'. [ 385.247036][T12291] netlink: 'syz.4.1962': attribute type 4 has an invalid length. [ 385.653740][ T5815] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 385.844909][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.872454][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.897716][ T5815] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 385.919080][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.959926][ T5815] usb 6-1: config 0 descriptor?? [ 386.105655][T10355] IPVS: starting estimator thread 0... [ 386.211905][T12324] IPVS: using max 23 ests per chain, 55200 per kthread [ 386.402074][ T5815] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 386.411361][ T5815] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 386.421538][ T5815] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 386.430695][ T5815] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 386.440814][ T5815] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 386.466804][ T5815] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 386.495795][T12328] ip_tables: iptables: counters copy to user failed while replacing table [ 386.888746][T12350] macsec0: entered promiscuous mode [ 386.901601][T12350] pimreg: entered allmulticast mode [ 386.918303][T12350] pimreg: left allmulticast mode [ 387.005471][ T5815] playstation 0003:054C:0DF2.0006: Invalid gyro calibration data for axis (4), disabling calibration. [ 387.019606][T12349] macsec0: left promiscuous mode [ 387.032030][ T5815] playstation 0003:054C:0DF2.0006: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 387.055642][ T5815] playstation 0003:054C:0DF2.0006: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 387.083026][ T5815] input: HID 054c:0df2 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:0DF2.0006/input/input14 [ 387.117946][ T5815] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:0DF2.0006/input/input15 [ 387.192589][ T5815] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:0DF2.0006/input/input16 [ 387.464292][ T5815] playstation 0003:054C:0DF2.0006: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 387.517332][ T5815] usb 6-1: USB disconnect, device number 8 [ 388.135040][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1992'. [ 388.388093][T12382] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 388.412320][T12382] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 389.478108][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2005'. [ 389.540390][T12408] syz.4.2003: attempt to access beyond end of device [ 389.540390][T12408] loop8: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 389.582685][T12408] EXT4-fs (loop8): unable to read superblock [ 389.680919][T12422] netlink: 'syz.7.2008': attribute type 10 has an invalid length. [ 389.724690][T12422] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.748297][T12422] bond0: (slave team0): Enslaving as an active interface with an up link [ 390.215348][T12447] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2015'. [ 390.261907][T12447] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2015'. [ 390.387118][T12456] input: syz0 as /devices/virtual/input/input17 [ 391.724160][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2026'. [ 392.759824][T12518] loop5: detected capacity change from 0 to 1024 [ 393.419099][T12528] kvm: pic: non byte read [ 393.433486][T12528] kvm: pic: level sensitive irq not supported [ 393.433667][T12528] kvm: pic: non byte read [ 393.455872][T12528] kvm: pic: non byte read [ 393.461012][T12528] kvm: pic: non byte read [ 393.476834][T12528] kvm: pic: single mode not supported [ 393.476933][T12528] kvm: pic: non byte read [ 393.498444][T12538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2042'. [ 393.503434][T12528] kvm: pic: non byte read [ 393.523467][T12528] kvm: pic: single mode not supported [ 393.523592][T12528] kvm: pic: non byte read [ 393.552902][T12528] kvm: pic: non byte read [ 393.568991][T12528] kvm: pic: single mode not supported [ 393.569021][T12528] kvm: pic: level sensitive irq not supported [ 393.581096][T12528] kvm: pic: non byte read [ 393.596973][T12528] kvm: pic: single mode not supported [ 393.597002][T12528] kvm: pic: level sensitive irq not supported [ 393.606693][T12528] kvm: pic: non byte read [ 393.812555][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2043'. [ 395.022645][T12580] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.2056'. [ 395.052401][T12580] netlink: zone id is out of range [ 395.057966][T12580] netlink: zone id is out of range [ 395.121754][T12580] netlink: zone id is out of range [ 395.127144][T12580] netlink: zone id is out of range [ 395.182484][T12580] netlink: zone id is out of range [ 395.205285][T12580] netlink: zone id is out of range [ 395.226480][T12580] netlink: zone id is out of range [ 395.243033][T12580] netlink: zone id is out of range [ 395.261816][T12580] netlink: zone id is out of range [ 395.267017][T12580] netlink: zone id is out of range [ 395.518894][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2061'. [ 396.389324][T12615] ref_ctr_offset mismatch. inode: 0x91b offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 397.515446][T12661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2075'. [ 398.586215][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 398.586308][ T27] audit: type=1326 audit(1786717753.168:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.5.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 398.586633][ T8] libceph: connect (1)[c::]:6789 error -101 [ 398.630769][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 398.643351][T12696] ceph: No mds server is up or the cluster is laggy [ 398.653865][ T27] audit: type=1326 audit(1786717753.168:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.5.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 398.811864][ T27] audit: type=1326 audit(1786717753.168:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.5.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 398.879939][ T27] audit: type=1326 audit(1786717753.168:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.5.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 398.982642][ T27] audit: type=1326 audit(1786717753.218:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.5.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 399.085325][ T27] audit: type=1326 audit(1786717753.218:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.5.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 399.145072][ T27] audit: type=1326 audit(1786717753.218:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.5.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 399.247736][ T27] audit: type=1326 audit(1786717753.218:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12691 comm="syz.5.2079" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 399.540927][T12723] netlink: 'syz.4.2088': attribute type 39 has an invalid length. [ 401.275224][T12766] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2100'. [ 401.699426][T12787] netlink: 15051 bytes leftover after parsing attributes in process `syz.6.2106'. [ 402.517837][T12825] loop7: detected capacity change from 0 to 512 [ 402.598271][T12825] EXT4-fs (loop7): Test dummy encryption mode enabled [ 402.681055][T12825] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.2114: inode has both inline data and extents flags [ 402.705920][T12825] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2114: couldn't read orphan inode 15 (err -117) [ 402.720216][T12825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.138884][T11700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.276454][T12852] overlayfs: failed to clone upperpath [ 403.352736][ T27] audit: type=1326 audit(1786717757.938:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12855 comm="syz.7.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 403.420779][ T27] audit: type=1326 audit(1786717757.938:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12855 comm="syz.7.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 404.079003][T12873] bond3: entered allmulticast mode [ 404.161219][T12875] macvlan2: entered promiscuous mode [ 404.175146][T12875] bond3: entered promiscuous mode [ 404.186347][T12875] macvlan2: entered allmulticast mode [ 404.207508][T12875] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 404.253207][T12875] bond3: left promiscuous mode [ 404.326697][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2129'. [ 405.441227][ T5785] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 405.647708][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2143'. [ 405.795117][T12919] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2143'. [ 406.061511][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 409.795363][T13023] vivid-004: ================= START STATUS ================= [ 409.814151][T13023] vivid-004: Radio HW Seek Mode: Bounded [ 409.821135][T13023] vivid-004: Radio Programmable HW Seek: false [ 409.848104][T13023] vivid-004: RDS Rx I/O Mode: Block I/O [ 409.866985][T13023] vivid-004: Generate RBDS Instead of RDS: false [ 409.883951][T13023] vivid-004: RDS Reception: true [ 409.889569][T13023] vivid-004: RDS Program Type: 0 inactive [ 409.919451][T13023] vivid-004: RDS PS Name: inactive [ 409.956496][T13023] vivid-004: RDS Radio Text: inactive [ 409.970630][T13023] vivid-004: RDS Traffic Announcement: false inactive [ 409.984780][T13023] vivid-004: RDS Traffic Program: false inactive [ 410.008711][T13023] vivid-004: RDS Music: false inactive [ 410.025260][T13023] vivid-004: ================== END STATUS ================== [ 410.928659][T13049] loop5: detected capacity change from 0 to 512 [ 410.997169][T13049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.160787][ T6579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.533952][T13065] ref_ctr increment failed for inode: 0x9c6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888076eedf00 [ 411.572818][T13067] overlayfs: failed to clone upperpath [ 413.841061][T13117] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 413.967269][T13125] overlayfs: failed to clone upperpath [ 415.692066][T13174] loop7: detected capacity change from 0 to 1024 [ 415.711245][T13174] EXT4-fs: Ignoring removed oldalloc option [ 415.725054][T13174] EXT4-fs: Ignoring removed oldalloc option [ 415.735230][T13174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 415.750465][T13174] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 415.816869][T13174] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.978507][T11700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.884360][T13230] loop5: detected capacity change from 0 to 256 [ 417.945428][T13230] FAT-fs (loop5): Directory bread(block 64) failed [ 417.965376][T13230] FAT-fs (loop5): Directory bread(block 65) failed [ 417.980766][T13230] FAT-fs (loop5): Directory bread(block 66) failed [ 417.989098][T13230] FAT-fs (loop5): Directory bread(block 67) failed [ 418.000646][T13230] FAT-fs (loop5): Directory bread(block 68) failed [ 418.008940][T13230] FAT-fs (loop5): Directory bread(block 69) failed [ 418.021153][T13230] FAT-fs (loop5): Directory bread(block 70) failed [ 418.029380][T13230] FAT-fs (loop5): Directory bread(block 71) failed [ 418.039724][T13230] FAT-fs (loop5): Directory bread(block 72) failed [ 418.070189][T13230] FAT-fs (loop5): Directory bread(block 73) failed [ 418.475657][T13246] overlayfs: failed to clone upperpath [ 419.823632][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2302'. [ 420.609839][T13320] tipc: Started in network mode [ 420.620931][T13320] tipc: Node identity 2007ff, cluster identity 4711 [ 420.628246][T13320] tipc: Node number set to 2099199 [ 421.007377][ C0] hrtimer: interrupt took 1983169 ns [ 421.077215][T13336] tipc: Started in network mode [ 421.095206][T13336] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 421.110760][T13336] tipc: Enabled bearer , priority 27 [ 422.129634][ T5832] tipc: Node number set to 9480874 [ 423.817171][T13371] loop5: detected capacity change from 0 to 512 [ 423.864493][T13371] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2331: invalid indirect mapped block 4294967295 (level 1) [ 423.926755][T13371] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2331: invalid indirect mapped block 4294967295 (level 1) [ 424.005508][T13371] EXT4-fs (loop5): 2 truncates cleaned up [ 424.028765][T13371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.106101][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 424.106119][ T27] audit: type=1326 audit(1786717778.698:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.5.