last executing test programs: 11m1.952765405s ago: executing program 32 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008000640000000030500010006000000050005000a00000013000300686173683a6e65742c696661636500000900020073797a3100000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 8m27.167955688s ago: executing program 33 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m14.911164976s ago: executing program 34 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000005280)=[{0x700, 0x0, 0x0, &(0x7f00000006c0), 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) sendmsg$rds(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) 2m3.420949736s ago: executing program 5 (id=2047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m3.219043097s ago: executing program 5 (id=2051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000800)=@multiplanar_overlay={0x201, 0x3, 0x4, 0x400, 0x5, {}, {0x4, 0x8, 0x10, 0x2, 0x2, 0x9, "57b726de"}, 0x1, 0x3, {0x0}, 0x2}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x48000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r4, 0x89e0, &(0x7f00000000c0)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x800000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m2.256969543s ago: executing program 5 (id=2056): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 2m0.803038678s ago: executing program 7 (id=2059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) socket$kcm(0x2, 0x200000000000001, 0x106) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x490, &(0x7f0000000140)=ANY=[], 0x1, 0x15c, &(0x7f0000000380)="$eJzsz71rGnEcx/H3zzu1D1qFWigd2kKHHhXreWK3IloqFWoPWlw6lIJeaYvWolDc+gBuHfoH3NAH6CQOIWOGxGQxUQjJ33GQIZDxws+7EFwz/17Lce/78oF7+nhhkPY1Qk963c99ZzBw2ndf2o3aq7X1jWuyx4FLwAjoy+t2cL9ZgffyqYP3PcjbSXj3oeM8bPU68t2rgAFUr8oeLScIbq/IlgluC2EzfJjeCJp11u6dt2LYbulQTQXNBPw/cB+ICPDCvWNg6GYn490X81k99+D/G41RPXvnuljtt52fVs3/ChpNZ+ev/E2G7mF+ltvPT8YHi3njud2wF0XLelQ0C6ZZitt783rp2y/0Z4kv8DrYi/CR5V4sBjThhwBXwFjI8SU/Nf19YndT8Qxw9CkNYqh7WyIJTC8DK1/c1tub0X/lTDqCZiBQFEVRFEVRFEVRlAs6DQAA///0NWXd") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r5, r4}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}}) 1m59.987507836s ago: executing program 7 (id=2060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x1a, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000540)="b805000000b9e98200000f01d9420f8403000000f2adc744240000000080c74424020080ffffc7442406000000000f011c246667660f7d4700c74424004932b858c7442402678e1956c7442406000000000f011424430f75ce48b884000000000000000f23d00f21f8353000000a0f23f8b805000000b9000001000f01c16465660fc7b46bd7ed227a", 0x89}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000033c0)=@svm={0x103, 0x1, 0xfffffffffffffe77, {0x6000}, {"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"}}) 1m59.457299397s ago: executing program 7 (id=2061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m59.101274718s ago: executing program 5 (id=2062): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) close(r0) unlink(&(0x7f0000000580)='./file0\x00') 1m59.05716088s ago: executing program 7 (id=2063): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x4c8, &(0x7f0000000580)={[{@sbsector={'sbsector', 0x3d, 0x2}}, {@check_strict}, {@showassoc}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@sbsector={'sbsector', 0x3d, 0xffffffffffffffff}}, {@check_strict}, {}, {@overriderock}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@showassoc}, {@map_acorn}, {@nocompress}, {@sbsector={'sbsector', 0x3d, 0x9e}}, {@session={'session', 0x3d, 0x27}}], [{@pcr={'pcr', 0x3d, 0x2b}}, {@permit_directio}]}, 0x0, 0x93f, &(0x7f00000009c0)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020) 1m58.575301288s ago: executing program 7 (id=2064): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) 1m58.54646886s ago: executing program 5 (id=2065): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 1m57.413467096s ago: executing program 5 (id=2076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) socket$kcm(0x2, 0x200000000000001, 0x106) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x490, &(0x7f0000000140)=ANY=[], 0x1, 0x15c, &(0x7f0000000380)="$eJzsz71rGnEcx/H3zzu1D1qFWigd2kKHHhXreWK3IloqFWoPWlw6lIJeaYvWolDc+gBuHfoH3NAH6CQOIWOGxGQxUQjJ33GQIZDxws+7EFwz/17Lce/78oF7+nhhkPY1Qk963c99ZzBw2ndf2o3aq7X1jWuyx4FLwAjoy+t2cL9ZgffyqYP3PcjbSXj3oeM8bPU68t2rgAFUr8oeLScIbq/IlgluC2EzfJjeCJp11u6dt2LYbulQTQXNBPw/cB+ICPDCvWNg6GYn490X81k99+D/G41RPXvnuljtt52fVs3/ChpNZ+ev/E2G7mF+ltvPT8YHi3njud2wF0XLelQ0C6ZZitt783rp2y/0Z4kv8DrYi/CR5V4sBjThhwBXwFjI8SU/Nf19YndT8Qxw9CkNYqh7WyIJTC8DK1/c1tub0X/lTDqCZiBQFEVRFEVRFEVRlAs6DQAA///0NWXd") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r4, r3}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}}) 1m57.103122624s ago: executing program 35 (id=2076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) socket$kcm(0x2, 0x200000000000001, 0x106) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x490, &(0x7f0000000140)=ANY=[], 0x1, 0x15c, &(0x7f0000000380)="$eJzsz71rGnEcx/H3zzu1D1qFWigd2kKHHhXreWK3IloqFWoPWlw6lIJeaYvWolDc+gBuHfoH3NAH6CQOIWOGxGQxUQjJ33GQIZDxws+7EFwz/17Lce/78oF7+nhhkPY1Qk963c99ZzBw2ndf2o3aq7X1jWuyx4FLwAjoy+t2cL9ZgffyqYP3PcjbSXj3oeM8bPU68t2rgAFUr8oeLScIbq/IlgluC2EzfJjeCJp11u6dt2LYbulQTQXNBPw/cB+ICPDCvWNg6GYn490X81k99+D/G41RPXvnuljtt52fVs3/ChpNZ+ev/E2G7mF+ltvPT8YHi3njud2wF0XLelQ0C6ZZitt783rp2y/0Z4kv8DrYi/CR5V4sBjThhwBXwFjI8SU/Nf19YndT8Qxw9CkNYqh7WyIJTC8DK1/c1tub0X/lTDqCZiBQFEVRFEVRFEVRlAs6DQAA///0NWXd") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r4, r3}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}}) 1m55.12557847s ago: executing program 7 (id=2083): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000240)={[{@init_itable}, {@sb={'sb', 0x3d, 0x2}}, {@test_dummy_encryption}, {@noinit_itable}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0x0, 0x0, &(0x7f0000000380)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='./file0\x00', 0x2) 1m54.495555696s ago: executing program 36 (id=2083): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000240)={[{@init_itable}, {@sb={'sb', 0x3d, 0x2}}, {@test_dummy_encryption}, {@noinit_itable}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0x0, 0x0, &(0x7f0000000380)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='./file0\x00', 0x2) 1m38.748143874s ago: executing program 9 (id=2173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x40000) 1m38.001430188s ago: executing program 9 (id=2179): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d009793c0d4"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 1m37.805925569s ago: executing program 9 (id=2180): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd']) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 1m34.621825835s ago: executing program 9 (id=2197): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@usrjquota}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$eJzs3MtvG1UXAPAzdpy+v+Qr5dHSQqAgKh5Jkz7ogk0RSCxAQoJFEauQplWo26AkSLSKIGURlqgSe8QSib+ADWWDgBUSW9gjpICyobAyGnsmdRPbeTlxqX8/aZJ7fce693jm2sd3bAfQtQbSP0nE3oj4JSL6atU7dxio/bu1ODv29+LsWBKVyht/JtX9/lqcHct3ze+3p1apVFr0O/92xGi5PD6V1YdmLr83NH312nMTl0cvjl8cvzJy5szJE0d6T4+cakuc+9KxHvpw8vDBV9668drYuRvv/PBVOt69WXt9HO0yUHt0G3qy3Z112L66ctLTwYGwLsWISA9XqTr/+6IYu5ba+uLljzs6OGBLVSqFyo7mzXMV4B6WJupAN8pf6NP3v/m2TanHXWHhbCytY9zKtlpLTxSyfUrZe6StMBAR5+b++TzdYovWIQAA6t08GxHPNsr/CvFA3X7/y64N9UfE/yNif0TcFxEHIuL+iOq+D0bEQ2vsN19lXn6FZGX+U+nbcHBrkOZ/L2TXtu7M//LsL/qLWW1fNf5ScmGiPH48e0yORWlHWh9u0ce3L/38abO2+vwv3dL+81wwG8fvPcsW6M6PzoxuJuZ6C9cjDvU0ij9ZynnT/PhgRBzaYB8TT395uFnb6vG30IakvPJFxFO14z8Xy+LPJU2vTw4/f3rk1NDOKI8fH8rPipV+/Gn+9ay3ZHnbpuJvg4Wbldjd8PxfGmp/sjNi+uq1S9XrtdPr72P+10+avqfZ6Pnfm7xZLfdmt30wOjMzNRzRm7y68vaR2/fN6/n+6fl/7Gjj+b8/bj8SD0dEehIfiYhHIuLRbOyPRcTjEXG0Rfzfv/jEu+uPv8WqfBul8f9RWuX4R/3xX3+heOm7r9cffy49/ierpWPZLWt5/ms1rutTmzmbAQAA4L+nUP0MfFIYXCoXCoODtc/wH4jdhfLk9MwzFybfv3K+9ln5/igV8pWuvrr10OFsbTivjyyrn8jWjT8r7qrWB8cmy+c7HTx0uT1N5n/qt2KnRwdsOd/Xgu5l/kP3Mv+he5n/0L3Mf+hejeb/Rx0YB7D9Vnn937Vd4wC2n/wfupf5D93L/Ieu1PRL8oVNfeVfoUOFb3o391sNay9E4S4J+Z4plKJhU0/LH7NoQ2FHw6ZOPzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0x78BAAD//0k+5Mg=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xd}, 0x20) 1m33.021478058s ago: executing program 9 (id=2205): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,nodots,errors=continue,time_offset=0xfffffffffffffa93,dots,showexec,nodots,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f74732c6e66732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c646f74732c646f74732c636865636b3d72656c617865642c74696d655f6f66667365743d3078303030303030303030303030303437612c646f6e745f686173682c7365636c6162656c2c667373c322e2a50762a3d3fcae283b43ea02757569643d31643067586564382d353166312d62326634"], 0x1, 0x1d3, &(0x7f0000001a00)="$eJzs3cFqE1EUBuAzsTapIHYniOCAG1dBfYKKRBAHRCULXSm0bhoRks3oxvoWPqAPIF11IyNmxsaWZGxjzJj0+zb5yTmTey+ESTY5eX3z3f7u+9Hbr9e/RKeTRGsnduIoie1oxS8HAQCsk6OiiG9FsdH0PgCA5ak+/8dmtHyvu94XBwBYPS9evnryIMt6z9O0E3F4kPfzfvlY1h89znp307HtyVWHed6/dFy/V9bTk/XLcSUitiLr3Z9a34w7t8fXf/5Ze/g0O1Vvx+6/Pz4AAAAAAAAAAAAAAAAAAAAAADSimx6bOt+n251VL9Nv84FOze/ZiBuGAwIAAAAAAAAAAAAAAAAAAMCZjD583H8zGOwNJ6EdESefmS8U12YuMS2kEfH3i543tGJ5a61aSP6PbZwzRDV1oqbn1mLe4c+u/qkn5nvlzYio79mqP+AiwuQe0W7m1gQAAAAAAAAAAAAAAAAAABdO9VvfZDhqeicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Jzy//8He8N5wqeIOENztVTS8FEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYYz8CAAD//x8yIRo=") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\"\x00}\xfag>\xff\xeb\t\xb51\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00/\xa9Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x01\x00\x00\x00', 0x12, '\xcf\xb6\x00'/18, 0x60, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\xf4w\xd0\'\x12{p9\x8al\x8b\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x054\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a5\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23d) 1m28.053510018s ago: executing program 9 (id=2230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) socket$kcm(0x2, 0x200000000000001, 0x106) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x490, &(0x7f0000000140)=ANY=[], 0x1, 0x15c, &(0x7f0000000380)="$eJzsz71rGnEcx/H3zzu1D1qFWigd2kKHHhXreWK3IloqFWoPWlw6lIJeaYvWolDc+gBuHfoH3NAH6CQOIWOGxGQxUQjJ33GQIZDxws+7EFwz/17Lce/78oF7+nhhkPY1Qk963c99ZzBw2ndf2o3aq7X1jWuyx4FLwAjoy+t2cL9ZgffyqYP3PcjbSXj3oeM8bPU68t2rgAFUr8oeLScIbq/IlgluC2EzfJjeCJp11u6dt2LYbulQTQXNBPw/cB+ICPDCvWNg6GYn490X81k99+D/G41RPXvnuljtt52fVs3/ChpNZ+ev/E2G7mF+ltvPT8YHi3njud2wF0XLelQ0C6ZZitt783rp2y/0Z4kv8DrYi/CR5V4sBjThhwBXwFjI8SU/Nf19YndT8Qxw9CkNYqh7WyIJTC8DK1/c1tub0X/lTDqCZiBQFEVRFEVRFEVRlAs6DQAA///0NWXd") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r5, r4}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}}) 1m27.713004648s ago: executing program 37 (id=2230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) socket$kcm(0x2, 0x200000000000001, 0x106) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x490, &(0x7f0000000140)=ANY=[], 0x1, 0x15c, &(0x7f0000000380)="$eJzsz71rGnEcx/H3zzu1D1qFWigd2kKHHhXreWK3IloqFWoPWlw6lIJeaYvWolDc+gBuHfoH3NAH6CQOIWOGxGQxUQjJ33GQIZDxws+7EFwz/17Lce/78oF7+nhhkPY1Qk963c99ZzBw2ndf2o3aq7X1jWuyx4FLwAjoy+t2cL9ZgffyqYP3PcjbSXj3oeM8bPU68t2rgAFUr8oeLScIbq/IlgluC2EzfJjeCJp11u6dt2LYbulQTQXNBPw/cB+ICPDCvWNg6GYn490X81k99+D/G41RPXvnuljtt52fVs3/ChpNZ+ev/E2G7mF+ltvPT8YHi3njud2wF0XLelQ0C6ZZitt783rp2y/0Z4kv8DrYi/CR5V4sBjThhwBXwFjI8SU/Nf19YndT8Qxw9CkNYqh7WyIJTC8DK1/c1tub0X/lTDqCZiBQFEVRFEVRFEVRlAs6DQAA///0NWXd") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r5, r4}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}}) 1m8.897902154s ago: executing program 4 (id=2308): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m8.489689978s ago: executing program 4 (id=2312): set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x3000812, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESOCT=0x0], 0x11, 0x2f0, &(0x7f00000019c0)="$eJzs3c1qE18Yx/HfmaRN+m/+NX0RwWW1oBvRuhE3EcktCOJCtG2EYqioFdSNqbgS0b17b8GLcKN4A7pyIV5Auxo5Z16SSSYzaWkyDX4/oE5m5pnznMzbcwJyBOCfdbP549PVX/aPkUoqSW+vS56kqlSWdFpnqs92drd3262trAOVXIQOfBkFkWZgn82dlvt3L7naxrmIUN1+KqvWuw7j4fv+jZ996357BSWDwri7P4UnVcK7022vTjyzbHtHjOsccx7TxuxrX8+1UHQeAIBi2ff/XlD42/d8LazfPU9aC1/7J/L9f1T7RScwdn7m1p73vxtl+cae31NuU3e854ZwdrsXjRJHaXmm7/OsgkIyUWCavFGly8Wbe7Ddbl3afNTe8vRajVDPbitxCyF7heZku5oyNs0wQt9NakUZpOXN2D6sD8l/+YgtZhgYviVOiPlivpm7pq6P2orrv7JvbLYu4XrfmQryvzy8vXkXZfdS+NhoNBqeO1Bk0TVyNnmmcnpZTR+RKPpiF5X8gaCel6eLWuqLCnp3JTWgEkctp0atR5+GtLWSiLK9ia/m4VmOm3lvbptV/dFnNXvqf8/mt6bMO7N715i14EZz33jQn9n05srumPWBN0dHd2rJNfG3WBmW+kH2Mw0jiM7hO23omhaevnj5sNRut57YhfspC49r8ZqZN1LqPgUvqNNdU5HvDOwcPQMnmdjFYz2gfX7k7mzvsol0cKxXgrwTcmkNWWh+HdeF5FdOQgf/L/ABhUnqnvSiM0FBbN1lgvGfq+TDet8VCvavW5XhdXpUkKWVbK56D4/o2xo7HgFVE/FLbum/ZBmdMzaYD+uYlHFcR6ONuc5dkM6P3mI9zHM6+K9ydjBNfdc9fv8HAAAAAAAAAAAAAAAAAACYNof/HwJzh44quo8AAAAAAAAAAAAAAAAAAAAAAEy7eP5fRfP/arT5f/unYgnn/60qZ/7fjcEcBub//bAj05GY/xcYr78BAAD//xzCgK4=") r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) open(&(0x7f0000000080)='./file1\x00', 0x1cf542, 0x60) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800008, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$btrfs(&(0x7f0000000a80), &(0x7f0000005600)='./bus\x00', 0x80000, &(0x7f0000000ac0)={[], [{@subj_user={'subj_user', 0x3d, '+'}}]}, 0x0, 0x55b5, &(0x7f000000ac00)="$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") 1m5.423782496s ago: executing program 4 (id=2352): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1m5.027567689s ago: executing program 4 (id=2355): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 1m4.081601275s ago: executing program 4 (id=2366): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x17, 0xd, "158cb26fce1bdab0b63b42ed79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "f4d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 1m3.810276721s ago: executing program 4 (id=2369): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m3.578143084s ago: executing program 38 (id=2369): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.887180863s ago: executing program 0 (id=2539): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)}, 0x4800) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 37.9235719s ago: executing program 0 (id=2543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@rescan_uuid_tree}, {@autodefrag}, {@ssd}, {@nodatacow}, {@space_cache}]}, 0x0, 0x559e, &(0x7f0000003640)="$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") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) unshare(0x22020400) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) 36.897321769s ago: executing program 0 (id=2547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) socket$kcm(0x2, 0x200000000000001, 0x106) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x490, &(0x7f0000000140)=ANY=[], 0x1, 0x15c, &(0x7f0000000380)="$eJzsz71rGnEcx/H3zzu1D1qFWigd2kKHHhXreWK3IloqFWoPWlw6lIJeaYvWolDc+gBuHfoH3NAH6CQOIWOGxGQxUQjJ33GQIZDxws+7EFwz/17Lce/78oF7+nhhkPY1Qk963c99ZzBw2ndf2o3aq7X1jWuyx4FLwAjoy+t2cL9ZgffyqYP3PcjbSXj3oeM8bPU68t2rgAFUr8oeLScIbq/IlgluC2EzfJjeCJp11u6dt2LYbulQTQXNBPw/cB+ICPDCvWNg6GYn490X81k99+D/G41RPXvnuljtt52fVs3/ChpNZ+ev/E2G7mF+ltvPT8YHi3njud2wF0XLelQ0C6ZZitt783rp2y/0Z4kv8DrYi/CR5V4sBjThhwBXwFjI8SU/Nf19YndT8Qxw9CkNYqh7WyIJTC8DK1/c1tub0X/lTDqCZiBQFEVRFEVRFEVRlAs6DQAA///0NWXd") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r5, r4}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}}) 33.486105928s ago: executing program 0 (id=2561): r0 