last executing test programs: 21m59.4725283s ago: executing program 32 (id=1654): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6bdc21111fadaa2a1153"]) syz_open_dev$dmmidi(0x0, 0x2, 0x181083) syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32], 0x1, 0x443a, &(0x7f00000088c0)="$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") r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0x6, 0x7ff, 0x1, 0x0, 0x0, 0xccc, 0x8, 0xb, 0xa, 0xfc, 0x2, 0x1, 0xa, 0x4, 0x6, 0x80, 0x1, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0xb, 0x4, 0x5, 0x7, 0x4, 0x10000, 0x8]}) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000000240)="75f49a8a209d305b3e86804ac16814b579dfeb6c9007ba1893ef70a3e75cdc2925ff65aedf78582dbe75af028505d1289985482ac39fe65aa13718d89453ae31bffe18ce1e41336894", 0x49}, {&(0x7f00000005c0)="6cf2d27af85697a7f5335607be4c9ee9d846eb6f274e8dada6c172b4517ca6623dca670311bd2efb52e1a4db4d2985db85d78365c6b1edd497bef6223b5bcd89d06a637869b370fed1ed9143516191993698a3f253061dc278c3abc3854b1e4834f168fa5cf95547701e2bb062c4fb25f93e91fc0ce941ec423d14abc069f99788ff62a61358ffe2588cd1d3e0ebd45653706f27d7d5d7b125a375b9c704b2fe72aa06872c67de4ced89cde429b4861b6a687dbe60afc714cfd07335e8d9abe12ab2e83e49af0b09577c", 0xca}, {&(0x7f0000000100)="a201403607", 0x5}, {&(0x7f00000002c0)="03b639f5bcf0ffcf4af378f7a1082a404139b28caac3e26d60f96b62101c6daecd09453b92481c8ae81596f6789aebd8cba53e6b54e8a030b7c10acfeaeaae231eaabafb16759b5c8aa09b3d10569d7a41ac39fa3880f4e93c158a74eb7fc0b19a8f6d3f55fb8bd124ce1348d25328b768807266ee2977f30ba8ef37c28aad11a1042102f74c0f189b2cbce14b760c4d3c15747993aa7ea8db1b7c1f356de05604282a71e624bbf70d6a7cc0bb3f090e396703bc19951d555f", 0xb9}, {&(0x7f0000000400)="8748e80f953a0c243fe22ee60cf88f81836a180a2a6b63ce2a", 0x19}, {&(0x7f00000006c0)="822cc04e38de6b91b38f79d3565da4243c4fbb397ad0b11334a5f486effb383b2d6ea39358398b4b5b950bfc5c23328cf2e249c73e095486e74eb9210b40583fd836c27c711c5a28dccc64a77a53a031b6c931d85f4c16f4cbdd8625b171e0f6f0a7f3f1adc210df7256c5db9b", 0x6d}, {&(0x7f0000000440)="b0028373e49f638d0e8a3ac1b52f098bcc2e88f81a3a7c9ce0f08bb253663f69983e9a8f4513", 0x26}, {&(0x7f0000000740)="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", 0xfa}, {&(0x7f0000000840)="7bbdd6927d367535d39f6304a1abacb2c2e6503f00e555423a85d880f4db01e2dcdecc0da1f39c3a8675f485a5fecbb760a2ae634411caf45c95fc53c316596934e00713e4", 0x45}], 0xa, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @rand_addr=0x64010100}}}], 0x20}, 0x800) ioctl$COMEDI_SETRSUBD(r3, 0x6410) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0xaa, 0x6}, 0x2) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0xc0, &(0x7f0000000800)=ANY=[], 0x5, 0x19c, &(0x7f0000000a40)="$eJzs0L9rE2Ecx/H393meJG1BSxQcKtiAhfOCmrurP8ApOEXIgatD0JDGppio7WWwpcUuUpBq/wWd6qiCTiIIzsVBcJC4dJNmKB3EQSLpPRH8G/q8hvvc58Nxxz2tZDHJAX/2VxuUOaQ5zhcEA0xLuimV5nvbf9rcSoPrtm/afGVzKlleuVdvt5tLhWsF8v8NwMHh9m9K3nBK0RfKyLf91UZd7sQMynTUXEy+SvEZusai/5ypLHAbzcDb5IYGvCpMlrqdh6VkeeXCQqc+35xv3o+i2SvBpSC4HJUOJiF4h/hPRfGCNfyYXMy4v0amxpMdM8F5QfyWal2VYp9Cja0dfe7s4z7K32MgBrw+OZFWQU2kv5eHCieFl+iYmSrjCsPdhXYzqCA31VsJzVfzK6MYW9f6YuNBe27jlpLf2e2y7I1JuEvGC4mKIbPDo+EEn9joMdOj0mO7x+4PpuXD8CujczXrw+tr205zBrI8qne7S2EWPouJibyYKA/HsE9RHb7ho22j8fvoxnEcx3Ecx3EcxzkC/gYAAP//a5tfQA==") socket(0x18, 0x0, 0x1) symlink(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='./file0\x00') 19m18.841403921s ago: executing program 2 (id=2043): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r1 = dup(r0) write$nbd(r1, &(0x7f0000000680)=ANY=[], 0x10) copy_file_range(r1, &(0x7f0000000000)=0xf, r1, 0x0, 0x9, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_create_chan_req={{0xc, 0xd, 0x5}, {0x80, 0xde60, 0x10}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x6, 0x81, 0x3}}]}}, 0x1b) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x4}, 0x16) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) waitid(0x2, 0x0, 0x0, 0x4, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) unshare(0x2c020400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r5}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x7c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20002001}, 0x40) setsockopt$inet6_int(r2, 0x29, 0x35, 0x0, 0x0) r9 = timerfd_create(0x9, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x4, r9, 0x0}]) 19m17.9482426s ago: executing program 2 (id=2046): socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000fc0)={{@any, 0x2}, @host, 0x0, 0x0, 0x20005e, 0x8, 0xd6, 0x4000, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) getpriority(0x2, r2) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000100)={0x0, 0x2, {0x0, 0x1000, 0x65e2, {0x8, 0xf}, {0x5, 0xb3}, @period={0x5b, 0x4, 0x62e1, 0x6, 0xf, {0x0, 0x3, 0x3, 0x7}, 0x4, &(0x7f0000000040)=[0xfffc, 0x7, 0x2432, 0x3]}}, {0x55, 0x1, 0xfff7, {0x2, 0x4}, {0x9a, 0x1}, @period={0x5a, 0x4, 0x6, 0x3, 0xffec, {0x8, 0x8, 0x1, 0x5}, 0x2, &(0x7f0000000080)=[0x4, 0x101]}}}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r3, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 19m17.679730144s ago: executing program 2 (id=2049): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000000}, 0xc) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x5, 0x2d, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end]}}}}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) signalfd(r5, &(0x7f0000000040)={[0x4]}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)=r4}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0x23, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000f9ffffff0000000008000000181100007a00708c86c605c7de2dbb979cf1acdc8974aaa827f884988a2555a67ff66337c6126c13463e3604e992dd9fe287bbdcda2d08d3224419f79f0e9d", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185700000500000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000185a00000500000000000000000000003a02f4ffffffffff186200000400000000000000f90000001853000002000000000000000000000018190000", @ANYBLOB="00000000000000009500000000000000bf91000000000000b7020000"], &(0x7f0000000600)='syzkaller\x00', 0x6a, 0x44, &(0x7f00000006c0)=""/68, 0x41000, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x1, 0x0, &(0x7f00000007c0)=[{0x0, 0x4, 0xe, 0x7}], 0x10, 0xf36}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000004000000000000000100ffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000008600000000003005180001000000182500"/76, @ANYRES32, @ANYBLOB="0000000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f00000007c0)=""/4096, 0x41100, 0x20, '\x00', r3, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[r6], &(0x7f00000004c0)=[{0x1, 0x3, 0x3, 0x9}], 0x10, 0x7fff}, 0x94) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000640)={0x3d}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000400)={[{@discard}, {@barrier}]}, 0x66, 0x530, &(0x7f0000001f80)="$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") 19m16.802939079s ago: executing program 2 (id=2052): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b", 0x9d}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x4, 0x18, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1c8, 0x29, 0x36, {0x5e, 0x35, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x358}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) close(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) 19m15.153676126s ago: executing program 2 (id=2057): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = syz_open_dev$sndctrl(&(0x7f0000001e00), 0x2, 0x40000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000002340)=""/4096) (fail_nth: 1) 19m14.000712122s ago: executing program 2 (id=2061): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000040)="5cdd30", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xfffffffffffffdc2) r0 = syz_io_uring_setup(0xd38, &(0x7f0000001180)={0x0, 0x7736, 0x10, 0x3, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 19m13.440462505s ago: executing program 33 (id=2061): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000040)="5cdd30", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xfffffffffffffdc2) r0 = syz_io_uring_setup(0xd38, &(0x7f0000001180)={0x0, 0x7736, 0x10, 0x3, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 16m20.884056502s ago: executing program 3 (id=2621): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) socket(0x2b, 0xa, 0x1) lseek(0xffffffffffffffff, 0x101, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x34, r4, 0x401, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x14008080) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 16m19.643007139s ago: executing program 3 (id=2623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x55) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = eventfd(0xffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, &(0x7f00000004c0)}, 0x20) clock_settime(0x0, &(0x7f0000000000)={0x2, 0xfffffffc}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 16m18.623739923s ago: executing program 3 (id=2626): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) r6 = syz_open_dev$vivid(&(0x7f0000002680), 0x2, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000300)={0x40000000, 0x1, "3789d1ed29fa245b7da299a4917d47379181696c64ba6cdeb283edd6d58e4be6", 0x3, 0x200000, 0x4, 0x2, 0x0, 0x7, 0x1, 0xa, [0x0, 0x5, 0x5, 0x7fffffff]}) r7 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r7, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r8 = socket$kcm(0x10, 0x2, 0x4) close(r7) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x30000000) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000200)=0xfffffffe) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) socket$kcm(0x29, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m11.193195776s ago: executing program 3 (id=2645): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 16m10.716064314s ago: executing program 3 (id=2648): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0205710, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/295], 0x28}}, 0x0) sched_rr_get_interval(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) 16m2.825571985s ago: executing program 3 (id=2670): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000800e0003006269746d61703a697000000005000400000000000900020073797a30000000000140ffffffff0c0001800800014080ffffff0500140002000000050005000200000005000100060000006744bf015f66af53c9bea42a79bb96d8d53867bd39b29997b2fa6c492ee927d6ed6f82677b63e3832c06000000cb1d214bbf0b18ac08bf27f9ea11b971d414bf00"/172], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r6, 0x5405, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000002900000037000000000000000000000004a7f86dbdd824ac5c6642e1f4017400000000000edb74357c3c368c437c2a16ef61cd08b0393011c668ce81b883cf0d4dfc89b6ad6f69f264e1f4660e403a540792e0ec9d110408a966a50cc5160dd29494092ac0e7"], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 15m47.452544408s ago: executing program 34 (id=2670): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000800e0003006269746d61703a697000000005000400000000000900020073797a30000000000140ffffffff0c0001800800014080ffffff0500140002000000050005000200000005000100060000006744bf015f66af53c9bea42a79bb96d8d53867bd39b29997b2fa6c492ee927d6ed6f82677b63e3832c06000000cb1d214bbf0b18ac08bf27f9ea11b971d414bf00"/172], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r6, 0x5405, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000002900000037000000000000000000000004a7f86dbdd824ac5c6642e1f4017400000000000edb74357c3c368c437c2a16ef61cd08b0393011c668ce81b883cf0d4dfc89b6ad6f69f264e1f4660e403a540792e0ec9d110408a966a50cc5160dd29494092ac0e7"], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 9m35.116340358s ago: executing program 4 (id=3668): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b455220"], 0xaf) close(r1) 9m34.849208764s ago: executing program 4 (id=3669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, 0x0, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x99c822, &(0x7f0000000000)=ANY=[@ANYBLOB='grpquota']) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) 9m34.444619348s ago: executing program 4 (id=3671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r0, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @x25={0x2, 0x2, 0x0, "5d1131846429864fd168cd48a8f352411dd59da00749aeabf7"}}, 0x2a) 9m33.527649174s ago: executing program 4 (id=3674): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f00000003c0)={0xac021080, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9m33.040493707s ago: executing program 4 (id=3677): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x5, 0x12) 9m31.96591725s ago: executing program 4 (id=3680): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2042, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d0f, &(0x7f0000000040)={0xfffffffd, 0x4}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={'\x00', 0x4, 0x5b9a, 0x4, 0x7ff, 0xffffffff80000000, 0x0}) mq_notify(r2, &(0x7f0000000280)={0x0, 0xe, 0x4, @tid=r3}) setreuid(0x0, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) r4 = gettid() r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x7, &(0x7f0000000b40)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01]) inotify_init() r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x11) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x5d, 0x40000003) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r4, 0x12) 9m16.760927566s ago: executing program 35 (id=3680): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2042, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d0f, &(0x7f0000000040)={0xfffffffd, 0x4}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={'\x00', 0x4, 0x5b9a, 0x4, 0x7ff, 0xffffffff80000000, 0x0}) mq_notify(r2, &(0x7f0000000280)={0x0, 0xe, 0x4, @tid=r3}) setreuid(0x0, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) r4 = gettid() r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x7, &(0x7f0000000b40)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01]) inotify_init() r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x11) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x5d, 0x40000003) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r4, 0x12) 2m25.770333793s ago: executing program 6 (id=4887): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6000400) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r7, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r8, 0x60000000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000040)) 2m24.592186663s ago: executing program 6 (id=4888): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001480)=""/4122, 0x101a, 0x99) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m22.968600223s ago: executing program 6 (id=4890): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x80800) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x2, 0x2, 0x11a, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 2m20.803603083s ago: executing program 6 (id=4898): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m20.174252691s ago: executing program 6 (id=4901): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001480)=""/4122, 0x101a, 0x99) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m19.5542235s ago: executing program 6 (id=4904): setregid(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 2m18.083581462s ago: executing program 36 (id=4904): setregid(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 1m10.23693482s ago: executing program 0 (id=5202): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001380)='cgroup.stat\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_CREATE(0x25, 0x0, 0x0) 1m10.041590026s ago: executing program 0 (id=5204): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) 1m9.747439425s ago: executing program 0 (id=5207): socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1]}, 0x20) 1m9.520495512s ago: executing program 0 (id=5211): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001a00)=""/248, 0xf8}, {&(0x7f0000000600)=""/251, 0xfb}, {&(0x7f00000004c0)=""/190, 0xbe}, {&(0x7f0000000880)=""/197, 0xc5}, {&(0x7f0000000740)=""/297, 0x129}, {&(0x7f0000000980)=""/4161, 0x1041}], 0x6}, 0x40002002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x4000800) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m7.961917845s ago: executing program 0 (id=5215): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2002000, 0x0) 1m7.669921737s ago: executing program 0 (id=5217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 51.977623477s ago: executing program 37 (id=5217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 17.821336883s ago: executing program 9 (id=5462): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x400a00, 0x25dfdbf9, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ptrace$peek(0x3, 0x0, &(0x7f0000000200)) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r9, 0x9}, 0x8) 15.601657603s ago: executing program 8 (id=5467): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f06040000090000000100cd48b1d30000"], &(0x7f0000000340)=""/250, 0x37, 0xfa, 0x9}, 0x28) 15.53214118s ago: executing program 5 (id=5468): open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f00000004c0)={[{@nogrpid}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") 15.349019893s ago: executing program 8 (id=5469): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6000400) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r7, 0x0, 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r8, 0x60000000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000040)) 11.884447013s ago: executing program 5 (id=5471): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000180)={0xa, 0x4e21, 0x2, @remote, 0x40000008}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="8000e8be", 