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 424.138963][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2332'. [ 424.159042][ T27] audit: type=1326 audit(1786717778.698:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.5.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 424.196912][ T27] audit: type=1326 audit(1786717778.698:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.5.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 424.215501][ T6579] EXT4-fs error (device loop5): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 424.232371][ T27] audit: type=1326 audit(1786717778.698:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.5.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 424.283061][ T6579] EXT4-fs error (device loop5): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 424.284882][ T27] audit: type=1326 audit(1786717778.718:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13370 comm="syz.5.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332619e0d9 code=0x7ffc0000 [ 424.518869][ T9559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.469970][T13397] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 425.542787][T13397] CIFS: Attempting to mount //127.0.0.1/share [ 425.621024][T13397] CIFS: VFS: Error connecting to socket. Aborting operation. [ 425.669611][T13397] CIFS: VFS: cifs_mount failed w/return code = -111 [ 426.373525][T13412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 426.399418][T13412] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 426.410183][T13412] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 426.472842][T13412] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 426.562001][T13412] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 426.592775][T13412] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.747610][ T2917] bond1: (slave ip6gre1): Releasing backup interface [ 426.772843][ T2917] ip6gre1 (unregistering): left promiscuous mode [ 426.800075][ T2917] bond1: Destroying bond [ 427.494326][ T2917] bond1 (unregistering): Released all slaves [ 427.556471][T13434] ceph: No mds server is up or the cluster is laggy [ 427.563908][T10354] libceph: connect (1)[c::]:6789 error -101 [ 427.570034][T10354] libceph: mon0 (1)[c::]:6789 connect error [ 428.485612][T13457] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2358'. [ 428.499732][T13457] unsupported nlmsg_type 40 [ 428.678527][T13459] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 428.738695][ T5785] Bluetooth: hci1: command tx timeout [ 429.461302][T13410] chnl_net:caif_netlink_parms(): no params data found [ 429.878051][ T2917] hsr_slave_0: left promiscuous mode [ 429.906273][ T2917] hsr_slave_1: left promiscuous mode [ 429.916680][ T2917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.927870][ T2917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.953351][ T2917] bridge_slave_1: left allmulticast mode [ 429.960218][ T2917] bridge_slave_1: left promiscuous mode [ 429.968000][ T2917] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.996846][ T2917] bridge_slave_0: left allmulticast mode [ 430.007584][ T2917] bridge_slave_0: left promiscuous mode [ 430.015487][ T2917] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.236882][ T2917] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 430.251800][ T2917] bridge3 (unregistering): left promiscuous mode [ 430.810533][ T5785] Bluetooth: hci1: command tx timeout [ 430.953080][ T2917] bond3 (unregistering): Released all slaves [ 431.196108][ T2917] bond2 (unregistering): (slave geneve2): Releasing active interface [ 431.212474][ T2917] bond2 (unregistering): Released all slaves [ 432.893078][ T5785] Bluetooth: hci1: command tx timeout [ 433.546365][ T2917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.697761][ T2917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.349997][ T2917] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 434.366303][ T2917] bond0 (unregistering): Released all slaves [ 434.654880][T13564] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2392'. [ 434.763621][T13410] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.775348][T13410] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.784235][T13410] bridge_slave_0: entered allmulticast mode [ 434.793272][T13410] bridge_slave_0: entered promiscuous mode [ 434.804870][T13410] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.814005][T13410] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.823195][T13410] bridge_slave_1: entered allmulticast mode [ 434.832650][T13410] bridge_slave_1: entered promiscuous mode [ 434.910605][T13410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.958628][T13410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.969529][ T5785] Bluetooth: hci1: command tx timeout [ 435.207616][T13410] team0: Port device team_slave_0 added [ 435.239827][T13410] team0: Port device team_slave_1 added [ 435.429787][T13410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.447210][T13410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.542456][T13410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.636397][ T2917] IPVS: stop unused estimator thread 0... [ 435.698540][T13410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.719874][T13410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.787643][T13410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.972351][T13410] hsr_slave_0: entered promiscuous mode [ 436.003050][T13410] hsr_slave_1: entered promiscuous mode [ 436.358307][ T2917] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.781900][ T2917] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.048642][ T2917] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.296503][ T2917] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.063874][T13410] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 438.095381][T13410] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 438.135124][T13410] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 438.216430][T13410] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 438.723970][T13660] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2416'. [ 439.579644][T13410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.869923][T13410] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.063522][T11430] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.070751][T11430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.230900][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.238561][ T6373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.594731][ T2917] hsr_slave_0: left promiscuous mode [ 440.616907][ T2917] hsr_slave_1: left promiscuous mode [ 440.627030][ T2917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.651813][ T2917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.664557][ T2917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.691822][ T2917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.716895][ T2917] bridge_slave_1: left allmulticast mode [ 440.724880][ T2917] bridge_slave_1: left promiscuous mode [ 440.730920][ T2917] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.745134][ T2917] bridge_slave_0: left allmulticast mode [ 440.751360][ T2917] bridge_slave_0: left promiscuous mode [ 440.815188][ T2917] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.883240][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.890396][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.962213][ T2917] veth0_macvtap: left promiscuous mode [ 440.967941][ T2917] veth1_vlan: left promiscuous mode [ 440.974575][ T2917] veth0_vlan: left promiscuous mode [ 441.267041][T13722] overlayfs: failed to clone upperpath [ 442.103031][T13732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2436'. [ 443.135437][T13753] loop7: detected capacity change from 0 to 1024 [ 443.143831][T13753] hfsplus: unable to parse mount options [ 443.275633][T13566] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 443.324297][ T2917] team0 (unregistering): Port device team_slave_1 removed [ 443.550673][ T2917] team0 (unregistering): Port device team_slave_0 removed [ 443.709938][ T2917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.916687][ T2917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.447829][ T2917] bond0 (unregistering): Released all slaves [ 445.653670][T13777] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2450'. [ 446.020785][T13789] nvmet: adding nsid 1 to subsystem subsys1 [ 446.394723][T13799] loop7: detected capacity change from 0 to 16 [ 446.427684][T13801] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6351, delta: 1 [ 446.448077][T13799] erofs: (device loop7): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 446.468569][T13801] ref_ctr increment failed for inode: 0xdaf offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888069ea8000 [ 446.499276][T13797] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6351, delta: 1 [ 446.510178][T13797] ref_ctr increment failed for inode: 0xdaf offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888069ea8000 [ 446.702248][T13410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.847540][T13809] syz_tun: entered allmulticast mode [ 446.888072][T13808] syz_tun: left allmulticast mode [ 447.202806][T13820] loop7: detected capacity change from 0 to 1024 [ 447.597071][ T5785] Bluetooth: hci2: Unknown advertising packet type: 0x19 [ 447.597227][ T5785] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 447.606469][ T5785] Bluetooth: hci2: Malformed LE Event: 0x0d [ 447.669415][T13410] veth0_vlan: entered promiscuous mode [ 447.699350][T13410] veth1_vlan: entered promiscuous mode [ 447.750518][T13410] veth0_macvtap: entered promiscuous mode [ 447.769010][T13410] veth1_macvtap: entered promiscuous mode [ 447.800097][T13410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.831652][T13410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.868898][T13410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.900123][T13839] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 448.028200][T13839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 448.131488][T13843] bond7: (slave geneve3): making interface the new active one [ 448.170436][T13843] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 448.275721][T13410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.299770][T13410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.317896][T13410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.353164][T13410] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.372392][T13410] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.386480][T13410] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.397519][T13410] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.684678][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.732626][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.857763][T11437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.879716][T11437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.774449][T13871] netlink: 