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$eJzs3AuUjlXbOPB97b1vxjTpaZLDsK993TxpsE2S5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDR5pUmSkJCw/0vv+356v97v6/3W2/+z1jfXb629Zl9zP9f1XPdcs+a572eteb7rOapei/q1mxGR+LfAX7+kCCFihBDDhBDXCSECIUSl+Erxl48XUJDy7z0J+3M9nH61O2BXE88/b+P55208/7yN55+38fzzNp5/3sbzz9t4/ozlZdvnFLueV95d/P5/Xsav//+H5Jaf/NXG8jf2+h+k8PzzNp5/3sbzz9t4/nkbzz9v4/n/31frvznG88/beP6M5WVX+/1nXld3Xe3fP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecM5f4UWQvx9f7X7YowxxhhjjDHG2J/H57/aHTDGGGOMMcYYY+z/PxBSKKFFIPKJ/CJGFBCx4hoRJ64VBcV1IiKuF/HiBlFI3CgKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhJlBY3i0RRRpQV5YQT5UWSuEVUELeKiuI2UUncLiqLO0QVUVVUE9XFnaKGuEvUFLVEbXG3qCPqinqivrhHNBD3iobiPtFI3C8aiwdEE/GgaCoeEs3Ew6K5eES0EI+KluIx0Uq0Fm1EW9Hut/l98/+L+S+JvuJl0U/0FyligBgoXhGDxGAxRAwVw8SrYrh4TYwQr4tUMVKMEm+I0eJNMUa8JcaKcWK8eFtMEBPFJDFZTBFTRZp4R0wT74rp4j0xQ8wUs8RskS7miLnifTFPzBcLxAdiofhQLBKLxRKxVGSIj0SmWCayxMdiufhEZIsVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLT8UOsVPsErvFHrFX7BOfif3ic3FAfCFyxJf/w/yz/ym/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8q/yEPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhWqkqqUiqqbVGl1s0pUZVRZVU45VV4lqVtUBXWrqqhuU5XU7aqyukNVUVVVNVVd3alqqLtUTVVL1VZ3qzqqrqqn6qt7VAN1r2qo7lON1P2qsXpANVEPqqbqIdVMPayaq0dUC/WoaqkeU61Ua9VGtVXt1OOqvXpCdVAdVSf1pOqsnlJd1NMqWT2juqpnVTf1nOqunlc91Auqp3pR9VK9VR91UV1SXvVT/VWKGqAGqlfUIDVYDVFD1TD1qhquXlMj1OsqVY1Uo9QbarR6U41Rb6mxapwar95WE9RENUlNVlPUVJWm3lHT1LtqunpPzVAz1Sw1W6WrOWrI3yot+Bfy3/0n+SN+ffZtarv6VO1QO9UutVvtUXvVPrVP7Vf71QF1QOWoHHVQHVSH1CF1WB1WuSpXHVFH1FF1VB1Tx9RxdVydUCfVz+pHdVr9pM6os+qs+lmdV+fVhb/9DIQGLbXSWgc6n86vY3QBHauv0XH6Wl1QX6cj+nodr2/QhfSNurAuoovqYjpBF9cltNGorSYd6pK6lI7qm3RpfbNO1GV0WV1OO11eJ+lb/u38P+qvnW6n2+v2uoPuoDvpTrqz7qy76C46WSfrrrqr7qa76e66u+6he+ieuqfupXvpPrqP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/an1vT9T5AnXz/Q3KWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm1Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNmnnHTDPvmunmPTPDzDSzzGyTbuaYueZ9M8/MNwvMB2ah+dAsMovNErPUZJiPTKZZZrLMx2a5+cRkmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtptPzQ6z0+wyu80es9fsM5+Z/eZzc8B8YXLMl+ag+Ys5ZL4yh83XJtd8Y46Yb81R8505Zr43x80P5oQ5aU6ZH81p85M5Y86ac+Znc978Yi6Yi+aS8Zcv7i+/vKNGjfkwH8ZgDMZiLMZhHBbEghjBCMZjPBbCQlgYC2NRLIoJmIAlsAReRkhYEktiFKNYGktjIiZiWSyLDh0mYRJWwApYEStiJayElbEyVsEqWA2r4Z14J96Fd2EtrIV3491YF+tifayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2xJbYClthG2yD7bAdtsf22AE7YCfshJ2xM3bBLpiMydgVu2I37IbdsTv2wB7YE3tiL+yFfbAP9sW+2A/7YQqm4EAciINwEA7BITgMh+FwHI4jcASmYiqOwlE4GkfjGByDY3Ecjse3cQJOxEk4GafgVEzDNJyG03A6TscZOANn4SxMx3Sci3NxHs7DBbgAF+JCXISLcAkuwQzMwEzMxCzMwuW4HLMxG1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAHc/AgHsRDeAgP42HMxVw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/A8/oIX8CJeQo8xVopYe42Ns9fagvY6G2ML2N/GRW0xm2CL2xLW2MK2yD/EaK1NtGVsWVvOOlveJtlbfhdXsVVtNVvd3mlr2Ltszd/FDey9tqG9zzay99v69p5/iBvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZtsn7Fd7bO/izPtMrvebrAb7Sa7335uz9mf7VH7nT1vf7H9bH87zL5qh9vX7Aj7uk21I38Xj7dv2wl2op1kJ9spdurv4ll2tk23c+xc+76dZ+f/Ls6wH9mFNssusovtErv01/hyT1n2Y7vcfmKz7Qq70q6yq+0au9au+49eV9ktdqvdZvfZz+wOu9PusrvtHrv31/jyeRywX9gc+6U9Yr+1h+xX9rA9ZnPtN7/Gl8/vmP3eHrc/2BP2pD1lf7Sn7U/2jD376/lfPvcf7UV7yXorCEiSIk0B5aP8FEMFKJauoTi6lgrSdRSh6ymebqBCdCMVpiJUlIpRAhWnEmQIyRJRSCWpFEXpJipNN1MilaGyVI4clackuoUq0K1UkW6jSnQ7VaY7qApVpWpUne6kGnQX1aRaVJvupjpUl+pRfbqHGtC91JDuo0Z0PzWmB6gJPUhN6SFqRg9Tc3qEWtCj1JIeo1bUmtpQW2pHj1N7eoI6UEfqRE9SZ3qKutDTlEzPUFd6lrrRc9Sdnqce9AL1pBepF/WmPvQS9aWXqR/1pxQaQAPpFRpEg2kIDaVh9CoNp9doBL1OqTSSRtEbNJrepDH0Fo2lcTSe3qYJNJEm0WSaQlMpjd6hafQuTaf3aAbNpFk0m9JpDs2l92kezacF9AEtpA9pES2mJbSUMugjyqRllEUf03L6hLJpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG2+lT2kE7aRftpj20l/bRZ7SfPqcD9AXl0Jd0kP5Ch+grOkxfUy59Q0foWzpK39Ex+p6O0w90gk7SKfqRTtNPdIbO0jn6mc7TL3SBLtIl8iRCCGWoQh0GYb4wfxgTFghjw2vCuPDasGB4XRgJrw/jwxvCQuGNYeGwSFg0LBYmhMXDEqEJMbQhhWFYMiwVRsObwtLhzWFiWCYsG5YLXVg+TApvCSuEt4YVw9vCSuHtYeXwjrBKWDV89P7q4Z1hjfCusGZYK6wd3h3WCeuG9cL64T1hg/DesGF4X9govD+sGD4QNgkfDJuGD4XNwofD5uEjYYvw0bBl+FjYKmwdtgnbhu3Cx8P24RNhh7Bj2Cl8MuwcPhV2CZ8Ok8Nnwq7hs394PCUcEA4MXwlfCb2/Ty2JLo1mRD+KZkaXRbOiH0eXRz+JZkdXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W9r59fOHDSKadd4PK5/C7GFXCx7hoX5651Bd11LuKud/HuBlfI3egKuyKuqCvmElxxV8IZh846cqEr6Uq5qLvJlXY3u0RXxpV15Zxz5V2Sa+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvUlyKG+gGukFukBvihrhhbpgb7oa7EW6ES3WpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Npblpbpqb7qa7GW6Gm+VmuXSX7ua6uW6em+cWuAVuYeJCt8gtckvcEpfhMlymy3RZLsstd8tdtst2K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcDkuxx10B90hd8gddl+7XPeNO+K+dUfdd+6Y+94ddz+4E+6kO+V+dKfdT+6MO+vOuZ/defeLu+AuukvOu7TIO5FpkXcj0yPvRWZEZkZmRWZH0iNzInMj70fmReZHFkQ+iCyMfBhZFFkcWRJZGsmIfBTJjCyLZEU+jiyPfBLJjqyIrIysiqyOrIl4X3xH6Ev6Uj7qb/Kl/c0+0ZfxZX0573x5n+Rv8RX8rb6iv81X8rf7yv4OX8VX9dX8Y76Vb+3b+La+nX/ct/dP+A6+o+/kn/Sd/VO+i3/aJ/tnfFf/rO/mn/Pd/fO+h3/B9/Qv+l6+t+/jX/J9/cu+n+/vU/wAP9C/4gf5wX6IH+qH+Vf9cP+aH+Ff96l+pB/l3/Cj/Zt+jH/Lj/Xj/Hj/tp/gJ/pJfrKf4qf6NP+On+bf9dP9e36Gn+ln+dk+3c/xc/37fp6f7xf4D/xC/6Ff5Bf7JX6pz/Af+Uy/zGf5j/1y/4nP9iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/ef+h1+p9/ld/s9fq/f5z/z+/3n/oD/wuf4L/1B/xd/yH/lD/uvfa7/xh/x3/qj/jt/zH/vj/sf/Al/0p/yP/rT/id/xp/15/zP/rz/xV/wF/0l/p81xhhjjLF/ifqD4wP+yffk39ZlA4UQ1+4slvufa24u/Nf9YJnQOSKEeKZ/z4f/vurUSdn698dmKxGUWiyEiFzJzyeuxCtEJ/GUSBYdRYV/2t9g2fs8/b5+Sspv6kdvFyL2Nzkx4kp8pf6t/0X9x58cn1k5PBf/39RfLERiqSs5BcSV+Er9iv9F/SLt/6D/Al+lCdHhNzlx4kp8pX6SeEI8K5L/4ZGMMcYYY4wxxthfDZbVuv/R/fPl+/MEfSUnv7gS/9H9OWOMMcYYY4wxxq6+53v3efrx5OSO3XnDG97w5j82V/svE2OMMcYYY+zPduWi/2p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V3/Gx8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/l8AAAD//zG6PD0=") getegid() mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x2020) 32.909453151s ago: executing program 0 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c6738", 0x6d}, {&(0x7f0000000a40)="a768e2d00ec5757e8f5f433f84c63a269953b038d5817617556310f9ee538468ee62c0d68b6b9fe9ade83c789bd66faf569fc7fbddfc2f6e4275c1df15f3a83eaa316135a25fe4533b1ca0ef0e263cab2f2549bb9e6b5695cbd3df", 0x5b}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x3, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac0", 0x2d}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb31c60880c389de6a8919a67", 0xbc}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd95395", 0x57}, {&(0x7f0000000fc0)="26166583e37c8b7d00ab5146a77c416387ef936b5c5d71546721b5fe2369b8b7009262933b2d3280235aff09fc6b0d14ad0d2336b4f21ed53375838ff7f6c567b372b0124a5f1bc6ca1eef4cfdfe8e97b9cadc99cc2a870d680138b4bfe181d8181ce0e924e85ef677049d765a870450b00b1adda0d57413a2acb1d18236df1ea69ffd649198fe0b3bc101341dc23159730ef9", 0x93}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 32.469520727s ago: executing program 0 (id=2569): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24000040) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 32.172272925s ago: executing program 39 (id=2569): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24000040) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 17.376181387s ago: executing program 6 (id=2679): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x161802, 0x9) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) setrlimit(0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 9.242766031s ago: executing program 3 (id=2711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x6, 0x2, 0xf5, '\x00', 0xf}, {0x1, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x1}, {0xfe, 0x3, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0xa, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 7.497363713s ago: executing program 3 (id=2715): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 7.152550683s ago: executing program 3 (id=2718): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c00020008"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c00"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 7.049271569s ago: executing program 6 (id=2719): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x8], [0x2], [0x0, 0x0, 0xfffffffffffffbaf]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r3, 0x0, 0x0, 0x6, 0x0, [0x0], [], [0x0, 0xfffffffc, 0xfffffff7], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)={r7}) 6.976348254s ago: executing program 3 (id=2720): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 6.809799053s ago: executing program 6 (id=2721): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x4, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f0000000100)="21812a818bb99326cf9aa78dfc4f0ac4f5dc12092e7faa139e2597dba850b86ad2211de9fb71c95a1a2af2f99d02ec6f0187233f2bad639e36338893", 0xb7f40, 0x3000000000000000}]) 6.769339205s ago: executing program 3 (id=2722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) 6.252822656s ago: executing program 3 (id=2724): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) 5.084672334s ago: executing program 40 (id=2724): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) 4.498217728s ago: executing program 2 (id=2730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 4.352666266s ago: executing program 2 (id=2732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044060}, 0x4010) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.319334478s ago: executing program 8 (id=2733): syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="d9c901f2bdd74fcbf8a6b32a0a0b8ee3833cfd3a49b35a948b10e7473f3486cefb8d7046c759a29c92aa8be7f92cad1ba4b6afdc639fef867c46917f6e99fa67814cd10b7b37c9183f2b78295239c4dd45f294a380640846f787ff1b14fd3ad29342a8b9845bd381e60fce65fe8a84aec1dda46dc5a540663bf372917118", @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1526, &(0x7f0000000780)="$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") ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x140448, &(0x7f00000001c0), 0x3, 0x57b, &(0x7f0000000780)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x80020007, 0x804, 0x7, 0xf, 0x120000, 0x800, 0x0, 0x8, 0x8000000000000001, 0x200000000000002, 0x0, 0x102, 0x0, 0xffffffffffffffff], 0x8000000, 0x149350}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000400)=@arm64={0x7, 0x1d, 0xfa, '\x00', 0xf4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.105130811s ago: executing program 8 (id=2734): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008030) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) 3.76152813s ago: executing program 2 (id=2736): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.476154336s ago: executing program 8 (id=2737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000800)=@multiplanar_overlay={0x201, 0x3, 0x4, 0x400, 0x5, {}, {0x4, 0x8, 0x10, 0x2, 0x2, 0x9, "57b726de"}, 0x1, 0x3, {0x0}, 0x2}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x48000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r4, 0x89e0, &(0x7f00000000c0)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x800000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.295046356s ago: executing program 6 (id=2738): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2190040, 0x0, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, 0x0) 2.150007764s ago: executing program 1 (id=2739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x6, 0x0, {0x60, 0x0, 0x0, 0x0, {0xf, 0x2}, {0xffff, 0x9}, {0x4, 0xe4ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001d4}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c57, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf5, 0x2e6, &(0x7f0000000540)="$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") ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.883159751s ago: executing program 1 (id=2740): write$tun(0xffffffffffffffff, &(0x7f00000006c0)={@val={0x0, 0x86dd}, @val={0xc5dd52d410861fde, 0x0, 0x12}, @mpls={[], @ipv6=@generic={0x3, 0x6, "b9e7a9", 0x8, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts]}}}}, 0x3e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a40)="a768e2d00ec5757e8f5f433f84c63a269953b038d5817617556310f9ee538468ee62c0d68b6b9fe9ade83c789bd66faf569fc7fbddfc2f6e4275c1df15f3a83eaa316135a25fe4533b1ca0ef0e263cab2f2549bb9e6b5695cbd3df", 0x5b}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x2, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083beff49c0ad28591", 0x59}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd95395", 0x57}, {&(0x7f0000000fc0)="26166583e37c8b7d00ab5146a77c416387ef936b5c5d71546721b5fe2369b8b7009262933b2d3280235aff09fc6b0d14ad0d2336b4f21ed53375838ff7f6c567b372b0124a5f1bc6ca1eef4cfdfe8e97b9cadc99cc2a870d680138b4bfe181d8181ce0e924e85ef677049d765a870450b00b1adda0d57413a2acb1d18236df1ea69ffd649198fe0b3bc101341dc23159730ef95cea61efc0cfb62cfef01920dd16c9d37367c185c0b2346dcd9e", 0xad}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.510737392s ago: executing program 8 (id=2741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002c00)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x9, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8da83b9db035a58}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x10}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="bad8a6d6c5f4898c5a4029b48f916ae230", 0x11, 0x400c0, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0xda, 0x6, @remote}, 0x14) 1.510551512s ago: executing program 2 (id=2742): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) getdents64(r2, 0x0, 0x0) 1.500620983s ago: executing program 1 (id=2743): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xa) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) 1.37414418s ago: executing program 1 (id=2744): syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1.335463212s ago: executing program 2 (id=2745): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0x4e, 0x0) write$binfmt_script(r6, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r5, r4, 0x9, 0x8) 1.136877114s ago: executing program 8 (id=2746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) accept(r0, &(0x7f0000000180)=@caif=@dbg, &(0x7f0000000100)=0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x7, 0x4) 1.117088525s ago: executing program 6 (id=2747): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebaa958d00", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6ad8e3943f10aa1c9cb952854743fe4dddd2e7c0ce70a4ac7d", {"28fe8101abc2e989a9b918fee56e00", "01422d01cd53c3e94331d0b791872400"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000061, 0x0) syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$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") socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b520a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) close(r0) 1.02708907s ago: executing program 1 (id=2748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5, 0x2, 0x3c, 0x29, 0x9, 0xae, 0x9, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000180)="bad330fbc9b554000400004fcdf6", 0xe, 0x2000c005, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0xd8, 0x6, @local}, 0x14) 826.799112ms ago: executing program 8 (id=2749): socket(0x10, 0x803, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r0 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) close_range(r0, 0xffffffffffffffff, 0x0) 702.769979ms ago: executing program 1 (id=2750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000800)=@multiplanar_overlay={0x201, 0x3, 0x4, 0x400, 0x5, {}, {0x4, 0x8, 0x10, 0x2, 0x2, 0x9, "57b726de"}, 0x1, 0x3, {0x0}, 0x2}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x48000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r4, 0x89e0, &(0x7f00000000c0)) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x800000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 349.21786ms ago: executing program 2 (id=2751): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nolazytime}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fdatasync(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 0s ago: executing program 6 (id=2752): write$tun(0xffffffffffffffff, &(0x7f00000006c0)={@val={0x0, 0x86dd}, @val={0xc5dd52d410861fde, 0x0, 0x12}, @mpls={[], @ipv6=@generic={0x3, 0x6, "b9e7a9", 0x8, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts]}}}}, 0x3e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a40)="a768e2d00ec5757e8f5f433f84c63a269953b038d5817617556310f9ee538468ee62c0d68b6b9fe9ade83c789bd66faf569fc7fbddfc2f6e4275c1df15f3a83eaa316135a25fe4533b1ca0ef0e263cab2f2549bb9e6b5695cbd3df", 0x5b}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x2, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083beff49c0ad28591", 0x59}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd95395", 0x57}, {&(0x7f0000000fc0)="26166583e37c8b7d00ab5146a77c416387ef936b5c5d71546721b5fe2369b8b7009262933b2d3280235aff09fc6b0d14ad0d2336b4f21ed53375838ff7f6c567b372b0124a5f1bc6ca1eef4cfdfe8e97b9cadc99cc2a870d680138b4bfe181d8181ce0e924e85ef677049d765a870450b00b1adda0d57413a2acb1d18236df1ea69ffd649198fe0b3bc101341dc23159730ef95cea61efc0cfb62cfef01920dd16c9d37367c185c0b2346dcd9e", 0xad}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 43][ T13] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 623.369421][ T13] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 623.407881][ T13] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 623.422794][ T13] f81534: probe of 6-1:0.12 failed with error -71 [ 623.438239][T10911] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 623.466000][T10911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.488379][T10923] syz.7.1656[10923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 623.488520][T10923] syz.7.1656[10923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 623.500354][ T13] usb 6-1: USB disconnect, device number 8 [ 624.291054][T10949] tmpfs: Unknown parameter '' [ 624.458143][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.467362][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.560171][T10931] loop7: detected capacity change from 0 to 32768 [ 625.632039][T10931] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop7 scanned by syz.7.1659 (10931) [ 625.698544][T10931] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 625.749581][T10931] BTRFS info (device loop7): using free space tree [ 625.777559][T10931] BTRFS info (device loop7): has skinny extents [ 625.935551][T10956] loop5: detected capacity change from 0 to 32768 [ 625.955287][T10956] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1667 (10956) [ 626.037390][T10956] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 626.055842][T10956] BTRFS info (device loop5): enabling ssd optimizations [ 626.120919][T10956] BTRFS info (device loop5): using spread ssd allocation scheme [ 626.194065][T10998] tmpfs: Unknown parameter '' [ 626.497489][T10956] BTRFS info (device loop5): not using ssd optimizations [ 626.576911][T10931] BTRFS info (device loop7): enabling ssd optimizations [ 626.744259][T10956] BTRFS info (device loop5): not using spread ssd allocation scheme [ 626.962817][T10956] BTRFS info (device loop5): using free space tree [ 626.970196][T10956] BTRFS info (device loop5): has skinny extents [ 627.366738][T11040] loop4: detected capacity change from 0 to 1024 [ 627.718427][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1688'. [ 628.054537][ T9] hfsplus: b-tree write err: -5, ino 4 [ 628.359066][T11069] loop4: detected capacity change from 0 to 4096 [ 628.434646][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'. [ 628.611213][T11083] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 628.612255][ T9] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 630.101031][T11065] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 630.975639][T11123] 9pnet: Insufficient options for proto=fd [ 630.991355][T11065] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.020679][T11065] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.050032][T11065] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 631.089026][T11065] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.509388][T11065] usb 8-1: usb_control_msg returned -32 [ 631.515806][T11065] usbtmc 8-1:16.0: can't read capabilities [ 632.768612][T11166] netlink: 'syz.1.1713': attribute type 10 has an invalid length. [ 632.823276][T11166] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1713'. [ 632.862780][T11168] loop4: detected capacity change from 0 to 128 [ 632.915696][ T4249] kernel write not supported for file bpf-prog (pid: 4249 comm: kworker/1:8) [ 633.051645][T11137] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 633.246634][T11185] tmpfs: Unknown parameter '' [ 634.549996][T11135] usb 8-1: USB disconnect, device number 5 [ 634.637589][T11197] loop4: detected capacity change from 0 to 64 [ 634.731339][T11137] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 634.740019][T11137] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.761230][T11197] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 634.777528][T11199] loop7: detected capacity change from 0 to 