0x4}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043000000007b"], 0x18}, 0x4004000) 11.308828559s ago: executing program 5 (id=5474): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc, 0xdc, 0xfffffffffffffffe, 0xff7feffc}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000100100000a12000300686173683a2b6e65742c706f72740000000900020073797a3000000003000000000790fc00000004000000a4a105000500020000001400ff7f08000840000000df88000085fec0e0778e9935348f57faf8164352807280a593c2ab7a440617d0f71a2343a98533478919a867026e4eb39323872afffdc7d28806ef520facbd91495ec78693c34f96df0a"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r8, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffa}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000180)={r9}) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101010000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103000e97e306e9cf91ed0000000900010073797a30000000000900030073797a3200000000000000000000001ef155ad67991c9c0b47bacf8240c98e"], 0x7c}}, 0x0) ioctl$EVIOCSFF(r10, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) 11.245507796s ago: executing program 8 (id=5475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x1bc, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf1}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xfffffffffffffe62, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xdd01, 0x5, 0x0, 0x3, 0x8, 0x2, 0xf100, 0x7fff, 0x31a3}}}}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xb2, 0xe, 0xfffffffa, 0x2, 0x7, 0xfff, 0x3}}, {0xa, 0x2, [0x6, 0x401, 0x8]}}, {{0x1c, 0x1, {0x4, 0x5, 0x9, 0x1000, 0x1, 0xc3d, 0xffffffff, 0x2}}, {0x8, 0x2, [0x1ff, 0x100]}}, {{0x1c, 0x1, {0xb7, 0x7, 0x7, 0x6, 0x0, 0x8, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x5, 0x3]}}, {{0x1c, 0x1, {0x3, 0x4, 0x5, 0x0, 0x1, 0x9, 0x7f, 0xa}}, {0x18, 0x2, [0x4, 0x0, 0x7, 0x8, 0x3, 0x2f, 0xfff5, 0x10, 0x46, 0x0]}}, {{0x1c, 0x1, {0xdc, 0x7, 0x7, 0x0, 0x2, 0x3, 0xf814, 0x7}}, {0x12, 0x2, [0x0, 0xfbef, 0xf2, 0x8, 0x3, 0x2a04, 0x4]}}, {{0x1c, 0x1, {0x2, 0x10, 0xd9af, 0x7, 0x0, 0x3, 0x3, 0x9}}, {0x16, 0x2, [0x5, 0x100, 0x6, 0x42, 0x3, 0x3ff, 0x7, 0x6, 0x6]}}, {{0x1c, 0x1, {0x6, 0x5f, 0x5, 0x8, 0x1, 0x0, 0x4cf, 0x5}}, {0xe, 0x2, [0x7, 0xfff7, 0xff, 0x7d4, 0xe]}}, {{0x1c, 0x1, {0xcb, 0x1, 0xc87f, 0xffffffff, 0x1, 0x3, 0x5, 0x3}}, {0xa, 0x2, [0x4, 0x4, 0x7]}}]}]}, 0x1bc}}, 0x4000010) 11.061361209s ago: executing program 1 (id=5477): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) wait4(r4, 0x0, 0x40000000, 0x0) 11.059613386s ago: executing program 8 (id=5478): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c0001006272696467656de73799633aac1a2693fccf32b1171b276f48916f5dd2c9dca80de1319a3ab3173db4ebfb494d9cd663f0946373d635386ff71c68ca15752da590546f4598d3aa543e3f077695f75654e0c662520732cc583de0a2ee79a91e9f"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000001c0)=0x9, 0x4) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x587880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) 10.977669206s ago: executing program 9 (id=5479): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, 0x0, 0x5c, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000700)="0a1398f8668babb9862aa1c9ea0380d18dafd06547dd62179ba79df1971b787788d854fbec0fe18f84085926de2d9ab0b6f1512c6dbc8a704453c6de009e89414d8518e3dcdd32ecd952f78f6c58a9fd"}) 8.606866443s ago: executing program 7 (id=5480): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2002000, 0x0) 7.754853443s ago: executing program 1 (id=5481): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "4135ae1e0fe721441705322225930e6c1e3e2a51747cb4d42e2b253a6e0236805b4377f7ab1a9b01c103a4c6a7ef54e60000d7264c39ea00c508ba6062696118", 0x3f}, 0x48, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x200810, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 7.445423295s ago: executing program 9 (id=5482): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 7.202751862s ago: executing program 7 (id=5483): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001480)=""/4122, 0x101a, 0x99) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6.066430499s ago: executing program 7 (id=5484): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r3, r3, &(0x7f0000001000), 0xffff) 5.883301729s ago: executing program 1 (id=5485): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6000400) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r7, 0x0, 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r8, 0x60000000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000040)) 4.145335199s ago: executing program 1 (id=5486): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000180)={0xa, 0x4e21, 0x2, @remote, 0x40000008}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="8000e8be", 0x4}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043000000007b"], 0x18}, 0x4004000) 4.079509379s ago: executing program 8 (id=5487): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000006c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c696f636861727365743d6b6f69382d722c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c636f6465706167653d3737352c636865636b3d7374726963742c757466383d302c6e6f6e756d7461696c3d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c706f73697861636c2c6673636f6e746578743d756e636f6e66696e65645f752c736d61636b6673666c6f6f723d2f2c005180f4e7b2da8c3f2fe272df26ff9ca497387fc9af57e51670999e8bc199be03b478bd734a1ad4517930c37f173275bdc3477cead3e348e86c54d3ca19a73e96d5a4291dd83fea6bbb7174e668baf7433889e34758bb3912cc"], 0x1, 0x276, &(0x7f0000000840)="$eJzs3UFqG1cYB/BvLMmW2oW06KoUPNAuujJ2T2BTXCg1FFq0aLtoTS1DsYTBBkGTEMWrnCAnyHmyCblADpCQXbwwmSDPSFbCyEaJbJnk99vo8d77z/vezCCtZvTPN72DvcPj/ZN7z6NeT2JpMzbjNIlWLMXIgyj17GV5PwBwy51mWbzKciulM2pTktWlay0MALg2k7//i64FALgZv//x5y9bOzvbv6VpPaL3sN9OIv/Mx7f247/oRifWoxlnEdlY3v7p553tqKZDrfiuN+i3h8ne30+K42+9iDjPb0QzWuX5jTQ3kR/027X4olh/sxudXx9HM74qz/9Qko/2cnz/7UT9a9GMp//GYXRjr6htlL+/kaY/Zo9e3/1r2DvMJ4N+e2U8r5hdudELAwAAAAAAAAAAAAAAAAAAAADAJ20tHWu9+/6dytn5+Nq08Tw/7f1Ag4n386ynaZol+fyLfDW+rkZ1kXsHAAAAAAAAAAAAAAAAAACA2+L4/zsHu91u52iujdFj/SVD8Waea63OmopKUVo3iZhtrVqRvHpyZcZdNIb1dI6SaszvEiTjnsbk0Grkaw17GnljouejV6/HeWN0dx3sJnFFql52k8yhkZXcfpWpqeX3exrFDkomNy5ZffnLD6o5a04ZSiKiNj6Zlx+nNt9zeFPfQAAAAAAAAAAAAAAAAAAAwMjFQ78lgycLKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFuDi//9naAyK8LQ5WWXYqEbRs+AtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bl4GwAA//95LWni") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/155, 0xbe) 3.855032548s ago: executing program 5 (id=5488): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={0x0}) 3.657702791s ago: executing program 8 (id=5489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x400a00, 0x25dfdbf9, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ptrace$peek(0x3, 0x0, &(0x7f0000000200)) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r9, 0x9}, 0x8) 3.621014959s ago: executing program 1 (id=5490): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x93444, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x40000, 0x0) 3.528033457s ago: executing program 7 (id=5491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) 3.35350998s ago: executing program 5 (id=5492): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, 0x0, 0x5c, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000700)="0a1398f8668babb9862aa1c9ea0380d18dafd06547dd62179ba79df1971b787788d854fbec0fe18f84085926de2d9ab0b6f1512c6dbc8a704453c6de009e89414d8518e3dcdd32ecd952f78f6c58a9fd"}) 3.230915152s ago: executing program 7 (id=5493): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8003, &(0x7f0000000300)={[{@barrier}]}, 0x0, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x3, 0xffdff}], "9e"}, @datasec={0x6, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000f80)=""/4094, 0x44, 0xffe, 0x1}, 0x28) 3.17219436s ago: executing program 9 (id=5494): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001480)=""/4122, 0x101a, 0x99) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.972965169s ago: executing program 5 (id=5495): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2d923cb2f88d3426}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1.307988464s ago: executing program 9 (id=5496): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6000400) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r7, 0x0, 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r8, 0x60000000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x50) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000040)) 1.243308137s ago: executing program 1 (id=5497): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa000000d}) 1.003735467s ago: executing program 7 (id=5498): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc, 0xdc, 0xfffffffffffffffe, 0xff7feffc}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000100100000a12000300686173683a2b6e65742c706f72740000000900020073797a3000000003000000000790fc00000004000000a4a105000500020000001400ff7f08000840000000df88000085fec0e0778e9935348f57faf8164352807280a593c2ab7a440617d0f71a2343a98533478919a867026e4eb39323872afffdc7d28806ef520facbd91495ec78693c34f96df0a"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r8, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffa}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000180)={r9}) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101010000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103000e97e306e9cf91ed0000000900010073797a30000000000900030073797a3200000000000000000000001ef155ad67991c9c0b47bacf8240c98e"], 0x7c}}, 0x0) ioctl$EVIOCSFF(r10, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) 0s ago: executing program 9 (id=5499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) kernel console output (not intermixed with test programs): rsing attributes in process `syz.7.3485'. [ 1307.092158][T18935] syzkaller1: entered allmulticast mode [ 1308.635586][T18949] binder: BINDER_SET_CONTEXT_MGR already set [ 1308.659349][T18949] binder: 18948:18949 ioctl 4018620d 200000004a80 returned -16 [ 1308.670845][T18949] binder: 18948:18949 ioctl c0306201 0 returned -14 [ 1309.398792][T18950] binder: 18948:18950 ioctl c0306201 200000004a40 returned -22 [ 1309.460912][T18955] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1309.471395][T18955] ALSA: mixer_oss: invalid index 1374389 [ 1310.239808][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1310.939517][T18968] 9p: Bad value for 'wfdno' [ 1311.278291][T18977] tipc: Enabled bearer , priority 0 [ 1311.295161][T18977] tipc: Resetting bearer [ 1311.810128][T18976] tipc: Disabling bearer [ 1312.917298][ T5840] tipc: Node number set to 1894615027 [ 1315.972873][T19012] netlink: 512 bytes leftover after parsing attributes in process `syz.7.3510'. [ 1316.713142][T19019] 9p: Bad value for 'wfdno' [ 1317.486061][T19026] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1317.648240][T19034] tipc: Enabled bearer , priority 0 [ 1317.693032][T19035] pim6reg: entered allmulticast mode [ 1317.737249][T19034] tipc: Resetting bearer [ 1317.751276][T19036] pim6reg: left allmulticast mode [ 1318.094284][T19033] tipc: Disabling bearer [ 1318.199121][T19043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1318.207029][T19043] IPv6: NLM_F_CREATE should be set when creating new route [ 1319.846699][T19055] tmpfs: Cannot enable quota on remount [ 1323.740833][T19090] tipc: Started in network mode [ 1323.745774][T19090] tipc: Node identity bea40b985be3, cluster identity 4711 [ 1323.774173][T19090] tipc: Enabled bearer , priority 0 [ 1323.804014][T19090] tipc: Resetting bearer [ 1323.848543][T19089] tipc: Disabling bearer [ 1323.890712][ T9] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1324.204628][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.214656][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.00 [ 1324.226415][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.255320][ T9] usb 5-1: config 0 descriptor?? [ 1325.020359][ T9] hid-corsair-void 0003:1B1C:0A1D.0009: ignoring exceeding usage max [ 1325.046975][ T9] hid-corsair-void 0003:1B1C:0A1D.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:0a1d] on usb-dummy_hcd.4-1/input0 [ 1325.278580][ T6015] hid-corsair-void 0003:1B1C:0A1D.0009: failed to request battery (reason: -71) [ 1325.290381][ T5840] hid-corsair-void 0003:1B1C:0A1D.0009: failed to request firmware (reason: -71) [ 1325.982923][ T9] usb 5-1: USB disconnect, device number 25 [ 1326.558909][T19108] fido_id[19108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1327.496874][T19120] ALSA: mixer_oss: invalid OSS volume '' [ 1330.423698][T19141] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1339.538971][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3580'. [ 1339.573855][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3580'. [ 1340.272288][T14008] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1340.422212][T14008] usb 1-1: Using ep0 maxpacket: 8 [ 1340.435536][T14008] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1340.447369][T14008] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1340.469738][T14008] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1340.490956][T14008] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1340.521347][T14008] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1340.543375][T14008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.803942][T14008] usb 1-1: GET_CAPABILITIES returned 0 [ 1340.816367][T14008] usbtmc 1-1:16.0: can't read capabilities [ 1341.170090][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1341.179283][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1341.188351][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1341.197416][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1341.206477][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1341.215597][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1341.932491][T14008] usb 1-1: USB disconnect, device number 20 [ 1342.596547][T19286] evm: overlay not supported [ 1346.094254][T19310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3594'. [ 1346.103275][T19310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3594'. [ 1346.777453][T18547] IPVS: starting estimator thread 0... [ 1347.117190][T19313] IPVS: using max 28 ests per chain, 67200 per kthread [ 1348.320088][T19333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3604'. [ 1348.559934][ T5840] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1350.229596][ T5840] usb 5-1: not running at top speed; connect to a high speed hub [ 1350.407878][ T5840] usb 5-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1350.435887][ T5840] usb 5-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1350.465616][ T5840] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1350.488627][ T5840] usb 5-1: string descriptor 0 read error: -22 [ 1350.503856][ T5840] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1350.516413][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.540801][T19332] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1350.552290][T19332] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1350.567399][ T5840] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1350.700471][T19358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3611'. [ 1351.706071][T18547] libceph: connect (1)[c::]:6789 error -101 [ 1351.713552][T18547] libceph: mon0 (1)[c::]:6789 connect error [ 1351.907010][T19358] ceph: No mds server is up or the cluster is laggy [ 1352.793219][T15548] usb 5-1: USB disconnect, device number 26 [ 1353.147732][T19382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 1356.031871][T19411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3625'. [ 1362.353959][T19475] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1362.380801][T19475] block device autoloading is deprecated and will be removed. [ 1363.501695][T19473] md: could not open device unknown-block(117,0). [ 1363.598353][T19473] md: md_import_device returned -6 [ 1364.825582][T19494] can0: slcan on ttyS3. [ 1364.950876][T19486] can0 (unregistered): slcan off ttyS3. [ 1365.458626][T19500] input: syz1 as /devices/virtual/input/input28 [ 1366.176636][T19518] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1366.489252][T19519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3656'. [ 1366.696747][T14009] libceph: connect (1)[c::]:6789 error -101 [ 1366.704250][T14009] libceph: mon0 (1)[c::]:6789 connect error [ 1366.733931][T19526] fuse: Bad value for 'fd' [ 1367.189519][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.195893][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.227441][T14008] libceph: connect (1)[c::]:6789 error -101 [ 1367.247089][T14008] libceph: mon0 (1)[c::]:6789 connect error [ 1367.786122][T14008] libceph: connect (1)[c::]:6789 error -101 [ 1367.792393][T14008] libceph: mon0 (1)[c::]:6789 connect error [ 1367.840794][T19520] ceph: No mds server is up or the cluster is laggy [ 1369.755308][T19545] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1369.768254][T19545] block device autoloading is deprecated and will be removed. [ 1370.663994][T19564] can0: slcan on ttyS3. [ 1371.670019][T19555] can0 (unregistered): slcan off ttyS3. [ 1371.788530][T19576] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1372.940076][T19588] syzkaller1: entered promiscuous mode [ 1372.951594][T19588] syzkaller1: entered allmulticast mode [ 1373.402660][T19606] No control pipe specified [ 1374.709761][T19610] md: could not open device unknown-block(117,0). [ 1374.744663][T19610] md: md_import_device returned -6 [ 1375.111854][T19628] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1376.253979][T19631] can0: slcan on ttyS3. [ 1377.134009][T19652] No control pipe specified [ 