'syz.6.2473': attribute type 10 has an invalid length. [ 449.805302][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2474'. [ 450.741744][T13900] lo: entered allmulticast mode [ 450.821069][T13900] lo: left allmulticast mode [ 451.675509][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2491'. [ 453.190457][T13964] loop7: detected capacity change from 0 to 1024 [ 454.375237][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2508'. [ 455.841726][ T23] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 455.960554][T14010] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.968648][T14010] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.100907][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2517'. [ 456.135229][ T23] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 456.145326][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.172083][ T23] usb 8-1: Product: syz [ 456.188315][ T23] usb 8-1: Manufacturer: syz [ 456.225853][ T23] usb 8-1: SerialNumber: syz [ 456.255511][ T23] usb 8-1: config 0 descriptor?? [ 456.495842][ T23] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 457.682905][T14010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.809475][T14010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.944193][ T23] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 457.979835][ T23] usb 8-1: USB disconnect, device number 2 [ 459.078246][T14010] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.090344][T14010] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.099990][T14010] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.120333][T14010] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.467972][T14054] netlink: 'syz.6.2523': attribute type 1 has an invalid length. [ 459.687798][ T9] IPVS: starting estimator thread 0... [ 459.774006][T14054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.822106][T14074] IPVS: using max 22 ests per chain, 52800 per kthread [ 459.887554][T14076] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 459.937735][T14055] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 460.022911][T11437] net_ratelimit: 115 callbacks suppressed [ 460.023008][T11437] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 460.468734][ T27] audit: type=1326 audit(1786717815.058:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.7.2532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 460.537222][ T27] audit: type=1326 audit(1786717815.058:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.7.2532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 460.629973][ T27] audit: type=1326 audit(1786717815.058:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.7.2532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 460.692550][ T27] audit: type=1326 audit(1786717815.058:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.7.2532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 460.750776][ T27] audit: type=1326 audit(1786717815.058:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.7.2532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 460.798798][ T27] audit: type=1326 audit(1786717815.058:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.7.2532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 460.842643][ T27] audit: type=1326 audit(1786717815.118:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.7.2532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 460.903285][ T27] audit: type=1326 audit(1786717815.118:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.7.2532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 460.939730][ T27] audit: type=1326 audit(1786717815.118:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.7.2532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 461.034341][ T27] audit: type=1326 audit(1786717815.118:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.7.2532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc6cf9de42 code=0x7ffc0000 [ 461.483410][T14058] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 461.512836][T14058] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 461.577417][T14058] bond1 (unregistering): Released all slaves [ 461.658449][T14079] @0: renamed from bond_slave_1 [ 461.920414][T14103] loop7: detected capacity change from 0 to 1024 [ 461.956224][T14103] ext4: Unknown parameter 'nouser_xattr' [ 461.987011][T14105] overlayfs: failed to clone upperpath [ 463.325852][T14134] team0: Device xfrm0 is of different type [ 463.491786][T14139] tipc: Started in network mode [ 463.517593][T14139] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 463.551124][T14139] tipc: Enabled bearer , priority 0 [ 464.178683][T14163] CIFS: Attempting to mount //127.0.0.1/share [ 464.662145][ T790] tipc: Node number set to 11578026 [ 464.965935][T14163] CIFS: VFS: Error connecting to socket. Aborting operation. [ 465.012190][T14163] CIFS: VFS: cifs_mount failed w/return code = -4 [ 465.517350][T14217] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.958820][T14224] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 466.150838][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 466.150856][ T27] audit: type=1326 audit(1786717820.738:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.4.2573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 466.225274][ T27] audit: type=1326 audit(1786717820.738:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.4.2573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 466.311980][ T27] audit: type=1326 audit(1786717820.738:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.4.2573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 466.381750][ T27] audit: type=1326 audit(1786717820.788:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.4.2573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 466.476828][ T27] audit: type=1326 audit(1786717820.788:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.4.2573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 466.537121][ T27] audit: type=1326 audit(1786717820.788:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.4.2573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 466.601780][ T27] audit: type=1326 audit(1786717820.788:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.4.2573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 466.712100][ T27] audit: type=1326 audit(1786717820.788:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.4.2573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 466.790159][ T27] audit: type=1326 audit(1786717820.788:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.4.2573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 466.851808][ T27] audit: type=1326 audit(1786717820.788:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.4.2573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 467.374994][T14267] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2580'. [ 467.437989][T14270] netlink: 'syz.8.2581': attribute type 1 has an invalid length. [ 467.468585][T14270] netlink: 63763 bytes leftover after parsing attributes in process `syz.8.2581'. [ 467.836091][T14281] loop8: detected capacity change from 0 to 512 [ 467.936112][T14281] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 468.020736][T14281] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.123089][T14281] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.501277][T13410] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.025333][T14305] gre1: entered promiscuous mode [ 469.237122][T14317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.737557][T14329] [ 471.093007][T14335] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2598'. [ 472.568472][T14396] batman_adv: batadv0: Adding interface: dummy0 [ 472.615390][T14396] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.658389][T14396] batman_adv: batadv0: Interface activated: dummy0 [ 472.784251][T14399] batadv0: mtu less than device minimum [ 472.793378][T14399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.808858][T14399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.823070][T14399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.837249][T14399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.851535][T14399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.866051][T14399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.880631][T14399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.894853][T14399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 472.909169][T14399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.519267][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 473.552123][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.878629][T14461] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.2632'. [ 476.129183][T14469] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 476.211260][T14471] loop8: detected capacity change from 0 to 256 [ 476.377920][T14471] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x4f516b14, utbl_chksum : 0xe619d30d) [ 476.444184][T14474] 8021q: adding VLAN 0 to HW filter on device bond9 [ 476.516821][T14474] bond8: (slave bond9): making interface the new active one [ 476.582643][T14474] bond8: (slave bond9): Enslaving as an active interface with an up link [ 476.650314][T14469] bond8: entered promiscuous mode [ 476.680783][T14469] bond9: entered promiscuous mode [ 477.794953][T14496] bond4: entered allmulticast mode [ 477.867007][T14497] macvlan2: entered promiscuous mode [ 477.951796][T14497] macvlan2: entered allmulticast mode [ 477.959558][T14497] bond4: (slave macvlan2): Opening slave failed [ 478.799082][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 479.698788][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.742817][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.784577][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.802367][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.810581][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 479.823476][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.550853][T14525] chnl_net:caif_netlink_parms(): no params data found [ 480.780443][T14557] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2656'. [ 480.898886][T14525] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.907708][T14525] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.916020][T14525] bridge_slave_0: entered allmulticast mode [ 480.926199][T14525] bridge_slave_0: entered promiscuous mode [ 480.938415][T14525] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.947108][T14525] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.956029][T14525] bridge_slave_1: entered allmulticast mode [ 480.965972][T14525] bridge_slave_1: entered promiscuous mode [ 481.135763][T14525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.177349][T14525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.343262][T14525] team0: Port device team_slave_0 added [ 481.398900][T14525] team0: Port device team_slave_1 added [ 481.480461][T14525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.499469][T14525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.543407][T14525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.581775][T14525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.611422][T14525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.709897][T14525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.897185][T14525] hsr_slave_0: entered promiscuous mode [ 481.912375][ T51] Bluetooth: hci1: command tx timeout [ 481.943184][T14525] hsr_slave_1: entered promiscuous mode [ 481.978346][T14525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.017817][T14525] Cannot create hsr debugfs directory [ 482.561119][ T49] tipc: Disabling bearer [ 482.577686][ T49] tipc: Left network mode [ 483.815352][T14525] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 483.897671][ T51] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 483.909499][ T51] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 483.937675][T14525] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 483.950302][T14525] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 484.000648][ T51] Bluetooth: hci1: command tx timeout [ 484.016971][T14525] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 484.781923][ T49] hsr_slave_0: left promiscuous mode [ 484.806546][ T49] hsr_slave_1: left promiscuous mode [ 484.832617][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.858132][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.902725][ T49] bridge_slave_1: left allmulticast mode [ 484.908452][ T49] bridge_slave_1: left promiscuous mode [ 484.924443][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.948042][ T49] bridge_slave_0: left allmulticast mode [ 484.966718][ T49] bridge_slave_0: left promiscuous mode [ 484.976129][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.118380][T14623] loop7: detected capacity change from 0 to 32768 [ 485.148979][T14623] JBD2: Ignoring recovery information on journal [ 485.299072][T14623] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 485.847838][T11700] ocfs2: Unmounting device (7,7) on (node local) [ 486.072044][ T51] Bluetooth: hci1: command tx timeout [ 486.756759][T14655] loop7: detected capacity change from 0 to 1024 [ 486.768429][T14655] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 486.870640][T14655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.038052][T14655] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 487.120808][T14655] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 487.284266][T11700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.476096][T14665] overlayfs: failed to clone lowerpath [ 487.564502][T14662] overlayfs: failed to clone lowerpath [ 487.816279][ T49] team0 (unregistering): Port device team_slave_1 removed [ 487.943167][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 487.959172][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 487.976403][ T51] Bluetooth: hci3: hardware error 0x00 [ 488.153070][T13412] Bluetooth: hci1: command tx timeout [ 488.245016][ T49] team0 (unregistering): Port device team_slave_0 removed [ 488.380977][ T49] bond0 (unregistering): (slave c@0): Releasing backup interface [ 488.528693][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.804842][ T49] bond0 (unregistering): Released all slaves [ 490.040080][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2677'. [ 490.072165][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 490.308432][T14525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.449728][T14525] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.529160][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.536881][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.665512][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.673580][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.891377][T14525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.070381][ T49] IPVS: stop unused estimator thread 0... [ 491.671525][T14525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.009148][T14731] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2691'. [ 492.400166][T14741] loop7: detected capacity change from 0 to 512 [ 492.487250][T14741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.520118][T14525] veth0_vlan: entered promiscuous mode [ 492.534741][T14525] veth1_vlan: entered promiscuous mode [ 492.572779][T14525] veth0_macvtap: entered promiscuous mode [ 492.585112][T14525] veth1_macvtap: entered promiscuous mode [ 492.651053][T14525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.709045][T14525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.741939][T14748] ref_ctr increment failed for inode: 0xf0f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801c3ab900 [ 492.755767][T14525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.778437][T11700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.800312][T14525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.852121][T14525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.883377][T14525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.925575][T14525] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.958822][T14525] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.004761][T14525] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.021770][T14525] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.312908][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.321079][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.417911][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.441196][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.278348][T14818] netlink: 'syz.6.2718': attribute type 39 has an invalid length. [ 496.409263][T14852] loop9: detected capacity change from 0 to 1024 [ 496.455869][T14852] EXT4-fs: Ignoring removed nomblk_io_submit option [ 496.514565][T14852] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 496.624971][T14852] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.926784][T14525] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.657096][T14974] bond10: entered allmulticast mode [ 500.931861][T14974] macvlan3: entered promiscuous mode [ 500.959369][T14974] bond10: entered promiscuous mode [ 500.972536][T14974] macvlan3: entered allmulticast mode [ 500.989930][T14974] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 501.016327][T14974] bond10: left promiscuous mode [ 501.505356][T14994] loop9: detected capacity change from 0 to 512 [ 501.532336][T14994] EXT4-fs (loop9): Test dummy encryption mode enabled [ 501.612174][T14994] EXT4-fs error (device loop9): ext4_orphan_get:1404: inode #15: comm syz.9.2777: inode has both inline data and extents flags [ 501.666045][T14994] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.2777: couldn't read orphan inode 15 (err -117) [ 501.705135][T14994] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.232961][T14525] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.344298][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.351587][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.651159][T15016] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 504.456273][T15060] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 507.393571][T15134] fuse: Bad value for 'fd' [ 507.415757][T15135] tipc: Started in network mode [ 507.421057][T15135] tipc: Node identity 2007ff, cluster identity 4711 [ 507.462437][T15135] tipc: Node number set to 2099199 [ 508.434924][T15164] loop7: detected capacity change from 0 to 256 [ 509.117630][T15181] loop7: detected capacity change from 0 to 512 [ 509.223191][T15181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.304783][T15181] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.488630][T15181] EXT4-fs error (device loop7): __ext4_get_inode_loc:4497: comm syz.7.2816: Invalid inode table block 0 in block_group 0 [ 509.574933][T15181] EXT4-fs (loop7): Remounting filesystem read-only [ 509.715357][T11700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.164733][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 511.164750][ T27] audit: type=1326 audit(1786717865.758:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.6.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 511.260992][ T27] audit: type=1326 audit(1786717865.758:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.6.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 511.310878][ T27] audit: type=1326 audit(1786717865.798:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.6.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 511.380766][ T27] audit: type=1326 audit(1786717865.798:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.6.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 511.453066][ T27] audit: type=1326 audit(1786717865.798:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.6.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 511.536648][ T27] audit: type=1326 audit(1786717865.798:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15227 comm="syz.6.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 511.660063][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2831'. [ 515.839327][T15321] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 521.467724][T15451] ceph: No mds server is up or the cluster is laggy [ 521.475146][ T23] libceph: connect (1)[c::]:6789 error -101 [ 521.508376][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 528.330820][T15604] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2909'. [ 530.292561][T15631] tipc: Started in network mode [ 530.362445][T15631] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 530.400512][T15631] tipc: Enabled bearer , priority 27 [ 531.021173][ T27] audit: type=1326 audit(1786717885.608:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.9.2913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 531.242027][ T27] audit: type=1326 audit(1786717885.658:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.9.2913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 531.318864][ T27] audit: type=1326 audit(1786717885.668:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.9.2913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 531.359567][ T27] audit: type=1326 audit(1786717885.668:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.9.2913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 531.494365][ T27] audit: type=1326 audit(1786717885.668:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.9.2913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 531.512094][ T5780] tipc: Node number set to 9480874 [ 531.679625][ T27] audit: type=1326 audit(1786717885.668:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.9.2913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 531.944567][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2925'. [ 532.811645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 535.132471][ T27] audit: type=1326 audit(1786717889.708:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15691 comm="syz.4.2927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 535.281804][ T27] audit: type=1326 audit(1786717889.708:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15691 comm="syz.4.2927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 535.403412][ T27] audit: type=1326 audit(1786717889.728:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15691 comm="syz.4.2927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 535.558873][ T27] audit: type=1326 audit(1786717889.728:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15691 comm="syz.4.2927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed51f9e0d9 code=0x7ffc0000 [ 537.354183][T15720] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2934'. [ 538.121646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 539.700721][T15750] ceph: No mds server is up or the cluster is laggy [ 539.722973][ T9] libceph: connect (1)[c::]:6789 error -101 [ 539.730389][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 540.593162][T15771] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2947'. [ 546.435180][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 546.435199][ T27] audit: type=1326 audit(1786717901.028:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.7.2956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 546.617550][ T27] audit: type=1326 audit(1786717901.048:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.7.2956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 