2048 [ 634.801217][T11137] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 634.810517][T11137] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.826448][T11205] wg2 speed is unknown, defaulting to 1000 [ 635.011450][T11137] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 635.033183][T11137] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 635.066805][T11137] usb 6-1: Product: syz [ 635.083279][T11137] usb 6-1: Manufacturer: syz [ 635.144520][T11137] cdc_wdm 6-1:1.0: skipping garbage [ 635.149969][T11137] cdc_wdm 6-1:1.0: skipping garbage [ 635.193594][T11137] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 635.204171][T11221] loop4: detected capacity change from 0 to 128 [ 635.215652][T11137] cdc_wdm 6-1:1.0: Unknown control protocol [ 635.282130][T11225] loop7: detected capacity change from 0 to 512 [ 635.370994][ C0] cdc_wdm 6-1:1.0: unknown notification 100 received: index 0 len 0 [ 635.571923][ T4292] usb 6-1: USB disconnect, device number 9 [ 636.137824][T11265] loop5: detected capacity change from 0 to 128 [ 636.201031][ T4292] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 636.420547][T11275] loop5: detected capacity change from 0 to 512 [ 636.585636][T11275] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 636.609993][ T4292] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 636.668454][ T4292] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 636.693688][T11275] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.786342][ T4292] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 636.837183][ T4292] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.890256][ T4292] usb 8-1: config 0 descriptor?? [ 636.932091][T11256] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 637.186186][T11307] netlink: 'syz.4.1757': attribute type 10 has an invalid length. [ 637.205618][T11307] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1757'. [ 637.246814][T11307] device bond0 entered promiscuous mode [ 637.271073][ T4292] usbhid 8-1:0.0: can't add hid device: -71 [ 637.277392][T11307] device bond_slave_0 entered promiscuous mode [ 637.287597][ T4292] usbhid: probe of 8-1:0.0 failed with error -71 [ 637.304882][T11307] device bond_slave_1 entered promiscuous mode [ 637.316480][ T4292] usb 8-1: USB disconnect, device number 6 [ 637.339769][T11307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.943712][T11336] loop7: detected capacity change from 0 to 764 [ 638.304620][T11351] wg2 speed is unknown, defaulting to 1000 [ 639.641591][T11389] device syzkaller0 entered promiscuous mode [ 639.910785][T11396] loop4: detected capacity change from 0 to 1024 [ 640.031665][T11402] overlayfs: failed to clone upperpath [ 640.401020][T11065] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 640.781412][T11065] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.849617][T11065] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.950651][T11065] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 641.022982][T11065] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.110097][T11065] usb 8-1: config 0 descriptor?? [ 641.159298][ T4786] hfsplus: b-tree write err: -5, ino 4 [ 641.490537][T11444] loop4: detected capacity change from 0 to 16 [ 641.549555][T11444] erofs: (device loop4): mounted with root inode @ nid 36. [ 641.562544][T11444] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 9 of nid 36 [ 641.574164][T11444] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 641.584145][T11444] attempt to access beyond end of device [ 641.584145][T11444] loop4: rw=524288, want=67108888, limit=16 [ 641.596703][T11444] attempt to access beyond end of device [ 641.596703][T11444] loop4: rw=524288, want=736, limit=16 [ 641.610430][T11444] attempt to access beyond end of device [ 641.610430][T11444] loop4: rw=524288, want=525152, limit=16 [ 641.633427][T11065] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 641.688915][T11065] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 641.851646][T11065] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 642.071188][T11065] cp2112 0003:10C4:EA90.0003: error requesting SMBus config [ 642.088824][T11065] cp2112: probe of 0003:10C4:EA90.0003 failed with error -71 [ 642.130492][T11065] usb 8-1: USB disconnect, device number 7 [ 642.280489][T11463] fido_id[11463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 642.750609][T11484] device syzkaller0 entered promiscuous mode [ 643.422030][T11513] tmpfs: Unknown parameter '' [ 644.700550][T11526] device ip6gre1 entered promiscuous mode [ 644.746033][T11528] wg2 speed is unknown, defaulting to 1000 [ 645.171023][T11135] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 645.441019][T11135] usb 6-1: Using ep0 maxpacket: 32 [ 645.572204][T11135] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 645.592404][T11135] usb 6-1: config 0 has no interface number 0 [ 645.598921][T11135] usb 6-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 645.851591][T11545] device syzkaller0 entered promiscuous mode [ 645.861215][T11135] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 645.890906][T11135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.931092][T11135] usb 6-1: Product: syz [ 645.945916][T11135] usb 6-1: Manufacturer: syz [ 645.971032][T11135] usb 6-1: SerialNumber: syz [ 645.994024][T11535] loop4: detected capacity change from 0 to 32768 [ 646.006038][T11135] usb 6-1: config 0 descriptor?? [ 646.051353][T11538] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 646.147131][T11535] XFS (loop4): Mounting V5 Filesystem [ 646.303190][T11538] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 646.348642][T11555] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 646.395361][T11535] XFS (loop4): Starting recovery (logdev: internal) [ 646.567041][T11535] XFS (loop4): Ending recovery (logdev: internal) [ 646.581327][T11135] asix 6-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 646.631163][T11135] asix: probe of 6-1:0.191 failed with error -71 [ 646.666671][T11565] loop7: detected capacity change from 0 to 256 [ 646.685154][T11135] usb 6-1: USB disconnect, device number 10 [ 647.689116][ T4186] XFS (loop4): Unmounting Filesystem [ 647.911109][T11586] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1827'. [ 648.120198][T11591] loop5: detected capacity change from 0 to 1024 [ 648.480255][T11597] device syzkaller0 entered promiscuous mode [ 649.992321][T11628] loop4: detected capacity change from 0 to 8 [ 650.169692][T11628] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 651.448075][T11622] loop7: detected capacity change from 0 to 32768 [ 651.504149][T11622] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 651.581121][T11635] loop4: detected capacity change from 0 to 8 [ 651.754948][T11635] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 652.227642][T11622] BTRFS info (device loop7): doing ref verification [ 652.400637][T11622] BTRFS info (device loop7): use no compression [ 652.427882][T11622] BTRFS info (device loop7): using free space tree [ 652.520952][T11622] BTRFS info (device loop7): has skinny extents [ 653.878472][ T4786] hfsplus: b-tree write err: -5, ino 4 [ 653.901902][T11622] BTRFS error (device loop7): open_ctree failed: -12 [ 654.140935][T11688] loop4: detected capacity change from 0 to 512 [ 654.339711][T11688] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,max_dir_size_kb=0x0000000000000a2d,journal_dev=0x00000000460b8000,,errors=continue. Quota mode: writeback. [ 654.395037][T11688] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 655.083546][T11715] overlayfs: invalid redirect ((null)) [ 655.974452][T11716] loop4: detected capacity change from 0 to 32768 [ 656.031861][T11716] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1858 (11716) [ 656.095658][T11716] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 656.119065][T11716] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 656.160748][T11716] BTRFS info (device loop4): use zstd compression, level 3 [ 656.178215][T11716] BTRFS info (device loop4): use zlib compression, level 3 [ 656.198693][T11716] BTRFS info (device loop4): using free space tree [ 656.234636][T11716] BTRFS info (device loop4): has skinny extents [ 656.528275][T11716] BTRFS info (device loop4): enabling ssd optimizations [ 656.779857][T11769] fuse: Bad value for 'fd' [ 657.081243][T11681] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 657.091372][T11780] netlink: 'syz.2.1878': attribute type 1 has an invalid length. [ 657.175255][T11780] 8021q: adding VLAN 0 to HW filter on device bond7 [ 657.256372][T11740] loop7: detected capacity change from 0 to 65536 [ 657.362092][T11740] XFS: attr2 mount option is deprecated. [ 657.509018][T11740] XFS (loop7): Mounting V5 Filesystem [ 657.524489][T11784] bond7: (slave ip6erspan0): making interface the new active one [ 657.533245][T11681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.551143][T11681] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 657.560422][T11681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.571875][T11681] usb 6-1: config 0 descriptor?? [ 657.580279][T11784] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 657.600545][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 657.628932][T11792] wg2 speed is unknown, defaulting to 1000 [ 657.656572][T11740] XFS (loop7): Ending clean mount [ 657.722889][T11740] XFS (loop7): Quotacheck needed: Please wait. [ 657.866369][T11740] XFS (loop7): Quotacheck: Done. [ 657.989925][ T8734] XFS (loop7): Unmounting Filesystem [ 658.073943][T11681] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 658.094912][T11681] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0004/input/input8 [ 658.313521][T11681] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 658.969324][T11827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1887'. [ 659.710214][T11851] loop4: detected capacity change from 0 to 8 [ 659.731042][T11062] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 659.834555][T11851] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 660.067929][T11850] tipc: Enabling of bearer rejected, failed to enable media [ 660.132001][T11062] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 660.401830][T11061] usb 6-1: USB disconnect, device number 11 [ 660.548432][T11857] loop5: detected capacity change from 0 to 4096 [ 660.551534][T11062] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 660.574748][T11857] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 660.599806][T11062] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.654902][T11062] usb 8-1: Product: syz [ 660.672039][T11062] usb 8-1: Manufacturer: syz [ 660.677178][T11062] usb 8-1: SerialNumber: syz [ 660.723173][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 660.723189][ T26] audit: type=1800 audit(2000000539.405:129): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1897" name="file2" dev="loop5" ino=31 res=0 errno=0 [ 660.770101][T11864] loop4: detected capacity change from 0 to 1024 [ 660.854642][T11062] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 661.129768][T11864] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 661.214682][T11864] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.284901][T11062] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 661.341590][ T26] audit: type=1800 audit(2000000540.015:130): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1898" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 661.350175][T11864] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 3: comm syz.4.1898: lblock 3 mapped to illegal pblock 3 (length 3) [ 661.396608][T11062] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 661.442295][T11062] usb 8-1: media controller created [ 661.562324][T11864] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.1898: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 661.586021][T11062] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 661.852258][T11891] loop5: detected capacity change from 0 to 256 [ 662.127454][T11899] tipc: Enabling of bearer rejected, failed to enable media [ 662.150760][T11061] usb 8-1: USB disconnect, device number 8 [ 662.794164][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 662.822195][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 662.873084][T11924] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.884125][T11924] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.894247][T11924] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.903927][T11924] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.924850][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 663.035962][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 663.142084][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1920'. [ 663.276442][T11939] 8021q: adding VLAN 0 to HW filter on device bond8 [ 663.394495][T11945] device macvlan2 entered promiscuous mode [ 663.422478][T11945] device bond8 entered promiscuous mode [ 663.435826][T11945] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 663.902779][T11978] overlayfs: failed to clone upperpath [ 663.912807][T11977] loop4: detected capacity change from 0 to 1024 [ 664.035274][T11984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1935'. [ 664.088729][T11977] EXT4-fs (loop4): Ignoring removed bh option [ 664.153666][T11977] EXT4-fs (loop4): Ignoring removed nobh option [ 664.180672][T11977] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 664.204010][T11985] loop5: detected capacity change from 0 to 8 [ 664.252038][T11985] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 664.286655][T11977] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 665.060706][T12021] loop5: detected capacity change from 0 to 1024 [ 665.086323][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1948'. [ 665.127121][T12026] tmpfs: Unknown parameter '' [ 666.331513][ T9] hfsplus: b-tree write err: -5, ino 4 [ 666.519390][T12056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1963'. [ 666.663071][T12068] tmpfs: Unknown parameter '' [ 666.704846][T12064] overlayfs: failed to clone upperpath [ 667.963938][T12091] loop7: detected capacity change from 0 to 512 [ 668.027848][T12091] EXT4-fs (loop7): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 668.049521][T12091] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.876328][T12128] loop2: detected capacity change from 0 to 7 [ 668.898491][T10220] Dev loop2: unable to read RDB block 7 [ 668.911457][T10220] loop2: unable to read partition table [ 668.918471][T10220] loop2: partition table beyond EOD, truncated [ 668.949800][T12128] Dev loop2: unable to read RDB block 7 [ 668.960984][ T4283] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 668.971769][T12128] loop2: unable to read partition table [ 668.978261][T12128] loop2: partition table beyond EOD, truncated [ 669.050113][T12128] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 669.221155][ T4283] usb 5-1: Using ep0 maxpacket: 32 [ 669.266118][T12140] loop7: detected capacity change from 0 to 1024 [ 669.310502][T12140] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 669.331435][T11681] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 669.351880][ T4283] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 669.364904][T12140] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 669.376221][ T4283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.384807][T12140] EXT4-fs (loop7): orphan cleanup on readonly fs [ 669.396682][T12140] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.1993: Inode bitmap for bg 0 marked uninitialized [ 669.428160][T12140] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_dev=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 669.489959][ T4283] usb 5-1: config 0 descriptor?? [ 669.562539][ T4283] gspca_main: sunplus-2.14.0 probing 041e:400b [ 669.641122][T11681] usb 6-1: Using ep0 maxpacket: 32 [ 669.781355][T11681] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 669.798835][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1997'. [ 669.813483][T11681] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 669.839722][T11681] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 669.881241][T11681] usb 6-1: config 1 has no interface number 0 [ 669.887677][T11681] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 669.910303][T11681] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 669.936769][T11681] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 669.956664][T11681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.034629][T11681] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 670.140803][T12182] loop7: detected capacity change from 0 to 8 [ 670.155649][T12184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2006'. [ 670.167178][T12182] cramfs: Unknown parameter '' [ 670.243202][T11681] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 670.296453][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2007'. [ 671.134130][ T4283] gspca_sunplus: reg_w_riv err -110 [ 671.141388][ T4283] sunplus: probe of 5-1:0.0 failed with error -110 [ 671.250780][T12210] fuse: Bad value for 'fd' [ 671.333536][ T4283] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 671.465917][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2016'. [ 671.747995][T12227] loop7: detected capacity change from 0 to 256 [ 671.827439][T12227] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 671.913036][ T26] audit: type=1804 audit(2000000550.585:131): pid=12227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2019" name="/newroot/133/file0/bus" dev="loop7" ino=1048657 res=1 errno=0 [ 671.967505][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2021'. [ 672.156856][T11061] usb 6-1: USB disconnect, device number 12 [ 672.177086][T11061] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 672.263756][T11062] usb 5-1: USB disconnect, device number 10 [ 672.565814][T12246] loop4: detected capacity change from 0 to 8 [ 672.921526][T12248] tmpfs: Unknown parameter '' [ 672.963529][T12246] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 673.384075][T12254] tipc: Enabling of bearer rejected, failed to enable media [ 673.394202][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2029'. [ 