1379.582313][T19677] No control pipe specified [ 1380.151460][T19690] program syz.7.3689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1380.202103][T19690] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1381.444984][T19708] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1381.479018][T19708] block device autoloading is deprecated and will be removed. [ 1382.643817][T19716] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1382.651454][T19716] ALSA: mixer_oss: invalid index 1374389 [ 1382.657146][T19716] ALSA: mixer_oss: invalid OSS volume 'PHONE' [ 1383.958566][T19732] syzkaller1: entered allmulticast mode [ 1385.485234][T19744] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.3702'. [ 1385.686814][T19756] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3704'. [ 1387.256779][T19773] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1387.264346][T19773] ALSA: mixer_oss: invalid index 1374389 [ 1387.270060][T19773] ALSA: mixer_oss: invalid OSS volume 'PHONE' [ 1388.864936][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3711'. [ 1388.902203][T19796] syzkaller1: entered allmulticast mode [ 1389.001959][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3711'. [ 1389.834302][T19630] can0 (unregistered): slcan off ttyS3. [ 1390.780757][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1390.793531][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1390.802386][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1390.811001][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1390.818861][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1392.886060][ T5826] Bluetooth: hci2: command tx timeout [ 1394.964876][ T5826] Bluetooth: hci2: command tx timeout [ 1396.672371][T19824] chnl_net:caif_netlink_parms(): no params data found [ 1397.044265][ T5826] Bluetooth: hci2: command tx timeout [ 1399.031846][T19824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.092958][T19824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.119855][T19824] bridge_slave_0: entered allmulticast mode [ 1399.135509][T19824] bridge_slave_0: entered promiscuous mode [ 1399.139076][ T5826] Bluetooth: hci2: command tx timeout [ 1399.162571][T19824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.193150][T19824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.200430][T19824] bridge_slave_1: entered allmulticast mode [ 1399.280345][T19824] bridge_slave_1: entered promiscuous mode [ 1399.471633][T19824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.494431][T19824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.354624][T19824] team0: Port device team_slave_0 added [ 1400.412303][T19824] team0: Port device team_slave_1 added [ 1400.821784][T19824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1400.829488][T19824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.655790][T19824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.890440][T19824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.661249][T19824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.909286][T19824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.536609][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3739'. [ 1403.585247][T19824] hsr_slave_0: entered promiscuous mode [ 1403.603088][T19824] hsr_slave_1: entered promiscuous mode [ 1403.689947][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3739'. [ 1403.702846][T19824] debugfs: 'hsr0' already exists in 'hsr' [ 1403.708642][T19824] Cannot create hsr debugfs directory [ 1405.372184][T18547] IPVS: starting estimator thread 0... [ 1405.481932][T19942] IPVS: using max 25 ests per chain, 60000 per kthread [ 1407.977305][T19824] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1408.118646][T19824] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1408.178189][T19950] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1408.385718][T19824] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1408.416529][T19824] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1408.513890][T19962] autofs: Unknown parameter '0x0000000000000000' [ 1408.776044][T19824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.830572][T19824] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.866916][T19655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.874182][T19655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.929705][T19655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.936991][T19655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.957572][T19824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.948600][T20009] autofs: Unknown parameter '0x0000000000000000' [ 1415.808797][T20019] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1415.816329][T20019] ALSA: mixer_oss: invalid index 1374389 [ 1418.378817][T19824] veth0_vlan: entered promiscuous mode [ 1418.432768][T19824] veth1_vlan: entered promiscuous mode [ 1418.899349][T19824] veth0_macvtap: entered promiscuous mode [ 1418.905369][T14009] IPVS: starting estimator thread 0... [ 1419.003470][T20047] IPVS: using max 28 ests per chain, 67200 per kthread [ 1419.128189][T19824] veth1_macvtap: entered promiscuous mode [ 1419.155853][T20052] autofs: Unknown parameter 'fd0x0000000000000000' [ 1419.190848][T19824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.237111][T19824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.281224][T19655] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.309268][T19655] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.354079][T19655] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.416386][T19655] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.640312][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.671209][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.739951][T20060] tmpfs: Cannot enable quota on remount [ 1419.802425][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.816483][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.123822][T20077] binder: 20074:20077 unknown command 0 [ 1421.152104][T20077] binder: 20074:20077 ioctl c0306201 200000000080 returned -22 [ 1421.397389][T20082] autofs: Unknown parameter 'fd0x0000000000000000' [ 1422.611581][T20092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1422.846198][T20107] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1423.037620][T12517] libceph: connect (1)[c::]:6789 error -101 [ 1423.061080][T12517] libceph: mon0 (1)[c::]:6789 connect error [ 1423.442117][T14009] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1423.650330][T14009] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1423.661160][T20099] ceph: No mds server is up or the cluster is laggy [ 1423.684608][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 1423.710724][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 1424.229623][T20112] fido_id[20112]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1425.625830][T20134] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3794'. [ 1426.700817][T20139] input: syz1 as /devices/virtual/input/input29 [ 1428.274135][T20152] vivid-000: kernel_thread() failed [ 1428.474147][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.480578][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.567197][T20160] fuse: Bad value for 'fd' [ 1428.575262][T20160] fuse: Bad value for 'fd' [ 1430.079615][T20169] binder: BINDER_SET_CONTEXT_MGR already set [ 1430.085679][T20169] binder: 20168:20169 ioctl 4018620d 200000000040 returned -16 [ 1432.289764][T20187] fuse: Unknown parameter 'group_i00000000000000000000' [ 1432.487313][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3810'. [ 1432.497102][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3810'. [ 1432.660791][T20194] input: syz1 as /devices/virtual/input/input30 [ 1437.631748][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3822'. [ 1437.645809][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3822'. [ 1438.578038][T20234] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1439.268081][T20249] md: could not open device unknown-block(117,0). [ 1439.486248][T20249] md: md_import_device returned -6 [ 1439.797370][T20262] tmpfs: Cannot enable quota on remount [ 1441.316385][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3835'. [ 1441.328652][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3835'. [ 1443.033166][T20281] IPVS: set_ctl: invalid protocol: 26467 117.112.0.170:20001 [ 1445.062297][T20303] __kmem_cache_create_args(bio-184) failed with error -22 [ 1445.122197][T20303] CPU: 0 UID: 0 PID: 20303 Comm: syz.6.3842 Not tainted syzkaller #0 PREEMPT(full) [ 1445.122229][T20303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1445.122244][T20303] Call Trace: [ 1445.122255][T20303] [ 1445.122267][T20303] dump_stack_lvl+0x189/0x250 [ 1445.122304][T20303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1445.122333][T20303] ? __pfx__printk+0x10/0x10 [ 1445.122368][T20303] ? __kmem_cache_create_args+0x253/0x310 [ 1445.122401][T20303] ? kfree+0x1c0/0x660 [ 1445.122431][T20303] ? __kmem_cache_create_args+0x1c7/0x310 [ 1445.122471][T20303] __kmem_cache_create_args+0x2bb/0x310 [ 1445.122509][T20303] bioset_init+0x3b0/0x7b0 [ 1445.122546][T20303] ? __pfx_bioset_init+0x10/0x10 [ 1445.122574][T20303] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 1445.122607][T20303] ? percpu_ref_init+0x223/0x360 [ 1445.122630][T20303] ? __pfx_no_op+0x10/0x10 [ 1445.122650][T20303] mddev_init+0x13b/0x700 [ 1445.122669][T20303] md_alloc+0xb8/0xdc0 [ 1445.122687][T20303] ? find_inode_fast+0x433/0x540 [ 1445.122708][T20303] ? __pfx_md_probe+0x10/0x10 [ 1445.122724][T20303] md_alloc_and_put+0x1a/0x1f0 [ 1445.122740][T20303] blk_request_module+0x27d/0x2a0 [ 1445.122762][T20303] blkdev_get_no_open+0x3f/0xe0 [ 1445.122777][T20303] blkdev_open+0x1de/0x600 [ 1445.122797][T20303] ? __pfx_blkdev_open+0x10/0x10 [ 1445.122812][T20303] do_dentry_open+0x7ce/0x1420 [ 1445.122843][T20303] vfs_open+0x3b/0x340 [ 1445.122861][T20303] ? path_openat+0x33f3/0x3dd0 [ 1445.122877][T20303] path_openat+0x340e/0x3dd0 [ 1445.122915][T20303] ? getname_flags+0xb8/0x540 [ 1445.122944][T20303] ? __pfx_path_openat+0x10/0x10 [ 1445.122974][T20303] do_filp_open+0x1fa/0x410 [ 1445.122991][T20303] ? __pfx_do_filp_open+0x10/0x10 [ 1445.123023][T20303] ? _raw_spin_unlock+0x28/0x50 [ 1445.123039][T20303] ? alloc_fd+0x64c/0x6c0 [ 1445.123067][T20303] do_sys_openat2+0x121/0x200 [ 1445.123091][T20303] ? __pfx_do_sys_openat2+0x10/0x10 [ 1445.123119][T20303] ? rcu_is_watching+0x15/0xb0 [ 1445.123142][T20303] __x64_sys_openat+0x138/0x170 [ 1445.123169][T20303] do_syscall_64+0xfa/0xf80 [ 1445.123189][T20303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.123206][T20303] ? clear_bhb_loop+0x60/0xb0 [ 1445.123225][T20303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.123242][T20303] RIP: 0033:0x7f27dc98f749 [ 1445.123257][T20303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.123272][T20303] RSP: 002b:00007f27dabf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1445.123290][T20303] RAX: ffffffffffffffda RBX: 00007f27dcbe6090 RCX: 00007f27dc98f749 [ 1445.123302][T20303] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 1445.123313][T20303] RBP: 00007f27dca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1445.123324][T20303] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1445.123333][T20303] R13: 00007f27dcbe6128 R14: 00007f27dcbe6090 R15: 00007ffe759bc5f8 [ 1445.123358][T20303] [ 1445.125732][T20303] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1445.715513][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3846'. [ 1445.728268][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3846'. [ 1450.015309][T20358] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1450.089690][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3859'. [ 1450.106944][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3859'. [ 1453.556133][T20390] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1453.600511][T20390] block device autoloading is deprecated and will be removed. [ 1454.884063][T20396] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1454.891577][T20396] ALSA: mixer_oss: invalid index 1374389 [ 1454.897595][T20396] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1455.696637][T20406] input: syz1 as /devices/virtual/input/input31 [ 1460.356323][T20443] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1460.364307][T20443] ALSA: mixer_oss: invalid index 1374389 [ 1460.370679][T20443] ALSA: mixer_oss: invalid OSS volume 'LIN' [ 1460.678311][T20450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3885'. [ 1461.005773][T20450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3885'. [ 1461.315907][T18547] IPVS: starting estimator thread 0... [ 1461.778198][T20461] IPVS: using max 37 ests per chain, 88800 per kthread [ 1461.816373][T20459] tmpfs: Cannot enable quota on remount [ 1463.155988][T20472] binder: 20471:20472 unknown command 0 [ 1463.161708][T20472] binder: 20471:20472 ioctl c0306201 200000000080 returned -22 [ 1463.171484][T20472] binder: BINDER_SET_CONTEXT_MGR already set [ 1463.177513][T20472] binder: 20471:20472 ioctl 4018620d 200000000040 returned -16 [ 1463.186393][T20472] binder: 20471:20472 ioctl c0306201 200000000300 returned -11 [ 1463.360196][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3894'. [ 1466.293797][T20506] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1469.144652][T20533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3908'. [ 1473.915580][T20559] binder: 20557:20559 unknown command 0 [ 1473.921257][T20559] binder: 20557:20559 ioctl c0306201 200000000080 returned -22 [ 1475.374476][T20575] fuse: Unknown parameter 'use00000000000000000000' [ 1484.901653][T20651] random: crng reseeded on system resumption [ 1485.098252][T14008] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1485.659633][T14008] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1485.840886][T14008] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.543952][T14008] usb 8-1: config 0 has no interface number 0 [ 1486.551634][T14008] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1486.570230][T14008] usb 8-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1486.586576][T14008] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1486.596256][T14008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.607506][T14008] usb 8-1: config 0 descriptor?? [ 1486.628014][T14008] ldusb 8-1:0.55: Interrupt in endpoint not found [ 1486.891050][T12517] usb 8-1: USB disconnect, device number 5 [ 1487.128280][T20673] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1488.156210][T20685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1489.883624][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.890354][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.372151][T20709] fuse: Bad value for 'fd' [ 1491.564108][T20719] binder: 20716:20719 unknown command 0 [ 1491.580983][T20719] binder: 20716:20719 ioctl c0306201 200000000080 returned -22 [ 1491.894615][T20719] binder_alloc: 20716: binder_alloc_buf, no vma [ 1491.957404][T20719] binder: 20716:20719 ioctl c0306201 200000000300 returned -11 [ 1492.143587][T20720] tmpfs: Cannot enable quota on remount [ 1492.847383][T20732] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3963'. [ 1495.152296][T20754] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1497.694172][T20775] netlink: 'syz.6.3977': attribute type 27 has an invalid length. [ 1497.702064][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3977'. [ 1497.885932][T20778] trusted_key: encrypted_key: hex blob is missing [ 1501.626711][T20806] netlink: 'syz.0.3988': attribute type 27 has an invalid length. [ 1501.635170][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3988'. [ 1504.237292][T20837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3995'. [ 1505.282509][T20842] input: syz1 as /devices/virtual/input/input32 [ 1505.940611][T20851] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1508.297715][T20870] trusted_key: encrypted_key: hex blob is missing [ 1509.078982][T20868] binder: 20867:20868 unknown command 0 [ 1509.094288][T20868] binder: 20867:20868 ioctl c0306201 200000000080 returned -22 [ 1509.156460][T20868] binder: BINDER_SET_CONTEXT_MGR already set [ 1509.199962][T20868] binder: 20867:20868 ioctl 4018620d 200000000040 returned -16 [ 1509.292716][T20868] binder: 20867:20868 ioctl c0306201 200000000300 returned -11 [ 1511.536369][T20898] syzkaller0: entered promiscuous mode [ 1512.254330][T20898] syzkaller0: entered allmulticast mode [ 1512.460107][T20906] fuse: Invalid rootmode [ 1513.097185][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4016'. [ 1513.294244][T20923] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1514.274855][T20938] overlayfs: failed to resolve './file1': -2 [ 1515.568550][T20958] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4028'. [ 1515.604273][T20956] fuse: Bad value for 'rootmode' [ 1517.713014][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1518.494626][T20976] input: syz1 as /devices/virtual/input/input33 [ 1519.702826][T21008] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1520.462714][T21010] fuse: Bad value for 'rootmode' [ 1521.520271][T21037] trusted_key: encrypted_key: hex blob is missing [ 1522.818172][T21042] input: syz1 as /devices/virtual/input/input34 [ 1524.957262][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1528.621521][T21076] fuse: Bad value for 'rootmode' [ 1529.214365][T21089] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4063'. [ 1530.400403][T21098] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4066'. [ 1533.614399][T21128] netlink: 'syz.8.4071': attribute type 27 has an invalid length. [ 1533.624430][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4071'. [ 