546.804316][ T27] audit: type=1326 audit(1786717901.068:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.7.2956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 547.012811][ T27] audit: type=1326 audit(1786717901.068:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.7.2956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 547.221056][ T27] audit: type=1326 audit(1786717901.068:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.7.2956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 547.423122][ T27] audit: type=1326 audit(1786717901.128:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.7.2956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 547.580740][ T27] audit: type=1326 audit(1786717901.128:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15823 comm="syz.7.2956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 547.950954][T15849] overlayfs: failed to clone upperpath [ 551.164945][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2974'. [ 553.608649][T15957] overlayfs: failed to clone upperpath [ 561.782439][T16058] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 561.862814][T16042] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.973887][T16042] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.275190][T16042] batman_adv: batadv0: Interface deactivated: dummy0 [ 562.692064][T16064] overlayfs: failed to clone upperpath [ 563.453689][T16042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.551463][T16042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.768290][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.782174][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.590346][T16042] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.601290][T16042] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.615147][T16042] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.821576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #286!!! [ 565.098710][T16058] @0: renamed from bond_slave_1 [ 565.141581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 567.699759][ T27] audit: type=1326 audit(1786717922.288:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.7.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 567.863644][ T27] audit: type=1326 audit(1786717922.288:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.7.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 568.035076][ T27] audit: type=1326 audit(1786717922.288:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.7.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 568.187158][ T27] audit: type=1326 audit(1786717922.288:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.7.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 568.295463][T16122] overlayfs: failed to clone lowerpath [ 568.374073][T16124] CIFS: Attempting to mount //127.0.0.1/share [ 568.386230][ T27] audit: type=1326 audit(1786717922.288:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.7.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 568.541675][ T27] audit: type=1326 audit(1786717922.288:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.7.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 568.580610][ T27] audit: type=1326 audit(1786717922.288:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.7.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 568.700185][ T27] audit: type=1326 audit(1786717922.288:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.7.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 568.791844][ T27] audit: type=1326 audit(1786717922.288:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.7.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 568.831091][ T27] audit: type=1326 audit(1786717922.288:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.7.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 568.899148][T16137] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 569.182633][T16124] CIFS: VFS: Error connecting to socket. Aborting operation. [ 569.208158][T16124] CIFS: VFS: cifs_mount failed w/return code = -4 [ 570.063290][T16167] netlink: 'syz.4.3046': attribute type 1 has an invalid length. [ 570.104511][T16167] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.3046'. [ 570.138628][T16171] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3045'. [ 572.184960][T16214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.411578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 575.203263][T16264] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3080'. [ 575.613058][T16274] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3074'. [ 575.781594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 578.655589][T16316] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6351, delta: 1 [ 578.684064][T16316] ref_ctr increment failed for inode: 0xeee offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6a600 [ 578.711587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 579.104061][T16319] netlink: 'syz.7.3087': attribute type 1 has an invalid length. [ 579.386129][T16319] 8021q: adding VLAN 0 to HW filter on device bond5 [ 579.718557][T16324] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.821923][T16324] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.921985][T16324] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.049900][T16324] bond5: (slave geneve2): making interface the new active one [ 580.135548][T16324] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 580.912512][T16333] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3088'. [ 585.186982][T16381] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3099'. [ 586.890509][T16423] netlink: 'syz.4.3114': attribute type 1 has an invalid length. [ 587.126460][T16423] 8021q: adding VLAN 0 to HW filter on device bond11 [ 587.380126][T16426] bond11: (slave veth13): Enslaving as a backup interface with a down link [ 587.416436][T16427] dummy0: left promiscuous mode [ 587.457687][T16427] bond11: (slave dummy0): Enslaving as a backup interface with an up link [ 587.548286][ T6360] net_ratelimit: 10 callbacks suppressed [ 587.548325][ T6360] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 587.597174][T16431] netlink: 'syz.4.3114': attribute type 10 has an invalid length. [ 587.623846][T16431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3114'. [ 587.688236][T16431] dummy0: entered promiscuous mode [ 587.732175][T16431] bond11: (slave dummy0): Removing an active aggregator [ 587.780291][T11449] bond11: Warning: Found an uninitialized port [ 587.792935][T16431] bond11: (slave dummy0): Releasing backup interface [ 590.734603][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3136'. [ 590.798904][T16492] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.810380][T16492] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.821402][T16492] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.831484][T16492] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.866537][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3136'. [ 591.764778][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3145'. [ 591.881297][T16513] overlayfs: failed to resolve './file0': -2 [ 594.582364][T16565] 9pnet: p9_errstr2errno: server reported unknown error @cDB|pan [ 595.201569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 596.218254][T16602] overlayfs: failed to resolve './cgroup': -2 [ 597.205216][T16624] tipc: Failed to remove unknown binding: 66,0,0/9480874:1225619874/1225619875 [ 597.233381][T16624] tipc: Failed to remove unknown binding: 66,0,0/9480874:1225619874/1225619875 [ 597.603786][ T5780] libceph: connect (1)[c::]:6789 error -101 [ 597.622299][ T5780] libceph: mon0 (1)[c::]:6789 connect error [ 597.705742][T16630] ceph: No mds server is up or the cluster is laggy [ 598.432809][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 598.432842][ T27] audit: type=1326 audit(1786717953.028:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.6.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7fc00000 [ 598.519018][ T27] audit: type=1326 audit(1786717953.068:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.6.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f563919e0d9 code=0x7fc00000 [ 598.638882][ T27] audit: type=1326 audit(1786717953.148:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.6.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5639197e57 code=0x7fc00000 [ 598.711951][ T27] audit: type=1326 audit(1786717953.148:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.6.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f563913f459 code=0x7fc00000 [ 598.802221][ T27] audit: type=1326 audit(1786717953.148:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.6.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f563913f51d code=0x7fc00000 [ 598.872033][ T27] audit: type=1326 audit(1786717953.148:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.6.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f563919e0d9 code=0x7fc00000 [ 601.225779][T16675] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 601.415889][T16675] bond1: entered allmulticast mode [ 601.707365][T16677] ip6gretap1: entered promiscuous mode [ 601.828002][T16677] bond1: (slave ip6gretap1): no link monitoring support [ 601.947250][T16677] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 602.095570][T16677] ip6gretap1: entered allmulticast mode [ 602.142568][T16677] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 602.222036][T16686] netlink: 'syz.6.3211': attribute type 1 has an invalid length. [ 602.531499][T16686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 602.797262][T16688] bond1: (slave veth9): Enslaving as a backup interface with a down link [ 602.923383][T16689] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 602.992339][T11449] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 603.104491][T16690] netlink: 'syz.6.3211': attribute type 10 has an invalid length. [ 603.178987][T16374] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 603.195371][T16690] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3211'. [ 603.252365][T16690] dummy0: entered promiscuous mode [ 603.301984][T16690] bond1: (slave dummy0): Removing an active aggregator [ 603.343433][ T6360] bond1: (slave dummy0): link status up again after 0 ms [ 603.356449][T16690] bond1: (slave dummy0): Releasing backup interface [ 604.915173][ T27] audit: type=1326 audit(1786717959.508:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.6.3222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 605.033260][ T27] audit: type=1326 audit(1786717959.548:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.6.3222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 605.067851][ T27] audit: type=1326 audit(1786717959.548:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.6.3222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 605.130333][ T27] audit: type=1326 audit(1786717959.548:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.6.3222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 605.169109][ T27] audit: type=1326 audit(1786717959.548:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.6.3222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 605.220737][ T27] audit: type=1326 audit(1786717959.548:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.6.3222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 605.281785][ T27] audit: type=1326 audit(1786717959.548:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.6.3222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 605.363358][ T27] audit: type=1326 audit(1786717959.548:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.6.3222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 605.433984][ T27] audit: type=1326 