673.520805][T12261] device gretap1 entered promiscuous mode [ 673.608805][T12263] tipc: Enabling of bearer rejected, failed to enable media [ 673.625812][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 673.646672][T12263] device syzkaller0 entered promiscuous mode [ 673.851350][T11061] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 673.984232][T12277] wg2 speed is unknown, defaulting to 1000 [ 674.655444][T12283] loop5: detected capacity change from 0 to 8 [ 674.710941][T11061] usb 5-1: Using ep0 maxpacket: 32 [ 674.791963][T12283] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 674.901999][T11061] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.913479][T11061] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 674.926725][T11061] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 674.937663][T11061] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 674.950673][T11061] usb 5-1: config 1 interface 1 has no altsetting 0 [ 675.111409][T11061] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 675.124522][T12299] overlayfs: failed to clone upperpath [ 675.132654][T11061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.164797][T11061] usb 5-1: Product: syz [ 675.169554][T11061] usb 5-1: Manufacturer: syz [ 675.181183][T11061] usb 5-1: SerialNumber: syz [ 675.288116][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2044'. [ 675.488914][T12316] tipc: Enabling of bearer rejected, failed to enable media [ 675.521175][T11061] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 675.534021][T11061] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 675.801993][T12332] tmpfs: Unknown parameter '' [ 676.444013][T11061] usb 5-1: USB disconnect, device number 11 [ 676.603161][T12341] tmpfs: Unknown parameter '' [ 676.765925][T12336] loop7: detected capacity change from 0 to 4096 [ 677.591599][T12353] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.660560][ T26] audit: type=1800 audit(2000000556.335:132): pid=12336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2053" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 677.711224][ T4249] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 678.091148][ T4249] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.119146][ T4249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.375905][T12357] loop7: detected capacity change from 0 to 8 [ 678.431744][T12357] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 678.761289][ T4249] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 678.801130][ T4249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 678.841074][ T4249] usb 6-1: SerialNumber: syz [ 678.879708][T12345] loop4: detected capacity change from 0 to 32768 [ 679.033130][T12345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2055 (12345) [ 679.134102][ T4249] usb 6-1: 0:2 : does not exist [ 679.221333][ T4249] usb 6-1: USB disconnect, device number 13 [ 679.311064][T12345] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 679.320088][T12345] BTRFS info (device loop4): setting nodatacow, compression disabled [ 679.390937][T12345] BTRFS info (device loop4): disabling tree log [ 679.397915][T12345] BTRFS info (device loop4): turning on sync discard [ 679.421182][T12365] tipc: Enabling of bearer rejected, failed to enable media [ 679.461923][T12365] device syzkaller0 entered promiscuous mode [ 679.465183][T12345] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 679.504723][T12339] udevd[12339]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.542151][T12345] BTRFS info (device loop4): force zstd compression, level 3 [ 679.563696][T12345] BTRFS info (device loop4): using free space tree [ 679.570771][T12345] BTRFS info (device loop4): has skinny extents [ 679.725859][T12371] loop5: detected capacity change from 0 to 512 [ 679.945371][T12371] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 679.965035][T12385] loop7: detected capacity change from 0 to 2364 [ 680.021168][T12371] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.235134][ T5600] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 680.331250][ T5600] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 680.881184][T12345] BTRFS error (device loop4): open_ctree failed: -12 [ 680.881572][T12339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (12339) [ 681.139053][T12404] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 681.222473][T12406] overlayfs: failed to clone upperpath [ 682.010072][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2080'. [ 682.580461][T12421] wg2 speed is unknown, defaulting to 1000 [ 683.940047][T12421] chnl_net:caif_netlink_parms(): no params data found [ 684.360927][T11061] Bluetooth: hci1: command 0x0409 tx timeout [ 684.379783][T12437] overlayfs: failed to clone upperpath [ 684.400394][T12437] overlayfs: failed to clone upperpath [ 684.492055][T12421] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.560946][T12421] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.607322][T12421] device bridge_slave_0 entered promiscuous mode [ 684.671820][T12421] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.730606][T12421] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.762025][T12421] device bridge_slave_1 entered promiscuous mode [ 684.786126][T12438] wg2 speed is unknown, defaulting to 1000 [ 684.861817][T12421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.904261][T12421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.018266][T12421] team0: Port device team_slave_0 added [ 685.043220][T12421] team0: Port device team_slave_1 added [ 685.101244][ T4315] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.121264][T11134] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 685.160621][T12421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.189223][T12421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.227466][T12421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.245967][T12421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.255263][T12421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.284311][T12421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.301115][ T4315] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.351202][T12421] device hsr_slave_0 entered promiscuous mode [ 685.358833][T12421] device hsr_slave_1 entered promiscuous mode [ 685.366273][T12421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.375012][T12421] Cannot create hsr debugfs directory [ 685.408931][ T4315] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.499808][ T4315] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.512774][T12452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2090'. [ 685.603046][T11134] usb 5-1: unable to get BOS descriptor or descriptor too short [ 685.668219][T12438] chnl_net:caif_netlink_parms(): no params data found [ 685.681308][T11134] usb 5-1: not running at top speed; connect to a high speed hub [ 685.791303][T11134] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.812314][T11134] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.884335][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.891684][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.924330][T12438] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.961208][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.991416][T12438] device bridge_slave_0 entered promiscuous mode [ 686.031307][T11134] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.030760][T12438] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.055233][T11134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.069697][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.083954][T11134] usb 5-1: Product: syz [ 686.093950][T11134] usb 5-1: Manufacturer: syz [ 686.105945][T11134] usb 5-1: SerialNumber: syz [ 686.107158][T12438] device bridge_slave_1 entered promiscuous mode [ 686.230295][T12438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.298682][T12438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.441068][T11062] Bluetooth: hci1: command 0x041b tx timeout [ 686.521145][T11062] Bluetooth: hci4: command 0x0409 tx timeout [ 686.602059][T12438] team0: Port device team_slave_0 added [ 686.618871][ T4315] tipc: Left network mode [ 686.639962][T12438] team0: Port device team_slave_1 added [ 686.671199][T11134] usb 5-1: cannot find UAC_HEADER [ 686.699342][T12421] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 686.749494][T11134] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 686.797317][T12421] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 686.820785][T12339] udevd[12339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.846983][T12421] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 686.860601][ T4315] tipc: Disabling bearer [ 686.878606][ T4315] tipc: Disabling bearer [ 686.895557][ T4315] tipc: Left network mode [ 686.900189][T12421] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 686.927173][T12438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.964028][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.002040][T11677] usb 5-1: USB disconnect, device number 12 [ 687.025585][T12438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.080731][ T4315] bond1: (slave ip6gretap1): Releasing active interface [ 687.118810][T12438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.126526][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.157644][T12438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.253348][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2100'. [ 687.267895][T12438] device hsr_slave_0 entered promiscuous mode [ 687.282948][T12438] device hsr_slave_1 entered promiscuous mode [ 687.300733][T12438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 687.321292][T12438] Cannot create hsr debugfs directory [ 687.513856][T12421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.595680][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 687.615527][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 687.628555][T12421] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.666879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 687.687946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 687.700034][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.708519][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.738804][ T4315] bond1: (slave gretap1): Releasing active interface [ 687.794819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 687.803651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 687.814862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 687.824707][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.832132][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.842457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 687.861620][T11677] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 687.879494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 687.901751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 687.915838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 687.925858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 687.936810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 687.947027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 687.977714][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 687.989446][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 688.012417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 688.035103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 688.046953][T12421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 688.087550][T12438] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 688.109722][T12438] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 688.138633][T12438] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 688.146196][T11677] usb 5-1: Using ep0 maxpacket: 32 [ 688.165405][T12438] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 688.321099][T11677] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 688.330518][T11677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.403593][T11677] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 688.521847][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 688.543810][T12438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.569615][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 688.588471][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 688.601202][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 688.630753][T12438] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.695920][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 688.727157][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 688.751423][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.758850][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.782021][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 688.848862][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 688.880554][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 688.912332][T11572] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.922446][T11572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.995698][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 689.023487][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 689.076643][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 689.105844][T12547] overlayfs: failed to clone upperpath [ 689.116239][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 689.168387][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 689.214614][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 689.238450][T12421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.302553][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 689.342163][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 689.352626][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 689.362937][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 689.372953][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.408750][T12438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.445585][T12438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 689.459875][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 689.482342][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.783195][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 689.821445][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 689.908388][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 689.951192][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 689.965364][T11061] usb 5-1: USB disconnect, device number 13 [ 690.008377][T12421] device veth0_vlan entered promiscuous mode [ 690.037683][ T4315] device hsr_slave_0 left promiscuous mode [ 690.072063][ T4315] device hsr_slave_1 left promiscuous mode [ 690.091412][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.099227][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.112125][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.119891][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.130126][ T4315] device bridge_slave_1 left promiscuous mode [ 690.137711][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.148003][ T4315] device bridge_slave_0 left promiscuous mode [ 690.155806][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.170049][ T4315] device veth11 left promiscuous mode [ 690.177944][ T4315] bridge6: port 1(veth11) entered disabled state [ 690.190278][ T4315] device veth9 left promiscuous mode [ 690.196860][ T4315] bridge5: port 1(veth9) entered disabled state [ 690.207153][ T4315] device veth7 left promiscuous mode [ 690.213777][ T4315] bridge4: port 1(veth7) entered disabled state [ 690.227156][ T4315] device veth5 left promiscuous mode [ 690.237225][ T4315] bridge2: port 2(veth5) entered disabled state [ 690.254427][ T4315] device vlan2 left promiscuous mode [ 690.260776][ T4315] device veth1 left promiscuous mode [ 690.271181][ T4315] bridge2: port 1(vlan2) entered disabled state [ 690.306104][ T4315] device hsr_slave_0 left promiscuous mode [ 690.329030][ T4315] device hsr_slave_1 left promiscuous mode [ 690.345969][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.362715][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.378279][ T4315] device bridge_slave_1 left promiscuous mode [ 690.387794][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.404420][ T4315] device bridge_slave_0 left promiscuous mode [ 690.414253][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.438282][ T4315] device veth1_macvtap left promiscuous mode [ 690.452704][ T4315] device veth0_macvtap left promiscuous mode [ 690.460418][ T4315] device veth1_vlan left promiscuous mode [ 690.469335][ T4315] device veth0_vlan left promiscuous mode [ 690.601262][T11062] Bluetooth: hci1: command 0x0419 tx timeout [ 690.680652][ T4315] bond4 (unregistering): Released all slaves [ 690.681464][T11062] Bluetooth: hci4: command 0x040f tx timeout [ 690.734091][ T4315] bond3 (unregistering): Released all slaves [ 690.750107][ T4315] bond2 (unregistering): Released all slaves [ 690.804973][ T4315] bond1 (unregistering): Released all slaves [ 690.871132][T11134] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 690.976439][ T4315] team0 (unregistering): Port device team_slave_1 removed [ 690.996662][ T4315] team0 (unregistering): Port device team_slave_0 removed [ 691.011770][ T4315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.029022][ T4315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.129671][ T4315] bond0 (unregistering): Released all slaves [ 691.201785][ T4315] bond2 (unregistering): Released all slaves [ 691.321331][T11134] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.342523][T11134] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.363407][T11134] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 691.374127][T11134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.507550][ T4315] bond1 (unregistering): (slave veth3): Releasing active interface [ 691.535648][ T4315] bond1 (unregistering): Released all slaves [ 691.631251][T11134] usb 5-1: usb_control_msg returned -32 [ 691.637963][T11134] usbtmc 5-1:16.0: can't read capabilities [ 691.729390][ T4315] team0 (unregistering): Port