1533.879675][T21132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4076'. [ 1536.335706][T21152] md: could not open device unknown-block(117,0). [ 1536.454612][T21152] md: md_import_device returned -6 [ 1539.271327][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'. [ 1539.281481][T21179] bond0: Unable to set up delay as MII monitoring is disabled [ 1539.292358][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'. [ 1539.301694][T21179] bond0: Unable to set up delay as MII monitoring is disabled [ 1539.894423][T21188] netlink: 'syz.6.4092': attribute type 1 has an invalid length. [ 1540.139184][T21192] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1540.142515][T21196] trusted_key: encrypted_key: hex blob is missing [ 1540.396957][T21192] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1540.472342][T21199] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1540.502159][T21199] block device autoloading is deprecated and will be removed. [ 1540.560891][T21188] bond2: (slave gretap1): making interface the new active one [ 1540.619261][T21188] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1541.106019][T21211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1541.113320][T21211] IPv6: NLM_F_CREATE should be set when creating new route [ 1542.505847][T21215] fuse: Unknown parameter 'group_id00000000000000000000' [ 1542.571722][T21216] fuse: Unknown parameter 'group_id00000000000000000000' [ 1546.411170][T21248] md: could not open device unknown-block(117,0). [ 1546.427482][T21248] md: md_import_device returned -6 [ 1549.259496][ T5920] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1549.387828][ T6015] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1549.445308][ T5920] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1549.455572][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.505347][ T5920] usb 6-1: config 0 descriptor?? [ 1549.525733][ T5920] cp210x 6-1:0.0: cp210x converter detected [ 1549.580027][ T6015] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1549.594639][ T6015] usb 8-1: config 0 has no interface number 0 [ 1549.634275][ T6015] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1549.677055][ T6015] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1549.725073][T21296] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1549.753282][T21296] block device autoloading is deprecated and will be removed. [ 1549.767003][ T6015] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1549.787997][ T5920] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1549.816337][ T6015] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1549.848912][ T6015] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1549.884427][ T6015] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1549.914994][ T6015] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.954072][ T5920] usb 6-1: USB disconnect, device number 16 [ 1549.992604][ T6015] usb 8-1: config 0 descriptor?? [ 1550.012560][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1550.044962][ T6015] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1550.064546][ T5920] cp210x 6-1:0.0: device disconnected [ 1550.142361][T21301] trusted_key: encrypted_key: hex blob is missing [ 1550.509449][T21304] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1551.302855][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.310537][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.496710][T12517] usb 8-1: USB disconnect, device number 6 [ 1552.523548][T12517] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1552.660608][T21314] fuse: Unknown parameter 'user_i00000000000000000000' [ 1554.816986][ T30] audit: type=1326 audit(2000001465.928:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.5.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cd18f749 code=0x7ffc0000 [ 1554.855615][ T30] audit: type=1326 audit(2000001465.928:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.5.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43cd18f749 code=0x7ffc0000 [ 1555.126187][T21334] md: could not open device unknown-block(117,0). [ 1555.165050][T21334] md: md_import_device returned -6 [ 1556.124301][T15548] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1556.306464][T15548] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1556.326168][T15548] usb 9-1: config 0 has no interface number 0 [ 1556.352635][T15548] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1556.419082][T15548] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1556.462827][T15548] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1556.579549][T15548] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1556.594662][T15548] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1556.608197][T15548] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1556.618019][T15548] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.642036][T15548] usb 9-1: config 0 descriptor?? [ 1556.696662][T15548] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1557.167967][T21362] ldusb 9-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1558.093805][T21368] fuse: Unknown parameter 'user_i00000000000000000000' [ 1558.871738][ T9] usb 9-1: USB disconnect, device number 2 [ 1558.887792][ T9] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1561.723105][T21393] trusted_key: encrypted_key: hex blob is missing [ 1562.081755][ T6015] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1562.925316][ T6015] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1562.945555][ T6015] usb 6-1: config 0 has no interface number 0 [ 1562.967485][ T6015] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1563.005268][ T6015] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1563.037649][ T6015] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1563.049449][ T6015] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1563.132491][T21412] fuse: Unknown parameter 'user_id00000000000000000000' [ 1563.246819][ T6015] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1563.381065][ T6015] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1563.448201][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.494439][ T6015] usb 6-1: config 0 descriptor?? [ 1563.562699][ T6015] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1563.980752][T21418] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1565.739818][ T6015] usb 6-1: USB disconnect, device number 17 [ 1565.762022][ T6015] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1565.809535][T18133] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1566.011157][T18133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.065464][T18133] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1566.075895][T18133] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.804014][T18133] usb 9-1: config 0 descriptor?? [ 1567.182064][T18133] usbhid 9-1:0.0: can't add hid device: -71 [ 1567.188173][T18133] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1567.852595][ T6015] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1568.000814][T18133] usb 9-1: USB disconnect, device number 3 [ 1568.039150][ T6015] usb 1-1: Using ep0 maxpacket: 8 [ 1568.052298][ T6015] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1568.070672][ T6015] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1568.096904][ T6015] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1568.108612][ T6015] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1568.122342][ T6015] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1568.136157][ T6015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.287514][T21447] fuse: Unknown parameter 'user_id00000000000000000000' [ 1568.389045][ T6015] usb 1-1: GET_CAPABILITIES returned 0 [ 1568.394874][ T6015] usbtmc 1-1:16.0: can't read capabilities [ 1568.670189][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1568.679350][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1568.688464][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1568.697595][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1568.706720][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1568.731968][ T6015] usb 1-1: USB disconnect, device number 21 [ 1568.734424][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1569.632166][T15548] kernel read not supported for file /dsp (pid: 15548 comm: kworker/1:5) [ 1570.462617][T21468] vivid-000: kernel_thread() failed [ 1571.505473][T21478] netlink: 107460 bytes leftover after parsing attributes in process `syz.8.4174'. [ 1573.460946][T21495] fuse: Unknown parameter 'user_id00000000000000000000' [ 1579.066041][T21538] fuse: Bad value for 'fd' [ 1579.453243][ T6019] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1579.692849][ T6019] usb 1-1: Using ep0 maxpacket: 32 [ 1579.720673][ T6019] usb 1-1: config 0 has an invalid interface number: 218 but max is 0 [ 1579.735655][ T6019] usb 1-1: config 0 has no interface number 0 [ 1579.752506][ T6019] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 1579.777587][ T6019] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.786522][ T6019] usb 1-1: Product: syz [ 1579.790774][ T6019] usb 1-1: Manufacturer: syz [ 1579.795904][ T6019] usb 1-1: SerialNumber: syz [ 1579.806561][ T6019] usb 1-1: config 0 descriptor?? [ 1579.962602][T21548] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4200'. [ 1580.841301][T18547] usb 1-1: USB disconnect, device number 22 [ 1581.921281][T21569] tmpfs: Unknown parameter ' [ 1581.921281][T21569] ' [ 1582.418423][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4202'. [ 1584.856385][T21590] fuse: Bad value for 'fd' [ 1588.128062][T21615] random: crng reseeded on system resumption [ 1588.784963][T21617] binder: 21616:21617 unknown command 0 [ 1588.824067][T21617] binder: 21616:21617 ioctl c0306201 200000000080 returned -22 [ 1588.835757][T21617] binder: 21616:21617 ioctl c0306201 200000000300 returned -11 [ 1590.890920][T21631] fuse: Bad value for 'fd' [ 1592.548513][T21648] fuse: Bad value for 'fd' [ 1592.660889][T21648] fuse: Bad value for 'fd' [ 1593.506541][T21661] random: crng reseeded on system resumption [ 1597.116774][T21687] fuse: Unknown parameter '0x0000000000000003' [ 1597.431326][T21695] overlayfs: missing 'workdir' [ 1597.658234][T21699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4248'. [ 1598.684251][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'. [ 1598.779978][T21704] usb usb8: check_ctrlrecip: process 21704 (syz.7.4250) requesting ep 01 but needs 81 [ 1598.824026][T21704] usb usb8: usbfs: process 21704 (syz.7.4250) did not claim interface 0 before use [ 1603.609309][T21754] fuse: Unknown parameter '0x0000000000000003' [ 1605.226819][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1605.569505][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1605.634811][ T9] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.897185][ T9] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1606.297018][ T9] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1606.309892][ T9] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1606.327513][ T9] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1606.366421][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.386453][ T9] usb 7-1: Product: syz [ 1606.409214][ T9] usb 7-1: Manufacturer: syz [ 1606.426172][ T9] usb 7-1: SerialNumber: syz [ 1606.468283][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1606.500265][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input35 [ 1606.524349][ T5920] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1606.747032][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 1606.920412][ T5920] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1606.960492][ T9] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1607.072075][ T5920] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1607.085207][ T9] (id 0x00) [ 1607.217093][ T5920] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1607.231919][ T5920] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1607.247076][ T5920] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1607.257237][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.342938][ T9] rc_core: IR keymap rc-imon-pad not found [ 1607.352830][ T9] Registered IR keymap rc-empty [ 1607.357877][ T9] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1607.379515][T21799] fuse: Unknown parameter '0x0000000000000003' [ 1607.398626][ T9] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1607.430491][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1607.471681][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input36 [ 1607.508611][ T5920] usb 6-1: GET_CAPABILITIES returned 0 [ 1607.514287][ T5920] usbtmc 6-1:16.0: can't read capabilities [ 1607.522842][ T9] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:7> initialized [ 1607.727796][T12517] usb 6-1: USB disconnect, device number 18 [ 1607.865010][T21766] imon:display_open: display port is already open [ 1608.419152][T21810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4281'. [ 1609.078604][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4284'. [ 1609.095830][ T9] usb 7-1: USB disconnect, device number 7 [ 1609.373663][T21822] fuse: Bad value for 'rootmode' [ 1611.056592][T21832] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1612.708578][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.714965][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.747000][T21843] fuse: Unknown parameter '0x0000000000000003' [ 1613.945405][T14009] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1614.068387][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 1614.078735][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 1614.089787][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 1614.103228][T14009] usb 9-1: Using ep0 maxpacket: 8 [ 1614.115024][T14009] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1614.126651][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 1614.138499][T14009] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1614.149303][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 1615.195469][T21864] fuse: Bad value for 'rootmode' [ 1615.279758][T14009] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1615.704754][T14009] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1615.742064][T14009] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1615.751620][T14009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.796136][T14009] usb 9-1: can't set config #16, error -71 [ 1615.805257][T14009] usb 9-1: USB disconnect, device number 4 [ 1618.717825][T21899] fuse: Unknown parameter '0x0000000000000003' [ 1619.180847][T21909] fuse: Bad value for 'rootmode' [ 1620.650722][ T5920] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1620.702643][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4312'. [ 1620.723402][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4312'. [ 1620.760815][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4312'. [ 1620.812421][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 1620.819640][ T5920] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1620.843768][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1620.864291][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4312'. [ 1620.874424][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1620.887017][ T5920] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1620.906067][ T5920] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1620.977539][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.271688][ T5920] usb 1-1: GET_CAPABILITIES returned 0 [ 1621.301649][ T5920] usbtmc 1-1:16.0: can't read capabilities [ 1621.997344][ T5920] usb 1-1: USB disconnect, device number 23 [ 1624.752770][T21946] fuse: Unknown parameter 'use00000000000000000000' [ 1625.125541][T21952] overlayfs: missing 'lowerdir' [ 1625.906993][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 1625.962901][ T5826] Bluetooth: hci2: connection err: -111 [ 1626.193567][T21959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 1626.279609][T21959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 1626.303390][T21959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 1626.442713][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 1626.450085][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 1626.522249][T21953] ceph: No mds server is up or the cluster is laggy [ 1626.852475][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 1626.874371][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 1627.688869][T21976] lo speed is unknown, defaulting to 1000 [ 1627.694780][T21976] lo speed is unknown, defaulting to 1000 [ 1627.705726][T21976] lo speed is unknown, defaulting to 1000 [ 1627.724315][T21976] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1627.751665][T21976] lo speed is unknown, defaulting to 1000 [ 1627.759590][T21976] lo speed is unknown, defaulting to 1000 [ 1627.767376][T21976] lo speed is unknown, defaulting to 1000 [ 1627.778613][T21976] lo speed is unknown, defaulting to 1000 [ 1627.786152][T21976] lo speed is unknown, defaulting to 1000 [ 1627.793300][T21976] lo speed is unknown, defaulting to 1000 [ 1627.801117][T21976] lo speed is unknown, defaulting to 1000 [ 1629.270934][T22003] fuse: Unknown parameter 'use00000000000000000000' [ 1629.486611][T22006] fuse: Bad value for 'fd' [ 1631.698496][T22022] input: syz1 as /devices/virtual/input/input37 [ 1634.035222][ T5468] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1634.195697][T17702] libceph: connect (1)[c::]:6789 error -101 [ 1634.201842][T17702] libceph: mon0 (1)[c::]:6789 connect error [ 1634.248109][ T5468] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.269153][ T5468] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1634.278524][ T5468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.294168][ T5468] usb 8-1: Product: syz [ 1634.307757][ T5468] usb 8-1: Manufacturer: syz [ 1634.312540][ T5468] usb 8-1: SerialNumber: syz [ 1634.332203][ T5468] usb 8-1: config 0 descriptor?? [ 1634.349703][ T5468] ims_pcu 8-1:0.0: Zero length descriptor [ 1634.356009][ T5468] ims_pcu 8-1:0.0: probe with driver ims_pcu failed with error -22 [ 1634.485868][ T5468] libceph: connect (1)[c::]:6789 error -101 [ 1634.492022][ T5468] libceph: mon0 (1)[c::]:6789 connect error [ 1634.559656][ T5920] usb 8-1: USB disconnect, device number 7 [ 1634.802027][T22050] fuse: Unknown parameter 'use00000000000000000000' [ 1635.022928][ T5468] libceph: connect (1)[c::]:6789 error -101 [ 1635.495286][T22036] ceph: No mds server is up or the cluster is laggy [ 1635.580244][ T5468] libceph: mon0 (1)[c::]:6789 connect error [ 1636.570359][T22063] hfs: can't find a HFS filesystem on dev nullb0 [ 1636.761572][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4356'. [ 1637.576083][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1637.785034][ T9] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 1637.800078][ T9] usb 7-1: config 0 has no interface number 0 [ 1637.812778][ T9] usb 7-1: config 0 interface 126 has no altsetting 0 [ 1637.833409][ T9] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1637.854083][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.873592][ T9] usb 7-1: Product: syz [ 1637.883911][ T9] usb 7-1: Manufacturer: syz [ 1637.893470][ T9] usb 7-1: SerialNumber: syz [ 1637.909501][ T9] usb 7-1: config 0 descriptor?? [ 1638.193973][ T9] usb 7-1: USB disconnect, device number 8 [ 1638.201961][T22081] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1638.832850][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1639.342626][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1639.354682][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1639.364708][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1639.377193][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1639.387414][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1639.401716][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1639.483337][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.544980][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 1640.550557][ T9] usbtmc 6-1:16.0: can't read capabilities [ 1640.822033][ T9] usb 6-1: USB disconnect, device number 19 [ 1641.159627][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4369'. [ 1641.354551][T21662] libceph: connect (1)[c::]:6789 error -101 [ 1641.370048][T21662] libceph: mon0 (1)[c::]:6789 connect error [ 1641.641868][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1641.661939][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1641.907677][T22125] syzkaller0: entered promiscuous mode [ 1641.915786][T22125] syzkaller0: entered allmulticast mode [ 1641.921677][T22112] ceph: No mds server is up or the cluster is laggy [ 1642.622188][T22142] trusted_key: encrypted_key: hex blob is missing [ 1643.821799][T22153] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1646.259430][T17702] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1646.303482][T22190] trusted_key: encrypted_key: hex blob is missing [ 1647.157187][T22191] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4392'. [ 1647.247763][T17702] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18432, setting to 64 [ 1647.899147][T17702] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1647.925385][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1647.930373][T17702] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1647.939795][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1648.144722][T17702] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1648.207003][T17702] usb 7-1: Product: syz [ 1648.208804][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1648.218278][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1648.233460][T22200] ceph: No mds server is up or the cluster is laggy [ 1648.268061][T17702] usb 7-1: Manufacturer: syz [ 1648.277456][T17702] usb 7-1: SerialNumber: syz [ 1648.308847][T17702] usb 7-1: config 0 descriptor?? [ 1648.353768][T17702] usb 7-1: selecting invalid altsetting 0 [ 1648.709445][T22177] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1648.769017][ T9] usb 7-1: USB disconnect, device number 9 [ 1649.921347][T22222] binder: BINDER_SET_CONTEXT_MGR already set [ 1649.927627][T22222] binder: 22221:22222 ioctl 4018620d 200000000040 returned -16 [ 1649.968239][T22222] binder: 22221:22222 ioctl c0306201 200000000300 returned -11 [ 1650.499567][T22228] trusted_key: encrypted_key: hex blob is missing [ 1651.736649][ T6517] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1651.983772][ T6517] usb 6-1: Using ep0 maxpacket: 8 [ 1652.083119][ T6517] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1652.149235][ T6517] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1652.324891][ T6517] usb 6-1: string descriptor 0 read error: -22 [ 1652.394395][T22255] 9p: Unknown access argument : -22 [ 1652.415208][ T6517] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1652.488623][ T6517] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1652.597827][ T6517] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1652.609168][ T6517] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1652.666214][ T6517] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1652.695317][ T6517] usb 6-1: media controller created [ 1652.753980][ T6517] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1653.949636][ T6517] zl10353_read_register: readreg error (reg=127, ret==0) [ 1654.514089][T22272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4419'. [ 1654.554801][T22272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4419'. [ 1654.596882][T22272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4419'. [ 1654.652867][T22272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4419'. [ 1654.701406][T22274] syzkaller0: entered promiscuous mode [ 1654.720505][ T6517] usb 6-1: USB disconnect, device number 20 [ 1654.743340][T22274] syzkaller0: entered allmulticast mode [ 1655.935879][T22287] trusted_key: encrypted_key: hex blob is missing [ 1658.970692][T22320] input: syz1 as /devices/virtual/input/input38 [ 1659.481137][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4433'. [ 1659.503301][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4433'. [ 1660.022610][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4433'. [ 1660.073786][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4433'. [ 1660.162478][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4433'. [ 1661.603038][T22337] trusted_key: encrypted_key: hex blob is missing [ 1666.676538][ T5468] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1666.928441][T22391] input: syz1 as /devices/virtual/input/input39 [ 1667.310428][ T5468] usb 7-1: Using ep0 maxpacket: 32 [ 1667.463190][ T5468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.483158][ T5468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.548084][T22401] fuse: Bad value for 'fd' [ 1667.987683][ T5468] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1668.026983][ T5468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.220211][ T5468] usb 7-1: config 0 descriptor?? [ 1668.283293][ T5468] hub 7-1:0.0: USB hub found [ 1668.494014][ T5468] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1668.543722][ T5468] usbhid 7-1:0.0: can't add hid device: -71 [ 1668.555739][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4455'. [ 1668.565283][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4455'. [ 1668.575176][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4455'. [ 1668.585836][ T5468] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1668.602926][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4455'. [ 1668.629598][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4455'. [ 1668.834685][ T5468] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 1669.020894][ T5468] usb 7-1: device reset changed ep0 maxpacket size! [ 1669.398630][ T5468] usb 7-1: USB disconnect, device number 10 [ 1670.005552][T22437] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1671.125330][T22447] trusted_key: encrypted_key: hex blob is missing [ 1672.133741][T22449] input: syz1 as /devices/virtual/input/input40 [ 1674.110361][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.117094][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.383789][T22482] fuse: Unknown parameter '0x0000000000000003' [ 1675.405738][T22482] fuse: Unknown parameter '0x0000000000000003' [ 1677.424197][T22501] input: syz1 as /devices/virtual/input/input41 [ 1677.499600][T22500] overlayfs: failed to clone upperpath [ 1678.164408][ T30] audit: type=1326 audit(2000001589.340:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.8.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddc58f749 code=0x7ffc0000 [ 1678.268978][ T30] audit: type=1326 audit(2000001589.340:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.8.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddc58f749 code=0x7ffc0000 [ 1678.329139][ T30] audit: type=1326 audit(2000001589.340:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.8.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddc58f749 code=0x7ffc0000 [ 1678.383882][ T30] audit: type=1326 audit(2000001589.340:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.8.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feddc58f749 code=0x7ffc0000 [ 1678.433251][ T30] audit: type=1326 audit(2000001589.340:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.8.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddc58f749 code=0x7ffc0000 [ 1678.483181][ T30] audit: type=1326 audit(2000001589.340:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.8.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddc58f749 code=0x7ffc0000 [ 1678.558787][ T30] audit: type=1326 audit(2000001589.340:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.8.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddc58f749 code=0x7ffc0000 [ 1678.640130][ T30] audit: type=1326 audit(2000001589.340:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.8.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddc58f749 code=0x7ffc0000 [ 1678.706344][ T30] audit: type=1326 audit(2000001589.340:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.8.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7feddc58f749 code=0x7ffc0000 [ 1678.879409][ T30] audit: type=1326 audit(2000001589.340:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.8.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddc58f749 code=0x7ffc0000 [ 1679.200286][T12517] IPVS: starting estimator thread 0... [ 1679.292956][T22524] IPVS: using max 24 ests per chain, 57600 per kthread [ 1679.535171][T22532] binder: 22530:22532 ioctl c0306201 200000000300 returned -11 [ 1683.280883][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1683.280906][ T30] audit: type=1326 audit(2000001594.452:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.7.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1683.375490][ T30] audit: type=1326 audit(2000001594.492:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.7.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1683.525527][T22583] input: syz1 as /devices/virtual/input/input42 [ 1683.911231][ T30] audit: type=1326 audit(2000001594.492:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.7.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1683.963573][ T30] audit: type=1326 audit(2000001594.492:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.7.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1683.991685][ T30] audit: type=1326 audit(2000001594.492:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.7.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1684.029864][ T30] audit: type=1326 audit(2000001594.492:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.7.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1684.054707][ T30] audit: type=1326 audit(2000001594.492:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.7.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1688.466586][T22631] input: syz1 as /devices/virtual/input/input43 [ 1689.429098][T22646] hfs: can't find a HFS filesystem on dev nullb0 [ 1689.818509][ T6517] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1689.989154][ T6517] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 1690.010550][ T6517] usb 1-1: config 0 has no interface number 0 [ 1690.048202][ T6517] usb 1-1: config 0 interface 126 has no altsetting 0 [ 1690.388605][ T6517] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1690.491334][ T6517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.539773][ T6517] usb 1-1: Product: syz [ 1690.547592][ T6517] usb 1-1: Manufacturer: syz [ 1690.564417][ T6517] usb 1-1: SerialNumber: syz [ 1690.618945][ T6517] usb 1-1: config 0 descriptor?? [ 1690.828007][ T9] usb 1-1: USB disconnect, device number 24 [ 1692.697318][T22683] trusted_key: encrypted_key: hex blob is missing [ 1693.712302][T22693] tmpfs: Cannot enable quota on remount [ 1695.285042][T22708] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4548'. [ 1695.948361][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4551'. [ 1697.149185][T22735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4557'. [ 1697.230322][T22737] fuse: Unknown parameter 'fd0x0000000000000006' [ 1697.943770][T22735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4557'. [ 1698.647355][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4559'. [ 1698.673158][T22715] syz.0.4550 (22715): drop_caches: 2 [ 1699.564314][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4565'. [ 1702.788775][T22784] overlayfs: failed to clone upperpath [ 1703.312904][T22792] netlink: 'syz.0.4577': attribute type 27 has an invalid length. [ 1703.320848][T22792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4577'. [ 1703.492746][T22798] trusted_key: encrypted_key: hex blob is missing [ 1703.713498][T22797] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4576'. [ 1706.201904][T22823] vivid-000: kernel_thread() failed [ 1708.152907][T22840] netlink: 'syz.0.4589': attribute type 27 has an invalid length. [ 1708.161636][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4589'. [ 1709.353348][T22851] trusted_key: encrypted_key: hex blob is missing [ 1711.076934][T22860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4594'. [ 1712.377999][T22885] netlink: 'syz.7.4602': attribute type 27 has an invalid length. [ 1712.386173][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4602'. [ 1712.828820][T22882] overlayfs: failed to clone upperpath [ 1713.076951][T22895] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4604'. [ 1713.424410][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4604'. [ 1713.480730][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4604'. [ 1713.518084][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4604'. [ 1715.999668][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4611'. [ 1717.526767][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4617'. [ 1717.553789][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4617'. [ 1717.585428][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4617'. [ 1717.605879][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4617'. [ 1719.010515][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4626'. [ 1721.678009][T22997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4639'. [ 1724.482507][T23029] random: crng reseeded on system resumption [ 1724.698752][T23028] tipc: Enabling of bearer rejected, failed to enable media [ 1725.211864][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4654'. [ 1726.406124][T23060] tipc: Enabling of bearer rejected, failed to enable media [ 1728.216650][T23084] tipc: Enabled bearer , priority 0 [ 1728.232812][T23084] syzkaller0: entered promiscuous mode [ 1728.251617][T23084] syzkaller0: entered allmulticast mode [ 1728.276381][T23084] tipc: Resetting bearer [ 1728.294995][T23083] tipc: Resetting bearer [ 1728.429418][T23083] tipc: Disabling bearer [ 1728.698775][T23098] random: crng reseeded on system resumption [ 1730.285532][T23115] fuse: Unknown parameter 'group_i00000000000000000000' [ 1734.031699][T23137] trusted_key: encrypted_key: hex blob is missing [ 1735.525394][T23153] No source specified [ 1736.115838][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.132525][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.399104][T23156] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1736.462350][T23155] fuse: Bad value for 'fd' [ 1737.338194][T23175] 9pnet_fd: Insufficient options for proto=fd [ 1737.976620][T23182] random: crng reseeded on system resumption [ 1738.002889][T23184] trusted_key: encrypted_key: hex blob is missing [ 1740.446442][T23206] fuse: Unknown parameter 'group_id00000000000000000000' [ 1742.764601][T23222] binder: 23220:23222 unknown command 0 [ 1742.770237][T23222] binder: 23220:23222 ioctl c0306201 200000000080 returned -22 [ 1742.790221][T23222] binder: 23220:23222 ioctl c0306201 200000000300 returned -11 [ 1742.815973][T23223] trusted_key: encrypted_key: hex blob is missing [ 1746.775948][T23259] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4726'. [ 1748.268215][T23267] netlink: 'syz.8.4718': attribute type 5 has an invalid length. [ 1748.869524][T23273] binder: 23271:23273 unknown command 0 [ 1748.875229][T23273] binder: 23271:23273 ioctl