audit(1786717959.548:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.6.3222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 605.509857][ T27] audit: type=1326 audit(1786717959.548:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.6.3222" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 606.539791][T16766] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3237'. [ 606.579148][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.588965][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.660995][T16767] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3237'. [ 606.675655][T16767] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.683822][T16767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.693951][T16767] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.703382][T16767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.720052][T16767] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3237'. [ 606.738329][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.747427][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.791795][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 610.401563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 610.721571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 613.825858][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 613.825900][ T27] audit: type=1326 audit(1786717968.418:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.7.3276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7fc00000 [ 614.017785][ T27] audit: type=1326 audit(1786717968.478:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.7.3276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbc6cf9e0d9 code=0x7fc00000 [ 614.127989][ T27] audit: type=1326 audit(1786717968.638:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.7.3276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbc6cf97e57 code=0x7fc00000 [ 614.278011][ T27] audit: type=1326 audit(1786717968.638:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.7.3276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc6cf3f459 code=0x7fc00000 [ 614.416444][ T27] audit: type=1326 audit(1786717968.648:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.7.3276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbc6cf3f51d code=0x7fc00000 [ 614.518967][ T27] audit: type=1326 audit(1786717968.648:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.7.3276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbc6cf9e0d9 code=0x7fc00000 [ 615.580622][T16893] bond2: (slave veth3): Enslaving as an active interface with a down link [ 615.594141][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3280'. [ 615.656725][T16897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.658205][T16931] netlink: 'syz.7.3287': attribute type 1 has an invalid length. [ 617.881214][T16931] 8021q: adding VLAN 0 to HW filter on device bond6 [ 618.015174][T16935] bond6: (slave veth3): Enslaving as an active interface with a down link [ 618.034326][T16936] batman_adv: batadv0: Removing interface: dummy0 [ 618.105875][T16936] bond6: (slave dummy0): making interface the new active one [ 618.158685][T16936] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 618.264204][T16937] netlink: 'syz.7.3287': attribute type 10 has an invalid length. [ 618.294534][T16937] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3287'. [ 618.342256][T16937] dummy0: entered promiscuous mode [ 618.363590][T16937] bond6: (slave dummy0): Releasing active interface [ 620.091951][T16959] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3296'. [ 620.200648][T16960] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3296'. [ 620.318516][T16960] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3296'. [ 621.376440][T16968] bond7: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 621.399199][T16968] bond7: entered allmulticast mode [ 621.441264][T16973] ip6gretap1: entered promiscuous mode [ 621.500940][T16973] bond7: (slave ip6gretap1): no link monitoring support [ 621.514146][T16973] bond7: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 621.540021][T16973] ip6gretap1: entered allmulticast mode [ 621.549149][T16973] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 622.623496][T16997] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3309'. [ 622.741874][T16998] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3309'. [ 622.842726][T16998] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3309'. [ 624.474745][T17018] overlayfs: failed to clone upperpath [ 624.830514][T17023] team0: Device xfrm0 is of different type [ 624.940168][T17025] tipc: Enabled bearer , priority 0 [ 625.207022][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.215291][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.259866][T17077] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3339'. [ 628.303234][T17077] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3339'. [ 628.365443][T17077] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3339'. [ 628.785216][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3343'. [ 630.959532][T17118] syz_tun: entered allmulticast mode [ 630.996986][T17118] syz_tun: left allmulticast mode [ 632.196082][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 636.652466][T17215] netlink: 'syz.6.3383': attribute type 1 has an invalid length. [ 636.736699][T17215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 637.051789][T17220] bond2: (slave veth11): Enslaving as an active interface with a down link [ 637.121903][T17215] dummy0: left promiscuous mode [ 637.175127][T17215] bond2: (slave dummy0): making interface the new active one [ 637.228227][T17215] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 637.311400][T17227] netlink: 'syz.6.3383': attribute type 10 has an invalid length. [ 637.381923][T17227] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3383'. [ 637.447118][T17227] dummy0: entered promiscuous mode [ 637.473246][T17227] bond2: (slave dummy0): Releasing active interface [ 640.329912][T17257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.440303][T17257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.345543][T17257] tipc: Resetting bearer [ 641.582031][T17257] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.621615][T17257] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.641620][T17257] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.671595][T17257] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.927405][T17257] bond1: left allmulticast mode [ 641.943926][T17257] ip6gretap1: left allmulticast mode [ 641.966291][T17257] ip6gretap1: left promiscuous mode [ 642.027220][T17263] netlink: 'syz.4.3402': attribute type 1 has an invalid length. [ 642.052547][T17263] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 642.117033][T17267] dummy0: left promiscuous mode [ 642.133063][T17270] netlink: 'syz.4.3402': attribute type 10 has an invalid length. [ 642.141223][T17270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3402'. [ 642.156414][T17270] dummy0: entered promiscuous mode [ 642.166678][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3407'. [ 643.496973][T17322] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3420'. [ 648.120524][T17429] overlayfs: failed to clone upperpath [ 648.345866][T17438] bridge0: port 3(vlan3) entered blocking state [ 648.354817][T17438] bridge0: port 3(vlan3) entered disabled state [ 648.363645][T17438] vlan3: entered allmulticast mode [ 648.380163][T17438] vlan3: entered promiscuous mode [ 648.424038][T17438] bond0: (slave team0): Releasing backup interface [ 648.486681][T17438] tipc: Resetting bearer [ 648.497136][T17438] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.549264][T17438] bridge_slave_1: left allmulticast mode [ 648.566434][T17438] bridge_slave_1: left promiscuous mode [ 648.582260][T17438] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.602556][T17438] vlan3: left promiscuous mode [ 648.608228][T17438] bridge_slave_0: left promiscuous mode [ 648.629862][T17438] bond0: (slave bond_slave_0): Releasing backup interface [ 648.645455][T17438] bond0: (slave bond_slave_1): Releasing backup interface [ 648.682421][T17438] team0: Port device team_slave_0 removed [ 648.700684][T17438] team0: Port device team_slave_1 removed [ 648.708992][T17438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.721154][T17438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.737263][T17438] bond5: (slave geneve2): Releasing active interface [ 648.752441][T17438] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.765747][T17438] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.775662][T17438] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.796149][T17438] bond6: (slave veth3): Releasing active interface [ 648.814152][T17438] bond7: (slave ip6gretap1): Releasing backup interface [ 648.826988][T17438] ip6gretap1: left allmulticast mode [ 648.853189][T17438] vlan3: left allmulticast mode [ 648.858428][T17438] bridge_slave_0: left allmulticast mode [ 648.882200][T17438] bridge0: port 3(vlan3) entered disabled state [ 648.905315][T17449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3457'. [ 649.049693][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3457'. [ 649.155454][T17464] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 649.182774][T17464] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 649.479135][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3466'. [ 649.556032][T17479] vlan2: entered allmulticast mode [ 649.562808][T17479] bond3: entered allmulticast mode [ 650.448535][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3473'. [ 654.475420][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3491'. [ 654.806996][T17564] bond2: option mode: unable to set because the bond device has slaves [ 654.833372][T17564] bond2: (slave ip6gretap2): making interface the new active one [ 654.846374][T17564] ip6gretap2: entered promiscuous mode [ 654.864412][T17564] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 654.966497][T17569] bond4: entered allmulticast mode [ 655.068594][T17576] bridge4: entered promiscuous mode [ 655.132577][T17576] bridge4: entered allmulticast mode [ 655.139465][T17576] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 655.143336][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3502'. [ 656.395386][ T27] audit: type=1326 audit(1786718010.978:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17617 comm="syz.7.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 656.474843][ T27] audit: type=1326 audit(1786718010.978:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17617 comm="syz.7.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 656.589657][ T27] audit: type=1326 audit(1786718010.998:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17617 comm="syz.7.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 656.712516][ T27] audit: type=1326 audit(1786718011.008:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17617 comm="syz.7.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 656.849262][ T27] audit: type=1326 audit(1786718011.008:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17617 comm="syz.7.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 656.944193][ T27] audit: type=1326 audit(1786718011.008:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17617 comm="syz.7.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 657.053876][ T27] audit: type=1326 audit(1786718011.008:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17617 comm="syz.7.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 657.069325][T17625] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3516'. [ 657.110208][ T27] audit: type=1326 audit(1786718011.008:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17617 comm="syz.7.