device team_slave_1 removed [ 691.759564][ T4315] team0 (unregistering): Port device team_slave_0 removed [ 691.776725][ T4315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.794709][ T4315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.874427][ T4315] bond0 (unregistering): Released all slaves [ 691.908604][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 691.918960][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 691.936470][T12421] device veth1_vlan entered promiscuous mode [ 692.055471][T12611] tipc: Enabling of bearer rejected, failed to enable media [ 692.110413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 692.141887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 692.195442][T12438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.215096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 692.229436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 692.267305][T12421] device veth0_macvtap entered promiscuous mode [ 692.280365][T11134] usb 5-1: USB disconnect, device number 14 [ 692.332759][T12421] device veth1_macvtap entered promiscuous mode [ 692.438955][T12421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.467375][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 692.495093][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 692.535000][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 692.575681][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 692.613033][T12421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.682003][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 692.761322][T11677] Bluetooth: hci4: command 0x0419 tx timeout [ 692.779756][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 692.883951][T12421] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.916287][T12421] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.934030][T12421] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.973128][T12421] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.002409][T12656] netlink: 'syz.2.2133': attribute type 1 has an invalid length. [ 693.121713][T12656] 8021q: adding VLAN 0 to HW filter on device bond9 [ 693.204954][T12660] 8021q: adding VLAN 0 to HW filter on device bond9 [ 693.247747][T12660] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 693.318646][T12660] bond9: (slave vxcan7): Error -22 calling dev_set_mtu [ 693.391002][T12664] tipc: Enabling of bearer rejected, failed to enable media [ 693.543369][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 693.602497][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 693.794290][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 693.811209][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.824465][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 693.831346][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.859865][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 693.896488][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 693.947388][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 693.995052][T12438] device veth0_vlan entered promiscuous mode [ 694.041104][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 694.058696][T11572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.084460][T12438] device veth1_vlan entered promiscuous mode [ 694.093759][T11572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.185816][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 694.202344][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 694.222103][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 694.267466][T12438] device veth0_macvtap entered promiscuous mode [ 694.302972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 694.322358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 694.331172][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 694.387811][T12438] device veth1_macvtap entered promiscuous mode [ 694.415726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 694.429750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 694.471288][ T7] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 694.497099][ T7] usb 5-1: config 0 has no interface number 0 [ 694.529276][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.560916][ T7] usb 5-1: config 0 interface 89 has no altsetting 0 [ 694.630202][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.656843][T12438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.692153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 694.722659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 694.764533][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.821028][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.821208][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 694.877994][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.893723][T12438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.898810][ T7] usb 5-1: Product: syz [ 694.920094][ T7] usb 5-1: Manufacturer: syz [ 694.936085][ T7] usb 5-1: SerialNumber: syz [ 694.961893][ T7] usb 5-1: config 0 descriptor?? [ 694.988146][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 695.033513][ T7] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 695.046716][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 695.066828][ T7] em28xx 5-1:0.89: Video interface 89 found: bulk [ 695.078111][T12438] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.121034][T12438] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.161551][T12438] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.201035][T12438] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.512617][T11572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.534104][T11572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.615423][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 695.617763][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.655610][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.701055][ T7] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 695.718675][T12696] loop8: detected capacity change from 0 to 40427 [ 695.740688][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 695.897998][T12696] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x35f7 [ 695.940280][T12696] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1ffff [ 696.038653][T12696] F2FS-fs (loop8): invalid crc value [ 696.082118][T12696] F2FS-fs (loop8): Found nat_bits in checkpoint [ 696.155162][T12725] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 696.206937][T12725] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 696.227669][ T7] em28xx 5-1:0.89: AC97 command still being executed: not handled properly! [ 696.391126][ T7] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 696.421252][ T7] em28xx 5-1:0.89: board has no eeprom [ 696.431377][T12696] F2FS-fs (loop8): Start checkpoint disabled! [ 696.473072][T12696] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 696.631267][ T7] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 696.651094][ T7] em28xx 5-1:0.89: analog set to bulk mode. [ 696.721333][ T7] usb 5-1: USB disconnect, device number 15 [ 696.770727][T12696] F2FS-fs (loop8) : inject checkpoint error in f2fs_balance_fs of __f2fs_tmpfile+0x2d2/0x300 [ 696.791646][ T7] em28xx 5-1:0.89: Disconnecting em28xx [ 696.812804][ T26] audit: type=1804 audit(2000000575.485:133): pid=12747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2077" name="/newroot/0/file2/file1" dev="loop8" ino=14 res=1 errno=0 [ 696.822640][T11678] em28xx 5-1:0.89: Registering V4L2 extension [ 697.070484][T11678] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 697.090097][T11678] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 697.111244][T11677] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 697.126947][T12756] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 697.145630][T11678] em28xx 5-1:0.89: No AC97 audio processor [ 697.195002][T12756] 8021q: adding VLAN 0 to HW filter on device bond7 [ 697.232242][T11678] usb 5-1: Decoder not found [ 697.268798][T11678] em28xx 5-1:0.89: failed to create media graph [ 697.306011][T11678] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 697.407510][T11678] em28xx 5-1:0.89: Registering snapshot button... [ 697.469951][T11678] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input9 [ 697.529009][T11678] em28xx 5-1:0.89: Remote control support is not available for this card. [ 697.549126][ T7] em28xx 5-1:0.89: Closing input extension [ 697.557547][T11677] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 697.583392][ T7] em28xx 5-1:0.89: Deregistering snapshot button [ 697.592399][T11677] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.629956][T11677] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 697.651085][T11677] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.750081][T12760] 8021q: adding VLAN 0 to HW filter on device bond7 [ 697.801656][T12760] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 697.859804][T12760] bond7: (slave vxcan7): Error -22 calling dev_set_mtu [ 697.901837][ T7] em28xx 5-1:0.89: Freeing device [ 697.941162][T11677] usb 10-1: usb_control_msg returned -32 [ 697.947632][T11677] usbtmc 10-1:16.0: can't read capabilities [ 698.037563][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2152'. [ 698.550976][ T4570] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 698.562533][ T7] usb 10-1: USB disconnect, device number 2 [ 698.930312][T12791] kvm [12789]: vcpu2, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3ee1, nop [ 698.961222][ T4570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.977589][T12791] kvm [12789]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0x187 data 0xb1d0 [ 698.996817][ T4570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.007683][T12791] kvm [12789]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0x186 data 0x7abf [ 699.033320][ T4570] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 699.044681][T12791] kvm [12789]: vcpu2, guest rIP: 0x9114 ignored wrmsr: 0x11e data 0x436b [ 699.079095][ T4570] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 699.141014][ T4570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.152721][T12791] kvm [12789]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x15b [ 699.202278][ T4570] usb 5-1: config 0 descriptor?? [ 699.231225][T12791] kvm [12789]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x564b [ 699.664413][T12826] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2966359869 (23730878952 ns) > initial count (8389981152 ns). Using initial count to start timer. [ 699.681771][T12830] netlink: 'syz.9.2168': attribute type 1 has an invalid length. [ 699.703587][ T4570] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 699.759111][T12832] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 699.843030][T12835] device gretap1 entered promiscuous mode [ 699.858364][ T4570] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 700.021877][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2170'. [ 700.144360][T12847] bridge0: port 3(veth3) entered blocking state [ 700.180511][T12847] bridge0: port 3(veth3) entered disabled state [ 700.206165][T12847] device veth3 entered promiscuous mode [ 700.255029][T12843] bridge0: port 4(vlan2) entered blocking state [ 700.301499][T12843] bridge0: port 4(vlan2) entered disabled state [ 700.349149][T12843] device vlan2 entered promiscuous mode [ 700.378166][T12843] device veth1 entered promiscuous mode [ 700.798312][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2178'. [ 701.024466][ C1] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 701.411032][T11134] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 701.657151][T12889] tipc: Enabling of bearer rejected, already enabled [ 701.791348][T11134] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 701.853620][T11134] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.901364][ T4234] usb 5-1: USB disconnect, device number 16 [ 701.924802][T11134] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 701.962675][T12898] netlink: 'syz.8.2184': attribute type 1 has an invalid length. [ 702.029123][T11134] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.123293][T12898] device gretap1 entered promiscuous mode [ 702.138962][T12898] batman_adv: batadv0: Adding interface: gretap1 [ 702.171209][T12898] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.221253][T11134] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 702.251068][T11134] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 702.283596][T12898] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 702.308816][T11134] usb 10-1: Product: syz [ 702.321428][T12862] overlayfs: failed to clone upperpath [ 702.341122][T11134] usb 10-1: Manufacturer: syz [ 702.412083][T11134] cdc_wdm 10-1:1.0: skipping garbage [ 702.419345][T11134] cdc_wdm 10-1:1.0: skipping garbage [ 702.526992][T11134] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 702.567507][T11134] cdc_wdm 10-1:1.0: Unknown control protocol [ 702.705712][T12914] tmpfs: Unknown parameter '' [ 702.857919][T11065] usb 10-1: USB disconnect, device number 3 [ 703.050413][T12921] tipc: Enabling of bearer rejected, failed to enable media [ 703.376189][T12938] tmpfs: Unknown parameter '' [ 703.564112][T12937] fuse: Bad value for 'fd' [ 704.120271][T12907] loop8: detected capacity change from 0 to 32768 [ 704.226533][T12907] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.2185 (12907) [ 704.227916][T12944] netlink: 'syz.4.2196': attribute type 1 has an invalid length. [ 704.294294][T12947] loop9: detected capacity change from 0 to 512 [ 704.321648][T12907] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 704.385725][T12907] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 704.449498][T12907] BTRFS info (device loop8): use zstd compression, level 3 [ 704.499729][T12944] 8021q: adding VLAN 0 to HW filter on device bond6 [ 704.528180][T12907] BTRFS info (device loop8): use zlib compression, level 3 [ 704.589798][T12950] 8021q: adding VLAN 0 to HW filter on device bond6 [ 704.618554][T12947] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 704.619940][T12907] BTRFS info (device loop8): using free space tree [ 704.667507][T12950] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 704.719164][T12907] BTRFS info (device loop8): has skinny extents [ 704.728544][T12950] bond6: (slave vxcan5): Error -22 calling dev_set_mtu [ 704.896125][T12947] EXT4-fs (loop9): 1 truncate cleaned up [ 704.905250][T12947] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,usrjquota=,barrier,,errors=continue. Quota mode: writeback. [ 705.725091][T12907] BTRFS error (device loop8): open_ctree failed: -12 [ 705.760064][T12438] EXT4-fs error (device loop9): ext4_map_blocks:629: inode #2: block 4: comm syz-executor: lblock 0 mapped to illegal pblock 4 (length 1) [ 706.091489][T13008] tmpfs: Unknown parameter '' [ 706.277413][T13010] tmpfs: Unknown parameter '' [ 706.584587][T13012] loop4: detected capacity change from 0 to 8 [ 706.811892][T13012] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 707.551563][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'. [ 708.331191][ T7] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 708.831403][ T7] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.066937][ T7] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 709.097622][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 709.126433][ T7] usb 9-1: Product: syz [ 709.152339][ T7] usb 9-1: Manufacturer: syz [ 709.161137][ T7] usb 9-1: SerialNumber: syz [ 709.279867][T11572] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.392797][T11572] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.488037][ T7] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 709.508469][T13069] tmpfs: Unknown parameter '' [ 710.169781][ T7] usb 9-1: USB disconnect, device number 2 [ 710.371850][ T7] usblp0: removed [ 710.482730][T11572] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.605657][T11572] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.650370][T13088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2228'. [ 711.592882][T13111] tmpfs: Unknown parameter '' [ 711.826320][T13113] wg2 speed is unknown, defaulting to 1000 [ 713.525193][T11572] device hsr_slave_0 left promiscuous mode [ 713.533366][T11572] device hsr_slave_1 left promiscuous mode [ 713.544890][T11572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.554685][T11572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.575407][T11572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.621073][T11572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.657050][T11572] device bridge_slave_1 left promiscuous mode [ 713.703001][T11572] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.760772][T11572] device bridge_slave_0 left promiscuous mode [ 713.779903][T11572] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.801245][ T4242] Bluetooth: hci4: command 0x0409 tx timeout [ 713.832672][T11572] device veth1_macvtap left promiscuous mode [ 713.848374][T11572] device veth0_macvtap left promiscuous mode [ 713.867609][T11572] device veth1_vlan left promiscuous mode [ 713.883118][T11572] device veth0_vlan left promiscuous mode [ 714.265152][T13167] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 714.556604][T11572] team0 (unregistering): Port device team_slave_1 removed [ 714.588862][T11572] team0 (unregistering): Port device team_slave_0 removed [ 714.629632][T11572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.672059][T11572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.967969][T11572] bond0 (unregistering): Released all slaves [ 715.073104][T13143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2241'. [ 715.365938][T13113] chnl_net:caif_netlink_parms(): no params data found [ 715.430363][T13202] tmpfs: Unknown parameter '' [ 715.883615][T13029] Bluetooth: hci4: command 0x041b tx timeout [ 715.928203][T13217] loop4: detected capacity change from 0 to 8 [ 716.054330][T13217] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 716.663261][T13113] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.680276][T13113] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.749204][T13113] device