c0306201 200000000080 returned -22 [ 1748.918214][T23273] binder: 23271:23273 ioctl c0306201 200000000300 returned -11 [ 1749.073523][T23275] overlayfs: failed to clone upperpath [ 1749.432929][T23283] overlayfs: failed to clone upperpath [ 1752.038383][T23311] binder: 23307:23311 unknown command 0 [ 1752.093003][T23311] binder: 23307:23311 ioctl c0306201 200000000080 returned -22 [ 1752.202064][T23311] binder: 23307:23311 ioctl c0306201 200000000300 returned -11 [ 1753.848439][T23329] overlayfs: failed to clone upperpath [ 1754.031063][T23337] tipc: Enabled bearer , priority 0 [ 1755.001683][T23339] syzkaller0: entered promiscuous mode [ 1755.060140][T23339] syzkaller0: entered allmulticast mode [ 1755.117488][T23336] tipc: Resetting bearer [ 1755.248089][T23350] binder: 23349:23350 unknown command 0 [ 1755.260462][T23350] binder: 23349:23350 ioctl c0306201 200000000080 returned -22 [ 1755.274176][T23336] tipc: Disabling bearer [ 1755.293728][T23350] binder: 23349:23350 ioctl c0306201 0 returned -14 [ 1755.304567][T23345] netlink: 'syz.8.4754': attribute type 5 has an invalid length. [ 1755.333729][T23350] binder: 23349:23350 ioctl c0306201 200000000300 returned -11 [ 1755.595445][T23358] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1755.607671][T23358] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1755.617945][T23358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1755.626398][T23358] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1755.635981][T23358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1755.908723][T23368] overlayfs: failed to clone upperpath [ 1757.663926][ T5826] Bluetooth: hci1: command tx timeout [ 1759.442075][T23355] lo speed is unknown, defaulting to 1000 [ 1759.719548][T19670] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.754862][ T5826] Bluetooth: hci1: command tx timeout [ 1759.832633][T23388] netlink: 'syz.8.4766': attribute type 5 has an invalid length. [ 1760.066663][T19670] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.099987][T23395] binder: 23393:23395 unknown command 0 [ 1760.132302][T23395] binder: 23393:23395 ioctl c0306201 200000000080 returned -22 [ 1760.144926][T23395] binder: 23393:23395 ioctl c0306201 200000000300 returned -11 [ 1760.644621][T23397] tipc: Started in network mode [ 1760.694380][T23397] tipc: Node identity 4e1d26d7182, cluster identity 4711 [ 1760.942404][T23397] tipc: Enabled bearer , priority 0 [ 1761.172820][T23408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4771'. [ 1761.821907][ T5826] Bluetooth: hci1: command tx timeout [ 1762.049103][T19670] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.105237][T23390] syzkaller0: entered promiscuous mode [ 1762.111430][T23390] syzkaller0: entered allmulticast mode [ 1762.138957][T17702] tipc: Node number set to 1446848215 [ 1762.162281][T23389] tipc: Resetting bearer [ 1762.436032][T23389] tipc: Disabling bearer [ 1763.297320][T19670] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.498992][T23433] binder: 23432:23433 unknown command 0 [ 1763.571256][T23433] binder: 23432:23433 ioctl c0306201 200000000080 returned -22 [ 1763.574099][T23438] binder: 23432:23438 ioctl c0306201 0 returned -14 [ 1763.596385][T23438] binder: 23432:23438 ioctl c0306201 200000000300 returned -11 [ 1763.607375][T23436] binder: 23434:23436 unknown command 0 [ 1763.654310][T23436] binder: 23434:23436 ioctl c0306201 200000000080 returned -22 [ 1763.900393][ T5826] Bluetooth: hci1: command tx timeout [ 1764.719085][T23355] chnl_net:caif_netlink_parms(): no params data found [ 1764.850004][T19670] bridge_slave_1: left allmulticast mode [ 1764.856803][T19670] bridge_slave_1: left promiscuous mode [ 1765.055561][T23452] trusted_key: encrypted_key: hex blob is missing [ 1765.214177][T19670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1765.409754][T19670] bridge_slave_0: left allmulticast mode [ 1765.542600][T19670] bridge_slave_0: left promiscuous mode [ 1765.554657][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.823302][T19670] batman_adv: batadv0: Interface deactivated: gretap2 [ 1768.327561][T19670] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1768.830466][T19670] batman_adv: batadv0: Removing interface: gretap2 [ 1770.603403][T19670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1770.620037][T19670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1770.638077][T19670] bond0 (unregistering): Released all slaves [ 1770.667180][T19670] bond1 (unregistering): Released all slaves [ 1770.746210][T23474] tipc: Enabling of bearer rejected, failed to enable media [ 1771.141807][T23508] trusted_key: encrypted_key: hex blob is missing [ 1771.327513][T19670] tipc: Left network mode [ 1772.997034][T23355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.004392][T23355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.038927][T23355] bridge_slave_0: entered allmulticast mode [ 1773.054331][T23355] bridge_slave_0: entered promiscuous mode [ 1773.078894][T23355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.157249][T23355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.176078][T23355] bridge_slave_1: entered allmulticast mode [ 1773.183531][T23355] bridge_slave_1: entered promiscuous mode [ 1773.209865][T23532] 9p: Bad value for 'wfdno' [ 1773.218062][T23532] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4800'. [ 1773.402064][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 1773.416232][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 1773.429103][T23538] binder: 23534:23538 unknown command 0 [ 1773.434693][T23538] binder: 23534:23538 ioctl c0306201 200000000080 returned -22 [ 1773.695811][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 1773.712786][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 1773.949866][T23546] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1774.405443][T23535] ceph: No mds server is up or the cluster is laggy [ 1774.538082][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1774.549787][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1774.590510][T23355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.669459][T23355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1774.985493][T23555] tipc: Enabled bearer , priority 0 [ 1775.571398][T23553] syzkaller0: entered promiscuous mode [ 1775.608581][T23553] syzkaller0: entered allmulticast mode [ 1775.941263][T19670] hsr_slave_0: left promiscuous mode [ 1775.956334][T19670] hsr_slave_1: left promiscuous mode [ 1775.973721][T19670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1775.986471][T19670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1776.022394][T19670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1776.035118][T19670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1776.127925][T19670] veth1_macvtap: left promiscuous mode [ 1776.137603][T19670] veth0_macvtap: left promiscuous mode [ 1776.154424][T19670] veth1_vlan: left promiscuous mode [ 1776.165768][T19670] veth0_vlan: left promiscuous mode [ 1777.823718][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4813'. [ 1779.600928][T23589] hfs: can't find a HFS filesystem on dev nullb0 [ 1779.977771][T23594] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1781.326137][T19670] team0 (unregistering): Port device team_slave_1 removed [ 1781.416576][T23613] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4827'. [ 1781.516529][T19670] team0 (unregistering): Port device team_slave_0 removed [ 1782.296344][T23617] binder: 23616:23617 unknown command 0 [ 1782.316176][T23617] binder: 23616:23617 ioctl c0306201 200000000080 returned -22 [ 1782.374714][T23617] binder_alloc: 23616: binder_alloc_buf, no vma [ 1782.394217][T23617] binder: 23616:23617 ioctl c0306201 200000000300 returned -11 [ 1782.592213][T23622] hfs: can't find a HFS filesystem on dev nullb0 [ 1782.839751][T23562] tipc: Resetting bearer [ 1782.855689][T23551] tipc: Resetting bearer [ 1783.370173][T23551] tipc: Disabling bearer [ 1783.404332][T23355] team0: Port device team_slave_0 added [ 1783.433547][T23355] team0: Port device team_slave_1 added [ 1783.746650][T23355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.767383][T23355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.829660][T23355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.845109][T23355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.856212][T23355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.925749][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4837'. [ 1784.043321][T23355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.493461][T19670] IPVS: stop unused estimator thread 0... [ 1785.151131][T23355] hsr_slave_0: entered promiscuous mode [ 1785.169989][T23653] trusted_key: encrypted_key: hex blob is missing [ 1785.977709][T23355] hsr_slave_1: entered promiscuous mode [ 1786.003634][ T30] audit: type=1326 audit(2000001697.234:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1786.020815][T23355] debugfs: 'hsr0' already exists in 'hsr' [ 1786.050926][ T30] audit: type=1326 audit(2000001697.264:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1786.054841][T23355] Cannot create hsr debugfs directory [ 1786.130883][ T30] audit: type=1326 audit(2000001697.264:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1786.247487][ T30] audit: type=1326 audit(2000001697.264:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1786.316566][ T30] audit: type=1326 audit(2000001697.264:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1786.469839][ T30] audit: type=1326 audit(2000001697.264:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1786.615564][ T30] audit: type=1326 audit(2000001697.264:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1786.820314][ T30] audit: type=1326 audit(2000001697.264:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1786.921013][ T30] audit: type=1326 audit(2000001697.264:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1786.994632][ T30] audit: type=1326 audit(2000001697.264:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23656 comm="syz.7.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc513f8f749 code=0x7ffc0000 [ 1787.477860][T23670] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1788.595174][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4851'. [ 1789.786251][T23355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1789.823210][T23355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1789.847098][T23355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1789.905724][T23355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1790.010746][T23694] binder: 23693:23694 unknown command 0 [ 1790.016468][T23694] binder: 23693:23694 ioctl c0306201 200000000080 returned -22 [ 1790.743755][T23355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1790.801322][T23355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1790.859052][T15677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.866302][T15677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1790.907686][T15677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.914965][T15677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.201460][T23723] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1791.239521][T23355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1792.547407][T23734] random: crng reseeded on system resumption [ 1792.578726][T23355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1792.923897][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4869'. [ 1793.003203][T23741] binder: 23740:23741 unknown command 0 [ 1793.107899][T23741] binder: 23740:23741 ioctl c0306201 200000000080 returned -22 [ 1794.725610][T23355] veth0_vlan: entered promiscuous mode [ 1794.827503][T23355] veth1_vlan: entered promiscuous mode [ 1794.932250][T23355] veth0_macvtap: entered promiscuous mode [ 1794.972687][T23355] veth1_macvtap: entered promiscuous mode [ 1795.016263][T23355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.085645][T23355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.107552][T20220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.125814][T20220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.336711][T20220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.375818][T20220] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.650236][T23771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1796.930302][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.936747][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.147499][T19654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1797.172205][T19654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.276275][T19661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1797.313829][T19661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.398383][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4755'. [ 1799.207222][T23795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4882'. [ 1799.282595][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 1799.299077][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 1800.266402][T18133] libceph: connect (1)[c::]:6789 error -101 [ 1800.277963][T18133] libceph: mon0 (1)[c::]:6789 connect error [ 1800.618868][T23797] ceph: No mds server is up or the cluster is laggy [ 1802.735513][T23823] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1803.126742][T23826] random: crng reseeded on system resumption [ 1803.920470][T23834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4890'. [ 1806.679588][T23867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4900'. [ 1806.808307][T21662] libceph: connect (1)[c::]:6789 error -101 [ 1806.893489][T21662] libceph: mon0 (1)[c::]:6789 connect error [ 1807.159375][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 1807.171097][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 1808.058823][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 1808.078246][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 1808.141372][T23869] ceph: No mds server is up or the cluster is laggy [ 1809.101588][T23358] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1809.116045][T23358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1809.125332][T23358] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1809.133413][T23358] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1809.143708][T23358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1809.416506][T23896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4909'. [ 1810.472282][T23902] netlink: 'syz.5.4910': attribute type 4 has an invalid length. [ 1811.232664][T23887] lo speed is unknown, defaulting to 1000 [ 1811.250327][ T5826] Bluetooth: hci3: command tx timeout [ 1812.116838][T18133] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1812.122739][T23887] chnl_net:caif_netlink_parms(): no params data found [ 1812.241758][T23920] 9pnet_fd: Insufficient options for proto=fd [ 1812.316881][T18133] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.366013][T18133] usb 6-1: config 0 has no interfaces? [ 1812.387588][T18133] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1812.420752][T18133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.441760][T23887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.445934][T18133] usb 6-1: Product: syz [ 1812.450732][T23887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.461285][T18133] usb 6-1: Manufacturer: syz [ 1812.461310][T18133] usb 6-1: SerialNumber: syz [ 1812.472362][T23887] bridge_slave_0: entered allmulticast mode [ 1812.483120][T18133] usb 6-1: config 0 descriptor?? [ 1812.483508][T23887] bridge_slave_0: entered promiscuous mode [ 1812.497562][T23887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.504967][T23887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.512744][T23887] bridge_slave_1: entered allmulticast mode [ 1812.540205][T23887] bridge_slave_1: entered promiscuous mode [ 1812.557561][T23927] syz_tun: entered allmulticast mode [ 1813.038466][T18133] usb 6-1: USB disconnect, device number 21 [ 1813.326263][ T5826] Bluetooth: hci3: command tx timeout [ 1813.691634][T23926] syz_tun: left allmulticast mode [ 1813.797220][T23887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1813.884896][T23887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1814.064483][T23887] team0: Port device team_slave_0 added [ 1814.099854][T23887] team0: Port device team_slave_1 added [ 1814.136007][T23940] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1814.436922][T23887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.443940][T23887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.478439][T23946] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1815.038062][T23887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.099737][T23887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1815.126243][T23887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.201221][T23887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.394971][ T5826] Bluetooth: hci3: command tx timeout [ 1815.421268][T23887] hsr_slave_0: entered promiscuous mode [ 1815.435707][T23887] hsr_slave_1: entered promiscuous mode [ 1815.448567][T23887] debugfs: 'hsr0' already exists in 'hsr' [ 1815.464505][T23887] Cannot create hsr debugfs directory [ 1815.648027][T23958] fuse: Unknown parameter 'user_i00000000000000000000' [ 1815.655326][ T5920] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1815.944234][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 1815.951788][ T5920] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1815.960926][ T5920] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1815.980268][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1815.990611][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1816.001411][ T5920] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1816.623883][ T5920] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1816.633084][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.867746][T23887] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1816.883328][T23887] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1816.908886][ T5920] usb 1-1: GET_CAPABILITIES returned 0 [ 1816.914588][ T5920] usbtmc 1-1:16.0: can't read capabilities [ 1816.926963][T23887] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1816.940469][T23887] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1817.043751][ T6015] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1817.100054][T23887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.126930][T23887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.763635][ T5826] Bluetooth: hci3: command tx timeout [ 1817.807536][ T6015] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.850605][T19654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.857886][T19654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.867285][T23955] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 1817.869721][ T6019] usb 1-1: USB disconnect, device number 25 [ 1817.883989][ T6015] usb 6-1: config 0 has no interfaces? [ 1817.884113][T23977] usb 1-1: usbtmc_ioctl_clear_out_halt returned -19 [ 1817.892623][ T6015] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1817.907411][ T6015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.915568][ T6015] usb 6-1: Product: syz [ 1817.919909][ T6015] usb 6-1: Manufacturer: syz [ 1817.925493][ T6015] usb 6-1: SerialNumber: syz [ 1817.964703][T19654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.972015][T19654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1817.991363][ T6015] usb 6-1: config 0 descriptor?? [ 1818.227991][ T9] usb 6-1: USB disconnect, device number 22 [ 1819.120476][T23988] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1819.452438][ T6019] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1819.468791][T24000] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1819.521976][T23887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.605929][ T6019] usb 1-1: device descriptor read/64, error -71 [ 1819.616289][T24004] binder: 24003:24004 unknown command 0 [ 1819.626348][T24004] binder: 24003:24004 ioctl c0306201 200000000080 returned -22 [ 1819.649971][T24004] binder: BINDER_SET_CONTEXT_MGR already set [ 1819.656610][T24004] binder: 24003:24004 ioctl 4018620d 200000000040 returned -16 [ 1819.669112][T24004] binder: 24003:24004 ioctl c0306201 200000000300 returned -11 [ 1819.872753][ T6019] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1820.022915][ T6019] usb 1-1: device descriptor read/64, error -71 [ 1820.145663][ T6019] usb usb1-port1: attempt power cycle [ 1820.967712][T23887] veth0_vlan: entered promiscuous mode [ 1821.006475][T23887] veth1_vlan: entered promiscuous mode [ 1821.095103][T23887] veth0_macvtap: entered promiscuous mode [ 1821.174306][T23887] veth1_macvtap: entered promiscuous mode [ 1821.216218][T23887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1821.238214][T23887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1821.268382][ T1154] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.286751][ T1154] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.365863][T24033] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.4943'. [ 1821.387985][T24034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4944'. [ 1821.443773][ T1154] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.495515][T24033] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4943'. [ 1821.545798][ T1154] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.257027][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.323454][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.434983][T12856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.454353][T12856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.506787][T24042] binder: 24040:24042 unknown command 0 [ 1822.526846][T24042] binder: 24040:24042 ioctl c0306201 200000000080 returned -22 [ 1822.553659][T24042] binder: BINDER_SET_CONTEXT_MGR already set [ 1822.570239][T24042] binder: 24040:24042 ioctl 4018620d 200000000040 returned -16 [ 1822.601785][T24042] binder: 24040:24042 ioctl c0306201 200000000300 returned -11 [ 1822.959912][T24053] hfs: can't find a HFS filesystem on dev nullb0 [ 1825.527312][T24076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4957'. [ 1826.448032][T24081] binder: 24080:24081 ioctl c0306201 200000000300 returned -11 [ 1828.190755][T24097] hfs: can't find a HFS filesystem on dev nullb0 [ 1828.192644][T24095] fuse: Unknown parameter 'user_id00000000000000000000' [ 1828.828186][ T6019] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1829.268237][ T6019] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.278772][ T6019] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1829.311956][ T6019] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1829.330876][ T6019] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.355781][ T6019] usb 8-1: Product: syz [ 1829.362949][ T6019] usb 8-1: Manufacturer: syz [ 1829.369429][ T6019] usb 8-1: SerialNumber: syz [ 1829.484775][ T6019] usb 8-1: config 0 descriptor?? [ 1829.821571][ T6015] usb 8-1: USB disconnect, device number 8 [ 1829.941324][T24112] binder: 24111:24112 ioctl c0306201 200000000300 returned -11 [ 1830.174389][T24121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4973'. [ 1831.194430][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4974'. [ 1832.248021][T24127] fuse: Unknown parameter 'user_id00000000000000000000' [ 1832.586963][T18133] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1832.967051][T18133] usb 1-1: Using ep0 maxpacket: 16 [ 1832.977209][T18133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.988671][T18133] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1832.998341][T18133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.047147][T18133] usb 1-1: config 0 descriptor?? [ 1833.175936][ T5468] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1833.386829][ T5468] usb 8-1: too many configurations: 13, using maximum allowed: 8 [ 1833.585505][ T5468] usb 8-1: config 0 has no interfaces? [ 1833.683955][ T5468] usb 8-1: config 0 has no interfaces? [ 1833.766444][ T5468] usb 8-1: config 0 has no interfaces? [ 1833.767951][ T5920] IPVS: starting estimator thread 0... [ 1834.072036][ T5468] usb 8-1: config 0 has no interfaces? [ 1834.091965][T24145] IPVS: using max 24 ests per chain, 57600 per kthread [ 1834.276325][T18133] input: HID 041e:3100 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.000B/input/input44 [ 1834.299245][ T5468] usb 8-1: config 0 has no interfaces? [ 1834.325305][ T5468] usb 8-1: config 0 has no interfaces? [ 1834.346480][ T5468] usb 8-1: config 0 has no interfaces? [ 1834.376584][ T5468] usb 8-1: config 0 has no interfaces? [ 1834.394204][ T5468] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1834.413382][ T5468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.595469][ T5468] usb 8-1: Product: syz [ 1834.604944][ T5468] usb 8-1: Manufacturer: syz [ 1834.609623][ T5468] usb 8-1: SerialNumber: syz [ 1834.626853][T18133] creative-sb0540 0003:041E:3100.000B: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.0-1/input0 [ 1834.673298][ T5468] usb 8-1: config 0 descriptor?? [ 1834.706819][T18133] usb 1-1: USB disconnect, device number 29 [ 1834.752798][T24157] random: crng reseeded on system resumption [ 1834.786249][T24155] fido_id[24155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1834.913721][ T6019] usb 8-1: USB disconnect, device number 9 [ 1835.644754][ T6019] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1835.822952][ T6019] usb 8-1: Using ep0 maxpacket: 32 [ 1835.838790][ T6019] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1835.864321][ T6019] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1835.888483][ T6019] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1835.914175][ T6019] usb 8-1: Product: syz [ 1835.918419][ T6019] usb 8-1: Manufacturer: syz [ 1835.923041][ T6019] usb 8-1: SerialNumber: syz [ 1835.951975][ T6019] usb 8-1: config 0 descriptor?? [ 1835.963127][T24135] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1835.985300][T24171] fuse: Bad value for 'fd' [ 1836.303697][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4992'. [ 1836.475892][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 1836.482354][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 1836.712558][T24184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.741909][T24184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.754398][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 1836.762228][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 1836.831664][T24189] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4994'. [ 1836.873053][T24184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.000561][T24179] ceph: No mds server is up or the cluster is laggy [ 1837.156480][T24184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.307281][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 1837.372979][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 1837.754917][ T6015] usb 8-1: USB disconnect, device number 10 [ 1837.956990][T24195] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1838.704495][T24206] fuse: Bad value for 'fd' [ 1839.705008][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1839.987199][ T6332] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1840.054840][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.126505][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1840.149715][ T9] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1840.180361][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.201487][ T9] usb 8-1: Product: syz [ 1840.215196][ T9] usb 8-1: Manufacturer: syz [ 1840.230431][ T9] usb 8-1: SerialNumber: syz [ 1840.252439][ T6332] usb 1-1: Using ep0 maxpacket: 32 [ 1840.297317][ T6332] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.313665][ T9] usb 8-1: config 0 descriptor?? [ 1840.328894][T24227] 9p: Bad value for 'port' [ 1840.344280][ T6332] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1840.369006][ T6332] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1840.380669][ T6332] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1840.489741][T24230] overlayfs: missing 'lowerdir' [ 1840.836923][ T6332] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1840.882223][ T6015] usb 8-1: USB disconnect, device number 11 [ 1840.975504][ T6332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.995009][ T6332] usb 1-1: Product: syz [ 1841.007853][ T6332] usb 1-1: Manufacturer: syz [ 1841.023038][T24235] 9p: Bad value for 'wfdno' [ 1841.031167][T24235] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5012'. [ 1841.076751][ T6332] usb 1-1: SerialNumber: syz [ 1841.191516][ T6015] IPVS: starting estimator thread 0... [ 1841.234107][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1841.322696][T24240] IPVS: using max 26 ests per chain, 62400 per kthread [ 1841.606337][ T6332] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input45 [ 1841.737141][ T6332] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1841.737559][ T6517] libceph: connect (1)[c::]:6789 error -101 [ 1841.746697][ T6332] (id 0x00) [ 1841.778413][ T6517] libceph: mon0 (1)[c::]:6789 connect error [ 1841.853150][ T6332] rc_core: IR keymap rc-imon-pad not found [ 1842.042227][T24235] ceph: No mds server is up or the cluster is laggy [ 1842.049012][ T6332] Registered IR keymap rc-empty [ 1842.059905][ T6332] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1842.099474][ T5468] libceph: connect (1)[c::]:6789 error -101 [ 1842.117354][ T5468] libceph: mon0 (1)[c::]:6789 connect error [ 1842.136090][ T6332] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1842.165042][T24253] fuse: Bad value for 'fd' [ 1842.189424][ T6332] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1842.394107][ T6332] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input46 [ 1842.547252][ T6332] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:30> initialized [ 1843.533661][T24243] lo speed is unknown, defaulting to 1000 [ 1844.540146][ T6332] usb 1-1: USB disconnect, device number 30 [ 1845.377779][T24276] 9p: Bad value for 'port' [ 1845.546002][T24278] overlayfs: missing 'lowerdir' [ 1846.286955][T24287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5025'. [ 1846.766739][T24289] fuse: Unknown parameter '0x0000000000000003' [ 1846.983996][T24299] netlink: 192 bytes leftover after parsing attributes in process `syz.9.5033'. [ 1847.239152][T24312] overlayfs: missing 'lowerdir' [ 1847.335230][T24314] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5034'. [ 1848.027518][T17702] libceph: connect (1)[c::]:6789 error -101 [ 1848.047103][T24314] ceph: No mds server is up or the cluster is laggy [ 1848.055547][T17702] libceph: mon0 (1)[c::]:6789 connect error [ 1848.333384][T17702] libceph: connect (1)[c::]:6789 error -101 [ 1848.471279][T17702] libceph: mon0 (1)[c::]:6789 connect error [ 1849.774217][T24335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5043'. [ 1850.415985][T24339] fuse: Unknown parameter '0x0000000000000003' [ 1851.697271][T24345] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5047'. [ 1851.855858][T24347] sctp: [Deprecated]: syz.5.5048 (pid 24347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1851.855858][T24347] Use struct sctp_sack_info instead [ 1852.468171][T24366] fuse: Unknown parameter '0x0000000000000003' [ 1853.985844][T24378] pim6reg1: entered promiscuous mode [ 1853.991214][T24378] pim6reg1: entered allmulticast mode [ 1854.108597][T24388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5062'. [ 1854.423244][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 1854.429553][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 1854.695218][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 1854.701410][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 1854.829095][T24390] ceph: No mds server is up or the cluster is laggy [ 1855.515254][T24419] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5075'. [ 1857.404640][T24445] pim6reg1: entered promiscuous mode [ 1857.425342][T24445] pim6reg1: entered allmulticast mode [ 1857.820205][T24450] tipc: Started in network mode [ 1857.839940][T24450] tipc: Node identity 96c5e99ac893, cluster identity 4711 [ 1857.879096][T24450] tipc: Enabled bearer , priority 0 [ 1857.976078][T24454] syzkaller0: entered promiscuous mode [ 1857.982428][T24454] syzkaller0: entered allmulticast mode [ 1858.347733][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.360786][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.371271][T24454] tipc: Resetting bearer [ 1858.640619][T24449] tipc: Resetting bearer [ 1858.780558][T24449] tipc: Disabling bearer [ 1859.265472][T24475] 9p: Bad value for 'wfdno' [ 1859.266940][T24475] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5093'. [ 1859.365985][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1859.366153][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1859.622791][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1859.776044][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1860.512359][ T6015] libceph: connect (1)[c::]:6789 error -101 [ 1860.518497][ T6015] libceph: mon0 (1)[c::]:6789 connect error [ 1860.592622][T24476] ceph: No mds server is up or the cluster is laggy [ 1860.866138][T24492] binder: 24491:24492 unknown command 0 [ 1860.912038][T24492] binder: 24491:24492 ioctl c0306201 200000000080 returned -22 [ 1860.930367][T24492] binder: 24491:24492 ioctl c0306201 200000000300 returned -11 [ 1861.371886][ T6015] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1861.532467][ T6015] usb 8-1: Using ep0 maxpacket: 16 [ 1861.734920][ T6015] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1861.762823][ T6015] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1861.783017][ T6015] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1861.802301][ T6015] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1861.812330][ T6015] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.846257][ T6015] usb 8-1: config 0 descriptor?? [ 1862.288023][ T6015] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 1862.322012][ T6015] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 1862.381409][ T6015] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.000C/input/input47 [ 1862.531619][ T6015] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1862.587701][ T6015] usb 8-1: USB disconnect, device number 12 [ 1863.051021][T24533] fido_id[24533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1863.390061][T24544] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1863.399224][T24544] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1863.721538][T24555] binder: 24553:24555 unknown command 0 [ 1863.741011][T24555] binder: 24553:24555 ioctl c0306201 200000000080 returned -22 [ 1863.829692][T24555] binder: 24553:24555 ioctl c0306201 200000000300 returned -11 [ 1864.442130][T24568] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5131'. [ 1865.777132][T24577] pim6reg1: entered promiscuous mode [ 1865.785515][T24577] pim6reg1: entered allmulticast mode [ 1866.005585][T24581] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1866.015191][T24581] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1866.565218][T24561] lo speed is unknown, defaulting to 1000 [ 1867.025877][T24591] pim6reg1: entered promiscuous mode [ 1867.039482][T24591] pim6reg1: entered allmulticast mode [ 1867.046837][T24589] pim6reg1: entered promiscuous mode [ 1867.085793][T24589] pim6reg1: entered allmulticast mode [ 1867.455152][T24599] pim6reg1: entered promiscuous mode [ 1867.513341][T24599] pim6reg1: entered allmulticast mode [ 1868.019529][T24615] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5146'. [ 1868.327624][T24622] netlink: 774 bytes leftover after parsing attributes in process `syz.9.5150'. [ 1868.410591][T24622] netlink: 'syz.9.5150': attribute type 1 has an invalid length. [ 1870.000472][T24659] netlink: 400 bytes leftover after parsing attributes in process `syz.7.5164'. [ 1871.028969][T24666] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5168'. [ 1872.362108][T24694] netlink: 'syz.0.5179': attribute type 27 has an invalid length. [ 1872.370759][T24694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5179'. [ 1873.318742][T24701] netlink: 'syz.0.5182': attribute type 29 has an invalid length. [ 1873.374427][T24706] netlink: 'syz.0.5182': attribute type 29 has an invalid length. [ 1873.438419][T24701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1874.792569][T24726] C: renamed from team_slave_0 (while UP) [ 1874.812200][T24726] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5191'. [ 1875.241317][T24738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5194'. [ 1875.404799][T24740] netlink: 'syz.7.5193': attribute type 27 has an invalid length. [ 1875.415692][T24740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5193'. [ 1876.324945][T24746] netlink: 'syz.8.5197': attribute type 22 has an invalid length. [ 1877.564612][T24774] netlink: 'syz.0.5211': attribute type 29 has an invalid length. [ 1878.194448][T24781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5213'. [ 1878.442251][T24781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5213'. [ 1878.713507][T24784] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5212'. [ 1880.882100][T23358] Bluetooth: hci1: command 0x0406 tx timeout [ 1881.325458][T24816] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5229'. [ 1881.351577][T24816] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5229'. [ 1882.373804][T24823] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5231'. [ 1884.493600][T24858] netlink: 'syz.9.5243': attribute type 2 has an invalid length. [ 1884.503220][T24858] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5243'. [ 1884.932405][T24871] binder: 24869:24871 unknown command 0 [ 1884.947810][T24871] binder: 24869:24871 ioctl c0306201 200000000080 returned -22 [ 1884.985280][T24871] binder: 24869:24871 ioctl c0306201 200000000300 returned -11 [ 1886.943493][T24906] binder: 24905:24906 unknown command 0 [ 1886.953072][T24906] binder: 24905:24906 ioctl c0306201 200000000080 returned -22 [ 1886.986277][T24906] binder: 24905:24906 ioctl c0306201 200000000300 returned -11 [ 1888.017509][T24940] binder: 24939:24940 unknown command 0 [ 1888.041598][T24940] binder: 24939:24940 ioctl c0306201 200000000080 returned -22 [ 1888.088850][T24940] binder: 24939:24940 ioctl c0306201 200000000300 returned -11 [ 1889.271418][T24962] netlink: 'syz.8.5285': attribute type 27 has an invalid length. [ 1889.279464][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5285'. [ 1889.296020][T24965] binder: 24964:24965 unknown command 0 [ 1889.333315][T24965] binder: 24964:24965 ioctl c0306201 200000000080 returned -22 [ 1889.374433][T24965] binder: 24964:24965 ioctl c0306201 200000000300 returned -11 [ 1889.387869][T24967] netlink: 400 bytes leftover after parsing attributes in process `syz.5.5288'. [ 1891.404070][T25008] binder: 25006:25008 unknown command 0 [ 1891.417655][T25008] binder: 25006:25008 ioctl c0306201 200000000080 returned -22 [ 1891.426196][T25007] netlink: 'syz.8.5301': attribute type 27 has an invalid length. [ 1891.434857][T25007] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5301'. [ 1891.474292][T25008] binder: 25006:25008 ioctl c0306201 200000000300 returned -11 [ 1891.889039][T25020] netlink: 'syz.9.5308': attribute type 29 has an invalid length. [ 1891.922491][T25020] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5308'. [ 1893.275756][T25040] netlink: 'syz.7.5314': attribute type 27 has an invalid length. [ 1893.284094][T25040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5314'. [ 1895.017740][T25034] loop9: detected capacity change from 0 to 40427 [ 1895.101514][T25034] F2FS-fs (loop9): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 1895.192829][T25034] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1895.258743][T25034] F2FS-fs (loop9): Image doesn't support compression [ 1895.270972][T23358] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1895.294010][T25034] F2FS-fs (loop9): build fault injection rate: 690 [ 1895.425190][T23358] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1895.447417][T23358] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1895.485434][T23358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1895.505096][T23358] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1895.787473][T25034] F2FS-fs (loop9): build fault injection type: 0x35f7 [ 1895.817657][T25034] F2FS-fs (loop9): invalid crc value [ 1895.856197][T25034] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-4) [ 1896.052200][T25079] binder: 25078:25079 unknown command 0 [ 1896.070141][T25079] binder: 25078:25079 ioctl c0306201 200000000080 returned -22 [ 1896.123655][T25079] binder: 25078:25079 ioctl c0306201 200000000300 returned -11 [ 1896.917745][T25072] lo speed is unknown, defaulting to 1000 [ 1897.541414][T25072] chnl_net:caif_netlink_parms(): no params data found [ 1897.723478][ T52] Bluetooth: hci5: command tx timeout [ 1898.172225][T25072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1898.191616][T25072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.213791][T25072] bridge_slave_0: entered allmulticast mode [ 1898.244270][T25072] bridge_slave_0: entered promiscuous mode [ 1898.267950][T25072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.286976][T25072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.324167][T25072] bridge_slave_1: entered allmulticast mode [ 1898.359649][T25072] bridge_slave_1: entered promiscuous mode [ 1898.583909][T25123] 9p: Bad value for 'wfdno' [ 1898.617737][T25123] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5342'. [ 1898.676779][T25072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1898.719153][T25072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1898.866823][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 1898.886841][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 1899.294447][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 1899.304050][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 1899.350188][T25128] ceph: No mds server is up or the cluster is laggy [ 1899.429997][T25072] team0: Port device team_slave_0 added [ 1899.461020][T25072] team0: Port device team_slave_1 added [ 1899.513234][T25134] tipc: Started in network mode [ 1899.518208][T25134] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1899.550082][T25134] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1899.568067][T25134] tipc: Enabled bearer , priority 10 [ 1899.708703][T25072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1899.742396][T25072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.753285][ T52] Bluetooth: hci5: command tx timeout [ 1899.861628][T25072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1899.921290][T25072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1899.952209][T25072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1900.044491][T25072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1900.245261][T25072] hsr_slave_0: entered promiscuous mode [ 1900.271692][T25072] hsr_slave_1: entered promiscuous mode [ 1900.288010][T25072] debugfs: 'hsr0' already exists in 'hsr' [ 1900.304436][T25072] Cannot create hsr debugfs directory [ 1900.902605][T14009] tipc: Node number set to 1 [ 1901.916526][ T52] Bluetooth: hci5: command tx timeout [ 1903.289210][T25072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.990151][ T52] Bluetooth: hci5: command tx timeout [ 1904.135213][T25072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.507881][T25072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.036714][T25072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.224809][T25072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1906.272631][T25072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1906.320436][T25072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1906.347577][T25072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1907.759113][T25072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1907.909407][T25072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1907.957901][T15677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.965135][T15677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1908.037330][T25198] loop5: detected capacity change from 0 to 40427 [ 1908.056322][T19654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.063646][T19654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1908.085410][T25198] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1908.145364][T25198] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1908.197231][T25198] F2FS-fs (loop5): invalid crc_offset: 33558524 [ 1908.249960][T25198] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 1909.807283][T25072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1910.474774][T25072] veth0_vlan: entered promiscuous mode [ 1911.246762][T25072] veth1_vlan: entered promiscuous mode [ 1911.371598][T25072] veth0_macvtap: entered promiscuous mode [ 1911.403886][T25072] veth1_macvtap: entered promiscuous mode [ 1911.497541][T25072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1911.559116][T25072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1911.606954][T19670] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.636449][T19670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.681731][T19670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.739894][T19670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.057289][ T6057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1912.177798][ T6057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1912.746734][T19660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1912.778459][T19660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.285841][T25324] netlink: 'syz.8.5406': attribute type 12 has an invalid length. [ 1919.753557][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.759973][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.673415][T25380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1920.726629][T25380] block device autoloading is deprecated and will be removed. [ 1922.640459][T25394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5432'. [ 1924.771215][T25436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5437'. [ 1925.512012][T25442] netlink: 400 bytes leftover after parsing attributes in process `syz.8.5449'. [ 1928.747186][T25473] netlink: 400 bytes leftover after parsing attributes in process `syz.7.5460'. [ 1931.661807][T25507] loop5: detected capacity change from 0 to 512 [ 1932.061246][T25507] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1932.376488][T25076] Bluetooth: hci3: command 0x0406 tx timeout [ 1932.535393][T25507] EXT4-fs (loop5): 1 truncate cleaned up [ 1933.630913][T25507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1933.971562][T25507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1935.260348][T25522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5472'. [ 1935.491586][T25529] netlink: 400 bytes leftover after parsing attributes in process `syz.8.5475'. [ 1936.164196][T25545] loop1: detected capacity change from 0 to 512 [ 1936.965430][T25545] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1937.989112][T25545] EXT4-fs (loop1): 1 truncate cleaned up [ 1937.996962][T25545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1938.928961][T25072] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1938.956978][T25541] 9p: Bad value for 'wfdno' [ 1938.965577][T25541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5478'. [ 1939.010313][T25549] binder: 25544:25549 ioctl c0306201 200000000300 returned -11 [ 1939.191710][T25556] loop1: detected capacity change from 0 to 128 [ 1939.222157][T25314] libceph: connect (1)[c::]:6789 error -101 [ 1939.229120][T25314] libceph: mon0 (1)[c::]:6789 connect error [ 1939.256777][T25556] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1939.288939][T25556] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1939.391113][T25556] syz.1.5481 (pid 25556) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1939.432749][T25550] ceph: No mds server is up or the cluster is laggy [ 1939.748077][T25556] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-aesni,nhpoly1305-avx2)" [ 1940.081867][T25576] openvswitch: netlink: Flow actions attr not present in new flow. [ 1940.790609][T25072] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1943.465438][T25605] binder: 25604:25605 ioctl c0306201 200000000300 returned -11 [ 1943.814356][T25612] loop7: detected capacity change from 0 to 512 [ 1944.879641][T25612] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1944.906444][T25612] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5493: bg 0: block 393: padding at end of block bitmap is not set [ 1944.973652][T25617] openvswitch: netlink: Flow actions attr not present in new flow. [ 1945.299718][T25612] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1945.322774][T25612] EXT4-fs (loop7): 2 truncates cleaned up [ 1945.343979][T25612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1945.817684][T15980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1947.542448][T25630] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] SMP KASAN PTI [ 1947.554419][T25630] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 1947.562855][T25630] CPU: 1 UID: 0 PID: 25630 Comm: syz.1.5497 Not tainted syzkaller #0 PREEMPT(full) [ 1947.572234][T25630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1947.582309][T25630] RIP: 0010:mntput+0x31/0xc0 [ 1947.586911][T25630] Code: 41 56 41 54 53 48 89 fb e8 bc d3 7e ff 48 85 db 74 47 49 bf 00 00 00 00 00 fc ff df 4c 8d b3 24 01 00 00 4d 89 f4 49 c1 ec 03 <43> 0f b6 04 3c 84 c0 75 50 48 83 c3 e0 41 8b 2e 31 ff 89 ee e8 c6 [ 1947.606526][T25630] RSP: 0018:ffffc90004c9fd90 EFLAGS: 00010202 [ 1947.612614][T25630] RAX: ffffffff8242df74 RBX: fffffffffffffff4 RCX: 0000000000080000 [ 1947.620593][T25630] RDX: ffffc900200a5000 RSI: 000000000000036f RDI: 0000000000000370 [ 1947.628573][T25630] RBP: ffffc90004c9fed0 R08: ffff888029210007 R09: 1ffff11005242000 [ 1947.636553][T25630] R10: dffffc0000000000 R11: ffffed1005242001 R12: 0000000000000023 [ 1947.644529][T25630] R13: dffffc0000000000 R14: 0000000000000118 R15: dffffc0000000000 [ 1947.652518][T25630] FS: 00007f1ce456f6c0(0000) GS:ffff888125f4f000(0000) knlGS:0000000000000000 [ 1947.661462][T25630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1947.668056][T25630] CR2: 0000200000193030 CR3: 000000003ed50000 CR4: 00000000003526f0 [ 1947.676037][T25630] Call Trace: [ 1947.679328][T25630] [ 1947.682269][T25630] __se_sys_fsmount+0x285/0xa70 [ 1947.687142][T25630] ? __pfx___se_sys_fsmount+0x10/0x10 [ 1947.692617][T25630] do_syscall_64+0xfa/0xf80 [ 1947.697133][T25630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1947.703207][T25630] ? clear_bhb_loop+0x60/0xb0 [ 1947.707893][T25630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1947.713794][T25630] RIP: 0033:0x7f1ce378f749 [ 1947.718221][T25630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1947.737839][T25630] RSP: 002b:00007f1ce456f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 1947.746270][T25630] RAX: ffffffffffffffda RBX: 00007f1ce39e6270 RCX: 00007f1ce378f749 [ 1947.754249][T25630] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 1947.762252][T25630] RBP: 00007f1ce3813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1947.770248][T25630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1947.778227][T25630] R13: 00007f1ce39e6308 R14: 00007f1ce39e6270 R15: 00007ffe63daa1d8 [ 1947.786221][T25630] [ 1947.789256][T25630] Modules linked in: [ 1947.795842][T25630] ---[ end trace 0000000000000000 ]--- [ 1947.801409][T25630] RIP: 0010:mntput+0x31/0xc0 [ 1947.806028][T25630] Code: 41 56 41 54 53 48 89 fb e8 bc d3 7e ff 48 85 db 74 47 49 bf 00 00 00 00 00 fc ff df 4c 8d b3 24 01 00 00 4d 89 f4 49 c1 ec 03 <43> 0f b6 04 3c 84 c0 75 50 48 83 c3 e0 41 8b 2e 31 ff 89 ee e8 c6 [ 1947.825697][T25630] RSP: 0018:ffffc90004c9fd90 EFLAGS: 00010202 [ 1947.831790][T25630] RAX: ffffffff8242df74 RBX: fffffffffffffff4 RCX: 0000000000080000 [ 1947.839788][T25630] RDX: ffffc900200a5000 RSI: 000000000000036f RDI: 0000000000000370 [ 1947.847852][T25630] RBP: ffffc90004c9fed0 R08: ffff888029210007 R09: 1ffff11005242000 [ 1947.856767][T25630] R10: dffffc0000000000 R11: ffffed1005242001 R12: 0000000000000023 [ 1947.864774][T25630] R13: dffffc0000000000 R14: 0000000000000118 R15: dffffc0000000000 [ 1947.872779][T25630] FS: 00007f1ce456f6c0(0000) GS:ffff888125f4f000(0000) knlGS:0000000000000000 [ 1947.881746][T25630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1947.888468][T25630] CR2: 0000200000193030 CR3: 000000003ed50000 CR4: 00000000003526f0 [ 1947.896464][T25630] Kernel panic - not syncing: Fatal exception [ 1947.902862][T25630] Kernel Offset: disabled [ 1947.907190][T25630] Rebooting in 86400 seconds..