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 657.200928][ T27] audit: type=1326 audit(1786718011.008:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17617 comm="syz.7.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 657.301690][ T27] audit: type=1326 audit(1786718011.008:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17617 comm="syz.7.3514" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6cf9e0d9 code=0x7ffc0000 [ 658.932830][T17675] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3532'. [ 659.101813][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3532'. [ 659.295155][T17680] netlink: 'syz.7.3534': attribute type 1 has an invalid length. [ 659.368462][T17680] 8021q: adding VLAN 0 to HW filter on device bond8 [ 659.433618][T17680] bond8: (slave ip6gretap2): making interface the new active one [ 659.448180][T17680] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 661.620563][T17734] netlink: 'syz.9.3556': attribute type 1 has an invalid length. [ 661.768545][T17734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 661.915383][T17739] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.954063][T17739] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.994292][T17739] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.023871][T17739] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.062784][T17739] bond3: (slave geneve2): making interface the new active one [ 662.113510][T17739] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 662.543793][T17753] netlink: 'syz.9.3563': attribute type 1 has an invalid length. [ 664.215207][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3569'. [ 664.416780][T17774] bridge_slave_0 (unregistering): left allmulticast mode [ 664.428285][T17774] bridge_slave_0 (unregistering): left promiscuous mode [ 664.443084][T17774] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.152227][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 665.152263][ T27] audit: type=1326 audit(1786718019.748:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.9.3577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 665.227180][ T27] audit: type=1326 audit(1786718019.748:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.9.3577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 665.319645][ T27] audit: type=1326 audit(1786718019.798:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.9.3577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 665.421738][ T27] audit: type=1326 audit(1786718019.798:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.9.3577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 665.481364][ T27] audit: type=1326 audit(1786718019.798:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.9.3577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 665.571717][ T27] audit: type=1326 audit(1786718019.798:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.9.3577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 665.652099][ T27] audit: type=1326 audit(1786718019.798:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.9.3577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 665.749904][ T27] audit: type=1326 audit(1786718019.798:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.9.3577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 665.798931][ T27] audit: type=1326 audit(1786718019.798:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.9.3577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 665.886859][ T27] audit: type=1326 audit(1786718019.818:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.9.3577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 668.098849][T17850] sit0: entered promiscuous mode [ 668.174125][T17850] netlink: 'syz.4.3600': attribute type 1 has an invalid length. [ 668.221766][T17850] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3600'. [ 670.213302][T17883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.309127][T17883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.414331][T17887] netlink: 'syz.4.3611': attribute type 1 has an invalid length. [ 670.416100][T17883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.449933][T17887] 8021q: adding VLAN 0 to HW filter on device bond12 [ 670.477441][T17887] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 670.517501][T17887] bond12: (slave wlan0): Enslaving as an active interface with a down link [ 670.575923][T17887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.593668][T17887] bond12: (slave batadv0): making interface the new active one [ 670.608032][T17887] bond12: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 670.641218][T17887] batadv0: entered promiscuous mode [ 670.649414][T17887] bond12: (slave batadv0): Enslaving as an active interface with an up link [ 670.765985][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3614'. [ 670.876147][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 670.876164][ T27] audit: type=1326 audit(1786718025.468:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.6.3622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 670.934373][T17897] vlan3: entered allmulticast mode [ 670.939605][T17897] bond13: entered allmulticast mode [ 670.986607][ T27] audit: type=1326 audit(1786718025.468:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.6.3622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 671.063487][ T27] audit: type=1326 audit(1786718025.508:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.6.3622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 671.143851][ T27] audit: type=1326 audit(1786718025.508:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.6.3622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 671.238297][ T27] audit: type=1326 audit(1786718025.508:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.6.3622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 671.319885][ T27] audit: type=1326 audit(1786718025.618:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.6.3622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 671.411928][ T27] audit: type=1326 audit(1786718025.618:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.6.3622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f563919de42 code=0x7ffc0000 [ 671.470034][ T27] audit: type=1326 audit(1786718025.618:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.6.3622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f563919ded7 code=0x7ffc0000 [ 671.542425][ T27] audit: type=1326 audit(1786718025.618:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.6.3622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f563915add1 code=0x7ffc0000 [ 671.569763][T17915] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3617'. [ 671.609462][ T27] audit: type=1326 audit(1786718025.618:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.6.3622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f563919eec9 code=0x7ffc0000 [ 672.528285][ T5780] IPVS: starting estimator thread 0... [ 672.642606][T17942] IPVS: using max 23 ests per chain, 55200 per kthread [ 674.062700][T17976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3638'. [ 674.164807][T17980] netlink: 'syz.6.3640': attribute type 1 has an invalid length. [ 674.274609][T17980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 674.333315][T17987] bond5: (slave ip6gretap1): making interface the new active one [ 674.345814][T17987] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 674.365732][T17988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3638'. [ 675.550253][T18017] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3653'. [ 675.650247][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3653'. [ 676.065568][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3662'. [ 676.080012][T18036] bond0: option arp_all_targets: invalid value (8) [ 676.090812][T18035] bridge0: port 1(syz_tun) entered blocking state [ 676.124827][T18035] bridge0: port 1(syz_tun) entered disabled state [ 676.152244][T18035] syz_tun: entered allmulticast mode [ 676.176072][T18035] syz_tun: entered promiscuous mode [ 676.204763][T18035] bridge0: port 1(syz_tun) entered blocking state [ 676.212699][T18035] bridge0: port 1(syz_tun) entered listening state [ 677.786721][T18057] netlink: 'syz.6.3670': attribute type 1 has an invalid length. [ 678.150681][T18065] fuse: Bad value for 'fd' [ 679.556470][T18090] netlink: 'syz.4.3678': attribute type 11 has an invalid length. [ 679.862814][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3685'. [ 680.018192][T18103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 680.183356][T18106] bond7: entered promiscuous mode [ 680.215138][T18106] bond7: entered allmulticast mode [ 680.307482][T18110] macvlan2: entered promiscuous mode [ 680.326544][T18110] macvlan2: entered allmulticast mode [ 680.357423][T18110] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 682.132074][T18150] netlink: 'syz.7.3704': attribute type 3 has an invalid length. [ 682.145961][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 682.145996][ T27] audit: type=1326 audit(1786718036.738:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.6.3707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x0 [ 682.179739][T18150] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3704'. [ 682.285122][ T27] audit: type=1326 audit(1786718036.878:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.6.3707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 682.375476][ T27] audit: type=1326 audit(1786718036.878:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.6.3707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 682.466288][ T27] audit: type=1326 audit(1786718036.878:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.6.3707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 682.525064][ T27] audit: type=1326 audit(1786718036.878:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.6.3707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f563919e0d9 code=0x7ffc0000 [ 682.567629][ T27] audit: type=1326 audit(1786718036.958:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.6.3707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f563915e90e code=0x7ffc0000 [ 682.599106][ T27] audit: type=1326 audit(1786718036.958:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.6.3707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f563915e90e code=0x7ffc0000 [ 682.634428][ T27] audit: type=1326 audit(1786718036.958:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.6.3707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f563915e90e code=0x7ffc0000 [ 682.665267][ T27] audit: type=1326 audit(1786718036.958:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.6.3707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f563915e90e code=0x7ffc0000 [ 682.697188][ T27] audit: type=1326 audit(1786718036.958:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.6.3707" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f563915e90e code=0x7ffc0000 [ 682.733168][T16375] batadv0: left promiscuous mode [ 684.444926][T18198] fuse: Bad value for 'fd' [ 685.048985][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3731'. [ 685.489536][T18239] sctp: [Deprecated]: syz.4.3735 (pid 18239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 685.489536][T18239] Use struct sctp_sack_info instead [ 685.882510][T18245] tipc: Failed to remove unknown binding: 66,0,0/2099199:1895136859/1895136860 [ 685.912706][T18245] tipc: Failed to remove unknown binding: 66,0,0/2099199:1895136859/1895136860 [ 686.651364][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.658451][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.949983][T18312] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3762'. [ 688.988666][T18312] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3762'. [ 