bridge_slave_0 entered promiscuous mode [ 716.758808][T13113] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.768178][T13113] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.778126][T13113] device bridge_slave_1 entered promiscuous mode [ 716.809342][T13113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.833095][T13113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.907885][T13227] fuse: Bad value for 'fd' [ 716.996261][T13232] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 717.032974][T13113] team0: Port device team_slave_0 added [ 717.086659][T13113] team0: Port device team_slave_1 added [ 717.230252][T13113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.333729][T13245] IPv6: addrconf: prefix option has invalid lifetime [ 717.336656][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.470697][T13113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.550173][T13113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.569800][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.665797][T13113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.701087][T13029] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 718.073577][T13113] device hsr_slave_0 entered promiscuous mode [ 718.121298][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 718.137785][T13029] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.162151][T13113] device hsr_slave_1 entered promiscuous mode [ 718.235203][T13113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.251143][T13113] Cannot create hsr debugfs directory [ 718.268981][T13268] loop8: detected capacity change from 0 to 512 [ 718.338257][T13268] EXT4-fs (loop8): Ignoring removed nobh option [ 718.391327][T13029] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 718.411204][T13029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 718.439640][T13268] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.2264: iget: bad i_size value: 38620345925642 [ 718.460759][T13029] usb 5-1: Product: syz [ 718.465719][T13029] usb 5-1: Manufacturer: syz [ 718.470992][T13029] usb 5-1: SerialNumber: syz [ 718.517885][T13268] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2264: couldn't read orphan inode 15 (err -117) [ 718.586299][T13268] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 718.845677][T13029] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 719.241316][ T26] audit: type=1804 audit(2000000597.625:134): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2264" name="/newroot/14/file1/bus" dev="loop8" ino=18 res=1 errno=0 [ 720.428416][T13029] Bluetooth: hci4: command 0x0419 tx timeout [ 720.524737][T11134] usb 5-1: USB disconnect, device number 17 [ 720.543950][T11134] usblp0: removed [ 720.582657][T13296] loop8: detected capacity change from 0 to 8 [ 720.645151][T13296] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 721.179749][T13312] tipc: Enabling of bearer rejected, failed to enable media [ 721.293445][T13113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 721.391236][T13113] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 721.475971][T13113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 721.585231][T13113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 722.182634][T13342] tipc: Enabling of bearer rejected, failed to enable media [ 722.403675][T13113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.555989][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.589233][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.685690][T13113] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.783307][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 722.858756][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.931802][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.940923][T10633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.112956][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 723.190748][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 723.356786][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 723.451502][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.461019][T10633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.587883][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 723.819566][T13113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 723.916304][T13113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.343503][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 724.382478][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 724.498373][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 724.572886][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 724.615992][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 724.617784][T13369] overlayfs: failed to clone upperpath [ 724.767016][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.827587][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.877448][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 724.913167][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.955936][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 725.015419][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 725.331866][T13113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.566682][T13113] device veth0_vlan entered promiscuous mode [ 725.600286][T13371] loop8: detected capacity change from 0 to 131072 [ 725.621350][T13376] tipc: Enabling of bearer rejected, already enabled [ 725.676381][T13371] F2FS-fs (loop8): Test dummy encryption mode enabled [ 725.689733][T13371] F2FS-fs (loop8): invalid crc value [ 725.709904][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 725.731586][T13371] F2FS-fs (loop8): Found nat_bits in checkpoint [ 725.760767][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 725.778721][T13371] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 725.810440][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 725.850068][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 725.852464][T13371] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 725.877401][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 725.972138][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 726.174816][T13113] device veth1_vlan entered promiscuous mode [ 726.186739][T13392] tipc: Enabling of bearer rejected, already enabled [ 726.224574][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 726.271289][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 726.514379][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 726.694221][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 726.833111][T13113] device veth0_macvtap entered promiscuous mode [ 726.889413][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 726.948127][T13417] overlayfs: failed to clone upperpath [ 726.975374][T13113] device veth1_macvtap entered promiscuous mode [ 727.161167][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.225843][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.286090][T13113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.310564][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.341870][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.390062][T13113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.472808][T13435] loop4: detected capacity change from 0 to 8 [ 727.486700][T13113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.521650][T13435] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 727.570973][T13113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.606100][T13113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.627707][T13113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.670174][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 727.742020][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 727.779980][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 727.809819][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 727.860088][T13434] tipc: Enabling of bearer rejected, failed to enable media [ 728.115302][T11572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.146013][T11572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.213224][ T4785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.220993][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 728.257413][ T4785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.338303][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 728.645120][T13451] loop0: detected capacity change from 0 to 2048 [ 728.844869][T13451] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 729.195906][T13451] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.2231: Invalid inode table block 4 in block_group 0 [ 729.279919][T13451] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.2231: Invalid inode table block 4 in block_group 0 [ 729.349206][T13451] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 729.389945][T13451] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #12: comm syz.0.2231: mark_inode_dirty error [ 729.500734][ T4694] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm kworker/u4:7: Invalid inode table block 4 in block_group 0 [ 729.794023][T13480] input: syz1 as /devices/virtual/input/input10 [ 729.922287][T13365] udevd[13365]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 730.028529][T13485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2308'. [ 730.270655][T13496] tipc: Enabling of bearer rejected, failed to enable media [ 730.384131][T13503] loop4: detected capacity change from 0 to 64 [ 730.493118][T13507] loop0: detected capacity change from 0 to 128 [ 730.698534][T13511] attempt to access beyond end of device [ 730.698534][T13511] loop4: rw=0, want=164, limit=64 [ 730.735889][T13511] buffer_io_error: 10 callbacks suppressed [ 730.735909][T13511] Buffer I/O error on dev loop4, logical block 163, async page read [ 730.754338][T13517] tmpfs: Unknown parameter '' [ 730.783336][T13511] attempt to access beyond end of device [ 730.783336][T13511] loop4: rw=0, want=168, limit=64 [ 730.821718][T13511] Buffer I/O error on dev loop4, logical block 167, async page read [ 730.852146][T13511] attempt to access beyond end of device [ 730.852146][T13511] loop4: rw=0, want=170, limit=64 [ 730.868253][T13511] Buffer I/O error on dev loop4, logical block 169, async page read [ 731.156209][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 731.302497][T13541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2323'. [ 731.529799][T13549] loop0: detected capacity change from 0 to 2048 [ 731.539163][T13551] tipc: Started in network mode [ 731.556222][T13551] tipc: Node identity da824470710a, cluster identity 4711 [ 731.567076][T13551] tipc: Enabled bearer , priority 0 [ 731.567188][T13553] tmpfs: Unknown parameter '' [ 731.632080][T13554] device syzkaller0 entered promiscuous mode [ 731.652792][T13549] loop0: p1 p2 < > p3 < p5 > p4 [ 731.668326][T13551] tipc: Resetting bearer [ 731.680919][T13549] loop0: partition table partially beyond EOD, truncated [ 731.700135][T13549] loop0: p1 size 917504 extends beyond EOD, truncated [ 731.713505][T13545] tipc: Resetting bearer [ 731.746658][T13545] tipc: Disabling bearer [ 731.760023][T13549] loop0: p2 start 4278190080 is beyond EOD, truncated [ 731.796905][T13549] loop0: p4 start 150994949 is beyond EOD, truncated [ 731.870871][T13549] loop0: p5 size 917504 extends beyond EOD, truncated [ 732.420631][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2338'. [ 732.426974][T13577] overlayfs: statfs failed on './file0' [ 732.579098][T13411] udevd[13411]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 732.581256][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2340'. [ 732.596250][T13404] udevd[13404]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 732.620148][T13365] udevd[13365]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 732.734146][T13411] udevd[13411]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 732.736704][T13404] udevd[13404]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 732.783303][T13365] udevd[13365]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 732.813835][T13595] tipc: Enabling of bearer rejected, already enabled [ 732.849996][T13598] loop0: detected capacity change from 0 to 256 [ 732.926828][ T26] audit: type=1800 audit(2000000611.605:135): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2342" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1048668 res=0 errno=0 [ 733.015972][T13603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2344'. [ 733.146797][T13612] tipc: Enabling of bearer rejected, failed to enable media [ 733.348724][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 733.636173][T13630] tipc: Enabling of bearer rejected, failed to enable media [ 733.884516][T13641] loop0: detected capacity change from 0 to 128 [ 734.005681][T13641] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 734.027750][T13641] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 734.107220][T13650] tipc: Enabling of bearer rejected, already enabled [ 734.401720][T13641] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 735.017993][ T4785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.061625][T13689] tipc: Enabling of bearer rejected, failed to enable media [ 735.098174][ T4785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.198392][ T4785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.350548][ T4785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.429869][T13705] tipc: Enabling of bearer rejected, already enabled [ 735.812116][ T4785] tipc: Disabling bearer [ 735.822302][ T4785] tipc: Left network mode [ 735.925401][T13713] wg2 speed is unknown, defaulting to 1000 [ 736.041899][ T4785] bond2: (slave ip6gretap1): Releasing active interface [ 736.603504][ T4785] bond1: (slave gretap1): Releasing active interface [ 736.684403][T13713] chnl_net:caif_netlink_parms(): no params data found [ 736.928554][T13713] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.958851][T13713] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.990367][T13713] device bridge_slave_0 entered promiscuous mode [ 737.053341][T13713] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.068336][T13713] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.079695][T13713] device bridge_slave_1 entered promiscuous mode [ 737.117688][T13747] tipc: Enabling of bearer rejected, already enabled [ 737.238931][T13713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.315887][T13713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.367098][T13754] tipc: Enabling of bearer rejected, already enabled [ 737.450781][T13756] tmpfs: Unknown parameter '' [ 737.458806][T13713] team0: Port device team_slave_0 added [ 737.510467][T13713] team0: Port device team_slave_1 added [ 737.617315][T13713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.650069][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.771462][T13713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.811429][T11065] Bluetooth: hci0: command 0x0409 tx timeout [ 737.851491][T13713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.903815][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.022497][T13713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.099524][ T4785] device veth11 left promiscuous mode [ 738.114080][ T4785] bridge3: port 1(veth11) entered disabled state [ 738.137115][ T4785] device veth9 left promiscuous mode [ 738.153738][ T4785] bridge2: port 1(veth9) entered disabled state [ 738.198931][ T4785] device veth5 left promiscuous mode [ 738.234947][ T4785] bridge0: port 1(veth5) entered disabled state [ 738.318258][ T4785] device hsr_slave_0 left promiscuous mode [ 738.336535][ T4785] device hsr_slave_1 left promiscuous mode [ 738.350706][ T4785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.371714][ T4785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.397200][T13778] loop2: detected capacity change from 0 to 7 [ 738.421814][T13365] loop2: [ 738.425535][T13365] loop2: partition table partially beyond EOD, truncated [ 738.456054][T13778] loop2: [ 738.460210][T13778] loop2: partition table partially beyond EOD, truncated [ 738.475757][ T4785] bond6 (unregistering): Released all slaves [ 738.699470][ T4785] bond5 (unregistering): Released all slaves [ 738.767856][ T4785] bond4 (unregistering): Released all slaves [ 739.156578][ T4785] bond3 (unregistering): Released all slaves [ 739.183965][ T4785] bond2 (unregistering): (slave veth3): Releasing active interface [ 739.230641][ T4785] bond2 (unregistering): Released all slaves [ 739.247531][ T4785] bond1 (unregistering): Released all slaves [ 739.435820][ T4785] team0 (unregistering): Port device team_slave_1 removed [ 739.459773][ T4785] team0 (unregistering): Port device team_slave_0 removed [ 739.475816][ T4785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.488059][ T4785] device bond_slave_1 left promiscuous mode [ 739.505411][ T4785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.516862][ T4785] device bond_slave_0 left promiscuous mode [ 739.613774][ T4785] bond0 (unregistering): Released all slaves [ 739.638969][T13777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2391'. [ 739.660321][T13784] tipc: Started in network mode [ 739.699780][T13784] tipc: Node identity f662cc7ae617, cluster identity 4711 [ 739.715770][T13784] tipc: Enabled bearer , priority 0 [ 739.725348][T13786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2393'. [ 739.761513][T13787] device syzkaller0 entered promiscuous mode [ 739.779108][T13793] tipc: Resetting bearer [ 739.818213][T13782] tipc: Resetting bearer [ 739.838559][T13782] tipc: Disabling bearer [ 739.881135][T11063] Bluetooth: hci0: command 0x041b tx timeout [ 739.962068][T13812] unsupported nlmsg_type 40 [ 739.983869][T13713] device hsr_slave_0 entered promiscuous mode [ 740.014775][T13713] device hsr_slave_1 entered promiscuous mode [ 740.220006][T13820] wg2 speed is unknown, defaulting to 1000 [ 740.566376][T13826] netlink: 'syz.1.2403': attribute type 29 has an invalid length. [ 740.649308][T13826] netlink: 'syz.1.2403': attribute type 29 has an invalid length. [ 741.921672][T13836] tipc: Enabling of bearer rejected, failed to enable media [ 741.946034][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2406'. [ 741.971018][T11063] Bluetooth: hci0: command 0x040f tx timeout [ 742.336625][T13857] tipc: Enabling of bearer rejected, already enabled [ 742.735797][T13874] tipc: Enabling of bearer rejected, failed to enable media [ 742.912621][T13713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 742.963440][T13713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 742.999080][T13713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 743.052282][T13713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 743.167660][T13899] tipc: Enabling of bearer rejected, already enabled [ 743.263720][T13904] loop0: detected capacity change from 0 to 1024 [ 743.402864][T13904] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 743.541744][T13713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.628989][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 743.655156][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 743.684536][T13713] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.757414][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 743.788683][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 743.806706][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.815541][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.838530][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 743.868863][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 743.886802][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 743.932308][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.942369][ T4786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.006178][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 744.032190][T10633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 744.055593][T11061] Bluetooth: hci0: command 0x0419 tx timeout [ 744.063466][T13920] tipc: Enabling of bearer rejected, failed to enable media [ 744.109747][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 744.191360][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 744.235279][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 744.252579][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 744.268737][T13934] loop0: detected capacity change from 0 to 1024 [ 744.279334][T13930] tipc: Enabling of bearer rejected, already enabled [ 744.334724][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 744.354374][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 744.392889][T13934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 744.399382][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 744.447923][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 744.457591][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 744.474823][T13713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 745.008820][T13950] netlink: 'syz.2.2442': attribute type 29 has an invalid length. [ 745.047731][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 745.074193][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 745.100072][T13713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.125621][T13950] netlink: 'syz.2.2442': attribute type 29 has an invalid length. [ 745.227753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 745.269135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 745.462419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 745.476987][ T26] audit: type=1326 audit(2000000624.155:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.0.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085e464eb9 code=0x7ffc0000 [ 745.501792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 745.554977][ T26] audit: type=1326 audit(2000000624.155:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.0.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f085e464eb9 code=0x7ffc0000 [ 745.573355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 745.599036][ T26] audit: type=1326 audit(2000000624.155:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.0.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085e464eb9 code=0x7ffc0000 [ 745.641629][ T26] audit: type=1326 audit(2000000624.155:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.0.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085e464eb9 code=0x7ffc0000 [ 745.704259][T13973] tmpfs: Unknown parameter '' [ 745.735797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 745.781353][T13713] device veth0_vlan entered promiscuous mode [ 745.817561][T13968] tipc: Enabling of bearer rejected, already enabled [ 745.840695][ T26] audit: type=1326 audit(2000000624.225:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.0.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f085e42578e code=0x7ffc0000 [ 745.904252][T13713] device veth1_vlan entered promiscuous mode [ 746.009286][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 746.025946][ T26] audit: type=1326 audit(2000000624.275:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.0.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f085e42578e code=0x7ffc0000 [ 746.075223][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 746.131958][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 746.146882][ T26] audit: type=1326 audit(2000000624.275:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.0.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085e464eb9 code=0x7ffc0000 [ 746.194514][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 746.248706][T13713] device veth0_macvtap entered promiscuous mode [ 746.270593][ T26] audit: type=1326 audit(2000000624.275:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.0.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085e464eb9 code=0x7ffc0000 [ 746.329062][T13713] device veth1_macvtap entered promiscuous mode [ 746.352566][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 746.417118][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 746.490017][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.557541][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.607365][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.652958][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.692429][T13713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.734622][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 746.801751][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 746.838756][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.898602][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.941002][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.974254][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.011473][T13713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.040383][T13997] tipc: Enabling of bearer rejected, already enabled [ 747.061558][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 747.088758][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 747.151167][T13713] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.158401][T13976] loop0: detected capacity change from 0 to 40427 [ 747.179119][T13713] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.217275][T13713] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.277197][T13713] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.325210][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.332407][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.371047][T13976] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 747.400749][T14003] overlayfs: failed to clone upperpath [ 747.403870][T13976] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 747.613050][T13976] F2FS-fs (loop0): Found nat_bits in checkpoint [ 747.675419][ T4786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.741728][ T4786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.909984][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 748.043506][ T4998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.189782][ T4998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.665880][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 748.710119][T13976] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 748.790254][T13976] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 749.011421][T14028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2370'. [ 749.159613][T14028] device gretap1 entered promiscuous mode [ 749.177206][T14036] overlayfs: failed to clone upperpath [ 749.279967][T14038] tipc: Enabling of bearer rejected, failed to enable media [ 749.718243][ T26] audit: type=1326 audit(2000000628.395:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14060 comm="syz.2.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0ebc5eb9 code=0x7ffc0000 [ 749.868477][ T26] audit: type=1326 audit(2000000628.395:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14060 comm="syz.2.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0ebc5eb9 code=0x7ffc0000 [ 750.029559][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2478'. [ 750.049957][T14084] tmpfs: Unknown parameter '' [ 750.407239][T14098] tipc: Enabling of bearer rejected, failed to enable media [ 750.471033][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 750.586130][T14102] kvm: pic: non byte write [ 750.720957][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 750.851212][ T1107] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 750.860529][ T1107] usb 4-1: config 0 has no interface number 0 [ 750.918557][ T1107] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 751.197439][ T1107] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 751.251478][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.260192][ T1107] usb 4-1: Product: syz [ 751.265448][ T1107] usb 4-1: Manufacturer: syz [ 751.271109][ T1107] usb 4-1: SerialNumber: syz [ 751.285413][ T1107] usb 4-1: config 0 descriptor?? [ 751.311417][T14092] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 751.535256][T14092] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 751.637575][T14133] overlayfs: failed to clone upperpath [ 751.805961][T14140] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2492'. [ 751.942372][T14146] tipc: Enabling of bearer rejected, failed to enable media [ 753.101522][ T1107] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 753.160768][ T1107] asix: probe of 4-1:0.188 failed with error -71 [ 753.260941][ T1107] usb 4-1: USB disconnect, device number 5 [ 754.168312][T14198] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2505'. [ 754.431058][T14203] tipc: Started in network mode [ 754.460343][T14203] tipc: Node identity 6aa1e6c5c22a, cluster identity 4711 [ 754.511186][T14203] tipc: Enabled bearer , priority 0 [ 754.552163][T14205] device syzkaller0 entered promiscuous mode [ 754.602547][T14203] tipc: Resetting bearer [ 754.673479][T14202] tipc: Resetting bearer [ 754.774704][T14202] tipc: Disabling bearer [ 755.151980][T14228] tmpfs: Unknown parameter '' [ 755.209789][T14232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'. [ 756.248526][T14260] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 756.508726][T14269] tipc: Enabling of bearer rejected, failed to enable media [ 757.855835][T14292] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 758.268939][T14300] loop0: detected capacity change from 0 to 512 [ 758.599201][T14304] tmpfs: Unknown parameter '' [ 758.692454][T14300] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 759.871277][T14338] tmpfs: Unknown parameter '' [ 761.080593][T14354] loop0: detected capacity change from 0 to 32768 [ 761.136227][T14354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2543 (14354) [ 761.202788][T14354] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 761.216422][T14354] BTRFS info (device loop0): force clearing of disk cache [ 761.226247][T14354] BTRFS info (device loop0): enabling auto defrag [ 761.234173][T14354] BTRFS info (device loop0): enabling ssd optimizations [ 761.242878][T14354] BTRFS info (device loop0): setting nodatacow, compression disabled [ 761.252344][T14354] BTRFS info (device loop0): enabling disk space caching [ 761.261148][T14354] BTRFS info (device loop0): disk space caching is enabled [ 761.269986][T14354] BTRFS info (device loop0): has skinny extents [ 761.356767][T14354] BTRFS info (device loop0): clearing free space tree [ 761.364994][T14354] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 761.373478][T14380] tmpfs: Unknown parameter '' [ 761.376692][T14354] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 761.483490][T14354] BTRFS info (device loop0): checking UUID tree [ 762.043871][ T4785] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 762.132293][T14404] overlayfs: failed to clone upperpath [ 762.158294][T14404] overlayfs: failed to clone upperpath [ 764.071568][T14444] overlayfs: failed to clone upperpath [ 764.562698][T14455] loop0: detected capacity change from 0 to 8 [ 764.723470][T14455] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 765.294997][T14442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.534100][T14464] loop0: detected capacity change from 0 to 256 [ 765.564080][T14442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.655941][T14464] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 765.779594][T14442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.987223][T14479] futex_wake_op: syz.1.2566 tries to shift op by -1; fix this program [ 766.075973][T14442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.398688][T14442] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.479225][T14442] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.517626][T14442] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.560208][T14442] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.050657][T14529] tipc: Enabling of bearer rejected, failed to enable media [ 767.174891][T14531] wg2 speed is unknown, defaulting to 1000 [ 767.696066][T14531] chnl_net:caif_netlink_parms(): no params data found [ 767.881993][T14531] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.895826][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.906919][T14531] device bridge_slave_0 entered promiscuous mode [ 767.951195][T14531] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.998503][T14531] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.039148][T14531] device bridge_slave_1 entered promiscuous mode [ 768.137798][T14531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.203014][T14531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.363791][T14531] team0: Port device team_slave_0 added [ 768.387890][T14531] team0: Port device team_slave_1 added [ 768.459809][T14531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.499998][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.556200][T14531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.576256][T14593] tipc: Enabling of bearer rejected, already enabled [ 768.596192][T14531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.620410][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.657501][T14531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.757005][T14531] device hsr_slave_0 entered promiscuous mode [ 768.799692][T14531] device hsr_slave_1 entered promiscuous mode [ 768.816374][T14531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.841560][T14531] Cannot create hsr debugfs directory [ 769.161872][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 769.457768][T14633] tipc: Enabling of bearer rejected, failed to enable media [ 770.003448][T14531] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 770.050059][T14531] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 770.089699][T14531] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 770.137577][T14531] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 771.320110][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 771.401808][T14698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2617'. [ 771.428214][T14694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2616'. [ 771.493406][T14531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.518326][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 771.536616][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 771.555815][T14531] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.574936][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 771.652700][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 771.696398][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.705748][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.750518][T14714] tmpfs: Unknown parameter '' [ 771.775781][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'. [ 771.863793][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 771.889578][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 771.936790][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 771.974480][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.983312][ T4785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.054915][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 772.073886][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 772.106884][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 772.146113][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 772.209776][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 772.246881][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 772.298725][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2629'. [ 772.397753][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 772.414011][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 772.472280][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 772.502086][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 772.528478][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 772.551215][T14531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 772.910447][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 772.930720][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 772.993668][T14531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.357381][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2639'. [ 773.401207][T11678] Bluetooth: hci4: command 0x040f tx timeout [ 773.441326][T14781] bridge1: port 1(vlan2) entered blocking state [ 773.475727][T14781] bridge1: port 1(vlan2) entered disabled state [ 773.510481][T14781] device vlan2 entered promiscuous mode [ 773.535744][T14781] device veth1 entered promiscuous mode [ 773.614039][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 773.678243][T11006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 773.814061][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 773.872790][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 773.943966][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 774.021373][T14806] loop3: detected capacity change from 0 to 1024 [ 774.036584][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 774.114849][T14531] device veth0_vlan entered promiscuous mode [ 774.147950][T14806] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 774.234641][T14531] device veth1_vlan entered promiscuous mode [ 774.300904][T14806] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,discard,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nolazytime,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 774.376249][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 774.427152][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 774.451628][T14806] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3887: comm syz.3.2646: Allocating blocks 497-513 which overlap fs metadata [ 774.466981][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 774.535813][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 774.570767][T14806] EXT4-fs (loop3): pa ffff8880605ecc40: logic 128, phys. 385, len 8 [ 774.582009][T14806] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 774.607342][T14531] device veth0_macvtap entered promiscuous mode [ 774.651574][T14812] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2647'. [ 774.668621][T14531] device veth1_macvtap entered promiscuous mode [ 774.831247][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.876414][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.918345][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.936770][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.952820][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.972505][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.122755][T14531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.384903][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.893581][T11677] Bluetooth: hci4: command 0x0419 tx timeout [ 775.940995][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.976864][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.007055][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.045498][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.063063][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.081869][T14531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.099868][T14833] tipc: Enabling of bearer rejected, already enabled [ 776.186033][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 776.212364][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 776.234828][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 776.249166][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 776.621743][T14531] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.788793][T14531] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.909896][T14531] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.137104][T14531] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.162225][T14853] netlink: 'syz.2.2655': attribute type 2 has an invalid length. [ 777.206158][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2656'. [ 777.573936][ T4786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.604401][ T4786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.629946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 778.397468][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.460661][T14889] device syzkaller0 entered promiscuous mode [ 778.493735][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.574913][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 779.586712][T14908] Invalid argument reading file caps for ./file0 [ 780.002823][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2669'. [ 781.554417][T14965] loop6: detected capacity change from 0 to 128 [ 781.780683][T14965] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 783.451398][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2684'. [ 784.728644][T15003] tipc: Enabling of bearer rejected, failed to enable media [ 785.029507][T15014] netlink: 'syz.3.2692': attribute type 10 has an invalid length. [ 785.214502][T15014] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 785.255576][T15022] overlayfs: failed to clone upperpath [ 786.799935][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2700'. [ 788.257486][T15056] overlayfs: failed to clone upperpath [ 789.869387][T15085] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 789.906070][T15085] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 791.395649][T15104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2715'. [ 791.712806][T15114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2718'. [ 791.737094][T15114] device sit1 entered promiscuous mode [ 792.650333][ T9] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.570392][ T9] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.788575][ T9] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.860158][T15146] bridge0: port 5(vlan3) entered blocking state [ 793.877818][T15146] bridge0: port 5(vlan3) entered disabled state [ 793.913122][T15146] device vlan3 entered promiscuous mode [ 793.929804][T15146] device vlan1 entered promiscuous mode [ 793.949511][T15146] bridge0: port 5(vlan3) entered blocking state [ 793.957613][T15146] bridge0: port 5(vlan3) entered forwarding state [ 794.033390][ T9] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.076904][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2729'. [ 794.111286][T15152] netlink: 'syz.8.2728': attribute type 10 has an invalid length. [ 794.146314][T15152] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2728'. [ 794.191880][T15152] batman_adv: batadv0: Adding interface: wlan0 [ 794.210956][T15152] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.240798][T15152] batman_adv: batadv0: Interface activated: wlan0 [ 794.250166][T15146] netlink: 'syz.8.2728': attribute type 10 has an invalid length. [ 794.289887][T15146] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 794.364250][T15157] wg2 speed is unknown, defaulting to 1000 [ 794.650429][ T9] tipc: Left network mode [ 796.332166][T11678] Bluetooth: hci0: command 0x0409 tx timeout [ 796.386846][T15157] chnl_net:caif_netlink_parms(): no params data found [ 796.457783][T15194] overlayfs: failed to resolve './file1': -2 [ 796.469136][T15195] tmpfs: Unknown parameter '' [ 797.019601][T15157] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.028999][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.040668][T15157] device bridge_slave_0 entered promiscuous mode [ 797.074949][ T9] bond0: (slave wlan1): Releasing backup interface [ 797.122249][T15157] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.142865][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.184129][T15157] device bridge_slave_1 entered promiscuous mode [ 797.309774][T15157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.335086][T15216] overlayfs: failed to clone upperpath [ 797.357485][T15157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.493279][T15157] team0: Port device team_slave_0 added [ 797.525867][T15224] netlink: 'syz.1.2744': attribute type 1 has an invalid length. [ 797.631103][T15224] 8021q: adding VLAN 0 to HW filter on device bond8 [ 797.684303][T15157] team0: Port device team_slave_1 added [ 797.782982][T15157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.809371][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.921582][T15157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.006048][T15157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.031148][T15243] loop6: detected capacity change from 0 to 8192 [ 798.041021][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.076754][T15243] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 798.097929][T15243] REISERFS (device loop6): using ordered data mode [ 798.108018][T15243] reiserfs: using flush barriers [ 798.127715][T15243] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 798.166630][T15157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.195613][T15243] REISERFS (device loop6): checking transaction log (loop6) [ 798.197456][ T9] device vlan2 left promiscuous mode [ 798.215666][T15243] REISERFS (device loop6): Using r5 hash to sort names [ 798.263278][ T9] device veth1 left promiscuous mode [ 798.275905][T15259] tmpfs: Unknown parameter '' [ 798.300276][ T9] bridge1: port 1(vlan2) entered disabled state [ 798.361122][ T4175] Bluetooth: hci0: command 0x041b tx timeout [ 798.389687][T15243] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 798.408589][ T9] device hsr_slave_0 left promiscuous mode [ 798.482218][ T9] device hsr_slave_1 left promiscuous mode [ 798.516211][T15243] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 798.548153][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.607075][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.672559][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.681738][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.696925][ T9] device bridge_slave_1 left promiscuous mode [ 798.711049][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.751523][ T9] device bridge_slave_0 left promiscuous mode [ 798.763614][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.796318][T14531] ================================================================== [ 798.806586][T14531] BUG: KASAN: use-after-free in strlen+0x53/0x60 [ 798.815072][T14531] Read of size 1 at addr ffff888047b70008 by task syz-executor/14531 [ 798.824670][T14531] [ 798.827415][T14531] CPU: 1 PID: 14531 Comm: syz-executor Not tainted syzkaller #0 [ 798.837627][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.850183][T14531] Call Trace: [ 798.854224][T14531] [ 798.857562][T14531] dump_stack_lvl+0x188/0x250 [ 798.862916][T14531] ? show_regs_print_info+0x20/0x20 [ 798.868882][T14531] ? _printk+0xda/0x130 [ 798.874295][T14531] ? strlen+0x53/0x60 [ 798.879110][T14531] ? load_image+0x400/0x400 [ 798.884687][T14531] print_address_description+0x60/0x2d0 [ 798.891845][T14531] ? strlen+0x53/0x60 [ 798.896505][T14531] kasan_report+0xdf/0x130 [ 798.902264][T14531] ? strlen+0x53/0x60 [ 798.907094][T14531] strlen+0x53/0x60 [ 798.912255][T14531] search_by_entry_key+0xa84/0x1370 [ 798.918936][T14531] reiserfs_readdir_inode+0x27f/0x1300 [ 798.926379][T14531] ? verify_lock_unused+0x140/0x140 [ 798.931818][T14531] ? reiserfs_dir_fsync+0x100/0x100 [ 798.937279][T14531] ? read_lock_is_recursive+0x10/0x10 [ 798.942968][T14531] ? handle_mm_fault+0x2be9/0x4410 [ 798.948762][T14531] ? iterate_dir+0x10d/0x560 [ 798.953661][T14531] ? down_read_killable+0x1ce/0x340 [ 798.960139][T14531] ? fsnotify_perm+0x254/0x560 [ 798.965207][T14531] iterate_dir+0x218/0x560 [ 798.970281][T14531] ? reiserfs_sync_file+0x270/0x270 [ 798.976267][T14531] __se_sys_getdents64+0xf2/0x270 [ 798.982414][T14531] ? __x64_sys_getdents64+0x80/0x80 [ 798.988195][T14531] ? filldir+0x720/0x720 [ 798.994353][T14531] ? vtime_user_exit+0x2c8/0x3e0 [ 799.000107][T14531] ? lockdep_hardirqs_on+0x94/0x140 [ 799.008060][T14531] do_syscall_64+0x4c/0xa0 [ 799.016659][T14531] ? clear_bhb_loop+0x30/0x80 [ 799.022365][T14531] ? clear_bhb_loop+0x30/0x80 [ 799.027259][T14531] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 799.034502][T14531] RIP: 0033:0x7f355c736873 [ 799.039449][T14531] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 799.061570][T14531] RSP: 002b:00007fff6094c1f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 799.071030][T14531] RAX: ffffffffffffffda RBX: 00005555590d4a30 RCX: 00007f355c736873 [ 799.079404][T14531] RDX: 0000000000008000 RSI: 00005555590d4a60 RDI: 0000000000000005 [ 799.087785][T14531] RBP: 00005555590d4a60 R08: 00007f355c957cc0 R09: 0000000000000001 [ 799.096331][T14531] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555590d4a34 [ 799.105400][T14531] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff6094e4a0 [ 799.114671][T14531] [ 799.117999][T14531] [ 799.120665][T14531] The buggy address belongs to the page: [ 799.127034][T14531] page:ffffea00011edc00 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x100 pfn:0x47b70 [ 799.139585][T14531] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 799.147789][T14531] raw: 00fff00000000000 ffffea000138d708 ffffea0001223d08 0000000000000000 [ 799.158429][T14531] raw: 0000000000000100 0000000000000002 00000000ffffff7f 0000000000000000 [ 799.167945][T14531] page dumped because: kasan: bad access detected [ 799.174857][T14531] page_owner tracks the page as freed [ 799.181025][T14531] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 15071, ts 788643625551, free_ts 789501739280 [ 799.200026][T14531] get_page_from_freelist+0x1bbd/0x1ca0 [ 799.206794][T14531] __alloc_pages+0x1ee/0x480 [ 799.212585][T14531] alloc_pages_vma+0x393/0x7c0 [ 799.218547][T14531] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 799.225163][T14531] shmem_getpage_gfp+0x14f4/0x2d40 [ 799.231095][T14531] shmem_fault+0x1ac/0x540 [ 799.237437][T14531] __do_fault+0x141/0x330 [ 799.242560][T14531] handle_mm_fault+0x2985/0x4410 [ 799.248708][T14531] __get_user_pages+0x94b/0x11e0 [ 799.254343][T14531] populate_vma_page_range+0x213/0x290 [ 799.261944][T14531] __mm_populate+0x275/0x3b0 [ 799.266873][T14531] vm_mmap_pgoff+0x212/0x2d0 [ 799.273243][T14531] ksys_mmap_pgoff+0x140/0x790 [ 799.280106][T14531] do_syscall_64+0x4c/0xa0 [ 799.285502][T14531] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 799.293131][T14531] page last free stack trace: [ 799.299027][T14531] free_unref_page_prepare+0x637/0x6c0 [ 799.304802][T14531] free_unref_page_list+0x119/0x820 [ 799.310585][T14531] release_pages+0x186c/0x1be0 [ 799.315655][T14531] __pagevec_release+0x6d/0xe0 [ 799.321200][T14531] shmem_undo_range+0x62b/0x1930 [ 799.327014][T14531] shmem_evict_inode+0x220/0xa40 [ 799.332768][T14531] evict+0x4c9/0x8d0 [ 799.338550][T14531] __dentry_kill+0x431/0x650 [ 799.346167][T14531] dentry_kill+0xb8/0x290 [ 799.352213][T14531] dput+0xd8/0x1a0 [ 799.360220][T14531] __fput+0x5ee/0x930 [ 799.365899][T14531] task_work_run+0x125/0x1a0 [ 799.372980][T14531] do_exit+0x626/0x20c0 [ 799.377976][T14531] do_group_exit+0x12e/0x300 [ 799.383612][T14531] get_signal+0x6ca/0x12c0 [ 799.389416][T14531] arch_do_signal_or_restart+0xe7/0x12c0 [ 799.395753][T14531] [ 799.398541][T14531] Memory state around the buggy address: [ 799.405351][T14531] ffff888047b6ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.416418][T14531] ffff888047b6ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 799.426968][T14531] >ffff888047b70000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 799.436364][T14531] ^ [ 799.441493][T14531] ffff888047b70080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 799.450361][T14531] ffff888047b70100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 799.459754][T14531] ================================================================== [ 799.469309][T14531] Disabling lock debugging due to kernel taint [ 799.485463][T14531] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 799.494093][T14531] CPU: 1 PID: 14531 Comm: syz-executor Tainted: G B syzkaller #0 [ 799.505168][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 799.516616][T14531] Call Trace: [ 799.520363][T14531] [ 799.523411][T14531] dump_stack_lvl+0x188/0x250 [ 799.528294][T14531] ? show_regs_print_info+0x20/0x20 [ 799.534070][T14531] ? load_image+0x400/0x400 [ 799.539439][T14531] panic+0x2e5/0x810 [ 799.544408][T14531] ? bpf_jit_dump+0xd0/0xd0 [ 799.549052][T14531] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 799.556458][T14531] ? _raw_spin_unlock+0x40/0x40 [ 799.562141][T14531] ? print_memory_metadata+0x314/0x400 [ 799.568534][T14531] ? strlen+0x53/0x60 [ 799.572937][T14531] check_panic_on_warn+0x80/0xa0 [ 799.578775][T14531] ? strlen+0x53/0x60 [ 799.586448][T14531] end_report+0x6d/0xf0 [ 799.591236][T14531] kasan_report+0x102/0x130 [ 799.596836][T14531] ? strlen+0x53/0x60 [ 799.603607][T14531] strlen+0x53/0x60 [ 799.609050][T14531] search_by_entry_key+0xa84/0x1370 [ 799.616285][T14531] reiserfs_readdir_inode+0x27f/0x1300 [ 799.623886][T14531] ? verify_lock_unused+0x140/0x140 [ 799.630254][T14531] ? reiserfs_dir_fsync+0x100/0x100 [ 799.636621][T14531] ? read_lock_is_recursive+0x10/0x10 [ 799.642986][T14531] ? handle_mm_fault+0x2be9/0x4410 [ 799.649518][T14531] ? iterate_dir+0x10d/0x560 [ 799.656601][T14531] ? down_read_killable+0x1ce/0x340 [ 799.664589][T14531] ? fsnotify_perm+0x254/0x560 [ 799.672853][T14531] iterate_dir+0x218/0x560 [ 799.678946][T14531] ? reiserfs_sync_file+0x270/0x270 [ 799.685345][T14531] __se_sys_getdents64+0xf2/0x270 [ 799.693142][T14531] ? __x64_sys_getdents64+0x80/0x80 [ 799.700413][T14531] ? filldir+0x720/0x720 [ 799.706051][T14531] ? vtime_user_exit+0x2c8/0x3e0 [ 799.711740][T14531] ? lockdep_hardirqs_on+0x94/0x140 [ 799.718952][T14531] do_syscall_64+0x4c/0xa0 [ 799.723947][T14531] ? clear_bhb_loop+0x30/0x80 [ 799.729934][T14531] ? clear_bhb_loop+0x30/0x80 [ 799.736872][T14531] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 799.746787][T14531] RIP: 0033:0x7f355c736873 [ 799.752397][T14531] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 799.776271][T14531] RSP: 002b:00007fff6094c1f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 799.787411][T14531] RAX: ffffffffffffffda RBX: 00005555590d4a30 RCX: 00007f355c736873 [ 799.797168][T14531] RDX: 0000000000008000 RSI: 00005555590d4a60 RDI: 0000000000000005 [ 799.807220][T14531] RBP: 00005555590d4a60 R08: 00007f355c957cc0 R09: 0000000000000001 [ 799.816993][T14531] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555590d4a34 [ 799.828167][T14531] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff6094e4a0 [ 799.838654][T14531] [ 799.841840][T14531] Kernel Offset: disabled [ 799.847054][T14531] Rebooting in 86400 seconds..