689.042655][T13412] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 689.458475][T18322] tipc: Failed to remove unknown binding: 66,1,1/9480874:2838297693/2838297695 [ 689.513231][T18322] tipc: Failed to remove unknown binding: 66,1,1/9480874:2838297693/2838297695 [ 689.578487][T18322] tipc: Failed to remove unknown binding: 66,1,1/9480874:2838297693/2838297695 [ 691.273435][T18377] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3782'. [ 692.708883][ T27] kauditd_printk_skb: 226 callbacks suppressed [ 692.708900][ T27] audit: type=1326 audit(1786718047.298:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.9.3801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 692.772072][ T27] audit: type=1326 audit(1786718047.338:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.9.3801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 692.842046][ T27] audit: type=1326 audit(1786718047.358:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.9.3801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 692.880569][ T27] audit: type=1326 audit(1786718047.358:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.9.3801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 692.961449][ T27] audit: type=1326 audit(1786718047.358:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.9.3801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 692.998898][ T27] audit: type=1326 audit(1786718047.358:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.9.3801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 693.064499][ T27] audit: type=1326 audit(1786718047.358:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.9.3801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 693.173486][ T27] audit: type=1326 audit(1786718047.398:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.9.3801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 693.272283][ T27] audit: type=1326 audit(1786718047.398:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.9.3801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 693.313835][ T27] audit: type=1326 audit(1786718047.398:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.9.3801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9adf9e0d9 code=0x7ffc0000 [ 694.238024][T18455] jffs2: notice: (18455) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 694.434868][T18461] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3814'. [ 694.459397][T18461] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3814'. [ 694.680816][T18467] netlink: 'syz.6.3817': attribute type 4 has an invalid length. [ 695.047901][T18481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3822'. [ 695.142959][T18481] 8021q: adding VLAN 0 to HW filter on device bond14 [ 695.247644][T18483] bond14: entered promiscuous mode [ 695.276956][T18483] bond14: entered allmulticast mode [ 695.439887][T18481] macvlan3: entered promiscuous mode [ 695.461801][T18481] macvlan3: entered allmulticast mode [ 695.483928][T18481] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 698.112743][T18519] sctp: [Deprecated]: syz.6.3834 (pid 18519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 698.112743][T18519] Use struct sctp_sack_info instead [ 698.192784][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3835'. [ 698.256533][T18521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 698.315125][T18530] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 698.445818][T18527] bond5: entered promiscuous mode [ 698.452806][T18527] bond5: entered allmulticast mode [ 698.890305][T18521] macvlan2: entered promiscuous mode [ 706.474344][ C1] bridge0: port 1(syz_tun) entered learning state [ 736.552381][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 736.559625][ C1] bridge0: topology change detected, propagating [ 793.412513][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 793.420133][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 793.431054][T18521] macvlan2: entered allmulticast mode [ 807.021452][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 807.029004][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8/1:b..l [ 807.038067][ C1] rcu: (detected by 1, t=10502 jiffies, g=114765, q=70 ncpus=2) [ 807.046102][ C1] task:kworker/0:0 state:R running task stack:23304 pid:8 ppid:2 flags:0x00004000 [ 807.060593][ C1] Workqueue: events_power_efficient gc_worker [ 807.067080][ C1] Call Trace: [ 807.070435][ C1] [ 807.073750][ C1] __schedule+0x15ae/0x4660 [ 807.078538][ C1] ? asan.module_dtor+0x20/0x20 [ 807.083816][ C1] ? mark_lock+0x94/0x320 [ 807.088220][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 807.094321][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 807.099729][ C1] preempt_schedule_irq+0xbf/0x150 [ 807.104979][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 807.110835][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 807.117183][ C1] irqentry_exit+0x67/0x70 [ 807.122029][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 807.128414][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 807.135425][ C1] Code: f8 4d 85 e4 75 16 e8 35 4d c1 f8 eb 15 e8 2e 4d c1 f8 e8 79 e5 c8 01 4d 85 e4 74 ea e8 1f 4d c1 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 807.155270][ C1] RSP: 0018:ffffc900000d79a0 EFLAGS: 00000293 [ 807.161462][ C1] RAX: ffffffff88c62501 RBX: 0000000000000000 RCX: ffff88801b655a00 [ 807.169713][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 807.178365][ C1] RBP: ffffc900000d7a50 R08: ffffffff911ed597 R09: 1ffffffff223dab2 [ 807.186583][ C1] R10: dffffc0000000000 R11: fffffbfff223dab3 R12: 0000000000000200 [ 807.196030][ C1] R13: dffffc0000000000 R14: 1ffff9200001af34 R15: dffffc0000000000 [ 807.205116][ C1] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 807.211645][ C1] ? nf_conntrack_hash_check_insert+0x6f0/0x6f0 [ 807.219242][ C1] gc_worker+0x314/0x14a0 [ 807.223774][ C1] ? gc_worker+0x266/0x14a0 [ 807.228525][ C1] ? init_conntrack+0xe20/0xe20 [ 807.233694][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 807.238957][ C1] ? process_scheduled_works+0x975/0x1600 [ 807.245014][ C1] ? process_scheduled_works+0x975/0x1600 [ 807.250977][ C1] process_scheduled_works+0xa60/0x1600 [ 807.256797][ C1] ? worker_attach_to_pool+0x370/0x370 [ 807.262447][ C1] ? assign_work+0x3cc/0x5d0 [ 807.267176][ C1] worker_thread+0xa5e/0xfe0 [ 807.272537][ C1] kthread+0x2fa/0x390 [ 807.276796][ C1] ? pr_cont_work+0x550/0x550 [ 807.281713][ C1] ? kthread_blkcg+0xd0/0xd0 [ 807.286418][ C1] ret_from_fork+0x48/0x80 [ 807.291027][ C1] ? kthread_blkcg+0xd0/0xd0 [ 807.296158][ C1] ret_from_fork_asm+0x11/0x20 [ 807.301355][ C1] [ 807.304829][ C1] rcu: rcu_preempt kthread starved for 804 jiffies! g114765 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 807.316396][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 807.326596][ C1] rcu: RCU grace-period kthread stack dump: [ 807.332941][ C1] task:rcu_preempt state:R running task stack:26856 pid:17 ppid:2 flags:0x00004000 [ 807.344157][ C1] Call Trace: [ 807.347745][ C1] [ 807.350834][ C1] __schedule+0x15ae/0x4660 [ 807.355436][ C1] ? asan.module_dtor+0x20/0x20 [ 807.360470][ C1] ? rcu_is_watching+0x15/0xb0 [ 807.365275][ C1] schedule+0xbd/0x170 [ 807.369369][ C1] schedule_timeout+0x188/0x2d0 [ 807.374442][ C1] ? console_conditional_schedule+0x40/0x40 [ 807.380459][ C1] ? update_process_times+0x1b0/0x1b0 [ 807.385868][ C1] ? prepare_to_swait_event+0x344/0x360 [ 807.391732][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 807.396982][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 807.404060][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 807.410866][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 807.416143][ C1] ? rcu_gp_init+0x1530/0x1530 [ 807.421147][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 807.427194][ C1] ? finish_swait+0xca/0x1d0 [ 807.431914][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 807.436758][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 807.441996][ C1] ? __kthread_parkme+0x71/0x1c0 [ 807.446982][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 807.452100][ C1] kthread+0x2fa/0x390 [ 807.456245][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 807.461406][ C1] ? kthread_blkcg+0xd0/0xd0 [ 807.466307][ C1] ret_from_fork+0x48/0x80 [ 807.470742][ C1] ? kthread_blkcg+0xd0/0xd0 [ 807.475433][ C1] ret_from_fork_asm+0x11/0x20 [ 807.480498][ C1] [ 807.483564][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 807.489890][ C1] Sending NMI from CPU 1 to CPUs 0: [ 807.495120][ C0] NMI backtrace for cpu 0 [ 807.495129][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 807.495145][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 807.495154][ C0] RIP: 0010:kasan_check_range+0x85/0x290 [ 807.495228][ C0] Code: 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb <41> 80 3b 00 0f 85 8d 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 [ 807.495242][ C0] RSP: 0018:ffffc90000007cb8 EFLAGS: 00000086 [ 807.495256][ C0] RAX: ffffffff8a7f7501 RBX: ffffffffffffffff RCX: ffffffff8a7f7560 [ 807.495268][ C0] RDX: 0000000000000001 RSI: 0000000000000018 RDI: ffff88805e5e4340 [ 807.495278][ C0] RBP: 0000000000000000 R08: ffff88805e5e4357 R09: 1ffff1100bcbc86a [ 807.495289][ C0] R10: dffffc0000000000 R11: ffffed100bcbc86a R12: 0000000000000003 [ 807.495299][ C0] R13: dffffc0000000000 R14: ffffed100bcbc86b R15: 1ffff1100bcbc868 [ 807.495311][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 807.495324][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.495335][ C0] CR2: 00007f0ee6835be7 CR3: 000000002c2af000 CR4: 00000000003506f0 [ 807.495354][ C0] Call Trace: [ 807.495362][ C0] [ 807.495371][ C0] __asan_memset+0x22/0x40 [ 807.495393][ C0] timerqueue_add+0x180/0x1f0 [ 807.495431][ C0] ? enqueue_hrtimer+0x13b/0x380 [ 807.495451][ C0] __hrtimer_run_queues+0x62f/0xc10 [ 807.495468][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 807.495488][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 807.495514][ C0] ? hrtimer_interrupt+0x980/0x980 [ 807.495531][ C0] ? read_tsc+0x9/0x20 [ 807.495548][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 807.495571][ C0] hrtimer_interrupt+0x39d/0x980 [ 807.495599][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 807.495621][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 807.495644][ C0] [ 807.495648][ C0] [ 807.495653][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 807.495673][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 807.495693][ C0] Code: 59 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d b3 35 39 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 807.495705][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 807.495716][ C0] RAX: e79c5b72428ae300 RBX: ffffffff81630d54 RCX: e79c5b72428ae300 [ 807.495727][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 807.495738][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 807.495749][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 807.495760][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 807.495773][ C0] ? do_idle+0x334/0x5c0 [ 807.495796][ C0] default_idle+0x13/0x20 [ 807.495816][ C0] default_idle_call+0x6c/0xa0 [ 807.495837][ C0] do_idle+0x334/0x5c0 [ 807.495857][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 807.495874][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 807.495898][ C0] cpu_startup_entry+0x43/0x60 [ 807.495916][ C0] rest_init+0x2e2/0x300 [ 807.495937][ C0] ? time_init+0x40/0x40 [ 807.496001][ C0] arch_call_rest_init+0xe/0x10 [ 807.496082][ C0] start_kernel+0x461/0x4e0 [ 807.496104][ C0] x86_64_start_reservations+0x2a/0x30 [ 807.496123][ C0] x86_64_start_kernel+0x60/0x60 [ 807.496141][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 807.496170][ C0] [ 809.525938][ T1293] ieee802154 phy0 wpan0: encryption failed: -22